Connecting to Catalyst Data in Excel

How the Add-In Works

Once installed, the EBM Excel Add-In integrates directly into Excel, providing a secure connection to your organization's data hosted within EBM's Azure environment.

Platform Overview

• All users added to the system become Guest Users in EBM's Active Directory.
• Tabular cubes are hosted in Azure Analysis Services (AAS).
• Each cube is protected through Entra AD security groups, which control who can access, refresh, or modify cube-connected data.

Authentication & Security

• Any cube connection or refresh request requires the user to authenticate using their organization's Entra credentials (SSO).
• If your organization's cross-tenant access settings restrict collaboration, the add-in may install successfully but fail to authenticate or refresh data. Explicitly allowing outbound access to TotalDynamicsSolutions.onmicrosoft.com resolves this issue.
• If a user is offboarded at the client or removed from the application, their guest account will no longer be valid. They will immediately lose the ability to refresh or schedule cube connections.

Add-In Behavior

• Excel automatically detects and activates the EBM Add-In when an EBM-connected file is opened or downloaded.
• Files use the standard .xlsx format, eliminating the need for legacy macro-enabled .xlsm files.
• A secure connection is established on demand; no continuous code execution or background process runs.
• The add-in is digitally signed by DigiCert to verify authenticity and ensure safe operation.

Opening Catalyst Workbooks

Catalyst workbooks are standard .xlsx files that contain connections to Azure Analysis Services cubes. When you open one, the EBM Add-In automatically activates.

The EBM Tab in Excel

Once the add-in is active, an EBM tab appears in the Excel ribbon, providing quick access to cube connections and refresh functions.

Authentication Process

The authentication process for Excel works identically to logging into the Catalyst web interface. For comprehensive details on the authentication workflow, see the Logging In and Getting Started with Catalyst article.

Step 1: Accept EBM Access Invitation

If you're accessing Catalyst data for the first time, you'll receive an email invitation from EBM's Microsoft Azure Active Directory tenant. Accept this invitation before attempting to log in.

Step 2: Microsoft SSO Login

When you open a Catalyst workbook or click Refresh Data, you'll be prompted to authenticate.

1. Enter your Microsoft work email address (the same account used for Outlook or Windows login)
2. If the system recognizes your account, it may log you in automatically
3. If prompted, select your account and enter your password

Step 3: Link Account to EBM Workspace (If Needed)

If you don't see the EBM logo in the login window, you'll need to link your account to the EBM workspace:

1. Click "Use another account"
2. Select "Sign in options" on the next screen
3. Choose "Sign in to an organization"
4. In the "Find your organization" prompt, type: ebmsoftware.com
5. Complete the login by selecting your correct work account

Multi-Factor Authentication (MFA)

Some organizations require Multi-Factor Authentication (MFA) for additional security when accessing Catalyst data. Not all clients enforce this—check with your IT department to determine if MFA is required for your organization.

Setting Up MFA

If MFA is required, you'll need to register an authentication method the first time you log in.

1. Download Microsoft Authenticator: Install the Microsoft Authenticator app on your smartphone (recommended)
2. Scan QR Code: During login, you'll be prompted to scan a QR code with the Authenticator app to link your device
3. Save Backup Codes: Store backup codes in a secure location in case you lose access to your device

Daily Login with MFA

After MFA is set up, your login workflow includes an additional verification step:

1. Enter your email and password as usual
2. Approve the notification in the Microsoft Authenticator app on your phone, OR
3. Enter the 6-digit code displayed in the Authenticator app
4. Optionally, check "Don't ask again for 14 days" to reduce MFA prompts on your device

Alternative MFA Methods

If you prefer not to use the Microsoft Authenticator app, you can choose alternative verification methods:

• Text Message: Receive a verification code via SMS
• Email: Receive a verification code via email
• Phone Call: Receive an automated call with a verification code

Your IT department controls which MFA methods are available for your organization.

Troubleshooting MFA Issues

Refreshing Data

Once authenticated, you can refresh your workbook to pull the latest data from the cube.

Manual Refresh

1. Click the EBM tab in the Excel ribbon
2. Click Refresh Data
3. Wait for the refresh to complete—a status indicator shows progress

The workbook will update with the latest data based on your security permissions and the cube's refresh schedule in Catalyst.

What Happens During Refresh

• Excel queries the Azure Analysis Services cube for updated data
• Your credentials are verified to ensure you still have access
• Only data you're authorized to view is returned (row-level security applies)
• Pivot tables, charts, and formulas automatically update with new data

Working with Multiple Cubes

If you work with multiple Catalyst cubes (e.g., Financial, Sales, Operations), you can switch connections within the same workbook.

1. Click the EBM tab
2. Click Connect to Cube
3. Select the cube you want to connect to from the list
4. Authenticate if prompted (credentials are cached per session)

Your authentication session typically lasts for the duration of your Windows login, so you won't need to re-enter credentials frequently.

Common Workflows

Next Steps

If you encounter connection issues, authentication loops, or other problems, the Troubleshooting article provides detailed solutions for common scenarios.

Related Articles

Connecting to Catalyst data in Excel is streamlined through Microsoft SSO and the EBM Excel Add-In. Once authenticated, you can refresh data with a single click, switch between multiple cubes, and maintain secure access through your organization's existing authentication infrastructure. For organizations that require MFA, the Microsoft Authenticator app provides an additional layer of security while keeping the login process simple and convenient.