'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Fix Azure SQL OAuth Authentication Errors in Power BI
Question details
The user is experiencing OAuth authentication failures when attempting to connect Power BI to an Azure SQL Database through a virtual network data gateway.
- Product
- Power BI
- Device & OS
- not provided
- Scenario
- Updating database connection credentials or refreshing a scheduled dataset via a virtual network data gateway.
- Observed behavior
- Power BI displays the error: 'Unable to update connection credentials. OAuth login through the data gateway was unsuccessful.'
Ensure you have administrative access to your Microsoft Entra ID (formerly Azure Active Directory) portal and possess the necessary permissions to register new applications and assign database roles in Azure SQL.
Register an Application in Microsoft Entra ID and Configure Credentials
Registering a dedicated app in Microsoft Entra ID generates the client ID and secret required for Power BI to securely authenticate with Azure SQL Database via OAuth over a private endpoint.
When connecting Power BI to an Azure SQL Database through a virtual network data gateway using OAuth, standard user credentials are not sufficient. You must explicitly register an application to manage the secure token exchange.
Navigate to the Microsoft Entra ID portal. In the left-hand menu, select 'App registrations' and click 'New registration'. Enter a recognizable name for your application and complete the registration to obtain the Application (client) ID.
Within your new app registration, go to 'Certificates & secrets'. Click 'New client secret', add a description, and select an expiration period. Copy and securely save the generated secret value immediately, as it will be hidden later.
Log into your Azure SQL Database using an admin account. Run the necessary SQL commands to create a user for your registered application and assign it the appropriate database read or server roles.
Open the Power BI service and navigate to 'Settings' > 'Manage gateways'. Select your virtual network data gateway, edit the Azure SQL data source credentials, and input the newly generated Client ID and Client Secret under the OAuth authentication method.
Verify Virtual Network Data Gateway Configuration
A misconfigured or offline VNet data gateway can block OAuth logins between the Power BI service and Azure SQL.
Switch to WPS Office for Seamless Data Management and Reporting
While Power BI handles complex cloud database gateways, WPS Spreadsheet provides a lightweight, highly compatible, and user-friendly environment for your everyday data analysis, visualization, and reporting tasks—without the need for complex OAuth setups.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
- 2. Install and Launch: Follow the simple on-screen instructions to install the software, then launch WPS Spreadsheet.
- 3. Import and Analyze Data: Open your existing Excel files or connect to local data sources directly to begin visualizing your data instantly.
Frequently Asked Questions
Why do I need to register an app for Azure SQL in Power BI?
When using a virtual network (VNet) data gateway with private endpoints, Power BI cannot use standard user-delegated authentication. It requires a registered Microsoft Entra ID application to securely generate and manage OAuth tokens for database access.
What does 'OAuth login through the data gateway was unsuccessful' mean?
This error indicates that the Power BI data gateway could not authenticate with your Azure SQL Database. Common causes include incorrect client IDs, expired client secrets, or insufficient application permissions configured in Microsoft Entra ID.
Can I use basic SQL authentication instead of OAuth for Azure SQL?
Yes, basic SQL authentication (using a username and password) can be used. However, OAuth is strongly recommended for enterprise environments because it provides more secure, centralized, and identity-based access control.
How do I grant the Entra ID application access to my Azure SQL database?
You must connect to the Azure SQL database using an administrative account (e.g., via SQL Server Management Studio) and execute SQL commands to create a user mapped to your application's identity, followed by altering the role to grant it required read or write permissions.
