Azuredatastudio: Feature Request: Azure Active Directory Authentication

[orofino]

• SQL Operations Studio Version: 0.23.6

Steps to Reproduce:

1. Create new connection
2. Select Authentication Type

[kevcunnane]

To clarify: is this request for Azure Active Directory (integrated and password) authentication? @saurabh500 can help comment on this if so.

[orofino]

@kevcunnane yes, correct.

[Code-DJ]

@kevcunnane since this is Azure related do you want me to move my comments to a separate issue? Thanks!

EDIT: Deleted my previous comments to keep this issue clean and moved it to a separate issue.

[saurabh500]

@orofino @Code-DJ the Azure Integrated auth support needs to get into .Net Core for the tools to use it. There is an open issue at https://github.com/dotnet/corefx/issues/8807 and we are trying to work with security team to support FedAuth on .Net Core
Are you looking for Azure Active Directory username and password support or Azure Active Directory Integrated Authentication support?

[orofino]

@saurabh500 I'm looking for username/password support.

We have an Azure SQL Database with Azure AD security groups governing access. It would be great to allow users in those groups to use this application without having to create local SQL accounts.

To clarify further: I'm running MacOS 10.12

[kevcunnane]

@Code-DJ yes, please create a separate issue for Windows authentication issues. Again that's mostly going to be upstream (e.g. improve error messages in the SqlClient driver, improve the drivers reliability) but will let us track it cleanly.

[mmoizk]

I didn't see any voting button , so please consider my comment here as my request and vote for this feature. SSMS 17 does it great.

[orofino]

@mmoizk you may want to thumbs up the linked issue (dotnet/corefx#8807) as it seems the team there is referencing those for prioritization.

[sebcruz]

Please consider my comment as an Up Vote for this. Please add the same AAD authentication options as are currently available in SSMS.

[Code-DJ]

Should the title be changed to Azure Active Directory Authentication for clarity?

[kevcunnane]

@Code-DJ done.

[Ocanamat]

Great tool guys. Please also consider this comment as my up vote for this feature request. Thanks!

[pmooij]

Azure AD MFA, yes please! Thanks

[CoreyCaldwell]

And another vote for AD MFA

[acds]

+1

[Svengalx]

+1

[ajilius]

There's been great work delivering management widgets for SQLOps, but a pity customers with mature authentication environments can't use them! Please deliver AAD authentication as a priority.

[B4PJS]

Need MFA authentication

[kevinvngo]

+1

[jmaragon]

please, ad Active Directory MFS support to this great tool

[TwoUnder]

+1

[MLFlakus]

• 1

[jharris8567]

+1

[atfernando]

+1

[RanjithkumarRagavan]

+1

[YogeshPraj]

+1

[kplantus]

+1 for AAD w. MFA support.

[Jhonattan-Souza]

+1

[addp009]

+1

[rameezrajas]

+1

[slicc]

+1

[jovanpop-msft]

+1

[artsai]

+1

[jboarman]

@saurabh500 @kevcunnane @erickangMSFT

Now that .NET Core 2.2 has added AccessToken support, does that provide sufficient ability to support Azure MFA login support in SQL Ops Studio?

[MattIrv]

@kburtram this is assigned to you right now, are you working on it for October? If not I can grab it since the .NET Core preview release should support AAD now

[kentongray]

@mattlrv @kburtram is this actively being worked on? Feel so close!

[MattIrv]

I have some things I'm working on ahead of it but I'm planning to start on this soon

[snbcdev]

Excited that I may be able to try out this new tool soon! Once I can connect to our Azure SQL DBs with AD+MFA, that is.

[schalkje]

+1 for MFA

[anbudhanush]

hi guys,
when this feature is expected to be released ?

[PaulStirpe]

The tools is not really useful without Active Directory Integrated Authentication and better yet Active Directory Universal Authentication with MFA. Looking forward to this feature being implemented.

