SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am able to upload reports in a sharepoint library that have embedded data connections to a cube(SQL2008\AnalysisInstance). We are not using power pivot. We are running Sql 2008 standard version.

However I cannot seem to refresh it as windows credentials are not being delegated. So I tried creating a secure store service target app "ExcelTargetApp" and use that in Excel. I have used 'group' under the target application type.

The error before and the error after.
enter image description here

enter image description here

What are my options to get around this?

  1. Do I create an Unattended service account in SSS?

  2. Can I modify the current solution in any way to make it work?

  3. Although I am aware that changing to Kerberos might fix the double hop problem I do not want to unless Im left with no other choice and additionally we do not really have a need for it.

Or am I just missing something easy and obvious?

share|improve this question
up vote 1 down vote accepted

I created a secure store target app for excel and used the SSS ID in my excel reports. It refreshes without any errors now.

share|improve this answer

In general: when using SAML-based authentication, the identity of the user cannot be delegated to backend systems, like SQL Server.

See here:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.