Ensure that Microsoft Entra ID authentication is configured to allow you to centrally manage identity and access to your Microsoft Azure SQL database servers by using a Microsoft Entra administrator.
This rule resolution is part of the Conformity Security & Compliance tool for Azure.
Microsoft Entra ID authentication represents an instrument that is used to connect to Microsoft Azure SQL databases and SQL data warehouses using identities available within Microsoft Entra ID. With Microsoft Entra ID authentication, identities of database users and other Microsoft services can be managed in one central location. Central ID management provides a single place to manage SQL database users and simplifies permission management. The Microsoft Entra ID authentication feature benefits include:
Providing a secure alternative to SQL database server authentication;
Help to reduce the proliferation of user identities across Azure SQL database servers;
Handling password rotation in a single place;
Eliminating the need for storing passwords by enabling integrated Windows authentication and other forms of authentication supported by Microsoft Entra ID;
Allowing customers to manage database permissions using external Microsoft Entragroups;
Allowing token-based authentication for applications connecting to Azure SQL databases;
Providing support for ADFS (domain federation) or native user/password authentication for a local Microsoft Entra ID without domain synchronization;
Allowing connections from SQL Server Management Studio that use Microsoft Entra ID Universal Authentication, which includes Multi-Factor Authentication (MFA);
Allowing similar connections from SQL Server Data Tools (SSDT) that use Microsoft Entra ID Interactive Authentication.
Audit
To determine if a Microsoft Entra administrator is configured for SQL authentication within your Azure SQL database server settings, perform the following actions:
Remediation / Resolution
To configure an Microsoft Entra administrator for SQL authentication and access to your Microsoft Azure SQL database servers, perform the following actions:
References
- Azure Official Documentation
- Use Microsoft Entra authentication
- CIS Microsoft Azure Foundations
- Azure Command Line Interface (CLI) Documentation
- SQL
- Get-AzSqlServer
- Get-AzSqlServerActiveDirectoryAdministrator
- Set-AzSqlServerActiveDirectoryAdministrator
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.
You are auditing:
Use Microsoft Entra Admin for SQL Authentication
Risk Level: Medium