Home

Disable Azure SQL MFA

%3CLINGO-SUB%20id%3D%22lingo-sub-133411%22%20slang%3D%22en-US%22%3EDisable%20Azure%20SQL%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-133411%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20an%20application%20which%20doesn't%20support%20Azure%20SQL%20MFA.%26nbsp%3B%20When%20a%20user%20in%20Azure%20AD%20(Office%20365%20User)%20turns%20MFA%20on%20we%20cannot%20connect%20with%20Azure%20AD%20credentials.%26nbsp%3B%20We%20are%20on%20Azure%20AD%20Basic%20currently.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIs%20there%20a%20way%20to%20turn%20off%20MFA%20for%20a%20single%20DB%20or%20SQL%20Server%20please%20until%20the%20application%20supports%20MFA%3F%26nbsp%3B%20We've%20already%20tried%20App%20Passwords%20and%20that%20unfortunately%20doesn't%20work.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EA%20workaround%20may%20be%20to%20use%20Azure%20Premium%20with%20Azure%20AD%20joined%20workstations%20and%20conditional%20access%20though%20at%20additional%20expense.%26nbsp%3B%20We're%20currently%20looking%20at%20using%20DB%20SQL%20users%20though%20using%20Azure%20AD%20would%20allow%20for%20SSO.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThank%20you%20for%20your%20help%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-133411%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Active%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMulti-Factor%20Authentication%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%20Center%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Bo Durham
Occasional Visitor

We have an application which doesn't support Azure SQL MFA.  When a user in Azure AD (Office 365 User) turns MFA on we cannot connect with Azure AD credentials.  We are on Azure AD Basic currently.

 

Is there a way to turn off MFA for a single DB or SQL Server please until the application supports MFA?  We've already tried App Passwords and that unfortunately doesn't work.

 

A workaround may be to use Azure Premium with Azure AD joined workstations and conditional access though at additional expense.  We're currently looking at using DB SQL users though using Azure AD would allow for SSO.

 

Thank you for your help