Integration with Power BI - authorization via Azure AD / Named Credential

Question

To integrate SF with PowerBI we first need to get an access token from Azure AD with the powerBI scope. I am able to set up a named credential (per user) which connects to Azure AD, I am able to reuse the {!credential.OAuthToken} in subsequent requests I used for testing purposes. However, is there a way to actually store this OAuthToken in a variable in apex to return it to my LWC? The PowerBI.js library needs the Azure AD token explicitly to embed a report, so my idea was to return it by my apex controller.

Another option is to not use named credentials and perform the OAuth2 handshaking myself but this brings additional complexity and work.

Any hints are appreciated at this point.

Answer 1

Yes, you can store the OAuth token in an Apex variable and return it to your LWC component. Here's how you can do it:

1. In your Apex controller, make a call to retrieve the OAuth token using the named credential and store it in a variable:

Http h = new Http();
HttpRequest req = new HttpRequest();
req.setEndpoint('callout:YourNamedCredential/token');
req.setMethod('GET');
HttpResponse res = h.send(req);
String oauthToken = res.getBody();

2. Return the token to your LWC component by including it in the response from the Apex method:

@AuraEnabled
public static String getOAuthToken() {
    // Retrieve the OAuth token as described above
    // ...
    return oauthToken;
}

3. In your LWC component, call the Apex method to retrieve the token and use it to initialize the PowerBI.js library:

import { LightningElement, track, wire } from 'lwc';
import { getOAuthToken } from '@salesforce/apex/YourApexController.getOAuthToken';

export default class YourLWCComponent extends LightningElement {
    @track token;

    @wire(getOAuthToken)
    wiredToken({ error, data }) {
        if (data) {
            this.token = data;
            // Initialize the PowerBI.js library with the retrieved token
            // ...
        } else if (error) {
            // Handle the error
            // ...
        }
    }
}