|
2 | 2 | title: Disable local authentication with Azure Service Bus
|
3 | 3 | description: This article explains how to disable local or Shared Access Signature key authentication for a Service Bus namespace.
|
4 | 4 | ms.topic: how-to
|
5 |
| -ms.date: 02/01/2022 |
| 5 | +ms.date: 07/25/2024 |
| 6 | +#customer intent: As a developer or IT adminstrator, I want to know how to disable shared access key authentication and use only the Microsoft Entra ID authentication for higher security. |
6 | 7 | ---
|
7 | 8 |
|
8 | 9 | # Disable local or shared access key authentication with Azure Service Bus
|
9 |
| -There are two ways to authenticate to Azure Service Bus resources: Microsoft Entra ID and Shared Access Signatures (SAS). Microsoft Entra ID provides superior security and ease of use over shared access signatures (SAS). With Microsoft Entra ID, there’s no need to store the tokens in your code and risk potential security vulnerabilities. We recommend that you use Microsoft Entra ID with your Azure Service Bus applications when possible. |
| 10 | +There are two ways to authenticate to Azure Service Bus resources: |
10 | 11 |
|
11 |
| -This article explains how to disable SAS key authentication and use only Microsoft Entra ID for authentication. |
| 12 | +- Microsoft Entra ID |
| 13 | +- Shared Access Signatures (SAS) |
| 14 | + |
| 15 | +Microsoft Entra ID provides superior security and ease of use over shared access signatures (SAS). With Microsoft Entra ID, there’s no need to store the tokens in your code and risk potential security vulnerabilities. We recommend that you use Microsoft Entra ID with your Azure Service Bus applications when possible. |
| 16 | + |
| 17 | +This article explains how to disable SAS key authentication (or local authentication) and use only Microsoft Entra ID for authentication. |
12 | 18 |
|
13 | 19 | ## Use portal to disable local auth
|
14 | 20 | In this section, you learn how to use the Azure portal to disable local authentication.
|
15 | 21 |
|
16 | 22 | 1. Navigate to your Service Bus namespace in the [Azure portal](https://portal.azure.com).
|
17 | 23 | 1. In the **Essentials** section of the **Overview** page, select **Enabled**, for **Local Authentication**.
|
18 | 24 |
|
19 |
| - :::image type="content" source="./media/disable-local-authentication/portal-overview-enabled.png" alt-text="Image showing the Overview page of a Service Bus namespace with Local Authentication set to Enabled."::: |
| 25 | + :::image type="content" source="./media/disable-local-authentication/portal-overview-enabled.png" alt-text="Screenshot that shows the Overview page of a Service Bus namespace with Local Authentication set to Enabled." lightbox="./media/disable-local-authentication/portal-overview-enabled.png"::: |
20 | 26 | 1. On the **Local Authentication** page, select **Disabled**, and select **OK**.
|
21 | 27 |
|
22 |
| - :::image type="content" source="./media/disable-local-authentication/select-disabled.png" alt-text="Disable location."::: |
| 28 | + :::image type="content" source="./media/disable-local-authentication/select-disabled.png" alt-text="Screenshot that shows the selection of Disabled option on the Local Authentication page."::: |
23 | 29 |
|
24 | 30 | ## Use Resource Manager template to disable local auth
|
25 | 31 | You can disable local authentication for a Service Bus namespace by setting `disableLocalAuth` property to `true` as shown in the following Azure Resource Manager template.
|
@@ -69,11 +75,11 @@ You can disable local authentication for a Service Bus namespace by setting `dis
|
69 | 75 | ```
|
70 | 76 |
|
71 | 77 | ## Azure policy
|
72 |
| -You can assign the [disable local auth](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fcfb11c26-f069-4c14-8e36-56c394dae5af) Azure policy to an Azure subscription or a resource group to enforce disabling of local authentication for all Service Bus namespaces in the subscription or the resource group. |
| 78 | +You can assign the [disable local auth](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fcfb11c26-f069-4c14-8e36-56c394dae5af) Azure policy to an Azure subscription or a resource group to enforce disabling of local authentication for all Service Bus namespaces in the subscription or the resource group. |
73 | 79 |
|
74 |
| -:::image type="content" source="./media/disable-local-authentication/azure-policy.png" alt-text="Azure policy to disable location authentication."::: |
| 80 | +:::image type="content" source="./media/disable-local-authentication/azure-policy.png" alt-text="Azure policy to disable location authentication." lightbox="./media/disable-local-authentication/azure-policy.png"::: |
75 | 81 |
|
76 |
| -## Next steps |
| 82 | +## Related content |
77 | 83 | See the following to learn about Microsoft Entra ID and SAS authentication.
|
78 | 84 |
|
79 | 85 | - [Authentication with SAS](service-bus-sas.md)
|
|
0 commit comments