URL Format

The URL you configure for Windows or Kerberos authentication requires specific formats, depending on the chosen method.

Windows Authentication

jdbc:sqlserver://[serverName[\instanceName][:portNumber];integratedSecurity=true;

Note

Windows authentication can be done with an MSA. For more information, refer to Using a Managed Service Account as a Service Account for Test Connection.

Kerberos Authentication

The URL format for Kerberos authentication varies depending on the configuration of your system.

  • IdentityIQ on Windows is in the same domain as Microsoft SQL Server; Microsoft SQL Server is on Ubuntu Linux; or IdentityIQ is running in the context of the domain user:

    jdbc:sqlserver://<Ubuntu host>:1433;integratedSecurity=true;

  • IdentityIQ on Linux is in the same domain as Microsoft SQL Server; Microsoft SQL Server is on Ubuntu Linux; or IdentityIQ is running in the context of the domain user:

    jdbc:sqlserver://<Ubuntu host>:1433;integratedSecurity=true;authenticationScheme=javaKerberos;

  • IdentityIQ on Linux is in the same domain as Microsoft SQL Server; Microsoft SQL Server is on Windows; or IdentityIQ is running in the context of the domain user:

    jdbc:sqlserver://<Windows host>:1433;integratedSecurity=true;authenticationScheme=javaKerberos;

Refer to the following items when configuring your URLs:

  • jdbc:sqlserver:// – (Required) Known as the sub-protocol and is constant

  • serverName – The address of the server to which to connect. This could be a DNS, IP address, localhost, or 127.0.0.1 for the local computer.

  • instanceName – The instance to connect to serverName.

  • portNumber – The port to connect to serverName. The default is 1433.

  • integratedSecurity – The current Windows account credentials used for authentication.

  • authenticationScheme – Used for integrated authentication using Kerberos in addition to the integratedSecurity connection property.

For example:

jdbc:sqlserver://PUWSQLSERVER.SQLKERB.LAB;databaseName=master;trustServerCertificate=true;integratedSecurity=true;authenticationScheme=JavaKerberos;