I wrote a reverse proxy to Power BI Reporting Server in my .Net Core application and authenticated each request with BASIC. You might encounter issues if you use unsupported browser versions. Header updates - Sensitivity label. You could try passing both username and password as part of the URL in the src (source) attribute of the iframes tag as underlined below: