Azure数据工厂V2：使用Azure Active Directory为Azure Sql服务器创建链接服务

Question

Creating linked service(Azure Data Factory V2) for Azure Sql supports SQL Authentication. I want to know if it also supports Azure Active Directory Integrated Authentication.

Answer 1

As of today (Feb '18),

ADFV2 can connect to some sources using Managed Service Identity (MSI). In short, the ADFV2 instance is given an identity in the Active Directory as an Active Directory Application. See the docs here . Then the ADFV2 can connect to data sources as that identity.

Although Azure SQL supports Managed Service Identity , accessing Azure SQL Server through MSI is not available for ADFV2 yet. From the docs :

ConnectionString: Specify information needed to connect to the Azure SQL Database instance for the connectionString property. Only basic authentication is supported . Mark this field as a SecureString to store it securely in Data Factory, or reference a secret stored in Azure Key Vault.

As the docs state, you can use the ADFV2 Managed Service Identity to connect to KeyVault and use keys and secrets stored there, which is probably your best best for limiting security information in configuration.

Keep in mind that the UI for ADFV2 is still quite far behind the API, so you may need to use PowerShell or Azure command line to set it up properly.