We have an ABP.IO multi-tenant application configured as database-per-tenant (each tenant has an isolated Azure SQL database).
We want to avoid SQL username/password in tenant connection strings and instead connect to Azure SQL using Microsoft Entra ID authentication with a Service Principal (Client ID + Client Secret or Certificate).
What we need from ABP support
- Recommended ABP approach to implement tenant-specific database connections using Entra ID Service Principal authentication.
- Where to integrate this in ABP:
- Should we override/implement
IConnectionStringResolver(or another ABP extension point) to resolve per-tenant connection settings? - What is the recommended place to inject an access token / configure the underlying SQL connection for Entra ID (e.g., during
DbContextconfiguration / connection creation)?
- Should we override/implement
- If ABP has an official or preferred pattern for this scenario, please share:
- Docs / sample project
- or a minimal code snippet showing the correct integration point for Azure SQL + Entra ID Service Principal in a multi-tenant, database-per-tenant setup.
3 Answer(s)
-
0
hi
ABP will use
MultiTenantConnectionStringResolverto get the connection string for the current tenant when a new EF Core DbContext is created.https://github.com/abpframework/abp/blob/dev/framework/src/Volo.Abp.MultiTenancy/Volo/Abp/MultiTenancy/MultiTenantConnectionStringResolver.cs#L12 https://github.com/abpframework/abp/blob/dev/framework/src/Volo.Abp.Data/Volo/Abp/Data/DefaultConnectionStringResolver.cs
So overriding the
IConnectionStringResolveris the correct way.connect to Azure SQL using Microsoft Entra ID authentication with a Service Principal (Client ID + Client Secret or Certificate).
Can you share some demo code for using it with DbContext? I will share the solution.
Thanks
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
Hello,
I don't have a demo solution because we're in the analysis phase and haven't implemented anything yet. I've created a ticket to ask if it's feasible to connect to the database this way, and if there are any design limitations in the framework.
Thank you very much.
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
