Azure AD Certificate/Thumbprint Authenticate to Azure SQL

Kevin Azure 141 Reputation points
2020-03-03T00:05:03.797+00:00

I have an Azure App Service which access Azure SQL.

I have an AAD.AppReg with Certificate & Thumbprint

I wanted to do Certificate Thumbprint based Authentication to the Azure SQL.

How can I achieve same?

Please advice.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,434 questions
0 comments
Accepted answer
  1. J Mod 191 Reputation points
    2020-03-03T03:22:34.71+00:00

    Hi PaulAzure-8925,

    If you're looking to use AD to communicate between an Azure App Service and Azure SQL, the suggested security solution is to use a managed identity linked to the Azure App Service. This is a custom identity that is automatically managed for your App Service, and then you grant permissions so that identity can be used to access Azure SQL. You can configure everything through the Azure Portal, PowerShell or CLI and the identity's life cycle is automatically managed for you. You can check out these links to get started:

    What are managed identities for Azure resources?

    Tutorial: Secure Azure SQL Database connection from App Service using a managed identity

    Outside of using a managed identity, Azure SQL does support Azure Active Directory Authentication but I do not believe it supports Certificate based Auth.

    Azure SQL Database and Azure Synapse access control: Authentication

    I hope that helps!

    2 people found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jean Paul 6 Reputation points
    2020-03-16T16:06:47.573+00:00

    Here is a Solution with Certificate based Authentication. To access Key Vault. LINK
    https://jeanpaul.cloud/2020/03/16/azure-certificate-based-authentication-from-app-service-to-access-key-vault/

    4601-azure-ad-thumbprint-key-vault.png

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.