[MattIrv]

@anbudhanush we don't have an exact date yet but we're actively working on it now

[yellowianox73]

Yay! MFA

[thanksforthepen]

To clarify: is this request for Azure Active Directory (integrated and password) authentication? @saurabh500 can help comment on this if so.

11/19/2018 - Did this ever happen? I'd love to have people login with their AAD username and password.

[yualan]

Keep an eye out for the next monthly release. When we have an insider build out, feel free to try it out and let us know if there are any gaps with the feature.

[yualan]

Thanks to @MattIrv and @kburtram, AAD is now in the latest Insider build (1.3.4). Please try it out here and give us feedback before we include it in the December stable release: https://github.com/Microsoft/azuredatastudio/releases

[yellowianox73]

Is there 1.3.4 for Windows?

From: Alan Yu [e-mail]
Sent: Tuesday, November 27, 2018 9:55 PM
To: Microsoft/azuredatastudio [e-mail]
Cc: Duy Huynh [e-mail]; Comment [e-mail]
Subject: Re: [Microsoft/azuredatastudio] Feature Request: Azure Active Directory Authentication (#13)

[image]https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fuser-images.githubusercontent.com%2F30873802%2F49131872-ac03ad00-f28e-11e8-8b79-86ab33f7a252.png&data=02%7C01%7Cduy.huynh%40skykick.com%7C5e258b491ed24ac330a208d654f5fd40%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789812835868254&sdata=48ZVusa3TszDHseOA4f1fKPMKeE702WSlPyT8whQFww%3D&reserved=0

Thanks to @MattIrvhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMattIrv&data=02%7C01%7Cduy.huynh%40skykick.com%7C5e258b491ed24ac330a208d654f5fd40%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789812835868254&sdata=gOsUnWIugrX1KkzGZgMvbhwCqx4iMKpPKo3CHCWfqbk%3D&reserved=0 and @kburtramhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fkburtram&data=02%7C01%7Cduy.huynh%40skykick.com%7C5e258b491ed24ac330a208d654f5fd40%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789812835878258&sdata=nfkqIQP2WFBkx9JGHXuy5xgGbrjxEOZ8QjHGUDbesZo%3D&reserved=0, AAD is now in the latest Insider build (1.3.4). Please try it out here and give us feedback before we include it in the December stable release: https://github.com/Microsoft/azuredatastudio/releaseshttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoft%2Fazuredatastudio%2Freleases&data=02%7C01%7Cduy.huynh%40skykick.com%7C5e258b491ed24ac330a208d654f5fd40%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789812835888275&sdata=QfZNM1%2BNvmvhvCPP%2BaD9%2BEI2%2FV06tlROhPIFX49zGCY%3D&reserved=0

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHubhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoft%2Fazuredatastudio%2Fissues%2F13%23issuecomment-442329091&data=02%7C01%7Cduy.huynh%40skykick.com%7C5e258b491ed24ac330a208d654f5fd40%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789812835888275&sdata=rMkxmJ1vaPdNATkZ6bz0NO3FEclgz3Zb2%2Bexo5CjNdw%3D&reserved=0, or mute the threadhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAqxtNRl2Uvm-QVqEsaoI6W_a14eAh9riks5uziUggaJpZM4QfSyY&data=02%7C01%7Cduy.huynh%40skykick.com%7C5e258b491ed24ac330a208d654f5fd40%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789812835898279&sdata=VfxGO5pINgZRfDFym56stZtGhIAPX91wqOVJee0EInw%3D&reserved=0.

[yualan]

@yellowianox73 Yes, the Windows installer link works for me and confirmed will download 1.3.4 even though it lists as 1.1.4. Will get this changed.

[yellowianox73]

Yeap it works! but for some reasons I have cleared out the SQL authentication!

