Azure SQL Managed Identity in .Net Core without using access token

Question

Azure SQL Managed Identity in .Net Core without using access token

DevBuster007 186

We are using Azure SQL to connect from .Net 6.0 application.
It's a very high traffic application with millions of read write operations. Getting access token every time will slowdown the system.
We want to use managed Identity but without using the code to fetch Access Token. Please let us know if MS has this capability for now?

2 answers

Your answer

Answer 1

Alberto Morillo 35,401 MVP Volunteer Moderator

Both user-assigned and system-assigned identities make use of tokens. Identities cannot be used without token.

You can consider file-based authentication when token is not needed. Please get more information from here.

DevBuster007 186

Based on this MS article, if we have system assigned identity we can connect to db without any token.
I am missing something here?
https://learn.microsoft.com/en-us/sql/connect/ado-net/sql/azure-active-directory-authentication?view=sql-server-ver15#using-active-directory-managed-identity-authentication

// For user-assigned managed identity  
// Use your own values for Server, Database, and User Id.  
  
// With Microsoft.Data.SqlClient v2.1  
string ConnectionString1 = @"Server=demo.database.windows.net; Authentication=Active Directory Managed Identity; Encrypt=True; User Id=ObjectIdOfManagedIdentity; Database=testdb";  
  
using (SqlConnection conn = new SqlConnection(ConnectionString1)) {  
    conn.Open();  
}  
  
// With Microsoft.Data.SqlClient v2.1  
string ConnectionString2 = @"Server=demo.database.windows.net; Authentication=Active Directory MSI; Encrypt=True; User Id=ObjectIdOfManagedIdentity; Database=testdb";  
  
using (SqlConnection conn = new SqlConnection(ConnectionString2)) {  
    conn.Open();  
}

Alberto Morillo 35,401 Reputation points MVP Volunteer Moderator

2022-11-22T11:26:09.337+00:00

Try it, but the documentation on the link you provided says:

Since Microsoft.Data.SqlClient 2.1.0, the driver supports authentication to Azure SQL Database, Azure Synapse Analytics, and Azure SQL Managed Instance by acquiring access tokens via managed identity

Answer 2

Bas Pruijn 956

Instead of looking for an insecure way of connecting to your SQL Server, why not look into connection pooling? https://learn.microsoft.com/en-us/dotnet/framework/data/adonet/sql-server-connection-pooling

Share via

Azure SQL Managed Identity in .Net Core without using access token

2 answers

Your answer