Azure-docs: MFA or firewall issues?

[bartvermeersch]

According to this documentation, Azure AD admin sign in doesn't work with accounts that have 2-factor authentication enabled. This is weird because it used to work?

Right now we get the following error "A connection to the server 'ABC.database.windows.net' could not be established. This may indicate an issue with your network connection or firewall configuration. Please check your network connection and try again."

Is this error related to MFA?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 9788706b-bc01-9560-4b57-8ad44f2431bf
• Version Independent ID: e6ef3341-5520-a10a-bb5f-59166647478c
• Content: Azure portal: Query Azure SQL Database using Query Editor
• Content Source: articles/sql-database/sql-database-connect-query-portal.md
• Service: sql-database
• Sub-service: development
• GitHub Login: @ninarn
• Microsoft Alias: ninarn

[KalyanChanumolu-MSFT]

@bartvermeersch Are you trying this from the Azure portal? Could you please check if the firewall is configured to allow your client IP address.
I just tried using an account with 2FA and I was able to sign in without issues.

[BarkerStorm]

@bartvermeersch Did you get a resolution for this? Am experiencing the same issue.

[ninarn]

I am working with my dev team to investigate the issue. I will try to get back to you as soon as possible with info on this issue.

[KalyanChanumolu-MSFT]

@ninarn Following up to see if you have any updates on this issue?

[KalyanChanumolu-MSFT]

This is being assigned to the content author to provide more information.

[ninarn]

I will be able to follow up early next week with an update.

[ninarn]

Thank you for your patience I have an update on this issue. My team is confident that they know the cause of your issue and they have implemented a fix that should go out soon. Please wait until late this week or early next week and try again. Once this fix is in place, if you encounter the issue, you will be able to click 'Try again' and it should work the second time.
I should also add clarification that we have never supported multi-factor authentication within the query editor feature. Meaning that you will not be able to login to the query editor using 2-factor auth. However if you logged in to the Azure portal with AAD MFA, connecting to the query editor with AAD should work. And we expect the fix to be available soon.

[isinghrana]

I also have MFA enabled account, login using Azure AD authentication on Query Editor takes some time and then fails but if I click Continue it works just fine. So, its not a blocker but not a good experience. Is this expected to be resolved soon?

[ryanps1]

I'm currently unable to login with the query editor using either the local administrator credentials or with Azure AD. I do have MFA on my account, but for both my AD account and a local administrator, I'm receiving the below message:

A connection to the server 'XXX.database.windows.net' could not be established. This may indicate an issue with your network connection or firewall configuration. Please check your network connection and try again.

To confirm, my local IP address is whitelisted along with Azure Services being allowed. Is anybody else experiencing this issue?

[cactusbash]

@ryanps1 I am facing the same issue. Now if only I can find the default query that Query Editor provides, I would be able to work around this annoyance.

If anyone knows the default Query for searching logged events on SQL, please share!

[cactusbash]

If anyone else was looking;

SELECT TOP 100 event_time, server_instance_name, database_name, server_principal_name, client_ip, statement, succeeded, action_id, class_type, additional_information FROM sys.fn_get_audit_file('https://xxx.blob.core.windows.net/xxx/xxx/xxx/2019-09-19/xxx.xel', default, default) WHERE (event_time <= '2019-09-19T00:00:49.586Z') /* additional WHERE clause conditions/filters can be added here */ ORDER BY event_time DESC

[cactusbash]

@ryanps1 Found the issue was related to port 1443 - open that up and you should be fine, as stated by the yellow ribbon after the error is thrown.

[ninarn]

Yes, the query editor uses ports 443 and 1443 to communicate. Please ensure you have enabled outbound HTTPS traffic on these ports. You will also need to add your outbound IP address to the server's allowed firewall rules to access your databases and data warehouses.
Please try these and see if you can connect to query editor?

[devsmartshah]

Hi there I am unable to connect to view the Query Editor. I have added the Rules according to the documentation. And I am using the local account to access the Query Editor. It keeps throwing a firewall/proxy error

[Naapi]

Same thing. Unable to login to Query Editor. I am following https://docs.microsoft.com/en-us/learn/modules/develop-app-that-queries-azure-sql/3-exercise-create-tables-bulk-import-query-data guide.

[ninarn]

Can you please clarify what error messages you are seeing when you try to connect to the query editor?

[devsmartshah]

Hi this has been resolved now. It was our corporation firewall. We needed
to add port 1443 and 1433

On Tue, 3 Mar 2020, 18:04 Ninar Nuemah, [e-mail] wrote:

Can you please clarify what error messages you are seeing when you try to
connect to the query editor?

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/azure-docs/issues/34827?email_source=notifications&email_token=AOMXHVNZKGGZEPAUCAP7XGLRFVBCHA5CNFSM4H7NJSHKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOENUQZEQ#issuecomment-594087058,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AOMXHVKN3ZJIV4IIECFFDOLRFVBCHANCNFSM4H7NJSHA
.

[ninarn]

please-close