Forum Discussion

vikitheolorado's avatar
vikitheolorado
Copper Contributor
Oct 19, 2020

Login to SQL Server in Virtual Machine using Azure Active Directory

I have Virtual Machine Windows with SQL Server installed. How can I use Azure Active Directory Account to login to the SQL Server?
pazdedav's avatar
pazdedav
MVP
Oct 20, 2020

Please keep in mind, that Azure AD Domain Services (AADDS) is not the same service as Azure AD. It is correct that AADDS is getting users and groups objects from Azure AD - there is a synchronization mechanism established once you deploy AADDS to your Azure subscription - but they have quite different specs and purposes:

  • Azure AD is a multi-tenant cloud-based directory and identity management service, designed for massive scale and supporting modern authentication protocols like SAML, OIDC, and OAuth
  • Azure AD Domain Services is a Microsoft-managed traditional Windows Server AD (X.500 standard) that is designed for closed networks, have a hierarchy (OUs), and use Kerberos and NTML protocols

Even if you enable AADDS in your VNet and join your VM (with MSSQL) to that managed domain, you won't be using "modern authentication" protocols from Azure AD, but Integrated Windows Authentication with credentials from AADDS.

JeremyLoe's avatar
JeremyLoe
Copper Contributor
May 27, 2021

pazdedav  Do we know if Azure AD auth into SQL Server in Virtual Machine is on the roadmap?

I can see the options to login via Azure AD but the commands to create the login or user to not work yet.

 

Thanks,

Jeremy

Resources