Azure SQL Database
An Azure relational database service.
MFA when connecting Azure Sql via ssms
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 95%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Siva Prasad
0
Reputation points
I have not enabled MFA, but when I try to sign in to Azure SQL Database via SSMS, it asks me for an MFA code. I logged in with my M365 account and checked the security info, and MFA was not enabled there. I am able to login to Azure portal without MFA. How can I fix this issue? Please advise. Thank you.
Azure SQL Database
Microsoft Security | Microsoft Authenticator
Microsoft Security | Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
SQL Server | Other
{count} votes
-
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator2024-02-07T20:14:57.4566667+00:00 Thank you for reaching out.
Sorry about the unexpected multifactor authentication (MFA) prompt even though you haven’t explicitly enabled it.
Your organization might have set up conditional access policies that enforce MFA for specific scenarios (e.g., accessing Azure SQL Database).
If you’re using a service principal to connect to the database from SSMS, it could be subject to MFA requirements. SSMS does not support connecting to an Azure SQL database using a service principal.Regards, Oury
-
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator
2024-02-08T20:00:09.67+00:00 @Siva Prasad Checking on the status of the above issue. Any updates? Regards, Oury
-
Siva Prasad 0 Reputation points
2024-02-09T06:10:49.1166667+00:00 Hi Oury, Thank you for your response. I want to let you know that MFA (Multi-Factor Authentication) is turned off for the entire organization. When I try to connect to Azure SQL using my username and password in SSMS (SQL Server Management Studio), a window pops up asking for Azure credentials. To troubleshoot, I registered with the Authenticator app and entered the code it provided. Unfortunately, the code was not accepted, and I received an “invalid code” message. I also tried sending a request to the Authenticator app, hoping to accept it from there, but no request appeared in the app. To check MFA code, i have tried to open Security info in M365 email and it asks for code and entered the code and the code was accepted and then i disabled the MFA authentication from M365 email. Even after disabling MFA ,when try to connect the Azure SQLDB from SSMS again it is asking for code and same issue as mentioned above. Could you please advise on how to resolve this issue?
-
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator
2024-02-14T00:12:31.1366667+00:00 When login in to SSMS are you using SQL Server authentication or Azure active directory password.?
Have you ever experienced MFA when logging into this DB before or?
I have mentioned that above, could you please check if your organization doesn't have any active CA policies governing MFA over this SQL DB.
- Does your tenant have Security Default enabled? If so, is the user they're logging into an Admin within MS Entra ID?
- Another potential reason could be that "All users" are targetted via one of the Authentication Policies:
- MS Entra ID > Security > Authentcation Methods
-
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator
2024-02-14T20:48:49.2666667+00:00 @Siva Prasad Could you please check my above comment and let me know. Regards, Oury
-
Siva Prasad 0 Reputation points
2024-02-15T12:20:41.7033333+00:00 Hi Oury, I am logging with SQL server authentication. Yes,i am getting signin to AZURE from day1. I am not able to login with my emailid when click on isgnin to azure since MFA issue and with the owner account it was not asking MFA. MFA is disabled for entire org,how ever it was asking for one email id,as suggested i have followed the provided instructions buy getting the below error. I am getting attached error to check the above,please advise.
-
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator
2024-02-15T17:59:57.1766667+00:00 @Siva Prasad Thank you for getting back. Could you please go to Azure portal and perform the below action. https://learn.microsoft.com/en-us/azure/azure-sql/database/secure-database-tutorial?view=azuresql#set-up-server-level-firewall-rules Regards, Oury
-
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator
2024-02-20T19:13:30.9733333+00:00 @siva prasad Did the above comment help in anyway.? Regards, Oury
-
Siva Prasad 0 Reputation points
2024-02-21T10:32:55.5933333+00:00 Hi Oury, if i add my IP under Public access firewall then i am able to login to SSMS with out MFA and able to access Azure Sql DBs.However the issue was MFA is disabled but still when logging it was asking for code and the code entered from authenticator also not accepting.this is the major issue which i want a resolution ;kindly advise.
-
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator
2024-02-22T21:49:16.7166667+00:00 @Siva Prasad
I am glad you were able to connect. Which of these are you selecting from SSMS when trying to login.? -
Siva Prasad 0 Reputation points
2024-02-26T09:15:12.5066667+00:00 Hi Oury, Sqlserver authentication.
-
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator
2024-02-29T22:53:37.0166667+00:00 @siva prasad Thank you for letting me know. Is it still asking for a code.? Regards, Oury
Sign in to comment
Sign in to answer