question

41159982 avatar image
0 Votes"
41159982 asked SaurabhSharma-msft commented

Error logging in to Azure SQL Managed Instance using MFA from SSMS

Today when I try to login to a managed sql instance from SSMS using Universal with MFA authentication method is failing. When I press connect in SSMS the popup where I input my password comes up and I enter the password. Then a notification about a script error appears and it never proceeds to the MFA part of authentication. This means I am currently unable to login and manage the instance via SSMS.

This worked yesterday.

103352-image.png


azure-sql-database
image.png (15.3 KiB)
· 10
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @41159982,
Thanks for using Microsoft Q&A !!
Are you the only one facing this issue. Has anyone else tried connecting using MFA ? Can you try with any other UPNs in current environment ? Also, can you try to login from any other machine.

Thanks
Saurabh

0 Votes 0 ·
41159982 avatar image 41159982 SaurabhSharma-msft ·

Hi Saurabh,
Thank you for your reply.
I am the only one in my company using the Azure SQL Managed Instance, so I cannot ask anyone else here or try with another UPN. I have tried logging in from two different machines, one running SSMS 15.0.18384.0 and the other one running SSMS 15.0.18369.0 - both same error with 'includes' method not being supported.
If you think it likely this could be something with the user principal I can ask our admin to set up a test account tomorrow.
For a little more context I can tell you that I can successfully log in from Azure Data Studio using the same account. I can also log into the Azure portal and to this site here. I can also log in to the instance in SSMS using a service account which is set up with regular password authentication (that account does only has read access so it cannot be used as a workaround). So the problem seems to be confined to the Universal with MFA authentication method
/Nicolai

0 Votes 0 ·

Hi @41159982,

Thanks for the clarifications and I was about to ask about Azure Data Studio and I see this works for you. I am checking internally with the products team on the same and get back to you if I get any updates by today. Meanwhile please share your results using another test account once you are done with that tomorrow.

Thanks
Saurabh

0 Votes 0 ·
Show more comments

I am seeing this exact behavior in my organization as well. One user is getting the script error and another user (using the same computer) can sign into SSMS successfully. Both users are MFA enabled. The user experiencing the error was able to sign into SSMS last week just fine.

0 Votes 0 ·

I am getting the same error ("ConvergedSA_Core") from yesterday onwards. And I am the only one having the issue after yesterday's company's Windows Update push.

0 Votes 0 ·

Hi @dowshirley-9813 @satyarao-6059, @nicolailassesen-3872,

I am still following up with the products team to get more information on this issue. I will update you back.

Thanks
Saurabh

2 Votes 2 ·

Hi @dowshirley-9813 @satyarao-6059, @41159982,

Is 15.0.18369.0 is a build number or SSMS version ?
104393-image.png

It looks like your SSMS versions are old. Could you please try it using the latest SSMS 18.9.1 version?

See Download SQL Server Management Studio (SSMS) - SQL Server Management Studio (SSMS) | Microsoft Docs

0 Votes 0 ·
image.png (98.6 KiB)
Show more comments

1 Answer

pk-3383 avatar image
1 Vote"
pk-3383 answered SaurabhSharma-msft commented

Same problem. Started working after re-registering MFA:104769-microsoftteams-image.png



· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for sharing @pk-3383
Hi @dowshirley-9813 @satyarao-6059, @41159982,
Can you guys please check if re-registering resolves issue for you ?

Thanks
Saurabh

0 Votes 0 ·

@SaurabhSharma-msft yes, that resolved my issue. Thanks

1 Vote 1 ·

@SatyaRao-6059 Thanks for the confirmation.

0 Votes 0 ·
41159982 avatar image 41159982 SaurabhSharma-msft ·

As far as I recall re-registering requires setting the Authenticator up all over again, which is quite cumbersome if you have a lot of stuff attached to it, so I'll skip this.

For now I have a work-around for the issue by not requiring two-factor for my account

1 Vote 1 ·

@41159982 sure, thanks.

0 Votes 0 ·