Azure SQL JDBC connection from ISC fails: “Azure Active Directory only authentication is enabled”

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Title:

Azure SQL JDBC connection from ISC fails: “Azure Active Directory only authentication is enabled”

Post:

Hi Team,

I am configuring a SailPoint ISC JDBC source to connect to an Azure SQL Database and I’m getting the following error during connection test:

[ ConnectorException ] [ Error details ] The server encountered an unexpected error while contacting target system. Please check the logs. Login failed for user 'ServiceAccount@test.com'. Reason: Azure Active Directory only authentication is enabled. Please contact your system administrator.

Current setup

  • Source type: JDBC

  • Target system: Azure SQL Database

  • Username used: Entra-style user ID

  • Issue occurs during: connection test / login

  • Azure SQL server appears to have Microsoft Entra-only authentication enabled

What I’m trying to confirm

My assumption is that the JDBC connector is attempting a standard SQL login flow, while Azure SQL is rejecting it because the server allows only Entra-based authentication.

I’d like to confirm:

  1. Does the ISC JDBC connector support Microsoft Entra authentication for Azure SQL?

  2. If yes, are there any specific JDBC properties, connection string settings, or driver requirements needed?

  3. If no, is the supported approach to use a SQL-authenticated account instead?

  4. Has anyone implemented this in an environment where Entra-only authentication is enforced?

If someone has a working pattern for this scenario, I’d appreciate details on how you configured it.

Thanks.

2

Hi @Pritam_0007

Can you please check with your Azure Admin regarding which type of auth is enabled?

It looks like the issue with the username/password login.

Can you please confirm which method you are using? Is it Windows/AD Auth ?

3

Hi @msingh900,

Only Azure Active Directory authentication is enabled in Database side.
As per my understanding, JDBC connector will use SQL Auth. But, The database only allows Azure AD Auth.
Database URL: jdbc:sqlserver://yourserver.database.windows.net:1433;database=yourdb;user=youruser@yourserver;password=yourpassword;encrypt=false;trustServerCertificate=true;

Thank you!

4

Please follow this documentation.

You need to create a service user.

5

Hi @msingh900 ,

I am using a service account. if you look into my error, i am not able to login using service account itself.

Thank you!

6

Do you have azure account with that service account email address ?

7

Yes, I have service account email address