Microsoft Entra authentication on azure sql server

[Yauheni]

Is it possible to use Azure sql server with Microsoft Entra authentication only for Intel EMA server?

[Suneesh]

Hello Yauheni,

Yes, it is possible to use Azure SQL Database with Microsoft Entra ID (formerly Azure Active Directory) authentication for Intel Endpoint Management Assistant (EMA). This setup allows you to leverage Azure AD's identity management capabilities for database authentication, enhancing security and simplifying user management. 

Steps to Configure Azure SQL Database with Azure AD Authentication:

1. Set Up Azure SQL Database:

Create Azure SQL Database:

Log in to the Azure portal and create a new Azure SQL Database if you haven't already.

Configure Azure AD Admin:

In the Azure portal, navigate to your SQL server.

Under "Settings," select "Azure Active Directory admin."

Set an Azure AD user or group as the admin for the SQL server. This user will have administrative privileges to manage the database.

2. Configure Intel EMA to Use Azure SQL Database:

Access EMA Configuration:

Log in to the Intel EMA console with administrative credentials.

Set Up Database Connection:

Navigate to the database configuration settings in the EMA console.

Enter the connection details for the Azure SQL Database, including the server’s name, database name, and authentication type.

Use Azure AD Authentication:

Select Azure AD authentication as the method for connecting to the database.

Provide the necessary Azure AD credentials or service principal details for authentication.

3. Test and Validate:

Test Database Connection:

Test the connection from Intel EMA to the Azure SQL Database to ensure that authentication is working correctly.

Monitor and Troubleshoot:

Monitor database access logs and authentication events to ensure that the integration is functioning securely and efficiently.

Additional Considerations:

Security: Ensure that all communications between Intel EMA and Azure SQL Database are encrypted using HTTPS or other secure protocols.

Documentation: Refer to Intel EMA and Azure SQL Database documentation for detailed instructions and best practices.

Azure AD Roles: Manage Azure AD roles and permissions to control access to the database and ensure that only authorized users can perform administrative tasks.

Please find the Intel® Endpoint Management Assistant (Intel® EMA) Deployment Guide for Microsoft Azure:

https://www.intel.com/content/www/us/en/content-details/841816/intel-endpoint-management-assistant-intel-ema-deployment-guide-for-microsoft-azure.html

Regards,

Suneesh S

Intel Customer Support Technician

[Yauheni]

 I mean using Microsoft Entra authentication for database setup during installation (Database setup).

I don't see any option to use Microsoft Entra authentication

[Yauheni]

From Intel® Endpoint Management Assistant (Intel® EMA) Deployment Guide for Microsoft Azure you provided we see

Authentication method: Use SQL authentication

But if i choose Microsoft Entra authentication only SQL authentication will be disabled, including SQL Server administrators and users.

Looks like you contradict yourself.

[Suneesh]

Hello Yauheni,

Thank you for your patience and for pointing out the details regarding authentication options with Intel EMA.

You are correct! when the documentation refers to "Windows authentication," it specifically means authentication via Active Directory (AD), not Microsoft Entra ID (formerly Azure AD). If your environment uses on-premises Active Directory, you can use Windows authentication for Intel EMA. Otherwise, you will need to use SQL authentication for database access.

At this time, Microsoft Entra ID authentication is not supported for Intel EMA database connections. This is a product limitation, and I apologize for any confusion caused by my earlier message. I have confirmed this with our engineering team and through additional research. Since Microsoft Entra ID is a not available in our test lab, we are unable to test this scenario directly, but the documentation and our internal guidance confirm this limitation.

Best regards,

Suneesh

Intel Customer Support Technician

[Suneesh]

Hello Yauheni,

We are following up on this case. If further assistance is necessary, please do not hesitate to reply.

Regards,

Suneesh S

Intel Customer Support Technician

[Suneesh]

Hello Yauheni,

We are following up on this case. If further assistance is necessary, please do not hesitate to reply.

Regards,

Suneesh S

Intel Customer Support Technician

[Yauheni]

Hello, 

thank you for the reply, this ticket can be closed.

[Suneesh]

Hello Yauheni,

Thank you for the response.

We will proceed to close this thread. If you need further assistance, please do not hesitate to reply.

Regards,

Suneesh S

Intel Customer Support Technician