Specifies the principal ID used to authenticate against the Azure Key Vault. This property is used only when Always Encrypted is enabled (ColumnEncryption=Enabled | ResultsetOnly) and Azure Key Vault is the keystore provider. The Azure Key Vault stores the column master key used for Always Encrypted functionality. To access the column master key from the Azure Key Vault, the principal ID and Client Secret must be provided.
Valid Values
principal_id
where:
principal_id
is the Application ID created during Azure App Registration and used to authenticate against the Azure Key Vault.
Notes
To specify the Client Secret, use the AEKeystoreClientSecret connection property.
The driver currently supports only Azure App Registration as the principal ID.
This property is used only when the Azure Key Vault is specified as the keystore provider by column metadata or in statement parameters.
To specify the Client Secret, use the AEKeystoreClientSecret connection property.