Skip to main content

SQL_Authentication Job

The SQL_Authentication Job identifies authentication settings on targeted SQL and Azure SQL servers that allow SQL server authentication in addition to Windows authentication. Microsoft recommends that SQL and Azure SQL servers should be generally configured to utilize Windows authentication versus SQL server authentication.

Analysis Tasks for the SQL_Authentication Job​

Navigate to the Databases > SQL > 4.Configuration > SQL_Authentication > Configure node and select Analysis to view the analysis tasks.

CAUTION: Do not modify or deselect the selected analysis task(s). The analysis task(s) are preconfigured for this job.

Analysis Selection

The default analysis tasks are:

  • Determine authentication configurations – Creates the SA_SQLServer_Authentication_Details table accessible under the job’s Results node
  • Authentication Summary – Creates the SA_SQLServer_Authentication_Summary table accessible under the job’s Results node. Provides a summary of targeted servers with SQL authentication enabled.

In addition to the tables and views created by the analysis task, the SQL_Authentication Job produces the following pre-configured report.

ReportDescriptionDefault TagsReport Elements
SQL  AuthenticationThis report identifies authentication settings on the targeted servers, and highlights those with SQL Authentication enabled. Additionally, the number of SQL logins on a given instance, and whether or not the 'sa' login exists, are indicated. Best practices recommend that SQL instances be integrated login only, and that the 'sa' principal be renamed or removed.NoneThis report is comprised of two elements: - Pie Chart – Displays instances with integrated security only - Table – Displays integrated security details by instance