An in-depth review of the latest advancements in authentication for Azure SQL and SQL Server 2022
summary
Shows concrete steps and demos: enabling Azure AD for Azure SQL, granting the server a system-assigned managed identity, mapping an AAD group to a server administrator, and using SSMS19 to connect with MFA and device code flows. Demonstrates a PowerShell script that uses the VM managed identity to automate creation of server logins for AAD principals, enforces block SQL authentication with an Azure Policy (deny), and explains SQL Server 2022 on Arc support and Windows-integrated lift‑and‑shift — all working in the demos.
AI-written summary · about
chapters (13)
- 0:00Start
- 1:13Outline
- 2:55Identity challenges for today's organizations
- 4:19Why legacy identity systems in SQL are not sufficient
- 9:16Azure AD - the identity provider for the SQL family
- 10:22What's new in Azure AD authentication in Azure SQL/SQL Server
- 12:17Enable Azure AD
- 27:15Mapping logins and users to Azure AD principals
- 28:36Creating logins/users for Azure AD principals - T-SQL
- 31:34Best practice for logins/users for Azure AD principals
- 35:59Avoid mechanisms storing passwords in code/config
- 43:21Kerberos authentication in Managed Instance For legacy apps and lift & shift scenarios
- 45:28Key takeaways
related talks
13mSecretless access to Azure SQL server using Managed Identity
51mNavigating Modern Authentication in SQL
46mUnderstanding Azure Active Directory for Data Professionals
55mOffensive Azure Security
51mAdvanced Attack Vectors in Azure Environments
47mSecuring Serverless Applications in Azure
45mSecuring Identity with Zero Trust
01h 00mEverything You Always Wanted to Know About Azure Security But Were Afraid to Ask