| title | Microsoft Entra ID in SSDT | ||
|---|---|---|---|
| description | Learn about the Microsoft Entra authentication methods that SQL Server Data Tools (SSDT) provides for Azure SQL Database and Azure Synapse Analytics. | ||
| author | dzsquared | ||
| ms.author | drskwier | ||
| ms.reviewer | randolphwest | ||
| ms.date | 09/09/2025 | ||
| ms.service | sql | ||
| ms.subservice | ssdt | ||
| ms.topic | concept-article | ||
| ms.custom |
|
||
| monikerRange | =azuresqldb-current || =azure-sqldw-latest || =fabric-sqldb |
[!INCLUDE Azure SQL Database Azure Synapse Analytics FabricSQLDB]
SQL Server Data Tools (SSDT) provides several authentication methods with Microsoft Entra ID (formerly Azure Active Directory).
[!INCLUDE entra-id]
In Visual Studio, open the SQL Server Object Explorer (in the View menu), and select Add SQL Server:
:::image type="content" source="media/azure-active-directory/interactive.png" alt-text="Screenshot of SSDT connection dialog.":::
This article discusses Microsoft Entra ID for the following list of SQL products in the Azure cloud:
- Azure SQL Database
- Azure SQL Managed Instance
- SQL Server on Azure VMs
- SQL Server enabled by Azure Arc
- Azure Synapse Analytics
Active Directory Password Authentication is a mechanism of connecting to the Azure SQL products that were listed previously. The mechanism uses identities in Microsoft Entra ID. Use this method for connecting when:
- You're logged in to Windows with credentials from a domain that isn't federated with Azure, or
- You're using Microsoft Entra authentication with Microsoft Entra ID, based on the initial or client domain.
For more information, see Connecting to SQL Database By Using Microsoft Entra authentication.
Active Directory Integrated Authentication is a mechanism of connecting to the listed SQL products in Azure by using identities in Microsoft Entra ID. Use this method to connect if you're logged in to Windows using your Microsoft Entra credentials from a federated domain. For more information, see Microsoft Entra authentication for Azure SQL.
Active Directory Interactive Authentication is available when connecting to the listed Azure SQL products with SSDT, but only with .NET Framework 4.7.2 or a later version.
- Download and install for .NET Framework, any version.
- Visual Studio 2017 version 15.6, or a later version.
Active Directory Interactive Authentication supports an interactive authentication allowing you to use Microsoft Entra multifactor authentication to authenticate with the listed Azure SQL products. This method supports native and federated Microsoft Entra users, and guest users from other accounts. The other types of account include:
- Business-to-Business (Microsoft Entra B2B) users.
- Microsoft accounts, from providers such as Outlook and Windows Live Mail.
- Non-Microsoft accounts, such as Gmail.
If the MFA method is specified, the User Name must be specified, and the Password field is disabled.
When you authenticate with Active Directory Interactive Authentication, an authentication window opens that requires users to enter a password manually. MFA enforcement is provided by Microsoft Entra ID through this additional MFA pop-up window.
Note
Automated workflows would be blocked by the use of Active Directory Interactive Authentication. There must be a person available to interact with the authentication process, in the form of manually entering a password.
- Active Directory Interactive Authentication is only supported when connecting to the SQL products that were listed at the start of this article.
- Single sign-on integration with the currently logged in Visual Studio account isn't supported for SSDT.
- The SQLPackage.exe that is installed into the Extensions directory during Visual Studio installation isn't meant to be used from that location. To use SQLPackage.exe with Microsoft Entra ID, go to Data-Tier Application Framework