{"id":42758,"date":"2022-07-28T08:00:00","date_gmt":"2022-07-28T15:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/sql-server\/blog\/?p=42758"},"modified":"2024-04-19T10:32:50","modified_gmt":"2024-04-19T17:32:50","slug":"azure-active-directory-authentication-for-sql-server-2022","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/sql-server\/blog\/2022\/07\/28\/azure-active-directory-authentication-for-sql-server-2022\/","title":{"rendered":"Azure Active Directory authentication for SQL Server 2022"},"content":{"rendered":"\n
Part of the SQL Server 2022 blog series<\/a>.<\/em><\/p>\n\n\n\n Azure Active Directory (Azure AD) authentication<\/a> is now supported for SQL Server 2022 preview on-premises for Windows and Linux Operating Systems.<\/p>\n\n\n\n The new functionality extends existing authentication modes, such as\u202fSQL authentication and Windows authentication,<\/a> allowing users to connect to SQL Server 2022 using the following Azure AD authentication methods:<\/p>\n\n\n\n For more details, see Azure Active Directory (Azure AD) authentication for SQL Server overview.<\/a><\/p>\n\n\n\n The new authentication mode using Azure AD is based on the central authentication repository provided for Azure cloud. This functionality is already supported for Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics.<\/p>\n\n\n\n The diagram below presents two stages required for a SQL Server 2022 instance to support Azure AD authentication:<\/p>\n\n\n\n Steps for Azure AD setup based on the diagram above:<\/p>\n\n\n\n For more details on the Azure AD setup, see set up Azure Active Directory authentication for SQL Server.<\/p>\n\n\n\n Steps for Azure AD user authentication based on the diagram above:<\/p>\n\n\n\n In the Options>><\/strong> tab, check the boxes for Encrypt Connection<\/strong> and Trust server certificate<\/strong>.<\/p>\n\n\n\n If you are using the Azure AD admin, the database connection to <default><\/strong> (master database) or any other user database is allowed. For other Azure AD users, a connection to a specific user database may be required as they will need permission to connect to that database.<\/p>\n\n\n\n Once the Azure AD admin is connected to the SQL Server instance, the account can create other Azure AD logins and users, and grant them necessary database permissions. For more details see, Set up Azure Active Directory authentication for SQL Server<\/a>.<\/p>\n\n\n\n SQL Server 2022 also supports linked servers\u202fthat can be configured using Azure AD with two authentication mechanisms, by providing credentials for Password<\/strong> or Access token<\/strong>. For more information see Linked server for SQL Server with Azure Active Director authentication.<\/p>\n\n\n\n Enabling Azure AD authentication opens access to the Azure cloud identity system. Azure AD is used by many cloud services and unifies all local authentication mechanisms used by Microsoft products providing one central identity repository and authentication management system available to different platforms, including Azure SQL and SQL Server on-premises. The variety of available authentication methods including single sign-on (SSO) and multifactor authentication (MFA), provides strong security support in the authentication area for different services used internally by Microsoft and by external customers. Azure AD authentication is the recommended authentication method for Azure SQL and SQL Server.<\/p>\n\n\n\n Not all Azure AD authentication functionality available for Azure SQL is supported in the current version of Azure AD authentication for SQL Server 2022. That includes Azure AD-only authentication,<\/a> as well as User and System Assigned Managed Identity (UMI and SMI),<\/a> which are not supported for the SQL Server 2022 release. In addition, Azure AD authentication is not part of the main SQL Server 2022 setup and must be enabled later as a separate step after SQL Server is installed.<\/p>\n\n\n\n Download the SQL Server 2022 Preview<\/a> trial\u202fversion if you haven\u2019t already done so, and set up Azure AD authentication for your SQL Server instance. Share your experiences with us and let us know your comments.<\/p>\n\n\n\n For more information and to get started, check out the following links:<\/p>\n\n\n\n Azure Active Directory (Azure AD) authentication is now supported for SQL Server 2022 preview on-premises for Windows and Linux Operating Systems.<\/p>\n","protected":false},"author":6189,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","footnotes":""},"post_tag":[5278],"product":[5227,3645],"content-type":[2424],"topic":[],"coauthors":[5102],"class_list":["post-42758","post","type-post","status-publish","format-standard","hentry","tag-sql-server-2022-blogging-series","product-sql","product-sql-server-2022","content-type-best-practices","review-flag-new-1593580247-437"],"yoast_head":"\nAzure AD Authentication methods <\/h2>\n\n\n\n
\n
Enable Azure AD authentication in SQL Server 2022<\/h2>\n\n\n\n
\n
<\/figure>\n\n\n\n
\n
\n
<\/figure>\n\n\n\n
\n
Benefits of using Azure AD authentication<\/h2>\n\n\n\n
Availability <\/h2>\n\n\n\n
Next steps<\/h2>\n\n\n\n
Azure Active Directory resources<\/h2>\n\n\n\n
\n
Learn more<\/h2>\n\n\n\n
\n