Entra ID Authentication Issues for SSIS Deployment in SQL Server 2022

David B Forbush 10 Reputation points
2024-10-04T21:14:32.7466667+00:00

The scenario involves two users, both configured with Entra ID and the sysadmin role for SQL Server 2022. While one user can successfully deploy SSIS projects to the target SSIS catalog, the other user encounters an error message stating: "The operation cannot be started by an account that uses SQL Server Authentication. Start the operation with an account that uses Integrated Authentication." This occurs despite selecting Microsoft Entra Interactive Authentication during the deployment process with the Integration Services Deployment Wizard in Visual Studio 2022. Both users are following the same steps. What could be causing this discrepancy?

SQL Server Integration Services
SQL Server Integration Services
A Microsoft platform for building enterprise-level data integration and data transformations solutions.
2,591 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,106 questions
0 comments No comments
{count} votes

4 answers

Sort by: Most helpful
  1. David B Forbush 10 Reputation points
    2024-10-07T20:38:06.0633333+00:00

    Resolved! Only an Entra ID administrator could properly add the user from the Entra user pool. When anyone other sysadmin account attempted to do it, it would appear to pull the user from the Entra pool, but, in reality, it was adding them as a SQL database user. @ZoeHui-MSFT , you should note this as there is literally zero documentation for this online. We can now deploy with Microsoft Entra Interactive Authentication with any account that is given sysadmin as long as that account is first added to the server by our Entra ID administrator.

    1 person found this answer helpful.
    0 comments No comments

  2. David B Forbush 10 Reputation points
    2024-10-07T21:49:46.73+00:00

    Resolved! Only an Entra ID administrator could properly add the user from the Entra user pool. When anyone other sysadmin account attempted to do it, it would appear to pull the user from the Entra pool, but, in reality, it was adding them as a SQL database user. @ZoeHui-MSFT , you should note this as there is literally zero documentation for this online. We can now deploy with Microsoft Entra Interactive Authentication with any account that is given sysadmin as long as that account is first added to the server by our Entra ID administrator.

    1 person found this answer helpful.

  3. ZoeHui-MSFT 37,596 Reputation points
    2024-10-07T03:10:12.84+00:00

    Hi @David B Forbush,

    If you're deploying to a SQL Server with the Deployment Wizard, you have to use Windows authentication; you can't use SQL Server authentication.

    If you're deploying to the logical server for your Azure SQL Database, you have to use SQL Server authentication or authenticate with Microsoft Entra ID (formerly Azure Active Directory); you can't use Windows authentication.

    Authentication methods for deployment

    Regards,

    Zoe Hui


    If the answer is helpful, please click "Accept Answer" and upvote it.


  4. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.