Feature Request: Azure Active Directory Authentication about azuredatastudio HOT 58 CLOSED

Azure AD MFA, yes please! Thanks

from azuredatastudio.

@saurabh500 @kevcunnane @erickangMSFT

Now that .NET Core 2.2 has added AccessToken support, does that provide sufficient ability to support Azure MFA login support in SQL Ops Studio?

from azuredatastudio.

Keep an eye out for the next monthly release. When we have an insider build out, feel free to try it out and let us know if there are any gaps with the feature.

from azuredatastudio.

@anbudhanush we don't have an exact date yet but we're actively working on it now

from azuredatastudio.

@kburtram this is assigned to you right now, are you working on it for October? If not I can grab it since the .NET Core preview release should support AAD now

from azuredatastudio.

I have some things I'm working on ahead of it but I'm planning to start on this soon

from azuredatastudio.

Yay! MFA

from azuredatastudio.

There's been great work delivering management widgets for SQLOps, but a pity customers with mature authentication environments can't use them! Please deliver AAD authentication as a priority.

from azuredatastudio.

doesn't seem it supports "Azure Active Directory - Password" type of authentication. Any plans to have this feature as well?

from azuredatastudio.

@Code-DJ done.

from azuredatastudio.

Thanks to @MattIrv and @kburtram, AAD is now in the latest Insider build (1.3.4). Please try it out here and give us feedback before we include it in the December stable release: https://github.com/Microsoft/azuredatastudio/releases

from azuredatastudio.

This is looking good to me! 1.3.4-insider on MacOS Mojave 10.14.1. Thanks for much for adding.

from azuredatastudio.

To clarify: is this request for Azure Active Directory (integrated and password) authentication? @saurabh500 can help comment on this if so.

from azuredatastudio.

@kevcunnane yes, correct.

from azuredatastudio.

@kevcunnane since this is Azure related do you want me to move my comments to a separate issue? Thanks!

EDIT: Deleted my previous comments to keep this issue clean and moved it to a separate issue.

from azuredatastudio.

@orofino @Code-DJ the Azure Integrated auth support needs to get into .Net Core for the tools to use it. There is an open issue at https://github.com/dotnet/corefx/issues/8807 and we are trying to work with security team to support FedAuth on .Net Core
Are you looking for Azure Active Directory username and password support or Azure Active Directory Integrated Authentication support?

from azuredatastudio.

@saurabh500 I'm looking for username/password support.

We have an Azure SQL Database with Azure AD security groups governing access. It would be great to allow users in those groups to use this application without having to create local SQL accounts.

To clarify further: I'm running MacOS 10.12

from azuredatastudio.

@Code-DJ yes, please create a separate issue for Windows authentication issues. Again that's mostly going to be upstream (e.g. improve error messages in the SqlClient driver, improve the drivers reliability) but will let us track it cleanly.

from azuredatastudio.

I didn't see any voting button , so please consider my comment here as my request and vote for this feature. SSMS 17 does it great.

from azuredatastudio.

@mmoizk you may want to thumbs up the linked issue (dotnet/corefx#8807) as it seems the team there is referencing those for prioritization.

from azuredatastudio.

Please consider my comment as an Up Vote for this. Please add the same AAD authentication options as are currently available in SSMS.

from azuredatastudio.

Should the title be changed to Azure Active Directory Authentication for clarity?

from azuredatastudio.

Great tool guys. Please also consider this comment as my up vote for this feature request. Thanks!

from azuredatastudio.

And another vote for AD MFA

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

Need MFA authentication

from azuredatastudio.

+1

from azuredatastudio.

please, ad Active Directory MFS support to this great tool

from azuredatastudio.

+1

from azuredatastudio.

• 1

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

+1 for AAD w. MFA support.

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

+1

from azuredatastudio.

@mattlrv @kburtram is this actively being worked on? Feel so close!

from azuredatastudio.

Excited that I may be able to try out this new tool soon! Once I can connect to our Azure SQL DBs with AD+MFA, that is.

from azuredatastudio.

+1 for MFA

from azuredatastudio.

hi guys,
when this feature is expected to be released ?

from azuredatastudio.

The tools is not really useful without Active Directory Integrated Authentication and better yet Active Directory Universal Authentication with MFA. Looking forward to this feature being implemented.

from azuredatastudio.

To clarify: is this request for Azure Active Directory (integrated and password) authentication? @saurabh500 can help comment on this if so.

11/19/2018 - Did this ever happen? I'd love to have people login with their AAD username and password.

from azuredatastudio.

from azuredatastudio.

@yellowianox73 Yes, the Windows installer link works for me and confirmed will download 1.3.4 even though it lists as 1.1.4. Will get this changed.

from azuredatastudio.

from azuredatastudio.

Closing since this feature is available in https://github.com/Microsoft/azuredatastudio/releases/tag/1.3.6 and will be included in the December release planned for 12/12.

from azuredatastudio.

doesn't seem it supports "Azure Active Directory - Password" type of authentication. Any plans to have this feature as well?

Unless you have not found it, you can under "Authentication Type" just select "Azure Active Directory - Universal with MFA Support" and this will work the same as "Azure Active Directory - Password". This is available since the December release of Azure Data Studio.

from azuredatastudio.

doesn't seem it supports "Azure Active Directory - Password" type of authentication. Any plans to have this feature as well?

Unless you have not found it, you can under "Authentication Type" just select "Azure Active Directory - Universal with MFA Support" and this will work the same as "Azure Active Directory - Password". This is available since the December release of Azure Data Studio.

thanks for your reply! Yes, I can see that option but it doesn't provide me with entering username/password after. There is empty Account dropdown but no way to type username and password. Was looking for something similar to this window in sql management studio:

Am I missing something?

I'm using 1.3.7 insider version.

thanks and best regards

from azuredatastudio.

@sergiokoval I'm not sure if that authentication method was implemented in the .Net Core AAD support. @MattIrv do you know the details why we only support "Universal with MFA".

from azuredatastudio.

@sergiokoval The account dropdown that shows up there should have an option to "Add an account", which will open a dialog with instructions on how to log into your account. Is that option missing for you?

from azuredatastudio.

We're also tracking support for password authentication in this issue: #2814. However looking at discussions around username/password auth (e.g. AzureAD/azure-activedirectory-library-for-nodejs#99) it seems like they're pushing for everyone to use web login. So I still need to understand whether there are truly scenarios where users can't use web login and whether our ADAL library actually supports username/password authentication

from azuredatastudio.

hi @MattIrv , the option "Add an account" appeared but nothing happened when I click on it. But after I tried to disconnect from corporate network and switched to regular public connection. So it took me to the device login page eventually.
Seems its not "firewall friendly". However no issues authenticating against azure in other apps using the same methods.
I mean having option to type username/password would be nice addition to user experience.

from azuredatastudio.