question

KevinAzure avatar image
0 Votes"
KevinAzure asked JeanPaul-5497 edited

Azure AD Certificate/Thumbprint Authenticate to Azure SQL

I have an Azure App Service which access Azure SQL.

I have an AAD.AppReg with Certificate & Thumbprint

I wanted to do Certificate Thumbprint based Authentication to the Azure SQL.

How can I achieve same?

Please advice.

azure-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JMod-5649 avatar image
2 Votes"
JMod-5649 answered KevinAzure commented

Hi PaulAzure-8925,

If you're looking to use AD to communicate between an Azure App Service and Azure SQL, the suggested security solution is to use a managed identity linked to the Azure App Service. This is a custom identity that is automatically managed for your App Service, and then you grant permissions so that identity can be used to access Azure SQL. You can configure everything through the Azure Portal, PowerShell or CLI and the identity's life cycle is automatically managed for you. You can check out these links to get started:

What are managed identities for Azure resources?

Tutorial: Secure Azure SQL Database connection from App Service using a managed identity

Outside of using a managed identity, Azure SQL does support Azure Active Directory Authentication but I do not believe it supports Certificate based Auth.

Azure SQL Database and Azure Synapse access control: Authentication

I hope that helps!


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you JMod!

0 Votes 0 ·
JeanPaul-5497 avatar image
1 Vote"
JeanPaul-5497 answered JeanPaul-5497 edited

Here is a Solution with Certificate based Authentication. To access Key Vault. LINK
https://jeanpaul.cloud/2020/03/16/azure-certificate-based-authentication-from-app-service-to-access-key-vault/

4601-azure-ad-thumbprint-key-vault.png



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.