Integration PowerBI x Snowflake x AzureAD - azure-active-directory

In general, I have a big problem with the correct synchronization of 3 things that are in the subject line. The most important problem is - logging in PowerBI Desktop via Microsoft account.
PowerBI Error
I wonder if there is a step-by-step instruction to make it all work.
Unfortunately, when logging in directly through Snowflake, with every action I am told to accept the MFA and it is terribly annoying.
Another option, is if you can get around accepting MFA every now and then in powerbi.
So can something be changed in Snowflake?
i did everything according to this and this instruction
https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/snowflake-tutorial
And everything is laughing logging in through AzureAD works correctly and there is no problem.
another thing that I did is this:
https://docs.snowflake.com/en/user-guide/oauth-azure.html
Well, and here, unfortunately, too much did not change.

Related

Microsoft Graph AppRoleAssignments via AD Group

I have multiple Managed Service Identities (MSIs) that need the same set of permissions to use Microsoft Graph. I've given permissions to one of the MSIs directly and I got the expected result (after waiting for permissions to propagate).
To make life easier, I decided to create a security group, give that group the needed permissions, then assign the various MSIs to that security group. I've verified that the AppRoleAssignments are correct for the security group, but the group members do not seem to inherit the access as expected (even after waiting to ensure permissions have had time to propagate).
Does anyone know if this scenario is supported?
I posted the same question in GitHub and I got my answer there. The net out is that this scenario is not currently supported, however, it may be a supported scenario in the future.
https://github.com/microsoftgraph/microsoft-graph-docs/issues/2797

what is the best way to debug vCloud client REST applications?

I'm building a vClould client application via the REST APIs, however, the documentation is inconsistent an in some cases just wrong and misleading.
All I really need is a solid debug tool or even a log file. Any recommendations?
You already mentioned you have access to the message stream, which is one of the first steps. Typically if I'm using the Apache HttpClient/HttpComponents I'll go increase the log level so it logs the full HTTP requests.
My next step is usually to cheat and to log into vCD as a system administrator and see what's going on. When vCD was designed there was a very deliberate decision to not reveal infrastructure level problems to tenants of the cloud (normal org users or org admins), as that would break the cloud abstraction. Sadly, that means as an org-level user you're often going to get "contact your cloud admin" error responses. We are aware that this isn't ideal and try to find ways to make it better when we can (IIRC the new 5.5 release that was announced last month does have some improvements in that area).
The last step is usually to cheat even more and to look at the server side logs (vcloud-container-debug.log, specifically). That usually gives me a better clue as to what went wrong. Of course, you may be unlucky and not have access to the vCD cell machine.
My workaround in the latter two cases is to try the operations via the vCD UI and see (1) if they work as expected and (2) if they do, to check the system state via the API and see if I'm sending the wrong request payloads, etc. because the doc or schema reference may not have been clear enough.
In regards to the documentation, please use the feedback links () found on individual doc pages to let us know! Our technical writer reviews all the feedback and tries to address them.
My final suggestion is that you might want to post API questions to the vCloud API community forum VMware has. There are a number of experts (both users and VMware employees) that monitor it and respond to questions.

how to Query accounts in developer.salesforce.com

i'm a salesforce newbie, so my question might be a trivial one.
I just tried the code here http://www.tgerm.com/2011/03/javascript-remoting-jquery-templates.html
to query accounts from a visual force page.I just wanted to know, is there a way to query directly in the developer.force.com interface
If you don't feel like installing any software on your machine you can always use Workbench, (Queries -> SOQL query). It's described on http://wiki.developerforce.com/page/Workbench
Or when you're logged in to your Org check out the links in upper right corner and go to "Developer Console". But it's mostly aimed ad execution of Apex so if you want queries it won't be best match, full of assigning to Lists or calling System.debug()...

Drupal 7, Domain Access, and SSO (Single Sign-On)

Has anyone made any headway with coming up with a single sign on solution
with Domain access to date for Drupal 7? I've been looking closely at two old
modules, one no longer maintained (SSO for D6) and one still maintained (CAS). I've also read that SAML might be a key to unlocking this, but am uncertain.
Facebook's FBConnect might be another option too or another way could be integrating OpenID from what I've read, and experienced on StackOverflow's sub sites.
I know that OpenID can do this since we are logged into all of *Overflows sub sites at the same time using one login. The question is how does it cross DNS servers? Does it handshake with one half of a matching hash? I cannot find any documentation on this, so am at a loss.
So, are there any solutions that are known to date, or information on what to start
looking into? I think I've made a good point at the possibilities. I read this thread, Domain Access SSO but am uncertain to what version it pertains to (Drupal. DA, SSO or otherwise). It looks like the "Solution" is to create a master table set with users and permissions, then share those across the domains? How might this work if there are already multiple sites created under Domain Access? Would you clone and rebuild the entire installation, or would you need to start from scratch? It really raises more questions than answers. I contacted the author with no response, so the questions still stand.
Any opinions out there on the who what or why would be greatly appreciated, I just need a start point to get the ball rolling. Thanks everyone.
I'm the author of the Domain Access SSO article mentioned in the original question. I don't recall being contacted about it, but then again I recently learned that my "contact" page on bleen.net hasn't been working in a while... but anyway, here is a bit of info:
That post referred to Drupal 6, SSO Module 6.x-1.0-rc1, and Domain Access module 6.x-2.0 (I think). That solution basically revolves around creating two separate drupal installs, one the master and one the client (there can be multiple clients). Basically, what happens is the necessary user tables for all teh clients are pointed instead to the master. In doing so, the master becomes (essentially) a shell site that does nothing but hold and verify user data.
Hope that makes sense and/or helps... to be honest i havent looked at that code in a long while now.
SAML is a good option. Check this module to integrate it with drupal:
http://drupal.org/project/simplesamlphp_auth
If you need a demo with this plugin working check this.

Fogbugz database schema management

This is a very simple question, and maybe the man himself can provide insight on this :)
Does anyone know the pseudocode behind how Fog Creek does database schema management?
I'm running into an issue and I'm trying to figure out if I'm handling it right... I have a module that runs each time someone spins up their site and examines their database to make sure that they have the right changes in place. if they are missing changes, then the script makes the required changes.
My issue is that I was trying to tie it to the session_start portion of the Global.asax, but it seems to be rather flaky at times, and I'm trying to come up with a better scenario.
For reference, I'm trying to run 1 x web application that can respond to any number of hosts, where the host maps via a metabase to find out what database it belongs to and then makes the necessary connections.
You might have more luck asking this on http://fogbugz.stackexchange.com/

Resources