Azure AD authentication with PostgreSQL Flexible Servers

on YouTube ↗27m

" summary

Azure Database for PostgreSQL Flexible Server now accepts Azure AD JWTs instead of passwords, so role mapping uses functions like pgaadauth_create_principal and tokens are passed as the psql password; demo uses Az CLI, jq and psql and shows a VM using a managed identity to fetch tokens from the metadata endpoint (resource rdbms-aad.database.windows.net). Group roles work but may trigger MS Graph calls (≈100 ms), built-in PgBouncer is supported while third‑party PgBouncer is not.

AI-written summary · about

" chapters (5)

1. 0:00Introduction
2. 2:12What is Azure AD & how does it work with Flexible Server?
3. 6:45Connect to Azure AD with Flexible Server
4. 12:37Connect as Application & Impersonate as User
5. 20:02Use Azure AD Groups & Advanced roles

" related talks

• 29mFortifying Azure Database for PostgreSQL: Stop Intrusions in Their TracksJohannes Schuetzner · POSETTE: An Event for Postgres 2025
• 32mWhat makes Azure Database for PostgreSQL Great for Developers?VARUN DHAWAN · POSETTE: An Event for Postgres 2024
• 33mFirst Experiences with Azure Database for PostgreSQL Flexible ServerJohannes Schuetzner · Citus Con: An Event for Postgres 2022
• 25mWhat’s New with Azure Database for PostgreSQL- Flexible ServerVARUN DHAWAN · POSETTE: An Event for Postgres 2025
• 29mCloud database authentication and authorization with OCI IAM and Azure ADAlan Williams · Oracle CloudWorld 2022
• 57mDeveloping powerful and intelligent apps using the Azure managed PostgreSQL serviceSunil Kamath · PostgresOpen Silicon Valley 2017
• 56mSeamless Migration to Azure Database for PostgreSQLJean Joseph · Postgres Conference Orlando 2025
• 26mWhat Enterprises like about Azure Database for PostgreSQL - Flexible ServerKanchan Bharati · POSETTE: An Event for Postgres 2024