From: Alan Yu [e-mail]
Sent: Tuesday, November 27, 2018 10:04 PM
To: Microsoft/azuredatastudio [e-mail]
Cc: Duy Huynh [e-mail]; Mention [e-mail]
Subject: Re: [Microsoft/azuredatastudio] Feature Request: Azure Active Directory Authentication (#13)

@yellowianox73https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fyellowianox73&data=02%7C01%7Cduy.huynh%40skykick.com%7Cc48cf38df2e3423c1f3b08d654f74967%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789818396140125&sdata=DGOZJloMUxyJhuF6r2mjz7lGbWzer%2BiRunQ7zEMxs5g%3D&reserved=0 Yes, the Windows installer link works for me and confirmed will download 1.3.4 even though it lists as 1.1.4. Will get this changed.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoft%2Fazuredatastudio%2Fissues%2F13%23issuecomment-442330620&data=02%7C01%7Cduy.huynh%40skykick.com%7Cc48cf38df2e3423c1f3b08d654f74967%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789818396140125&sdata=xFw5PHaDCGvYBE%2BZ3NGc3UHp5dm6REokIwPAQU8WSVM%3D&reserved=0, or mute the threadhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAqxtNTiLD5l30UtXJ5RKWwGti7WtpcASks5uzidNgaJpZM4QfSyY&data=02%7C01%7Cduy.huynh%40skykick.com%7Cc48cf38df2e3423c1f3b08d654f74967%7C3f9cd7a0127a4ed4bf062f830d5616b7%7C0%7C0%7C636789818396150137&sdata=IZ8mYyotBWfqOJplrPMlWY%2FLClePXUiD%2FHRsudL2tJM%3D&reserved=0.

[orofino]

This is looking good to me! 1.3.4-insider on MacOS Mojave 10.14.1. Thanks for much for adding.

[kburtram]

Closing since this feature is available in https://github.com/Microsoft/azuredatastudio/releases/tag/1.3.6 and will be included in the December release planned for 12/12.

[sergiokoval]

doesn't seem it supports "Azure Active Directory - Password" type of authentication. Any plans to have this feature as well?

[sqlarcher]

doesn't seem it supports "Azure Active Directory - Password" type of authentication. Any plans to have this feature as well?

Unless you have not found it, you can under "Authentication Type" just select "Azure Active Directory - Universal with MFA Support" and this will work the same as "Azure Active Directory - Password". This is available since the December release of Azure Data Studio.

[sergiokoval]

doesn't seem it supports "Azure Active Directory - Password" type of authentication. Any plans to have this feature as well?

Unless you have not found it, you can under "Authentication Type" just select "Azure Active Directory - Universal with MFA Support" and this will work the same as "Azure Active Directory - Password". This is available since the December release of Azure Data Studio.

thanks for your reply! Yes, I can see that option but it doesn't provide me with entering username/password after. There is empty Account dropdown but no way to type username and password. Was looking for something similar to this window in sql management studio:

Am I missing something?

I'm using 1.3.7 insider version.

thanks and best regards

[kburtram]

@sergiokoval I'm not sure if that authentication method was implemented in the .Net Core AAD support. @MattIrv do you know the details why we only support "Universal with MFA".

[MattIrv]

@sergiokoval The account dropdown that shows up there should have an option to "Add an account", which will open a dialog with instructions on how to log into your account. Is that option missing for you?

[MattIrv]

We're also tracking support for password authentication in this issue: https://github.com/Microsoft/azuredatastudio/issues/2814. However looking at discussions around username/password auth (e.g. https://github.com/AzureAD/azure-activedirectory-library-for-nodejs/pull/99) it seems like they're pushing for everyone to use web login. So I still need to understand whether there are truly scenarios where users can't use web login and whether our ADAL library actually supports username/password authentication

[sergiokoval]

hi @MattIrv , the option "Add an account" appeared but nothing happened when I click on it. But after I tried to disconnect from corporate network and switched to regular public connection. So it took me to the device login page eventually.
Seems its not "firewall friendly". However no issues authenticating against azure in other apps using the same methods.
I mean having option to type username/password would be nice addition to user experience.