microsoft / azuredatastudio

Azure Data Studio is a data management and development tool with connectivity to popular cloud and on-premises databases. Azure Data Studio supports Windows, macOS, and Linux, with immediate capability to connect to Azure SQL and SQL Server. Browse the extension library for more database support options including MySQL, PostgreSQL, and MongoDB.
https://learn.microsoft.com/sql/azure-data-studio
MIT License
7.5k stars 882 forks source link

ADS Update Means Can't Connect Via Entra #25722

Open ctappan-hope opened 3 days ago

ctappan-hope commented 3 days ago

Type: Bug

Hello,

We have an Azure Analytics warehouse that we were able to access using Azure AD in ADS version 1.45. Versions 1.47 and after (maybe 1.46 as well) now produce this error for the same users using the "Entra" option:

Error: invalid_grant occurred when acquiring token. 135010 - [2024-07-02 17:52:26Z]: AADSTS135010: UserPrincipal doesn't have the key ID configured. Trace ID: 8658fae7-f500-44b1-984f-b35d331bad00 Correlation ID: 8fd53e14-9074-491d-b792-5436a1167be5 Timestamp: 2024-07-02 17:52:26Z - Correlation ID: 8fd53e14-9074-491d-b792-5436a1167be5 - Trace ID: 8658fae7-f500-44b1-984f-b35d331bad00

The database is accessible using SQL Server login. Nothing has been manually changed in our settings.

Azure Data Studio version: azuredatastudio 1.48.1 (8825ec21e67a34ede00e4f02a4afc692eb6cab61, 2024-06-13T21:07:19.253Z) OS version: Windows_NT x64 10.0.19045 Restricted Mode: No Preview Features: Enabled Modes:

System Info |Item|Value| |---|---| |CPUs|Intel(R) Core(TM) i7-9850H CPU @ 2.60GHz (12 x 2592)| |GPU Status|2d_canvas: enabled
canvas_oop_rasterization: enabled_on
direct_rendering_display_compositor: disabled_off_ok
gpu_compositing: enabled
multiple_raster_threads: enabled_on
opengl: enabled_on
rasterization: enabled
raw_draw: disabled_off_ok
video_decode: enabled
video_encode: enabled
vulkan: disabled_off
webgl: enabled
webgl2: enabled
webgpu: enabled| |Load (avg)|undefined| |Memory (System)|15.79GB (1.36GB free)| |Process Argv|| |Screen Reader|no| |VM|0%|
Extensions: none
mdsharpe commented 1 day ago

Also getting the same error trying to connect to regular SQL Server databases using Azure Data Studio. Entra ID auth working fine in latest SSMS.

ctappan-hope commented 1 day ago

I ended up trying to add a user from Azure Data Studio and chose my alternate login account, which is valid but doesn't have access to the database. Then I switched back to my normal account and it worked. You might be able to sign out of all your AD accounts in your browser, clear cache, etc, and it might work.

[cid:2024_hope_v_yellow_gray-150_36e7c775-ffaa-4ad5-96b2-392875f72242.png]

Chris Tappan Director of Data Applications & Management

Georgia, United States

717.224.3003

hopeinternational.orghttp://www.hopeinternational.org/?utm_source=dev%20email%20signature&utm_medium=email&utm_campaign=hope%20email%20signature Privacy policyhttps://www.hopeinternational.org/site/policies

[cid:2024dbourboundariesemailsignature_09d31231-121f-42ef-a665-3bae03e6a8db.png]https://www.hopeinternational.org/dreaming-beyond?utm_source=staff+email+signature&utm_medium=email&utm_campaign=db


From: Matt Sharpe @.> Sent: Thursday, July 4, 2024 8:06:37 AM To: microsoft/azuredatastudio @.> Cc: Chris Tappan @.>; Author @.> Subject: Re: [microsoft/azuredatastudio] ADS Update Means Can't Connect Via Entra (Issue #25722)

[external email]

Also getting the same error trying to connect to regular SQL Server databases using Azure Data Studio. Entra ID auth working fine in latest SSMS.

— Reply to this email directly, view it on GitHubhttps://github.com/microsoft/azuredatastudio/issues/25722#issuecomment-2208802120, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ARR67LPZNPH2K6K6GY3J25LZKU3E3AVCNFSM6AAAAABKIBGITOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMBYHAYDEMJSGA. You are receiving this because you authored the thread.Message ID: @.***>