How to use Windows Auth with Azure SQL Managed Instance | Data Exposed

[@sushantyadav7639]

How to setup Kerberos delegation for Double-Hop scenarios?

[@WyattBest]

Where in the video do you discuss double-hop scenarios? I can't find information on how to set up Kerberos delegation to a linked server.

[@WyattBest]

After more research, I think this is currently not possible.

[@Ch_Aditya]

Thank you very much for the great session Sravani and MSD team 🤗

[@MohamadRafiqShaikh]

Domain controller need to open port with Azure AD end point. is there any risk for exposing token over internet

[@sushmakuruva7082]

Are there any group policy requirements on the client making a connection to the managed instance?

[@todddukeshier7169]

Seems like this video assumes certain AD steps are already in place and doesn’t step through them.

[@chrissmillie619]

Will this work directly with Azure AD without having to syncronize AD and Azure AD when using Modern Interactive Flow? A handful of new user accounts were directly created within Azure AD.

[@MsPo79]

Hi Sravani, I was wondering whether you also performed an offline migration with DMS for the logins to SQL MI or did you transfer logins with the help of the stored procedures "sp_hexadecimal" and "sp_help_revlogin" like decribed in KBs 918992/246133 ? I presume that a remapping of the users to a login from external provider (aad) is not necessary in that case, right?

[@theguru0]

How do we GRANT permissions to windows auth users. Surely they aren't all allowed to connect by default right?

[@WyattBest]

I think the windows user must have an account in the SQL instance under Security in order to connect.