This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 91%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDS%3C/text%3E%3C/svg%3E)
This works fine from another system, or if I log on to the laptop directly with my privileged account.
I need to run SSMS as my privileged account, because that's the only account that has been authorized to connect to our Azure SQL servers & databases. This requires MFA.
My laptop is running Win 11 Enterprise (10.0.0.22631), SSMS is version 19.1.56.0
SSMS Tools, options, Azure Cloud is set to use the system default browser and Web Account Manager.
When trying to connect from this laptop, i get the error below, and no MFA prompt (a webpage) ever pops up.
Any assistance is greatly appreciated.
===================================
Cannot connect to <someserver>.database.windows.net.
===================================
Unable to acquire authorization token (ConnectionDlg.AadInteractiveAuthProvider)
[snip]
Are you sure that we really need the full stack dump?
Anyway, how do you log on to your laptop? Just as a local AD user? Or may that be through Entra?
And when you run SSMS with your privileged account is that with RUNAS? I guess that is just local Windows auth, and not a proper Entra login, which I guess you need to use Entra and MFA.
Hi @Erland Sommarskog
Thank you for having a look.
Stack dump: more often than not, that's the first thing I'm asked for...
Both accounts are Entra ID accounts.
I log on to the laptop with my normal account.
Yes, SSMS is run with RUNAS, which is just local Windows authentication.
It's when I (try to) connect to the SQL srv Database engine that I choose the "Azure Active Directoy - Universal with MFA" option, and use my privileged account as login. But instead of getting the expected MFA challenge popup, I get the "Unable to acquire authorization token" error.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 37%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEN%3C/text%3E%3C/svg%3E)
Has anyone else had this error i get the same but adjusting "Use system default web browser" and "Use Web Account Manager" does not have an effect
I just needed to set "Use Web Account Manager" to false. Huge thanks for pointing us in the correct direction
I was able to get this working by turning off IPv6 in network adapters
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 85%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBK%3C/text%3E%3C/svg%3E)
This worked for me as well. I then re-enabled IPv6 and updated the adapter properties to use the IPv6 DNS servers from Cloudflare's 1.1.1.1 offering (https://developers.cloudflare.com/1.1.1.1/ip-addresses/). I guess there was something too slow about my regular DNS option or something, I really don't know.
We managed to get this working: in SSMS, Tools, Options, Azure Services, Azure Cloud, we set both "Use system default web browser" and "Use Web Account Manager" to false.
Thanks, anyway!
Great to hear that you got it sorted out!
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
1 deleted commentComments have been turned off. Learn more