Connecting to Heroku postgresql from Azure Data Factory

Hi Vamsi,

Thank you for posting your query on Microsoft Q&A!

Here’s are some steps to troubleshooting and resolving this issue:

1. Understand the Certificate Files

You have:root.crt, postgresql.crt ,postgresql.key These are used for SSL client authentication to Heroku PostgreSQL.

2. Place Certificates on SHIR VM

• Choose a secure folder on the SHIR VM, e.g.:

    C:\ADF\certs\ 
  

• Place all three files there:

C:\ADF\certs\root.crt 
C:\ADF\certs\postgresql.crt 
C:\ADF\certs\postgresql.key 

Ensure:

• The SHIR service account has read access to this folder.
• The files are not blocked by Windows Defender or antivirus.

3. Configure PostgreSQL Linked Service in ADF

ADF’s PostgreSQL connector doesn’t expose direct fields for SSL certs in the UI, so you must use Advanced settings via JSON:

Go to:

• ADF > Manage > Linked Services > PostgreSQL >Edit JSON

Add these properties:

{
  "type": "PostgreSql",
  "typeProperties": {
    "connectionString": "Host=your-host;Port=5432;Database=your-db;Username=your-user;Password=your-password;SSL Mode=VerifyFull;Trust Server Certificate=false;
Root Certificate=C:\\ADF\\certs\\root.crt;
Client Certificate=C:\\ADF\\certs\\postgresql.crt;
Client Key=C:\\ADF\\certs\\postgresql.key"
  },
  "connectVia": {
    "referenceName": "your-shir-name",
    "type": "IntegrationRuntimeReference"
  }
}

Reference:

• https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/security-tls#configure-ssl-on-the-client
• https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-connect-data-factory?tabs=data-factory%2Cfrom-azure-subscription%2Cservice-principal-certificate

1. What specific error message are you receiving when you attempt to connect from ADF?
2. Can you confirm which ADF connector version are you using is it V 1.0 or V2.0?

Thansk!

Kalyani

Hi @Anonymous , I am facing an issue like authentication type is missing , and can I please know how can I check if I have access to the certificates in shir , and can I please know if the read access was required for the personal individual user account or to the creds which are part of postgresql user name and the postgresql is not in azure and it is in AWS , Thanks