Events
Mar 31, 11 PM - Apr 2, 11 PM
The ultimate Microsoft Fabric, Power BI, SQL, and AI community-led event. March 31 to April 2, 2025.
Register todayThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Applies to: SQL Server SSIS Integration Runtime in Azure Data Factory
The Azure Storage connection manager enables a SQL Server Integration Services (SSIS) package to connect to an Azure Storage account. The connection manager is a component of the SQL Server Integration Services (SSIS) Feature Pack for Azure.
In the Add SSIS Connection Manager dialog box, select AzureStorage > Add.
The following properties are available.
Note
Microsoft Entra ID was previously known as Azure Active Directory (Azure AD).
When running SSIS packages on Azure-SSIS integration runtime (IR) in Azure Data Factory (ADF), you can use Microsoft Entra authentication with the managed identity of your ADF to access Azure Storage. Your Azure-SSIS IR can access and copy data from or to your storage account by using this managed identity.
Note
When you authenticate with a user-assigned managed identity, the SSIS integration runtime needs to be enabled for authentication with the same identity. For more information, see Enable Microsoft Entra authentication for Azure-SSIS integration runtime.
Refer to the Authenticate access to Azure Storage using Microsoft Entra ID article for Azure Storage authentication in general. To use Microsoft Entra authentication with the managed identity of your ADF to access Azure Storage, follow these steps:
Find the managed identity for your ADF from Azure portal. Go to your data factory's Properties. Copy the Managed Identity Application ID (not the Managed Identity Object ID).
Grant the managed identity for your ADF the required permissions to access Azure Storage. For more details about roles, see the Manage access rights to Azure Storage data with RBAC article.
Finally, you can configure Microsoft Entra authentication with the managed identity of your ADF on the Azure Storage connection manager. Here are the options to do this:
Configure at design time. In SSIS Designer, double-click on your Azure Storage connection manager to open the Azure Storage Connection Manager Editor. Select the Use managed identity to authenticate on Azure option.
Note
The connection manager property ConnectUsingManagedIdentity
doesn't take effect when you run your package in SSIS Designer or on SQL Server, indicating that Microsoft Entra authentication with the managed identity of your ADF doesn't work.
Configure at run time. When you run your package via SQL Server Management Studio (SSMS) or Execute SSIS Package activity in ADF pipeline, find the Azure Storage connection manager and update its property ConnectUsingManagedIdentity
to True
.
Note
On Azure-SSIS IR, all other authentication methods (for example, integrated security and password) preconfigured on your Azure Storage connection manager are overridden when using Microsoft Entra authentication with the managed identity of your ADF.
To configure Microsoft Entra authentication with the managed identity of your ADF on your existing packages, the preferred way is to rebuild your SSIS project with the latest SSIS Designer at least once. Redeploy your SSIS project to run on Azure-SSIS IR, so that the new connection manager property ConnectUsingManagedIdentity
is automatically added to all Azure Storage connection managers in your project. The alternative way is to directly use property overrides with the property path \Package.Connections[{the name of your connection manager}].Properties[ConnectUsingManagedIdentity] assigned to True
at run time.
When you use Microsoft Entra authentication with the managed identity of your ADF, it's possible to join your Azure-SSIS integration runtime to a virtual network, then secure your storage account by limiting access to selected networks or private endpoint. Please refer to the Managing exceptions article for instructions.
Events
Mar 31, 11 PM - Apr 2, 11 PM
The ultimate Microsoft Fabric, Power BI, SQL, and AI community-led event. March 31 to April 2, 2025.
Register todayTraining
Module
Secure your Azure Storage account - Training
Learn how Azure Storage provides multilayered security to protect your data with access keys, secure networks, and Advanced Threat Protection monitoring.
Certification
Microsoft Certified: Identity and Access Administrator Associate - Certifications
Demonstrate the features of Microsoft Entra ID to modernize identity solutions, implement hybrid solutions, and implement identity governance.