You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/postgresql/flexible-server/concepts-azure-ad-authentication.md
+10-12Lines changed: 10 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -103,45 +103,43 @@ Once you've authenticated against the Active Directory, you then retrieve a toke
103
103
104
104
***What are different authentication modes available in Azure Database for PostgreSQL Flexible Server?**
105
105
106
-
Azure Database for PostgreSQL flexible server supports three modes of authentication namely
106
+
Azure Database for PostgreSQL flexible server supports three modes of authentication namely
107
+
107
108
**PostgreSQL authentication only**
108
109
**Microsoft Entra authentication only** and
109
110
**PostgreSQL and Microsoft Entra authentication**.
110
111
111
112
***Can I configure multiple Microsoft Entra administrators on my Flexible Server?**
112
113
113
-
Yes. You can configure multiple Entra administrators on your flexible server. During provisioning you can only set a single Microsoft Entra admin but once the server is created you can set as many Microsoft Entra administrators as you want by going to **Authentication** blade.
114
+
Yes. You can configure multiple Entra administrators on your flexible server. During provisioning, you can only set a single Microsoft Entra admin but once the server is created you can set as many Microsoft Entra administrators as you want by going to **Authentication** blade.
114
115
115
116
***Is Microsoft Entra administrators only a Microsoft Entra user?****
116
117
117
118
No. Microsoft Entra administrator can be a user, group, service principal or managed identity.
118
119
119
-
***Can Microsoft Entra administrator create local passwordbased users?**
120
+
***Can Microsoft Entra administrator create local password-based users?**
120
121
121
122
Unlike the PostgreSQL administrator, who can only create local password-based users, the Microsoft Entra administrator has the authority to manage both Entra users and local password-based users.
122
123
123
-
***how can i differentiate a postgresql administrator from a Microsoft Entra administrator from PostgreSQL roles?**
124
-
Microsoft
125
-
126
-
***What happens when i enable Microsoft Entra Authentication on my flexible server?**
124
+
***What happens when I enable Microsoft Entra Authentication on my flexible server?**
127
125
128
126
When Microsoft Entra Authentication is set at the server level, PGAadAuth extension gets enabled and results in a server restart.
129
127
130
-
***how do i login using Microsoft Entra Authentication?**
128
+
***How do i log in using Microsoft Entra Authentication?**
131
129
132
130
You can use client tools such as psql,pgadmin etc to login to your flexible server. Please use the Microsoft Entra ID as **User name** and use your **Entra token**as your password which is generated using azlogin.
133
131
134
-
***How do i generate my token**
135
-
Please use below steps to generate your token.
132
+
***How do I generate my token**
133
+
Please use the below steps to generate your token.
***What is the difference between group login and individual login?**
139
137
140
-
The only difference between logging in as **Microsoft Entra group member** and individual **Entra user** lies in the **Username**, while logging in as individual user you provide your individual Entra ID where as you'll utilize the group name while logging as group member.Regardless, in both scenarios, you'll employ the same individual Entra token as the password.
138
+
The only difference between logging in as **Microsoft Entra group member** and an individual **Entra user** lies in the **Username**, while logging in as an individual user you provide your individual Entra ID where whereas you'll utilize the group name while logging in as a group member.Regardless, in both scenarios, you'll employ the same individual Entra token as the password.
141
139
142
140
***What is the token lifetime**
143
141
144
-
User tokens are valid upto 1 hour where as System Assigned Managed Identity tokens are valid upto 24 hours.
142
+
User tokens are valid for up to 1 hour whereas System Assigned Managed Identity tokens are valid for up to 24 hours.
0 commit comments