Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,473 questions
Network Security Group Settings When Use Microsoft Entra ID SSO.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 55.00000000000001%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EII%3C/text%3E%3C/svg%3E)
井上 樹/ITSUKI INOUE
1
Reputation point
Hi
When I access from a VM to Snowflake in VNET and signin with Azure Entra ID SSO, What is need to set to Network Security Group?
I think I need to set NSG allowed list about Entra ID, but I can't find it.
And, I set NSG Entra ID's service tag but no progress was made.
{count} votes
-
KapilAnanth-MSFT 46,016 Reputation points Microsoft Employee2024-05-21T07:55:58.12+00:00 Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I see you have followed the Tutorial: Microsoft Entra SSO integration with Snowflake.
Can you be more specific on what exactly is the issue?
- From NSG perspective, you can use the Service Tag AzureActiveDirectory in OutBound NSG Rules to allow connection towards Entra
- i.e., This is for the authentication part
- However, to access any third party service itself, you should allow all connections to Internet or work with the third party to get a list of IPs that needs to be whitelisted.
I hope this adds clarity.
In case you require assistance with configuring Microsoft Entra SSO integration with Snowflake , do let me know on which step you are stuck on.
Cheers,
Kapil
- From NSG perspective, you can use the Service Tag AzureActiveDirectory in OutBound NSG Rules to allow connection towards Entra
Sign in to comment
Sign in to answer