Strategy One

Integrate Strategy with Microsoft Entra ID OIDC Single Sign-on for SQL Server

Prerequisites

  • Set up Entra ID authentication. For more information, see SQL Server Microsoft Entra ID Authentication Setup.

  • Create an Azure app and note the Client ID, Client Secret, and Directory/Tenant ID. You must also have access to at least one Azure account.

  • Strategy version Strategy One (February 2026) or later

Create a Data Source Using OIDC Single Sign-On Authentication Mode

  1. Open the Workstation window.

  2. Connect to an environment.

  3. Create an IAM object using Manage OAuth Enterprise Security with Identity and Access Management (IAM) Objects.

  4. In the Navigation pane, click , next to Data Sources.

  5. Search for and choose Microsoft SQL Server from the data source list.

  6. In the Default Database Connection drop-down list , click Add New Database Connection.

  7. Type a Name.

  8. In the Driver drop-down list, choose the SQL Server ODBC or JDBC driver.

  9. Type a Server Name, Port Number, and Database.

  10. In the Authentication Mode drop-down list in the Basic tab, choose OIDC Single Sign-On.

  11. In the Authentication Service drop-down list, choose the authentication service you created above or click Add New Authentication Service.

    For more information on creating Identity and Access Management objects, see Manage OAuth Enterprise Security with Identity and Access Management (IAM) Objects.

    Parameters such as Client ID, Client Secret, Directory (tenant) ID, and Scope can be found in SQL Server Microsoft Entra ID Authentication Setup.

  12. In Scope, enter https://database.windows.net/user_impersonation.

  13. Click Save.

  14. In the Add Data Source dialog, enter a Name and Database Version, and choose Projects for further data manipulation.

  15. Click Save.

Create and Map Users to Azure Entra ID

  1. Open the Workstation window.
  2. In the Navigation pane, click Environments.
  3. Log in to your environment with administrator privileges.
  4. In the Navigation pane, click Users and Groups.
  5. Click next to All Users.
  6. In Account and Credentials, enter values in Full Name, Email Address, Username, and other optional fields.

  7. In the left pane, click Privileges and add the following privileges:

    • Access data from Databases, Google BigQuery, BigData, OLAP, BI tools
    • Create and edit database instances and connections
    • Create and edit database logins
    • Create configuration objects
    • Create dataset in Workstation
    • Configure project data source
    • Monitor Database Connections
    • Use Workstation
  1. In the left pane, click Authentication.
  2. Enter the user's email address in Trusted Authenticated Requires User ID.
  3. Click Save.

Configure OIDC

For more information, see Enable OIDC Authentication for Strategy Library.

  1. Open Workstation and connect to your environment using standard authentication and administrator credentials.

  2. Right-click the connected environment and choose Configure Enterprise Security > Configure OIDC.

  3. In Step 2: Select an identity provider, choose Azure from the drop-down list.

  4. Copy the Library Web URI, Workstation URI, Hyper Mobile URI, and Library Mobile URI into the web and mobile application's sign-in redirect URIs in the Microsoft Entra ID application you created.

  5. In the Microsoft Entra ID left pane, click Manifest under Manage.

  6. Click Download.

  7. In Strategy Workstation, upload the manifest file in Strategy Configuration.

  8. Click Save.

  9. Restart the web server.

Single Sign-On with OIDC

  1. Open the Workstation window.

  2. Connect to an environment.

  3. Right-click the environment and choose Edit > Environment.

  4. Select Default OIDC and click Continue.

  5. A browser displays. Log in using your Microsoft Entra ID credentials.

  6. Use a Strategy Administrator account to assign privileges to the new user.

    You do not need to perform this step if you mapped a Strategy user to an Entra ID account and granted privileges.

  7. In the Navigation pane, click , next to Datasets.

  8. Choose a Project and select Data Import Cube.

  9. Click OK.

  10. Choose the data source you created.

    The namespaces and tables display.