This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi Team,
We want to connect ADF to the Azure SQL database and azure storage account hosted on a different subscription.
I believe we would have to go for SQL Server and authentication key mechanism.
ADF to SQL Server = SQL Server authentication
ADF to Blob Storage = account key authentication
Could someone confirm this, please?
Regards
Lokesh
Hey, In case if both the subscriptions are in the same tenant, then best and most secure way to access blob and Azure sql database in adf would be via manages identity authentication.
In case if adf is in another tenant, you can use service principal authentication to access blob and Azure sql db as the next most secure way (the app should be of the tenant in which blob or db is present) rather than using sql and access key auth
Thanks, could you list down the steps, please?
How will the service principal created in one tenant be used in another tenant?
Steps to create an APp/SP:
[https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal
For Azure SQL DB:
[https://learn.microsoft.com/en-us/azure/data-factory/connector-azure-sql-database
Azure blob storage:
[https://learn.microsoft.com/en-us/azure/data-factory/connector-azure-blob-storage?tabs=data-factory
Thanks
Using SAS URI and SAS token is better than using Account key in terms of security when you are trying to access BLOB Storage of other Tenant.