Answer
Check whether the account you're using is authenticated through an external identity provider (like Azure AD) rather than IFS's own database authentication — Report Designer connects to the application server through the admin gateway, and that gateway doesn't support external-IdP-authenticated logins. Using a database-authentication-enabled user instead of your normal SSO account resolves this.