Single User Enterprise cloud connections

suiciety commented 2 months ago

I have a single user academic enterprise license and wanted to use the Cloud Explorer functions. However whenever I try to log in using my azure credentials I get a license exceeded error and can't proceed.

Is there a way to link the only account to my Azure identity to make this work or is that just a limitation of the Academic single license version?

LonwoLonwo commented 2 months ago

Hello @suiciety

Could you please provide the error text? You can find it in the log viewer.

suiciety commented 2 months ago

When trying to use the Federated login I get the following:

io.cloudbeaver.DBWebException: Failed to perform federated authentication: You exceed the limit of the active users number for your license (1) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authUpdateStatus(WebServiceAuthImpl.java:126)

So I have to log in locally, but when I do and use the Cloud explorer it can authenticate there but gives the following error:

Azure authentication is available in Azure AD session only org.jkiss.dbeaver.DBException: Azure authentication is available in Azure AD session only at com.dbeaver.net.auth.azure.AuthModelAzureCredentials.getAccessCredentials(AuthModelAzureCredentials.java:184) at com.dbeaver.net.auth.azure.AuthModelAzureCredentials.authenticateWithToken(AuthModelAzureCredentials.java:125) at com.dbeaver.cloud.azure.sql.AzureCloudSQLServerInstance.list(AzureCloudSQLServerInstance.java:51) at com.dbeaver.cloud.azure.AzureCloudExplorer.getDatabaseInstances(AzureCloudExplorer.java:57) at com.dbeaver.cloud.model.navigator.DBNCloudServiceNode.readServiceInstances(DBNCloudServiceNode.java:92) at com.dbeaver.cloud.model.navigator.DBNCloudServiceNode.getChildren(DBNCloudServiceNode.java:79) at org.jkiss.dbeaver.model.navigator.DBNUtils.getNodeChildrenFiltered(DBNUtils.java:91) at io.cloudbeaver.service.navigator.impl.WebServiceNavigator.getNavigatorNodeChildren(WebServiceNavigator.java:103) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:568)

EvgeniaBzzz commented 2 months ago

Hi @suiciety If I got it ritght, you already have one user (local auth) and trying to login with the second user (microsoft entra).

Please try to specify the Azure username (e.g., email) as admin during the initial server configuration. So you can use Azure username with password for local auth. And then configure Azure identitiy provider and login with federated provider. It will be the same user for CloudBeaver.

EvgeniaBzzz commented 1 month ago

Hi @suiciety Did you manage to log in?

suiciety commented 1 month ago

Hi, I've reset the configuration a few times and tried with both my upn and email address as the primary account but with no luck. It still errors out with the same exceeded limit message.

EvgeniaBzzz commented 1 month ago

@suiciety Please, try this:

login to the CloudBeaver with your local user;
check, that Azure provider is configured and enabled in admin panel;
on the main page of the application press Connection - Cloud connection and select Azure
try to expand Azure in Cloud explorer
- here you should see Additional auth window
login with your Azure user So there will be additional authentication that allows you to use cloud connections even if you logged in to the application as local user.

EvgeniaBzzz commented 1 week ago

Hi @suiciety Any news here?

EvgeniaBzzz commented 1 week ago

I suppose you have a summer break now :) Additional authentication should work for your case. I'm closing this issue, but feel free to reopen it if you encounter any futher difficulties.

dbeaver / cloudbeaver

Single User Enterprise cloud connections #2587