[IdentityNow] JDBC connector with authentication via Active Directory account

[originalmths (Matheus Alencar)]

Hello everyone, I need your help.

I have an integration to perform with a database (SQL Server) and I need to login with an Active Directory account.

I’ve looked in several places, tried to use the jTDS driver, but without success. Have you ever had a similar case? Where was it necessary to authenticate via Active Directory account?

I used this string:
jdbc:jtds:sqlserver://:1433;databaseName=;useNTLMv2=true;domain=;

However, it returns a generic error:

“The server encountered an unexpected error while contacting target system. Please check the logs. test configuration”

On the Virtual Appliance, I ran the nc command and communication is taking place between the VA and the database.

[mcheek (Mark Cheek)]

For this particular use case, what’s the difference between using a local sql server account as opposed to an AD user? You’re still storing credentials in the config

I guess I’m trying to figure out why you can’t use a local sql account

[alexandre_mazars]

Hello,

We faced the same issue few weeks ago, and we finished to move to local authentication. Our integrator told us that it was not possible for database without TLS and we are still waiting answers from SailPoint regarding how to do AD auth with this connector with TLS on the database

So very curious to see the answers on this topic

++

[originalmths (Matheus Alencar)]

@mcheek

For this particular use case, what’s the difference between using a local sql server account as opposed to an AD user? You’re still storing credentials in the config

I guess I’m trying to figure out why you can’t use a local sql account

In fact, there is no difference. However, we recommend using an Active Directory account to authenticate.

[originalmths (Matheus Alencar)]

I looked in several places, but without success. It’s been a headache hahaha…

[gauravsajwan1 (Gaurav Sajwan)]

Hi @originalmths, we had the same situation and got confirmation from SailPoint support that they are across this and work is in progress (not sure when it will be delivered, you may raise a support case or confirm with your CSM on this).
There is an idea also raised for this, might want to upvote: https://ideas.sailpoint.com/ideas/GOV-I-1685

For now, only local SQL auth is supported.