SSMS connection to AzureSQL database - ADAL error

Question

SSMS connection to AzureSQL database - ADAL error

grajee 371

All,

I'm getting a ADAL error while connecting to AzureSQL via SSMS. The error is "adal received an empty response from the server during a WIA flow and could not continue".

I'm aware that ADAL is the Azure AD authentication library but I'm unable locate more details about this error. The connection goes through if SQL authentication is used which indicates there is no networking issue.

Can someone point me in the right direction?

Thanks,
grajee

Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator

2021-10-29T22:59:02.197+00:00

Hi @grajee Thank you for posting your question on Microsoft Q&A.

Sorry to hear that you are facing issues connecting to Azure SQL through SSMS. Which authentication method are you using (Azure AAD MFA, AAD password or AAD Integrated) to connect.?

Regards,
Oury
grajee 371 Reputation points

2021-10-31T18:44:20.09+00:00

Last option - (Azure Active Directory - Integrated)
grajee 371 Reputation points

2021-11-02T19:57:27.407+00:00

The client also has the relevant drivers

1 answer

Your answer

Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator

2021-10-29T22:59:02.197+00:00

Hi @grajee Thank you for posting your question on Microsoft Q&A.

Sorry to hear that you are facing issues connecting to Azure SQL through SSMS. Which authentication method are you using (Azure AAD MFA, AAD password or AAD Integrated) to connect.?

Regards,
Oury
grajee 371 Reputation points

2021-10-31T18:44:20.09+00:00

Last option - (Azure Active Directory - Integrated)
grajee 371 Reputation points

2021-11-02T19:57:27.407+00:00

The client also has the relevant drivers

Answer 1

Oury Ba-MSFT 20,911 Microsoft Employee Moderator

Hi @grajee

After investigation. Please check the below points

Try installing the latest ODBC driver
run these commands in powershell to check the if the machine can connect to the AAD endpoints.
tnc login.windows.net -port 443
tnc login.microsoftonline.net -port 443
Check if you have some conditional access enable for devices and if this device is not added. You must enroll your device

Please let me know the result

Regard

Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator

2021-11-04T17:00:32.883+00:00

Hi @grajee Checking if you were able to check the above point. Please let us know if that resolve the issue.

Regards,
Oury
Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator

2021-11-08T16:12:42.817+00:00

Hi @grajee Checking if you were able to try the above points. Please let us know if that resolve the issue.

Regards,
Oury
Lee Alderdice 1 Reputation point

2022-03-30T14:06:12.483+00:00

Hi,

I have exactly the same setup as per the pictures and the same result.

In testing tnc connections described - windows.net works but microsoftonline.net can not resolve the endpoint.

There is no conditional access set and no ODBC update available.

Monitoring traffic from the SSMS process shows an empty response from autologon.microsoftazureread-sso.com.

What would be the next steps?

Kind regards,
Lee
Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator

2022-03-30T15:22:52.96+00:00

@Lee Alderdice
Please file an Azure Support ticket when this occurs and have the ticket assigned to the ADAL Team. If you do not have an Azure Support plan, a one-time ticket can be activated to capture this specific issue.

Regards,
Oury

Share via

SSMS connection to AzureSQL database - ADAL error

1 answer

Your answer