Merge pull request #87187 from gholliday/eventhub-kafka-sasauth

Clarify in docs that Event Hubs for Kafka does not support SAS token authentication

Author: ktoliver

articles/event-hubs/apache-kafka-frequently-asked-questions.yml

@@ -38,6 +38,13 @@ sections:
           - They fully distinct from Event Hubs consumer groups. You **don't** need to use '$Default', nor do you need to worry about Kafka clients interfering with AMQP workloads.
           - They aren't viewable in the Azure portal. Consumer group info is accessible via Kafka APIs.
           
+      - question: |
+          Does Azure Event Hubs for Apache Kafka support shared access signature token authentication?
+        answer: |
+          Authenticating by using [OAuth 2.0 and shared access signature](event-hubs-for-kafka-ecosystem-overview.md#security-and-authentication) is supported.
+          
+          Shared access signature tokens are [generated](authenticate-shared-access-signature.md#generate-a-shared-access-signature-token) by using an authorization rule and one of its signing keys. This is not supported when using the Event Hubs for Apache Kafka endpoint.
+
 additionalContent: |
 
   ## Next steps

articles/event-hubs/event-hubs-for-kafka-ecosystem-overview.md

@@ -79,6 +79,8 @@ sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule require
 > [!NOTE]
 > When using SAS authentication with Kafka clients, established connections aren't disconnected when the SAS key is regenerated. 
 
+> [!NOTE]
+> [Generated shared access signature tokens](authenticate-shared-access-signature.md#generate-a-shared-access-signature-token) are not supported when using the Event Hubs for Apache Kafka endpoint.
 
 #### Samples 
 For a **tutorial** with step-by-step instructions to create an event hub and access it using SAS or OAuth, see [Quickstart: Data streaming with Event Hubs using the Kafka protocol](event-hubs-quickstart-kafka-enabled-event-hubs.md).