Entra tutorial in Arc and SQL Security

Author: MikeRayMSFT

docs/includes/entra-id-tutorial.md

@@ -0,0 +1,20 @@
+---
+title: "Set up Microsoft Entra authentication for SQL Server enabled by Azure Arc"
+description: Tutorial on how to set up Microsoft Entra authentication for SQL Server enabled by Azure Arc
+author: MikeRayMSFT
+ms.author: mikeray
+ms.reviewer: vanto, randolphwest
+ms.date: 04/11/2024
+ms.service: sql
+ms.subservice: security
+ms.topic: tutorial
+monikerRange: ">=sql-server-ver16||>= sql-server-linux-ver16"
+---
+
+# Tutorial: Set up Microsoft Entra authentication for SQL Server enabled by Azure Arc
+
+[!INCLUDE [SQL Server 2022](../../includes/applies-to-version/sqlserver2022.md)]
+
+The information in this article is identical to [Tutorial: Set up Microsoft Entra authentication for SQL Server](../../relational-databases/security/authentication-access/azure-ad-authentication-sql-server-setup-tutorial.md).
+
+[!INCLUDE [entra-id-tutorial](../../includes/entra-id-tutorial.md)]

docs/relational-databases/security/authentication-access/azure-ad-authentication-sql-server-setup-tutorial.md

@@ -43,7 +43,7 @@ To allow the service to manage the certificate, add an access policy for the ser
 > [!IMPORTANT]
 > To enable service managed certificate rotation you must assign key permission **Sign** to the Arc server managed identity. If this permission is not assigned, then service managed certificate rotation is not enabled..
 
-For instructions, see [Create and assign a certificate](../../relational-databases/security/authentication-access/azure-ad-authentication-sql-server-setup-tutorial.md#create-and-assign-a-certificate).
+For instructions, see [Create and assign a certificate](entra-authentication-setup-tutorial.md#create-and-assign-a-certificate).
 
 > [!NOTE]
 > There are no specific permissions required for an application to roll its own keys. See [Application: addKey](/graph/api/application-addkey).

docs/sql-server/azure-arc/entra-authentication-setup-tutorial.md

@@ -232,9 +232,9 @@ SQL Server enabled by Azure Arc stores the certificate for Microsoft Entra ID in
 
 * [Rotate certificates](rotate-certificates.md)
 * [Microsoft Entra authentication for SQL Server](../../relational-databases/security/authentication-access/azure-ad-authentication-sql-server-overview.md).
-* [Tutorial: Set up Microsoft Entra authentication for SQL Server](../../relational-databases/security/authentication-access/azure-ad-authentication-sql-server-setup-tutorial.md)
+* [Tutorial: Set up Microsoft Entra authentication for SQL Server](entra-authentication-setup-tutorial.md)
 
-To set up Microsoft Entra ID, follow the instructions at [Tutorial: Set up Microsoft Entra authentication for SQL Server](../../relational-databases/security/authentication-access/azure-ad-authentication-sql-server-setup-tutorial.md).
+To set up Microsoft Entra ID, follow the instructions at [Tutorial: Set up Microsoft Entra authentication for SQL Server](entra-authentication-setup-tutorial.md).
 
 ### Microsoft Purview
 

docs/sql-server/azure-arc/rotate-certificates.md

@@ -10422,6 +10422,8 @@ items:
           href: sql-server/azure-arc/security-overview.md
         - name: Configure least privilege
           href: sql-server/azure-arc/configure-least-privilege.md
+        - name: Set up Entra authentication
+          href: sql-server/azure-arc/entra-authentication-setup-tutorial.md
         - name: Configure advanced data Security
           href: sql-server/azure-arc/configure-advanced-data-security.md
         - name: Certificate rotation