Logging into Azure Sql

1
votes

I created a user in our AD Connected on-prem Active Directory. The user is synced up to AAD.

This user is now tied to our on-prem domain

I have added this user as the SQL Active Directory Admin

My issue is:

I cannot login to azure sql with this AD Admin via SSMS or sqlcmd

I receive the error, login failed, as if the password isn’t correct or something

My question is: Can I login to Azure sql with an on-prem ad synced aad user account?

Does Azure sql tie to the AAD tenant domain only, regardless of we have an AD-Connect set up with our on-prem domain?

I need to login to sql with the ad admin account, to beable to add other aad users or groups as a sql dB user

I believe that creating the user in our Ad makes the azure sql not recognize it, since the azure sql is on the aad domain

Is this possible?

1
azureazure-sql-databaseazure-active-directory
You need to follow the steps provided on the following resources: docs.microsoft.com/en-us/azure/sql-database/… / docs.microsoft.com/en-us/azure/sql-database/… - Alberto Morillo
If that step-by-step procedure does not help, please share with us more information about the error(s) you are receiving. - Alberto Morillo
Thank you for the response. - Gvazzana
Looking forward to be of more help. - Alberto Morillo
Sorry I thought I responded back some time ago. So I have completed all of those steps and read most of the related document. My issue is with the fact that the user account being used for the sql ad Admin, came from the on prem ad domain. AZURE sql is not part of that domain, but rather the azure as tenant domain correct? So is it possible to login to an azure sql server, using an account synced up from an on prem synced domain? Sorry getting a bit confused - Gvazzana

1 Answers

1
votes

Use this Azure documentation to configure Azure Active Directory (AAD) and use it to access an Azure SQL Database. After configuring AAD, you just need to add an ADD group as Azure SQL Database admin and all user part of that group will be able to use MFA authentication. You can use SQL Server Management Studio to test it.

SQLCMD does not support MFA authentication.