issues with AD Auth on android devices

Hello, Craig!
 
Thank you for reaching out to us.
 
Could you please confirm if our assumptions about the case are right:

1. You are connecting to the cube using Flexmonster Accelerator.
2. In the described case, Windows Authentication is used along with the withCredentials property enabled.

This information would help us greatly to continue the investigation.
 
Looking forward to hearing from you.
 
Regards,
Solomiia

Hello, Craig!
 
Thank you for the provided details about your use case.
 
The described behavior with authorization pop-ups seems to us as a specific behavior of Android on mobile devices combined with the way the authorization is handled.
 
As a possible alternative, we kindly suggest using requestHeaders to handle the authorization.

The idea lies in the following:
 
The requestHeaders property of the dataSource object allows sending credentials with the data request:

dataSource: {
      type: "microsoft analysis services",
      //other connection properties,
      binary: true,
      requestHeaders: {
        "Authorization": "XXXX",
      }
    }

This way, instead of directly connecting to Flexmonster Accelerator, you can connect to the reversed-proxy server. This server would check the authorization token and redirect the request to Accelerator if authorization is successful or reject it if not.
 
Hope you will find our answer helpful.
Feel free to contact us if any other questions arise.
 
Regards,
Solomiia

Hello, Craig!
 
Thank you for your reply.
 
Kindly note that Flexmonster itself does not handle any authorizations. With using withCredentials: true Flexmonster only initialize the authorization process on the other side. That's why we think the described behavior with authorization pop-ups seems to us as a specific behavior of Android on mobile devices combined with the way the authorization is handled.
 
We have recommended implementing a reverse-proxy server, as the Accelerator could only check the Authorization token passed in an open way. With your own reverse-proxy server, you can use the AD credentials as well as any other. The server should check if the credentials are correct and then redirect the request to Flexmonster Accelerator or reject it.
 
We hope it helps.
Feel free to contact us in case of any other questions.
 
Regards,
Solomiia

Hello, Craig!

Thank you for your response.

You are welcome to contact us in case of any other questions.

Regards,
Solomiia