ODBC connection to Azure using ActiveDirectoryInteractive

Question

I am connecting to an Azure SQL database using pyodcb . We have multi-factor authentication enabled, so I am using ActiveDirectoryInteractive authentication. We also use single sign-on for Windows.

My code is as follows:

import pyodbc

driver = '{ODBC Driver 17 for SQL Server}'
server = 'xxxxxxxxxxxxx.database.windows.net'
database = 'xxxxxxxxxxxxx'
authentication = 'ActiveDirectoryInteractive'
username = 'xxxxxxxxxxxxx'
conn = pyodbc.connect(
    'DRIVER=' + driver + ';' +
    'SERVER=' + server + ';' +
    'DATABASE=' + database + ';' +
    'UID=' + username + ';' +
    'AUTHENTICATION=' + authentication + ';')
cursor = conn.cursor()

Running this script, I get the password prompt, followed by the prompt to enter my MFA code, and this connects successfully.

But I would have thought that these steps were unnecessary, given we're using single sign-on. In fact, if I close the password prompt without entering my password the connection is still made. So if single sign-on is working correctly and the password and MFA prompts are not necessary, how can I suppress them?

Answer 1

I'm not sure if this will disable it in Office 365, but if you want to disable MFA for users in Azure ad, I think the easiest way is to disable it directly in the portal.