Support Integrated Active Directory Password Authentication

[maxali]

Cannot CONNECT to Azure server using Active Directory Password Authentication.

• MSSQL Extension Version: 0.1.5
• VSCode Version: 1.7.2
• OS Version: Windows 10

Steps to Reproduce:

1. Create Azure SQL Database
2. Add a user from Azure AD CREATE USER [[email protected]] FROM EXTERNAL PROVIDER;
3. Connect using Active Directory Password Authentication

[kevcunnane]

@maxali, thanks for raising this. Currently this is blocked on our upstream dependency on .Net Core, which does not currently have Azure AD support for SQL Client. I have updated issue https://github.com/dotnet/corefx/issues/8807 with this request to ensure the ask is tracked there too.

If this is fixed in .Net Core there would be additional work to support Azure authentication in general from our application, and it's likely we'd do this and other Azure-related support such as firewall rule creation in a larger improvement.

[erickangMSFT]

I assigned it to myself to track the progress with .NET core.

[michaelaird]

Adding my $.02:

This should support Active Directory Universal Authentication the way SSMS does. ie. by opening the Azure authentication dialog. This is necessary for enabling those of us that have multi-factor authentication turned on for our AD accounts.

[anujb]

+1

It seems lackadaisical that [MFA via] AAD is clearly marketed as differentiated capability, but not supported in our 1st party developer tools for VS Code.

[AronT-TLV]

The block is over. Azure AD support is now available in Azure Data Studio (even on Mac) for example

[SeaDude]

Is this going to be implemented in MSSQL Extension? I'd like to login using AD Creds rather than SQL Server Creds.
I'm unable to run commands like this without AD Login functionality:

-- Create a contained Azure AD User
CREATE USER [[email protected]]
FROM EXTERNAL PROVIDER
WITH DEFAULT_SCHEMA = dbo

When Integrated is chosen login method: Results in:

[Trestomagnetic]

Any movement on this? My company doesn't allow us to use sql creds, we are AAD - Universal with MFA only. I would love to use VS Code instead of SSMS, but this is a blocker.

[Msjronkko]

Any updates on this? Same situation here that SQL creds are no-go by company policy.

[ransagy]

Why is there a difference here between Azure Data Studio? They don't use the same infra in this context?

[7even7]

Azure Data Studio has supported MFA for a long time, and so has SSMS. Why is it still not available in VS code mssql?
VS code with git lense is my preferred environment, but now I'm forced to jump around in different editors/IDEs because of this issue.

[JeffBor]

FYI, the Feb 2020 release of ADS supports better token authentication: microsoft/azuredatastudio#3669

[acambitsis]

Any update on this? I am really keen to use this extension in VS Code, but have to keep reverting to Azure Data Studio because of AD / MFA support.

[ldsalomone]

Following this. Wondering if this is in development or on hold?

[kburtram]

Closing this as "by design". Our upstream driver does not support AAD with Password, only AAD-MFA. Current the extension supports AAD-MFA, Windows Integrated Auth, and SQL Login.