Configuring SSRS 2017 to use LDAP for user authentication

Question

I have an SSRS environment currently configured to use active directory to authenticate users but now have a requirement to use LDAP for authentication.

I have never worked on this kind of configuration and my google searches are not returning any helpful resources about this topic.

Does any one know of a good resource that can get me started on this? Has any one ever implemented this kind of configuration?

Answer 1

I have on 2016 but not 2017. I doubt this is much of a difference between the two though. For the basics, read up here (hasn't been updated since 2016 so its probably still applicable to SSRS 2017). If you are struggling with the double hop issue then this should help.

Answer 2

just in case you did not find anything in the meantime and to add some information for others:

You can find a relatively complete example to implementing custom security here: GitHub - CustomerSecuritySample

This example utilizes a SQL database to store users, but you can change the relevant parts to use an LDAP for authentication. We omitted the implementation of the user registration, as all users already exist. There is a SOAP API for SSRS described here that allows you to add users. Very important: you have to enter an admin user inside the rsreportserver.config:

<Security>
        <Extension Name="Forms" Type="Microsoft.Samples.ReportingServices.CustomSecurity.Authorization, Microsoft.Samples.ReportingServices.CustomSecurity">
            <Configuration>
                <AdminConfiguration>
                    <UserName>Your username goes here</UserName>
                </AdminConfiguration>
            </Configuration>
        </Extension>
    </Security>

SSRS can only utilize one authentication method, so your Windows account won't do.