This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 5%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAC%3C/text%3E%3C/svg%3E)
When trying to create user accounts that use Azure login in Azure Arc, we receive the error shown in the user's image. How can we resolve this issue?
What error message do you get? If you intended to include a screenshot that did not happen.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 43%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
@AJ Copeland - Thanks for reaching out to us. Please provide more details or the error you are receiving, so we can take a look and investigate further. thank you
Just noticing my screenshot didn't upload. After an update I'm getting a better error but yet to find a solution online - Command 'CREATE USER FROM EXTERNAL PROVIDER' is not supported as Azure Active Directory is not configured for this instance.
@AJ Copeland Just checking in to see if the below answer helped. If this answers your query, do click "Accept as Answer" and click "Yes" for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
As the error message says, you need enable AAD authentication. Or Entra authentication as it is called these days.
This tutorial should set you straight.
thanks, seems your link points back to this page.
I'm awfully sorry! This should be the right one: https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/azure-ad-authentication-sql-server-setup-tutorial?view=sql-server-ver16
thanks for the updated link, seems my issue is around setting the admin. I continue to get an "exception occurred while downloading AAD certificate". Everything else in the documentation is valid.
It was a while since I did this myself. At which point do you get the error about downloading the certificate?
AJ Copeland - Please share more details as requested above, so we can investigate this further. thank you
I'm just now getting back to this, I've deleted everything and tried again. I'm getting the same error, the only issue with the above doc is the "access policy" section as the resource is required to use RBAC. Are there specific RBAC permissions needed for this?
Thanks
So you are saying that Access policies do not work at all now? I am not surprised. The docs needs to be updated, I guess.
I know when I played with this last summer, I just looked at the docs and said to myself and said "Access policies, eh?" and went with RBAC. I don't know recall exactly which permissions I used, but I was able to figure it out from the documentation and get it working. Unfortunately, I don't have the time or connection to make a research right now.