To connect to Microsoft Azure Synapse SQL using Azure Active Directory (AAD) authentication, you need to create an Azure Active Directory administrator and an Azure Active Directory user.

If a trust store file isn't configured for your organization and you want to use AAD authentication with Active Directory Federation Services in Azure, you need to import the server certificate. For more information, contact your organization administrator.

Import the server certificate to the following location:

<Secure Agent installation directory>\jdk\jre\lib\security\cacerts

Use the following command to import the certificate:

keytool -import -trustcacerts -alias <alias name of the certificate> -file <certificate file path> -keystore

<Secure Agent installation directory>\jdk\jre\lib\security\cacerts

-storepass <password for the truststore>

To add new users to your Azure Active Directory, you must have an administrator role.

To set up an Azure Active Directory administrator for AAD and Microsoft SQL Server that hosts your Microsoft Azure Synapse SQL, perform the following steps:

Log on to the Microsoft Azure portal using your credentials.
The Dashboard page appears.
From the All Resources page, select the Microsoft SQL Server that hosts Microsoft Azure Synapse SQL.
Under Settings displayed for Microsoft SQL Server, select the
Active Directory admin
option.
The image shows the Active Directory admin settings:

Click
Set admin
.
The Add admin page appears.
Enter the email ID that you want to use as admin, and then click
Select
.
Click
Save
.

Perform the following steps to create an AAD user:

Connect to Microsoft Azure Synapse SQL using the Azure Active Directory administrator created in the previous steps.
You can use Microsoft SQL Server Management Studio to connect to the Microsoft Azure Synapse SQL.
In a new query window in Microsoft SQL Server Management Studio, run the following command to create an AAD user:
create user [user@foobar.com] from external provider;
Assign the following privileges to the user:
CREATE USER [username] FROM EXTERNAL PROVIDER;
ALTER ROLE db_datareader ADD MEMBER [username]
ALTER ROLE db_datawriter ADD MEMBER [username]
GRANT EXECUTE TO [username]
grant ALTER ANY EXTERNAL DATA SOURCE to [username];
grant create table to [username];
grant create schema to [username];
grant select to [username];
grant update to [username];
grant insert to [username];
grant delete to [username];
grant create view to [username];
grant select on schema :: sys to [username];
grant control to [username];
EXEC sp_addrolemember 'db_owner','[username]';
ALTER ROLE db_owner ADD MEMBER [username]