Connector Improvement: Add Azure Active Directory (AAD) Authentication Support for HVR Connector to Azure Synapse Analytics (Dedicated SQL Pool)
AnsweredI am reaching out to request the addition of Azure Active Directory (AAD) authentication support for the HVR connector to Azure Synapse Analytics (Dedicated SQL Pool). Currently, the connector relies on SQL authentication, which limits our ability to leverage Azure’s modern security and identity management capabilities.
Feature Request Details:
-
Feature Description: Implement support for Azure Active Directory (AAD) authentication, including both managed identity and user-based AAD authentication, for the HVR connector to Azure Synapse Analytics (Dedicated SQL Pool).
-
Use Case: Many organizations, including ours, prioritize AAD authentication to enforce centralized identity management, enhance security through multi-factor authentication (MFA), and streamline access control using role-based access control (RBAC). This is particularly critical for compliance with enterprise security policies and integration with Azure Synapse’s native AAD-based access controls.
-
Benefits:
-
Enhanced Security: AAD authentication supports MFA and conditional access, reducing risks associated with static credentials.
-
Seamless Integration: Aligns with Azure Synapse Analytics’ native support for AAD, enabling consistent authentication across Azure services.
-
Simplified Management: Eliminates the need to manage SQL credentials, reducing administrative overhead and improving compliance.
-
Industry Standard: Matches the capabilities of other data integration tools (e.g., Azure Synapse Dedicated SQL Pool Connector for Apache Spark), which already support AAD authentication.
-
-
Current Limitation: The lack of AAD support forces reliance on SQL authentication, which is less secure and incompatible with our organization’s security requirements for Azure-based workloads.
-
Priority: High, as this feature is critical for organizations adopting Azure Synapse Analytics in secure, enterprise-grade environments.
-
Hi Vlastimir,
Thank you for submitting a detailed motivation for your feature request.
I agree we should support modern Azure Active Directory (Entra ID) authentication for Synapse. We support this for Azure SQL so hopefully we are not too far of. Let me discuss with engineering.
Thank you,
Mark.
Please sign in to leave a comment.
Comments
1 comment