How to Allow Azure AD-Authenticated Users to Interact with PostgreSQL FDW Tables through User Mapping

Question

How to Allow Azure AD-Authenticated Users to Interact with PostgreSQL FDW Tables through User Mapping

van der Stelt, Gideon 0

I am using PostgreSQL Foreign Data Wrappers (FDW) in an Azure Database for PostgreSQL - Flexible Server environment. My users authenticate to the database using Azure AD token-based authentication.

The issue arises when these users attempt to run UPDATE queries on a foreign table (using postgres_fdw). PostgreSQL requires a USER MAPPING for each user on the foreign server, which typically includes a username and password. However, since my users authenticate via Azure AD tokens, I cannot provide a static password in the user mapping.

Additionally, because this is an Azure Flexible Server instance, I do not have SUPERUSER privileges, meaning I cannot set password_required = false on the foreign server.

Users connect to the database server using PGAdmin.

Question:

How can I enable Azure AD-authenticated users who connect through PGAdmin to update foreign tables via FDW without requiring a static password in the user mapping?

Any insights would be greatly appreciated!

Sai Raghunadh M 4,575 Reputation points Microsoft External Staff Moderator

2025-04-01T18:03:52.6766667+00:00

Hi @ van der Stelt, Gideon

Greetings!!

To enable Azure AD-authenticated users to interact with PostgreSQL Foreign Data Wrappers (FDW) tables, specifically for performing UPDATE queries, you can leverage Managed Identity for authentication, as Azure AD tokens don’t rely on traditional passwords. Since you cannot use a static password for user mapping, the solution involves setting up an intermediary identity for the FDW connection.

Please go through this Documentation that might help you:

https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-connect-with-managed-identity

If this answers your query, do Upvote for was this answer helpful.
Sai Raghunadh M 4,575 Reputation points Microsoft External Staff Moderator

2025-04-02T00:34:51.0366667+00:00

Hi @ van der Stelt, Gideon

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution.

please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sai Raghunadh M 4,575 Reputation points Microsoft External Staff Moderator

2025-04-02T22:05:42.11+00:00

Hi @ van der Stelt, Gideon

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution.

please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
van der Stelt, Gideon 0 Reputation points

2026-09-14T06:18:24.89+00:00

Hi,
I was able to resolve the issue using the information you provided. Thanks!

Your answer

Sai Raghunadh M 4,575 Reputation points Microsoft External Staff Moderator

2025-04-01T18:03:52.6766667+00:00

Hi @ van der Stelt, Gideon

Greetings!!

To enable Azure AD-authenticated users to interact with PostgreSQL Foreign Data Wrappers (FDW) tables, specifically for performing UPDATE queries, you can leverage Managed Identity for authentication, as Azure AD tokens don’t rely on traditional passwords. Since you cannot use a static password for user mapping, the solution involves setting up an intermediary identity for the FDW connection.

Please go through this Documentation that might help you:

https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-connect-with-managed-identity

If this answers your query, do Upvote for was this answer helpful.
Sai Raghunadh M 4,575 Reputation points Microsoft External Staff Moderator

2025-04-02T00:34:51.0366667+00:00

Hi @ van der Stelt, Gideon

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution.

please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sai Raghunadh M 4,575 Reputation points Microsoft External Staff Moderator

2025-04-02T22:05:42.11+00:00

Hi @ van der Stelt, Gideon

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution.

please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
van der Stelt, Gideon 0 Reputation points

2026-09-14T06:18:24.89+00:00

Hi,
I was able to resolve the issue using the information you provided. Thanks!