To configure AAD authentication, perform the following tasks:
Import the server certificate
If a trust store file is not configured for your organization and you want to use AAD authentication with Active Directory Federation Services in Azure, import the server certificate.
Import the server certificate to the following location:
Use the following command to import the certificate:
keytool -import -trustcacerts -alias <alias name of the certificate> -file <certificate file path> -keystore <Secure Agent installation directory>\jdk\jre\lib\security\cacerts -storepass <password for the truststore>
Set the Azure Active Directory admin
To add new users or delete existing users from your Azure Active Directory, you must have the administrator role.
Perform the following steps to set Azure Active Directory administrator:
Log in to the Azure portal.
On the All Resources page, select the Microsoft SQL Server that hosts Microsoft Azure Synapse SQL.
Select the
Azure Active Directory
option under Settings.
The image shows the Azure Active Directory settings:
Click
Set admin
.
The Add admin page appears.
Enter the email ID that you want to use as admin, and click
Select
.
Click
Save
.
Create a new user
Perform the following steps to create a user:
Connect to Microsoft Azure Synapse SQL using the Azure Active Directory admin created in the previous steps.
You can use Microsoft SQL Server Management Studio to connect to the Microsoft Azure Synapse SQL.
Run the following command:
create user [user@foobar.com] from external provider;
For more information, see the Microsoft Azure documentation.