Microsoft SQL Server

Microsoft SQL Server

Supported databases

Connections are supported to the following Microsoft SQL Server offerings:

  • Microsoft SQL Server 2017, 2019, and 2022
  • Azure SQL Database
  • Azure SQL Managed Instance

Both on-premise and cloud-hosted deployments are supported.


Required connection details

To configure a connection, you must provide:

  • Host – database server hostname or IP address
  • Port – default: 1433
  • Database name
  • Username
  • Password

The connection configuration is created automatically based on these values.


Authentication methods

SQL Server authentication

Standard SQL Server authentication using a username and password is supported.

Azure Active Directory authentication

Azure Active Directory authentication is supported using a service principal.

When Azure AD Authentication is enabled:

  • The Username must be the Application (Client) ID
  • The Password must be the Client Secret
  • The Azure AD application must be granted access to the target database

Interactive sign-in is not supported.


Security behavior

The following security rules always apply to SQL Server connections:

  • Connections are established without transport encryption
  • Server certificates are not trusted or validated

The SQL Server instance must allow unencrypted connections for the connection to succeed.


Not supported

  • Windows (Integrated) Authentication
  • Azure AD Interactive authentication
  • Azure AD Managed Identity authentication
  • Kerberos or NTLM authentication
  • Named pipe or shared-memory connections
  • Custom or manually defined connection strings

Azure-specific notes

  • Azure SQL Database and Azure SQL Managed Instance must explicitly allow connections without encryption
  • Firewall rules must allow network access from the application
  • Database-level permissions must be granted to the SQL or Azure AD identity

Notes

  • Only network (TCP/IP) connections are supported
  • Credentials must be provided explicitly
  • Network access to the configured host and port must be permitted