last sync: 2025-Apr-29 17:15:47 UTC

Azure SQL Database should have Microsoft Entra-only authentication

Azure BuiltIn Policy Initiative (PolicySet)

Source Azure Portal
Display nameAzure SQL Database should have Microsoft Entra-only authentication
Ida55e4a7e-1b9c-43ef-b4b3-642f303804d6
Version1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
CategorySQL
Microsoft Learn
DescriptionRequire Microsoft Entra-only authentication for Azure SQL Database, disabling local authentication methods. This allows access exclusively via Microsoft Entra identities, enhancing security with modern authentication enhancements including MFA, SSO, and secret-less programmatic access with managed identities.
Cloud environmentsAzureCloud = true
AzureChinaCloud = unknown
AzureUSGovernment = unknown
Available in AzUSGovUnknown, no evidence if PolicySet definition is/not available in AzureUSGovernment
TypeBuiltIn
DeprecatedFalse
PreviewFalse
Policy-used summary
Policy types Policy states Policy categories
Total Policies: 2
Builtin Policies: 2
Static Policies: 0
GA: 2
1 categories:
SQL: 2
Policy-used
Policy DisplayName Policy Id Category Version Versioning Effect Roles# Roles State policy in AzUSGov
Azure SQL Database should have Microsoft Entra-only authentication enabled b3a22bc9-66de-45fb-98fa-00f5df42f41a SQL 1.0.0 1x
1.0.0
Default
Audit
Allowed
Audit, Deny, Disabled
0 GA true
Azure SQL Database should have Microsoft Entra-only authentication enabled during creation abda6d70-9778-44e7-84a8-06713e6db027 SQL 1.2.0 2x
1.2.0, 1.1.0
Default
Audit
Allowed
Audit, Deny, Disabled
0 GA true
Roles used No Roles used
History
Date/Time (UTC ymd) (i) Changes
2024-01-29 19:36:15 add Initiative a55e4a7e-1b9c-43ef-b4b3-642f303804d6
JSON compare n/a
JSON
api-version=2023-04-01
EPAC