Support for workload identity authentication mode

[JDonaghy]

Are there any plans to support workload identity auth mode?

E.g.:

string ConnectionString = @"Server=demo.database.windows.net;Authentication=Active Directory Workload Identity;Encrypt=True;User Id=ClientIdOfManagedIdentity;Database=testdb";

Currently authentication-method must be one of

• ActiveDirectoryApplication
• ActiveDirectoryServicePrincipal
• ActiveDirectoryDefault
• ActiveDirectoryIntegrated
• ActiveDirectoryInteractive
• ActiveDirectoryManagedIdentity
• ActiveDirectoryMSI
• ActiveDirectoryPassword
• ActiveDirectoryAzCli
• ActiveDirectoryDeviceCode

none of which seem suitable.

Thanks!

[shueybubbles]

have you tried using azure cli and az login, like this post shows for ADO pipelines? Maybe using ActiveDirectoryAzCli auth for sqlcmd would work then.

There have been several new credential types added to the Azure SDK the past year+, we haven't added them all directly to the driver and sqlcmd.

[JDonaghy]

Thanks, I suspect that could work, but it probably wont help me accomplish what I was hoping to use the tool for, which is to troubleshoot why a application running in a Kubernetes pod can't connect to a Azure logical server using a connection string like the above (via a sidecar with the tool installed). The ability to use a straight connection string here would be nice as well.

I appreciate the comment though.

[shueybubbles]

let's see if Copilot can help us out microsoft/go-mssqldb#268

[JDonaghy]

Ha, I'd be impressed if it JFW'd.