Assign SQL logins

People who already reach SQL Server with a user name and password sign in to the data service with the same SQL login. SQL Server checks the password itself; the service doesn't store any.

Two settings work together: you turn on SQL logins for the data source, and in the Zuordnungen (Assignments) area, on the SQL-Anmeldungen (geteilte nicht empfohlen) (SQL logins, shared ones not recommended) tab, you give a login a rule.

Before you start, whoever runs the service must have turned on the SQL login method in its configuration and restarted it. Until then, the service rejects both the data source setting and any assignment.

1. Open Datenquellen (Data sources) and select Anmeldung mit SQL-Name und Kennwort erlauben (Allow sign-in with SQL name and password) for the data source. The service checks user names and passwords only for data sources where this is selected.

2. Open Zuordnungen, tab SQL-Anmeldungen (geteilte nicht empfohlen), and add a row:

   Column	What to enter
   SQL-Anmeldung mit Kennwort (Name) (SQL login with password, name)	The name of the login in SQL Server, for example editor1, or * for any login
   Regel (Rule)	Pick a rule from the list

Result: Over HTTP, the login can reach whatever the rule allows. In the database, every statement runs under the login itself, with its own permissions.

• Secure connections only. The service accepts a user name and password only over HTTPS or from the local computer; otherwise it responds with 403 without trying the password.
• Failed attempts: After five wrong passwords for the same login and data source, or 20 from the same origin, within one minute, the service responds with 429, even if the password is correct. When you're trying things out, wait a minute.
• Shared logins aren't recommended. If several people know the same password, the service can't tell them apart. That's what database identities are for: each person signs in as themselves, and the service switches to the shared login on their behalf.
• Not for administration: You can't use the administration app with a SQL login.

• Connect a data source
• Set up sign-in with a SQL Server login (data service documentation): the method in the configuration, running without an administration store
• Reference: HTTP: sign-in (reference), section “Sign-in with a SQL Server login (HTTP Basic)” (data service documentation)