Microsoft Entra ID authentication for an application identity

Passwordless connection is an ordered procedure whose failures do not arrive in order: steps succeed while achieving nothing, and the errors name the wrong component.

Every flag below was read from the tool on 2026-09-03: Azure CLI 2.90.0, sqlcmd 1.10.0, azd 1.32.0, and the container behaviour was measured the same day. Cloud engine behaviour and message text are from Microsoft Learn, cited in references/.

What this skill owns, and what it does not

Owns the server-side identity configuration, the database user, the grant, the authentication keyword, and every failure about who the caller is. Route the rest.