Is an 'Entra-only' Azure SQL Server Database connection supported?

[michaelbiriley-auror]

Hi Redash! 🙏

Great product. Love the flexibility it gives us. :D

We are moving towards the 'recommended' approach of using EntraID to authenticate to our databases. This is used by applications(via managed identity) and administrators(via Entra accounts).

Can Redash request a managed identity from Azure, and use that when connecting to a database to run a query?

I see that the pyodbc package can support this, but needs a particular connection string to be built. I think tweaks here would enable this?

Is this coming soon? Are there docs I can refer to?

Thanks in advance,

[yoshiokatsuneo]

@michaelbiriley-auror

I'm not using Azure SQL.
But, as far as I see the documentation below describing how to connect the server using access tokens, it looks current Redash code does not support access token.

https://github.com/mkleehammer/pyodbc/wiki/Connecting-to-SQL-Server-from-Linux#connecting-to-servers-with-access-tokens

import struct
from azure import identity

azure_credential = identity.DefaultAzureCredential()

token_bytes = azure_credential.get_token('https://database.windows.net/').token.encode('utf-16-le')
token_struct = struct.pack(f'<I{len(token_bytes)}s', len(token_bytes), token_bytes)

SQL_COPT_SS_ACCESS_TOKEN = 1256  # This connection option is defined by microsoft in msodbcsql.h
cnxn = pyodbc.connect(connection_string, attrs_before={SQL_COPT_SS_ACCESS_TOKEN: token_struct})

I think we welcome any contribution(Pull Request) to support the access token if needed.