When will Active Directory authentication be supported for CosmosDB backed TableAPI?

Question

When will Active Directory authentication be supported for CosmosDB backed TableAPI?

Andrew 1

According to a managed identity documentation page, CosmosDB SQL API supports AAD but there's no mention of CosmosDB TableAPI. As a consumer of CosmosDB TableAPI, I want to authenticate with Cosmos using a Managed Identity. Is there a plan to support AAD for CosmosDB TableAPI and, if so, what's the timeline? If not, what is the reasoning for not supporting it?

Thanks for the clarification in this issue.

0 comments

1 answer

Your answer

Answer 1

Anurag Sharma 17,636

Hi @Andrew , welcome to Microsoft Q&A forum.

Please check below link if this is what you are referring to. Managed identity is supported for Table API as well but only system-assigned managed identities.

Configure managed identities with Azure Active Directory for your Azure Cosmos DB account

Please let us know if my understanding is not correct and we can discuss more on this.

Andrew 1 Reputation point

2021-10-05T21:02:36.903+00:00

Hi @AnuragSharma-MSFT, thanks for the response.

I was planning to make use of a user-assigned managed identity. Is there a timeline for supporting user-assigned managed identities in TableAPI? I can look into possibly using a system-assigned managed identity but my workflow currently is dependent on a user-assigned identity. I'm not sure how easily I could switch between the two.

Thanks!
Anurag Sharma 17,636 Reputation points

2021-10-06T07:17:09.03+00:00

Hi @Andrew , thanks for responding back.

Currently there is no confirmed timeline on user-assigned managed identities support but product team prioritize these features based on feedback. As system-managed identity is already supported this should already be in the roadmap and as soon as it is implemented we will be updating it on the same link mentioned in above comment. I can keep an eye on it and will update this thread as and when it gets available.

Sorry for the inconvenience. Please let us know if this helps.
Anurag Sharma 17,636 Reputation points

2021-10-18T16:05:09.11+00:00

Hi @Andrew , thanks for your patience. Just wanted to update you that Azure Cosmos DB has now started supporting user-assigned managed identity as well, the documentation is already updated for the same.

Add a user-assigned identity

Please let us know if this helps or else we can discuss further.

----------

Please don't forgot to click on accept it as answer button wherever the information provided helps you. This can be beneficial to other community members as well.
Andrew 1 Reputation point

2021-10-19T16:02:32.03+00:00

Hi @AnuragSharma-MSFT, thanks for the update -- it's encouraging to see that progress is being made!

The documentation I originally linked to (https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/services-support-managed-identities#azure-cosmos-db) has not been updated yet to reflect TableAPI supporting AAD; but perhaps that's just on the todo list?

This GitHub feature request (https://github.com/Azure/azure-sdk-for-net/issues/24406) is what prompted me to ask about Cosmos TableAPI AAD support in the first place. If AAD is sufficiently supported by Cosmos TableAPI, should I reopen the feature request?

Thanks,
Andrew
Anurag Sharma 17,636 Reputation points

2021-10-20T09:47:02.68+00:00

Thanks for responding back. Yes managed identity(both System-assigned and user-assigned) with AAD is now supported for Azure Cosmos DB Table API. I created a new Azure Cosmos Account with Table API and have the option of configuring it through Settings -> Identity in left menu.

Regarding updates in the documentation, you can open a new request in the same link as shown in below screenshot:

Share via

When will Active Directory authentication be supported for CosmosDB backed TableAPI?

1 answer

Your answer