Cloud database authentication and authorization with OCI IAM and Azure AD
summary
Demonstration shows Oracle Database 19c (autonomous and on-prem 19.60) accepting Azure AD OAuth 2 token or IAM-managed database passwords, with explicit support limitations (no 21c server). The demo registers an Azure app and client, creates three app roles mapped to a shared schema and a global DBA role, uses MSAL Python to fetch a JWT, stores it locally, and connects with SQLPlus using TOKEN_AUTH=OAUTH*; sys_context output proves the Azure identity and roles propagate correctly and the flow works end to end.
AI-written summary · about
chapters (11)
- 0:00Start
- 1:22Centralized user management: on-premises to cloud
- 2:33What new things can cloud identity integration provide?
- 5:13What database and cloud identity integrations exist today?
- 7:48Demonstrating Azure AD authz flow
- 8:20Register database with Azure AD app registration
- 8:49App roles-assign and map
- 9:22Assign users and groups to app roles
- 9:32Enable Azure AD integration
- 10:30Register database client with Azure AD
- 10:48Configure database client
related talks
18mMulticloud Development with Microsoft Azure and Oracle Database Cloud
08mOracle Database@Azure
14mCloud Native Development with Oracle Database
15mOracle Database@Microsoft Azure Multicloud Partnership
27mAzure AD authentication with PostgreSQL Flexible Servers
46mDiscover Oracle Database@Azure a new opportunity for developers
27mYour multicloud strategy and Database Cloud Services
05mExplore Oracle Database@Azure with Oracle and Microsoft experts