azure app container to Azure SQL - login failed <token-identified principal

Question

I have container running on azure app service trying to access Azure Sql server but getting below error:

PMLogin failed for user '<token-identified principal>'. ClientConnectionId:8d2425d8-1eeb-45c5-b91a-a3f04167w290

How do i allow azure app container to connect azure sql successfully, Am I missing any configuration?

Answer 1

Please make sure the Azure Active Directory user is created on the Azure SQL Database. Please make you create the user in the Azure SQL Database following the steps mentioned here.

To create an Azure AD-based contained database user, connect to the database with an Azure AD identity, as a user with at least the ALTER ANY USER permission. Then use the following Transact-SQL syntax:

  CREATE USER <Azure_AD_principal_name> FROM EXTERNAL PROVIDER;  
  CREATE USER [bob@contoso.com] FROM EXTERNAL PROVIDER;  
  CREATE USER [alice@fabrikam.onmicrosoft.com] FROM EXTERNAL PROVIDER;  

Make sure you are connect to the Azure SQL database and not to the master database on the Azure SQL logical server.