Using Authentication method - Microsoft Entra Password

Question

Hi Team, On Azure portal, I created an Azure Active Directory group and added an user in it. Using Microsoft Entra admin User, logged in to Azure SQL DB, created the User with same name as AAD Group and given db_owner role to the DB User. For the added User (in AAD), using SSMS, I am able to connect to DB by using Authentication method - Microsoft Entra MFA. Using SSMS, when I used Microsoft Entra Password, I am unable to connect to DB, getting below error - Login failed for user '<token-identified principal>'. (Framework Microsoft SqlClient Data Provider) Does this means that User can not login using Microsoft Entra Password, always has to login using Microsoft Entra MFA? In which scenario Microsoft Entra Password is used? Thanks, Salil

Answer 1

Hi Salil,

Can you check the Group ID is matching the User you created in SQL DB? Also check this article and some suggestions on this auth issue - https://techcommunity.microsoft.com/t5/azure-database-support-blog/aad-auth-error-login-failed-for-user-lt-token-identified/ba-p/1417535

Hope this helps. JS

== Please Accept the answer if the information helped you. This will help us and others in the community as well.