Azure SQL Managed Instance - A disconnect event was raised when server is waiting for Federated Authentication token

Aleksey Vitsko 25 Reputation points
2024-08-28T17:34:06.17+00:00

We are running Production workloads on Azure SQL Managed Instance, and periodically we see errors:

A disconnect event was raised when server is waiting for Federated Authentication token. This could be due to client close or server timeout expired.

Also sometimes we see this in error log:

[GetFederatedClientIdInternal]:No property with name FederatedClientIdForUserAssignedIdentity found, HRESULT is:80071bc9 Didn't find Federated Client Id property, failed to get it from service fabric. HRESULT is:80071bc9 Unable to get federated client id from service fabric. SQL assume it is single tenant CMK scenario and continue. HRESULT is:80071bc9

These errors doesn't happen at the same time. What could these mean and how to fix them ?

Azure SQL Database

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. ShaktiSingh-MSFT 15,301 Reputation points
    2024-08-29T10:05:21.4166667+00:00

    Hi Aleksey Vitsko •,

    Welcome to Microsoft Q&A forum.

    As I understand, you are getting error when connecting Azure SQL managed instance from Service Fabric with Federated Auth token timeout.

    In some circumstances, there might exist an issue with Service Principal used to access Microsoft Entra ID (formerly Azure Active Directory) and Azure Key Vault (AKV) services. As a result, this issue impacts usage of Microsoft Entra authentication and transparent data encryption (TDE) with SQL Managed Instance. This might be experienced as an intermittent connectivity issue, or not being able to run statements such are CREATE LOGIN/USER FROM EXTERNAL PROVIDER or EXECUTE AS LOGIN/USER. Setting up TDE with customer-managed key on a new Azure SQL Managed Instance might also not work in some circumstances.

    Workaround: To prevent this issue from occurring on your SQL Managed Instance before executing any update commands, or in case you have already experienced this issue after update commands, go to Azure portal, access SQL Managed Instance Active Directory admin page. Verify if you can see the error message "Managed Instance needs a Service Principal to access Microsoft Entra ID. Click here to create a Service Principal". In case you've encountered this error message, select it, and follow the step-by-step instructions provided until this error have been resolved.

    Let us know if this helps.

    Awaiting your reply.

    Thanks

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.