Azure Data Explorer
An Azure data analytics service for real-time analysis on large volumes of data streaming from sources including applications, websites, and internet of things devices.
497 questions
Use certificate/FIC for Azure Data Explorer service connector on ADO
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 71%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E0%3C/text%3E%3C/svg%3E)
03318626
35
Reputation points Microsoft Employee
Hi team, our current azure data explorer service connector uses service principal key and secrets to authenticate. However, in response to a security incident we're solving, we need to convert the service connector to use SNI and certificates for authentication or even federated credentials work.
When I try adding the cert authentication, it fails and doesn't work. And apparently there's no option for federated credentials even.
So can you help me solve this issue? Are secrets the only way to get this working?
{count} votes
-
PRADEEPCHEEKATLA-MSFT 82,196 Reputation points Microsoft Employee2024-05-08T06:18:09.82+00:00 @03318626 - We are reaching out to the internal team to get more information related to your query and will get back to you as soon as we have an update.
-
PRADEEPCHEEKATLA-MSFT 82,196 Reputation points Microsoft Employee
2024-05-09T05:31:23.8133333+00:00 @03318626 - This has been confirmed as a bug and internal team are working on the fix. I will get back to you as soon as we have an update.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 6%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMB%3C/text%3E%3C/svg%3E)
Manoj Battula 0 Reputation points Microsoft Employee2024-05-21T14:39:53.77+00:00 Hello @PRADEEPCHEEKATLA-MSFT I have the same question for security ask. We need to stop using Service principal key and instead use certificate for auth. Can you please confirm that using certificate in Azure Data Explorer service connection doesn't work at all right now? Is there a timeline for fixing this bug. We need to understand if there is a path forward, as we need to fix this as part of security ask with priority.
-
PRADEEPCHEEKATLA-MSFT 82,196 Reputation points Microsoft Employee
2024-05-22T04:44:05.37+00:00 @03318626 & Manoj Battula - Currently, we are working on fixing this bug and it will be fixed within two weeks of timeframe. I will update you once this issue has been fixed. Stay tuned for updates!
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 61%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPC%3C/text%3E%3C/svg%3E)
Pauline Chao 0 Reputation points Microsoft Employee2024-05-23T03:30:22.3133333+00:00 jfyi, I don't believe getting this bug fixed will satisfy the s360 requirements. See: https://stackoverflow.microsoft.com/questions/401139
-
PRADEEPCHEEKATLA-MSFT 82,196 Reputation points Microsoft Employee
2024-05-30T07:29:59.8266667+00:00 @03318626 - We had rolled out fix which had resolved this issue. Could you please check and confirm if you are experiencing an issue?
-
PRADEEPCHEEKATLA-MSFT 82,196 Reputation points Microsoft Employee
2024-06-03T07:05:00.4766667+00:00 @03318626 - We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sign in to comment