Azure Authentication with Service Principal
This article looks at how to authenticate with an Azure AD service principal as the identity of the application instance.
Common Prerequisites
Available account in Azure Active Directory.
Available Azure MS SQL server.
Azure Active Directory is set to centrally manage identity and access to Azure SQL Database.
Installed MS ODBC Driver for SQL Server. The current version is 17.
Azure Managed Identity created. Object (principal) ID is stored.
Azure Service Principal, appId (is used as userId), and password are stored.
The user that corresponds to the Service Principal is created in SQL Database and the proper role is assigned to the user.
For more information, see the Create an Azure service principal with the Azure CLI article on the Microsoft documentation portal.
DSN Connection
You can connect with DNS using Data Connection Manager (DCM) or without it.
Prerequisites: User or System DSN is configured in ODBC data source manager to use Azure Service Principal authentication.
DSN Connection without DCM
Place the Input Data tool on the Designer canvas.
Select the down arrow in the Connect a File or Database field.
From Data Sources, choose Microsoft Azure SQL Database - ODBC.
Choose DSN created in the preconditions from the dropdown.
Provide User ID and Password.
Choose any table from your database in the Query Builder.
Select OK.
DSN Connection Using DCM
Make sure that DCM is enabled.
Place the Input Data tool on the Designer canvas.
Below the Connect a File or Database field, select Set Up a Connection.
Choose Microsoft Azure SQL Database - ODBC from Data Sources.
Select the Add Data Source button.
Enter descriptive Data Source Name.
Enter the name of DSN created in ODBC Data source manager and select Save.
Select Connect Credential.
For Authentication Method select Username and password.
Select Create new Credential for Credential.
Enter a descriptive name for Credential.
Enter Username and Password.
Select Create and Link.
Select Connect.
Choose any table from your database in the Query Builder.
Select OK.
DSN-less Connection
You can establish a DSN-less connection using Data Connection Manager (DCM) or without it.
DSN-less Connection without DCM
Place Input Data tool on Designer canvas.
Enter this Connection string in the Connect a File or Database field:
odbc:Driver={ODBC Driver 17 for SQL Server};Server=tcp:<_your_server_>,1433;Database=<_your_db_>;UID=<_your_user_id_>;PWD=<_your_password_>;Authentication=ActiveDirectoryServicePrincipalReplace the text between the <> with actual values.
Select the 3 dot icon next to the Table or Query option.
Choose any table from your database in the Query Builder.
Select OK.
DSN-less Connection Using DCM
Make sure that DCM is enabled.
Place the Input Data tool on the Designer canvas.
Below Connect a File or Database field select Set Up a Connection.
Choose Microsoft SQL Server - Quick connect from Data Sources.
Select the Add Data Source button.
Provide a descriptive name for Data Source Name, actual server, and database name.
Make sure the Driver is set to ODBC Driver 17 for SQL Server.
Select the Save button.
Select Connect Credential.
Choose or provide Azure Active Directory Service Principal for Authentication Method and select Link.
Select Create New Credential.
Enter a descriptive Credential Name, Client ID, and Client Secret.
Select the Create and Link button.
Select Connect.
Choose any table from your database in the Query Builder.
Select OK.