How to connect to Azure SQL Server using Azure P2S VPN client (Azure AD Authentication)

Question

How to connect to Azure SQL Server using Azure P2S VPN client (Azure AD Authentication)

Jignesh Vyas 45

Hi,

I have azure vpn client configured on my local machine. I am able to connect to vnet gateway through vpn client with azure ad authentication. Now I want to connect to azure sql server from the local machine using azure vpn client.

Is it possible?

Thanks

SSingh-MSFT 16,371 Reputation points Moderator

2023-02-15T07:56:09.49+00:00

Hi @Jignesh Vyas ,

Following up to see if the below suggestion was helpful. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
SSingh-MSFT 16,371 Reputation points Moderator

2023-02-16T08:09:43.29+00:00

Hi @Jignesh Vyas ,

Glad to know that the below response was helpful. Thank you for marking this answer as accepted. This will help others find useful answers faster.

Please feel free to take a survey on the relevant answer. You can help us improve by leaving feedback verbatim.

Have a good day!

Regards,

Shakti
Jignesh Vyas 45 Reputation points

2023-02-17T02:58:42.61+00:00

Hello @SSingh-MSFT

Can you please look at the follow up question.

Just be mindful that follow up question is about azure sql managed instance.

Thanks
SSingh-MSFT 16,371 Reputation points Moderator

2023-02-17T05:56:36.8533333+00:00

Hi @Jignesh Vyas ,

To your follow-up question of Azure SQL managed Instance, could you please let us know if you have followed all the steps mentioned in the standard documentation here: Quickstart: Configure an Azure VM to connect to Azure SQL Managed Instance.

For Login:

If following, please let us know at what step you are facing issue or any relevant information about the error you get.

Additional helpful links for reference:

Quickstart: Configure a point-to-site connection to Azure SQL Managed Instance from on-premises

Connect your application to Azure SQL Managed Instance

Configure public endpoint in Azure SQL Managed Instance

Thank you.

Accepted answer

1 additional answer

Your answer

SSingh-MSFT 16,371 Reputation points Moderator

2023-02-15T07:56:09.49+00:00

Hi @Jignesh Vyas ,

Following up to see if the below suggestion was helpful. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
SSingh-MSFT 16,371 Reputation points Moderator

2023-02-16T08:09:43.29+00:00

Hi @Jignesh Vyas ,

Glad to know that the below response was helpful. Thank you for marking this answer as accepted. This will help others find useful answers faster.

Please feel free to take a survey on the relevant answer. You can help us improve by leaving feedback verbatim.

Have a good day!

Regards,

Shakti
Jignesh Vyas 45 Reputation points

2023-02-17T02:58:42.61+00:00

Hello @SSingh-MSFT

Can you please look at the follow up question.

Just be mindful that follow up question is about azure sql managed instance.

Thanks
SSingh-MSFT 16,371 Reputation points Moderator

2023-02-17T05:56:36.8533333+00:00

Hi @Jignesh Vyas ,

To your follow-up question of Azure SQL managed Instance, could you please let us know if you have followed all the steps mentioned in the standard documentation here: Quickstart: Configure an Azure VM to connect to Azure SQL Managed Instance.

For Login:

If following, please let us know at what step you are facing issue or any relevant information about the error you get.

Additional helpful links for reference:

Quickstart: Configure a point-to-site connection to Azure SQL Managed Instance from on-premises

Connect your application to Azure SQL Managed Instance

Configure public endpoint in Azure SQL Managed Instance

Thank you.

Answer 1

Hi @Jignesh Vyas ,

Welcome to Microsoft Q&A forum and thanks for using Azure services.

As I understand from the question, want to connect to Azure SQL Server from the local machine using azure vpn client.

I suppose you have followed the documentation: Configure the Azure VPN Client - Azure AD authentication - Windows

For Azure SQL Server to be accessed from Azure P2S, could you please try below mentioned steps and let us know your results:

Navigate to "Firewalls and virtual networks" of you SQL server and make sure to set "Deny public network access" to yes.
Create an Azure private endpoint. It will create endpoint for SQL server within your virtual network and it'll be assigned a private IP from within subnet's IP range. You will use this private IP to connect to SQL server.
On your local machine, make sure you're connected to VPN and open SQL Server Management Studio:

Under "Server name" enter private IP address of Azure private endpoint created in step 2.
Under "Login" field, enter username in format "username@public_sql_server_name" (e.g. ******@my-sql-server.database.windows.net). For password, just enter your password.
Last thing to do is to click on "Options" and navigate to "Connection properties". Make sure to check "Encrypt connection" and "Trust server certificate". This is required as server's certificate is issued to "my-sql-server.database.windows.net" and you're accessing it via private IP. If this wasn't checked, management studio wouldn't trust server's certificate and would refuse connection.

Please try and let us know so that we can further check on this. Thanks.

Jignesh Vyas 45 Reputation points

2023-02-16T08:17:21.0033333+00:00

Hello @SSingh-MSFT
Thank you for your help.
I created dns private resolver to resolve private endpoint for sql db. It is working fine and I can login to sql db using azuer ad authentication instead of sql authentication.

However, I took same approach for Sql managed instance (e.g. dns private resolver) and it didnt work. Then I used your suggested approach in which I cant login in the format "username@public_sql_server_name" (e.g. ******@my-sql-server.database.windows.net).

just so you know, I do have private endpoint in place and azure vpn successfully configured.

I get this error.
Connor Watson 0 Reputation points

2025-06-12T16:23:18.0733333+00:00

THIS comment is the answer!

I followed the MS documentation to a T, but nowhere did it say that you have to use these special connection parameters.

Answer 2

Assuming you have already created a private endpoint connection for your azure SQL Server and you have a working Virtual Network Gateway all within the same Virtual Network then follow the steps below to connect to your sql server using an Azure P2S VPN.

You need to first create an Azure DNS Private Resolver
1. Has to also be in the same Virtual Network as your Private Endpoint and VNet Gateway
  1. Create a inbound endpoint(You will need to create a new subnet to hold this)
    1. Skip outbound endpoints and ruleset
      1. Create the resource
Once the Azure Private Resolver has been created go to the resource and click on 'Inbound Endpoints' and then copy the Private IP Address from the 'IP Address' column
Go to the virtual network that all of these resources are in and click on 'DNS Servers' and then select custom and then paste in the Private IP Address you copied from the Inbound Endpoint and then click save.

You should be good to go now. Connect to your VPN and do an nslookup on your_sqlserver_name.database.windows.net and make sure the Private Endpoint private ip address shows up.

Share via

How to connect to Azure SQL Server using Azure P2S VPN client (Azure AD Authentication)

1 additional answer

Your answer