This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 77%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFB%3C/text%3E%3C/svg%3E)
Hi,
I have Azure SQL Server with Azure Active Directory authentication only setting enabled
Azure Active Directory admin is a Service Principal.
I am not able to restore database from backup when providing Service Principal name as Active Directory admin user name and its secret as Password.
Received error:
An error occurred while communicating with the SQL Server using AdPassword-login: Could not discover a user realm.
I am getting the same error both from Azure Portal and when using Azure CLI to restore the database.
At the same time I can use above Service Principal in Azure DevOps Pipelines to connect to database without any issues.
Would you be able to help with that?
Best regards,
Filip
@Filip Bieleszuk Thank you for reaching out.
My understanding is that you are trying to import or export your SQL Server or Azure SQL Database.
Could you please check if the service principal is not expired.?
To export a database in SQL Database using the SQLPackage command-line utility, see Export parameters and properties. The SQLPackage utility is available for Windows, macOS, and Linux.
The SqlPackage command line tool allows you to specify these actions along with action-specific parameters and properties.
Download the latest version. For details about the latest release, see the release notes.
Authentication
SqlPackage authenticates using methods available in SqlClient. Configuring the authentication type can be accomplished via the connection string parameters for each SqlPackage action (/SourceConnectionString and /TargetConnectionString) or through individual parameters for connection properties. The following authentication methods are supported in a connection string:
Please note for Azure SQL Managed Instance does not currently support exporting a database to a BACPAC file using the Azure portal or Azure PowerShell. To export a managed instance into a BACPAC file, use SQL Server Management Studio (SSMS) or SQLPackage.Regards,
Oury
As you can read on this forum thread, Azure users have reported through the years that Import-Export operations with a service principal does not work. You always get the error you shared with us.
Hi @Alberto Morillo ,
I was looking for a workaround and I have just discovered that I am able to use the SqlAzureDacpacDeployment task to import and export Azure SQL Database using the Service Principal, so that's technically possible. Although there are some limitations for running this task as it is using SqlPackage.exe so it can be run only on Windows agents.
What I am missing is to be able to perform this operation with Azure CLI or Az PowerShell and I do consider this as a bug in those modules.
Please report bugs on this URL.