Skip to main content

Authentication Configuration

Administrator

DataCentral supports multiple authentication methods to accommodate both internal employees and external partners. You can configure these methods under Administration > Settings > Authentication.

1. Entra ID (Azure AD)​

This is the recommended method for internal employees and users who already have a Microsoft 365 account.

  • How it works: Users log in using their existing Microsoft credentials. DataCentral uses OpenID Connect (OIDC) to authenticate the user against your Entra ID tenant.
  • Requirements: You must register an application in your Azure portal, grant the required delegated Microsoft Graph permissions, and provide the Client ID and Tenant ID to DataCentral.
  • Read the full Entra ID Integration Guide

2. User Pass​

This method allows you to create local accounts within DataCentral. This is ideal for external partners or customers who do not use Microsoft 365.

  • How it works: Administrators create a username and password for the user directly within the DataCentral UI.
  • Requirements: Users must be assigned a "User Pass" identity type when created.
  • Note: User Pass accounts rely on a Service Principal to access Power BI reports (App Owns Data), as they do not have their own Power BI Pro licenses.

3. Mobile ID​

Mobile ID provides a secure, passwordless login experience using a mobile device.

  • How it works: Users enter their mobile number. A secure prompt is sent to their device, requiring biometric authentication (e.g., Face ID or Touch ID) to approve the login.
  • Requirements: Mobile ID integration must be enabled for your Tenant.
  • Note: Like User Pass accounts, Mobile ID users rely on a Service Principal to access Power BI reports.

4. One-time Password​

One-time Password (OTP) provides a simple login flow for users who need temporary or low-friction access without a permanent password.

  • How it works: The user enters their email address on the login screen. DataCentral sends a time-limited verification code, and the user enters that code to complete sign-in.
  • Requirements: The user must have a valid email address that he can access. OTP must also be enabled for the Tenant.
  • Note: OTP is best suited for external users, short-term access scenarios, or situations where you want to avoid managing local passwords.

Mixed Authentication​

You can enable multiple authentication methods simultaneously. For example, you might use Entra ID for your internal staff while providing OTP accounts to your external clients.

When multiple methods are enabled, users will see a login screen offering them the choice of how to authenticate.