I would like to use Azure SQL Database with Azure AD authentication only. I couldn't find any way to disable the sql authentication mode either the server admin login. Any hint?
Thank you, Alessandro
2
-
Possible duplicate of Azure SQL Server, is it possible to disable server admin (after creation)?David Browne - Microsoft– David Browne - Microsoft2019-01-22 20:39:17 +00:00Commented Jan 22, 2019 at 20:39
-
Avoid creation of database users instead of trying to avoid they can connect. CREATE TRIGGER CatchUserCreation ON DATABASE FOR CREATE_USER.Alberto Morillo– Alberto Morillo2019-01-23 02:29:29 +00:00Commented Jan 23, 2019 at 2:29
Add a comment
|
2 Answers
This is now possible as announced https://techcommunity.microsoft.com/t5/azure-sql/azure-active-directory-only-authentication-for-azure-sql/ba-p/2417673
Tick box in the portal as the screenshot from the article linked above 
1 Comment
Ac Hybl
thank you. 1 step closer to making Azure work . . .
When we are creating a new Azure SQL server, we need these following values:
- Server name: Enter mysqlserver.
- Server admin login: Type azureuser.
- Password: Enter Azure1234567.
- Confirm Password: Retype the password.
- Location: Drop down and select any valid location.
Other words, when the Azure SQL Server is created, the SQL Server admin account is created. We can't connect to the Azure SQL Server without it. Other words, Azure SQL Server is created based on Azure SQL Server Authentication.
One of the benefits for using the Azure AD authentication is that it provides an alternative to SQL Server authentication.
Each Azure SQL server (which hosts a SQL Database or SQL Data Warehouse) starts with a single server administrator account that is the administrator of the entire Azure SQL server. If we want to use Azure AD Authentication, a second SQL Server administrator must be created, that is an Azure AD account.(Reference:Create an Azure AD administrator for Azure SQL server ).
Administrator structure:
We can understand like this, Azure AD authentication is a complement to SQL Server authentication.
We can remove Azure Active Directory administrator. Removing the Azure Active Directory administrator for Azure SQL server prevents any Azure AD authentication user from connecting to the server. If necessary, unusable Azure AD users can be dropped manually by a SQL Database administrator.
And combine the blob David Browne mentioned, we can get the result: we can not disable the SQL Server Authentication.
Hope this can helps you.
