SparxEA SQLServer Repository MFA Authentication - ActiveDirectoryInteractive

[dwreynoldsjr]

Has anyone been able to create a connection string using: 

Authentication=ActiveDirectoryInteractive;

Our company has turned Multi-factor Authentication using Microsoft Authenticator on for everything.  Now we can get SparxEA to connect to the repository.

We were previously, successfully, using:

Authentication=ActiveDirectoryIntegrated

[Geert Bellekens]

No, couldn't make it work, so I switched to using a database user, and encrypting the shortcut file (or use PCS)

Geert

[Modesto Vega]

Has anyone been able to create a connection string using: 

Authentication=ActiveDirectoryInteractive;

Our company has turned Multi-factor Authentication using Microsoft Authenticator on for everything.  Now we can get SparxEA to connect to the repository.

We were previously, successfully, using:

Authentication=ActiveDirectoryIntegrated

Are you saying that your company has setup MFA even when connecting to databases to create, read, delete or update data?

No, couldn't make it work, so I switched to using a database user, and encrypting the shortcut file (or use PCS)

Geert

Is PCS supposed to work with MFA? I posted the same question in the PCS forum with little success.

[Geert Bellekens]

No, couldn't make it work, so I switched to using a database user, and encrypting the shortcut file (or use PCS)

Geert

Is PCS supposed to work with MFA? I posted the same question in the PCS forum with little success.

I mean that PCS uses a database user to connect to the database. Users connect to PCS using windows authentication.

Geert

[Modesto Vega]

No, couldn't make it work, so I switched to using a database user, and encrypting the shortcut file (or use PCS)

Geert

Is PCS supposed to work with MFA? I posted the same question in the PCS forum with little success.

I mean that PCS uses a database user to connect to the database. Users connect to PCS using windows authentication.

Geert

This exactly what I thought you meant. But can the connection to PCS be configured to support MFA when user connects to PCS using Windows authentication? What about WebEA?

[Geert Bellekens]

This exactly what I thought you meant. But can the connection to PCS be configured to support MFA when user connects to PCS using Windows authentication? What about WebEA?

I don't know. Our users are already logged in into windows with the correct credentials, so PCS doesn't need to log them in (or use MFA)
WebEA is a different case althogether.

Geert

[Modesto Vega]

I don't know. Our users are already logged in into windows with the correct credentials, so PCS doesn't need to log them in (or use MFA)
WebEA is a different case althogether.

Geert

It is the same for our users with some very awkward authentication exceptions that have been reported to Sparx Systems.

WebEA is the main reason for the question.

Having said that, since Microsoft implemented MFA for using desktop apps, even when logged in using the right credentials, I have noticed a dilution of the boundaries between 1) using a Windows AD account to log into a laptop attached to a domain, 2) Sparx EA (plus PCS) using that account, 3) SSO, and 4) MFA; the boundary is at times so diluted that MFA is almost always required or, to use other words, those 4 things are conflated.