You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/relational-databases/security/authentication-access/azure-ad-authentication-sql-server-overview.md
+10-3Lines changed: 10 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Learn about Microsoft Entra authentication support for SQL Server
4
4
author: PratimDasgupta
5
5
ms.author: prdasgu
6
6
ms.reviewer: vanto, randolphwest
7
-
ms.date: 02/21/2024
7
+
ms.date: 11/04/2025
8
8
ms.service: sql
9
9
ms.subservice: security
10
10
ms.topic: concept-article
@@ -47,13 +47,19 @@ If your Windows Server Active Directory is [federated](/entra/identity/hybrid/co
47
47
48
48
## <aid="connect-sql-server-to-azure-with-azure-ad"></a> Connect SQL Server to Azure with Microsoft Entra ID
49
49
50
-
For SQL Server to communicate with Azure, both SQL Server and the Windows or Linux host it runs on must be registered with [Azure Arc](../../../sql-server/azure-arc/overview.md). To enable SQL Server's communication with Azure, you need to install the [Azure Arc Agent](/azure/azure-arc/servers/overview) and [Azure extension for SQL Server](../../../sql-server/azure-arc/overview.md).
50
+
### Setting up Microsoft Entra authentication with Azure Arc
51
+
52
+
For SQL Server to communicate with Azure, both SQL Server and the Windows or Linux host it runs on can be registered with [Azure Arc](../../../sql-server/azure-arc/overview.md). To enable SQL Server's communication with Azure, you need to install the [Azure Arc Agent](/azure/azure-arc/servers/overview) and [Azure extension for SQL Server](../../../sql-server/azure-arc/overview.md).
51
53
52
54
To get started, see [Connect your SQL Server to Azure Arc](../../../sql-server/azure-arc/connect.md).
53
55
54
-
> [!Note]
56
+
> [!NOTE]
55
57
> If you are running SQL Server on an Azure VM, you don't need to register the VM with Azure Arc, you must instead register the VM with the [SQL IaaS Agent extension](/azure/azure-sql/virtual-machines/windows/sql-agent-extension-manually-register-single-vm). Once the VM is registered, see [Enable Azure AD authentication for SQL Server on Azure VMs](/azure/azure-sql/virtual-machines/windows/configure-azure-ad-authentication-for-sql-vm) for more details.
56
58
59
+
### Setting up Microsoft Entra authentication without Azure Arc
60
+
61
+
You can also set up Microsoft Entra authentication for SQL Server on Windows without using Azure Arc. This approach involves manually configuring certificates, registry settings, and Microsoft Entra ID application registrations. For detailed instructions, see [Tutorial: Enable Microsoft Entra authentication for SQL Server on Windows without Azure Arc](microsoft-entra-authentication-sql-server-enable-without-arc.md).
The default authentication option with Microsoft Entra ID that enables authentication through password-less and non-interactive mechanisms including managed identities, Visual Studio, Visual Studio Code, the Azure CLI, and more.
@@ -109,5 +115,6 @@ Some non-GUI clients such as [Invoke-sqlcmd](/powershell/module/sqlserver/invoke
109
115
-[Linked server for SQL Server with Microsoft Entra authentication](azure-ad-authentication-sql-server-linked-server.md)
110
116
-[Tutorial: Using automation to set up the Microsoft Entra admin for SQL Server](azure-ad-authentication-sql-server-automation-setup-tutorial.md)
111
117
-[Tutorial: Set up Microsoft Entra authentication for SQL Server](azure-ad-authentication-sql-server-setup-tutorial.md)
118
+
-[Tutorial: Enable Microsoft Entra authentication for SQL Server on Windows without Azure Arc](microsoft-entra-authentication-sql-server-enable-without-arc.md)
0 commit comments