web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Pages - General Discussions / Access Power BI as gue...
Power Pages - General Discussions
Suggested answer

Access Power BI as guest user from Power Pages with custom domain

(0) ShareShare
ReportReport
Posted on by DL-10091354-0 3
Hey!
 
I need help.We have been running a Power Pages website for some time where we provide guest users with Power BI reports. Now we have connected a custom domain, and guest users are receiving the following error message:
 
 
(login.microsoft.com denied connection.)
 
When the guest user uses the old URL, it works. When the page is accessed via the custom domain, it does not work. So it is not a license/permission problem.Do I need to enable the custom domain somewhere in Power BI or Power Pages?I would be very grateful for any help!
Categories:
General
I have the same question (0)
  • DL-10091354-0 Profile Picture
    DL-10091354-0 3 on at
    Access Power BI as guest user from Power Pages with custom domain
    Hey Jerald,
    Thanks for the detailed answer. We'll test the points and I'll let you know if everything works.
    Best regards, Luca
  • Suggested answer
    Jerry-IN Profile Picture
    Jerry-IN 114 on at
    Access Power BI as guest user from Power Pages with custom domain
     
    The "login.microsoftonline.com denied connection" error you're seeing is a strong indicator of an authentication configuration problem.

    This typically happens because Microsoft's identity platform (Microsoft Entra ID) doesn't recognize your new custom domain as a trusted location to send authentication tokens back to after a user logs in. When you added the custom domain to Power Pages, the authentication redirect URI was likely not updated automatically in your site's application registration.
     
    Here is a step-by-step guide to resolve this:
     
    Update the Application Registration in Microsoft Entra ID
    You need to add your custom domain as a valid "Redirect URI" for the application associated with your Power Pages site.
     
    • Find your Power Pages Site's Application ID:
      • Navigate to the Power Platform admin center.
      • Go to Resources > Power Pages sites.
      • Select your site, and in the site details, you will find the Application ID. Copy this ID.
    • Go to Microsoft Entra ID:
      • Open the Microsoft Entra admin center.
      • In the left navigation, go to Identity > Applications > App registrations.
    • Locate Your App Registration:
      • Select the All applications tab and use the search bar to find the app registration using the Application ID you copied earlier.
    • Add the Custom Domain as a Redirect URI:
      • Once you've opened the app registration, select Authentication from the left menu.
      • Under the Web section, you'll see a list of Redirect URIs.
      • Click Add URI and enter the URL for your custom domain followed by /signin-microsoft. The format should be: https://your-custom-domain.com/signin-microsoft
      • It is a good practice to also add one for /signin-azure-ad if you use that provider: https://your-custom-domain.com/signin-azure-ad
      • Click Save at the top of the page to apply the changes.
    Additional Troubleshooting Steps
    If the issue persists after updating the redirect URIs, here are a few other things to check:
    • Clear Browser Cache: Ask your guest users to clear their browser cache and cookies or try accessing the site in a private/incognito browser window. This ensures they are not using a cached, invalid token from a previous session.
    • Authentication Site Settings: In the Power Pages Portal Management app, check the Site Settings. Ensure that settings like Authentication/AzureAd/RedirectUri are correctly pointing to your new custom domain. While Power Pages often manages this, it's worth verifying.
    • Wait for Propagation: Sometimes, DNS and configuration changes can take a little while to propagate fully.
    You are correct that this isn't a licensing or permissions issue since it works with the old URL. The problem is purely about the authentication flow and trust between your custom domain and the identity provider. Adding the new Redirect URI should resolve the connection denial.
    I would be very grateful for any help! I hope this helps you get it sorted out quickly.
     
    Best Regards,
    Jerald Felix

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Welcome to the Power Platform Communities
Join experts in person to explore low code and AI agents at the Power Platform Community Conference sponsored by Microsoft
Our Community Code of Conduct has been updated!
Responsible AI policies for the Community

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

MS.Ragavendar – Community Spotlight

We are honored to recognize Ragavendar Swaminatha Subramanian as our September…

Congratulations to the August Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Power Pages

#1
Jon Unzueta Profile Picture

Jon Unzueta 100 Super User 2025 Season 2

#2
Shafiuddin Profile Picture

Shafiuddin 45

#3
Fubar Profile Picture

Fubar 36 Super User 2025 Season 2

Last 30 days Overall leaderboard

Featured topics

Solution to LinkedIn Authentication in Power Apps Portals

Product updates

Microsoft Power Platform Community release plans