Microsoft SQL Server Connection

Infisical supports connecting to Microsoft SQL Server using database principals.

Configure a Microsoft SQL Server Principal for Infisical

Create a Principal

Infisical recommends creating a designated server login and database user in your Microsoft SQL Server database for your connection.

-- Create login at the server level
CREATE LOGIN [infisical_app] WITH PASSWORD = 'my-password';

-- Grant server-level connect permission
GRANT CONNECT SQL TO [infisical_app];

-- If you intend to use Platform Managed Credentials (see below)
GRANT ALTER ANY LOGIN TO [infisical_app];

-- Switch to the specific database where you want to create the user
USE my_database;

-- Create the database user mapped to the login
CREATE USER [infisical_app] FOR LOGIN [infisical_app];

Grant Relevant Permissions

Depending on how you intend to use your Microsoft SQL Server connection, you’ll need to grant one or more of the following permissions.

To learn more about Microsoft SQL Server’s permission system, please visit their documentation.

For Secret Rotations, your Infisical user will require the ability to alter other logins’ passwords:

GRANT ALTER ANY LOGIN TO infisical_login;

Get Connection Details

You’ll need the following information to create your Microsoft SQL Server connection:

host - The hostname or IP address of your Microsoft SQL Server server
port - The port number your Microsoft SQL Server server is listening on (default: 1433)
database - The name of the specific database you want to connect to
username - The username of the login created in the steps above
password - The password of the login created in the steps above
sslCertificate (optional) - The SSL certificate required for connection (if configured)

If you are self-hosting Infisical and intend to connect to an internal/private IP address, be sure to set the ALLOW_INTERNAL_IP_CONNECTIONS environment variable to true.

Create Connection in Infisical

Navigate to the App Connections tab on the Organization Settings page.
Select the Microsoft SQL Server Connection option.
Select the Username & Password method option and provide the details obtained from the previous section and press Connect to Microsoft SQL Server.

Optionally, if you’d like Infisical to manage the credentials of this connection, you can enable the Platform Managed Credentials option. If enabled, Infisical will update the password of the connection on creation to prevent external access to this database role.

Your Microsoft SQL Server Connection is now available for use.

Navigate to the App Connections tab on the Organization Settings page.
Select the Microsoft SQL Server Connection option.
Select the Username & Password method option and provide the details obtained from the previous section and press Connect to Microsoft SQL Server.

Your Microsoft SQL Server Connection is now available for use.

To create a Microsoft SQL Server Connection, make an API request to the Create Microsoft SQL Server Connection API endpoint.

Optionally, if you’d like Infisical to manage the credentials of this connection, you can set the isPlatformManagedCredentials option to true. If enabled, Infisical will update the password of the connection on creation to prevent external access to this database role.

Sample request

Request
curl    --request POST \
--url https://app.infisical.com/api/v1/app-connections/mssql \
--header 'Content-Type: application/json' \
--data '{
    "name": "my-mssql-connection",
    "method": "username-and-password",
    "isPlatformManagedCredentials": true,
    "credentials": {
        "host": "123.4.5.6",
        "port": 1433,
        "database": "default",
        "username": "infisical_login",
        "password": "my-password",
        "sslEnabled": true,
        "sslRejectUnauthorized": true
    },
}'

Sample response

Response
{
    "appConnection": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "name": "my-pg-connection",
        "version": 1,
        "orgId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "createdAt": "2023-11-07T05:31:56Z",
        "updatedAt": "2023-11-07T05:31:56Z",
        "app": "mssql",
        "method": "username-and-password",
        "isPlatformManagedCredentials": true,
        "credentials": {
            "host": "123.4.5.6",
            "port": 1433,
            "database": "default",
            "username": "infisical_login",
            "sslEnabled": true,
            "sslRejectUnauthorized": true
        }
    }
}

Was this page helpful?

Suggest edits Raise issue

Humanitec Connection PostgreSQL Connection

On this page

Configure a Microsoft SQL Server Principal for Infisical
Create Connection in Infisical

Infrastructure Integrations

App Connections

Secret Syncs

Native Integrations

CI/CD Integrations

Framework Integrations

Build Tool Integrations

Others

Microsoft SQL Server Connection

Configure a Microsoft SQL Server Principal for Infisical

Create Connection in Infisical

Sample request

Sample response

Infrastructure Integrations

App Connections

Secret Syncs

Native Integrations

CI/CD Integrations

Framework Integrations

Build Tool Integrations

Others

​Configure a Microsoft SQL Server Principal for Infisical

​Create Connection in Infisical

​Sample request

​Sample response

Configure a Microsoft SQL Server Principal for Infisical

Create Connection in Infisical

Sample request

Sample response