SSRS and Azure SQL

Question

If I have an on-premise SSRS instance on the same domain as my Azure AD, can I configure SSRS to connect to Azure SQL and pass through credentials so that I can determine (at the database) who has logged in and is running the report (for row level security)?

In other words, can I connect from SSRS to Azure SQL as you would using SSMS AD universal or integrated authentication to flow credentials?

Answer 1

You can, if you have the following:

• SSRS 2016 or later
• The Active Directory Authentication Library for SQL Server (ADALSQL) (https://www.microsoft.com/en-us/download/details.aspx?id=48742) installed on the report server
• ADFS to federate across on-premises AD and Azure AD
• Kerberos Constrained Delegation (KCD) configured from the report server to the ADFS server

Then you can configure the report/data source to authenticate to Azure SQL Database "as the user viewing the report" and the other components should do the rest.