Hi Fabio,

In 2025 Q4 we've introduced this functionality - now web viewers can connect to Report Server for .NET in two ways:

1) Through a credentials-based authentication - this is the approach currently used in Report Server for .NET Framework 4.6.2. The users can pass the username and password of a registered Report Server user to obtain authentication token that will be used by the HTML5 viewer. This approach is not considered secure because the credentials are stored on the client and are passed in plain text to the server. We decided to add it for backwards compatibility with the "old" Report Server, but we strongly recommend to use the new approach that uses Personal Access Tokens.

2) Through a token-based authentication. Now Report Server for .NET has a new "tokens" view where every user can issue a token that inherits their permissions and can be utilized by web viewers in a secure way. We recommend to use this approach to connect your viewers to Report Server for .NET. You can read more on how to configure and utilize the feature in the dedicated documentation articles here:

• Configuring the Report Server for .NET for Authentication with Personal Tokens.
• Using the HTML5 Report Viewer with the Report Server for .NET

We will appreciate it if you give it a try and share how the token-based authentication works in your scenario.

Regards,

Ivan Hristov

Reporting Team