Table of Contents

Entra ID Sign-In Issues

Semantic Modeler uses Microsoft Entra ID (formerly Azure Active Directory) to authenticate with Fabric and Azure Analysis Services workspaces. Here's how to troubleshoot common sign-in problems.

How It Works

When you connect to a Fabric workspace or Azure AS instance, Semantic Modeler opens a sign-in popup inside the app. You authenticate with your Microsoft work or school account, complete MFA if required, and the token is cached for the rest of your session.

If the in-app popup doesn't work, the app falls back to device code flow, showing a code and URL that you can open in any browser on any device to complete sign-in.

Sign-In Popup Doesn't Appear

  • Check your internet connection.
  • Restart Semantic Modeler and try again.
  • On Linux, make sure WebKit2GTK is installed. The sign-in popup uses it.

Sign-In Succeeds But Workspace Access Fails

Your Microsoft account might not have the right permissions:

  • For Fabric, you need at least Contributor role on the workspace.
  • For Azure AS, you need to be listed as a server administrator or have database-level access.
  • Ask your IT administrator if Conditional Access policies are restricting access from your device or location.

MFA Timeout

The sign-in flow allows up to 120 seconds. If the popup closes before you can complete MFA:

  • Make sure push notifications are enabled on your authenticator app.
  • Have your hardware security key ready before starting the connection.
  • If your organization uses a custom MFA provider with a long wait time, talk to your IT admin.

Conditional Access Errors

If your organization enforces Conditional Access policies, you may see additional prompts for device enrollment, terms of use, or location verification. Complete these prompts to proceed. If you're still blocked, your IT admin can help.

Token Expired

If connections that used to work start failing silently, the cached token may have expired. Go to the Environment Editor, sign out, and sign back in.

Device Code Flow

If the in-app popup doesn't work on your platform, the app falls back to device code flow:

  1. A code and URL are displayed in the app.
  2. Open the URL in any browser (can be on another device).
  3. Enter the code and sign in.
  4. Return to Semantic Modeler. The connection completes automatically.

Supported Accounts

Semantic Modeler supports work and school accounts (organizational accounts). Personal Microsoft accounts (@outlook.com, @hotmail.com) are not supported for Fabric and Azure AS connections.

Topic Link
Microsoft Entra ID Microsoft Entra ID documentation
Entra authentication overview Authentication overview
Edit this page