May 18, 2017 at 8:26 am
We have a rule in our organization that we can't use sql server logins and everything must be on domain accounts. We are using ColdFusion and it will only let us use one domain account for the ColdFusion services. We need to use multiple data sources in ColdFusion and they all need to be domain accounts.
I was thinking I could just use a credential in SQL Server and map it to the domain account and then have the data source in ColdFusion login to sql server with the credential but it would have all the rights and privileges of the domain account.
I got the credential created but I realized I have to map the credential to another account... therefore, I would still have to have a sql server account for ColdFusion to connect to right? Is there any way to actually login with the credential or proxy?
May 18, 2017 at 11:36 am
I thought credentials were only used for a process within SQL Server to access resources outside of SQL Server:
https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication-access/create-a-credential
Since you're already using domain accounts to log into SQL Server, I'm not sure how the credential would help you. I'm not familiar with ColdFusion specifically, but what are you expecting to be different for the data sources that you think you need separate logins?
May 18, 2017 at 12:14 pm
Yea, I had thought I could use a credential for what I wanted but yea it isn't going to work as I'm trying to do it backwards instead of how it actually works.
We need multiple logins for security purposes. Separation of permissions. One account is for public facing access and the other is for after authentication into our system.
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply