Network Security Group Settings When Use Microsoft Entra ID SSO.

井上樹/ITSUKI INOUE 1

Hi

When I access from a VM to Snowflake in VNET and signin with Azure Entra ID SSO, What is need to set to Network Security Group?

I think I need to set NSG allowed list about Entra ID, but I can't find it.

And, I set NSG Entra ID's service tag but no progress was made.

KapilAnanth-MSFT 37,646 Reputation points Microsoft Employee

2024-05-21T07:55:58.12+00:00
@井上樹/ITSUKI INOUE ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I see you have followed the Tutorial: Microsoft Entra SSO integration with Snowflake.

Can you be more specific on what exactly is the issue?

From NSG perspective, you can use the Service Tag AzureActiveDirectory in OutBound NSG Rules to allow connection towards Entra

i.e., This is for the authentication part

However, to access any third party service itself, you should allow all connections to Internet or work with the third party to get a list of IPs that needs to be whitelisted.

I hope this adds clarity.

In case you require assistance with configuring Microsoft Entra SSO integration with Snowflake , do let me know on which step you are stuck on.

Cheers,

Kapil