Kafka's pluggable authentication layer (Simple Authentication and Security Layer). For Event Hubs, clients use SASL_SSL, picking PLAIN with a connection string or OAUTHBEARER for Microsoft Entra ID.
Also called Simple Authentication and Security Layer.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains SASL in context, with comparison tables and the common traps.
Terms in this definition
- Authentication
Checking an identity claim made by a person, device or app, for instance by asking for a password plus an extra factor. Authorisation only happens once this step has succeeded.
- Azure Event Hubs
Azure service for ingesting telemetry at high volume over HTTPS or AMQP; diagnostic settings can send data to it.
- SSL
The forerunner of TLS, whose name is still applied to TLS. Terminating TLS at a load balancer is called SSL offload, and VPN Gateway's SSTP (SSL) and OpenVPN (SSL) P2S tunnels run TLS over TCP 443.
- Connection
Resource that attaches a virtual network gateway to its peer, which may be an ExpressRoute circuit, a second VNet gateway (Vnet2Vnet) or a local network gateway over IPsec. Resetting it recovers a single tunnel and avoids rebooting the whole gateway.
- Microsoft Entra ID
Cloud identity service from Microsoft, previously named Azure AD, which provides the tenant behind Microsoft 365 and Azure.
Related terms
- SASL sealing
An LDAP setting where the SASL bind both signs and encrypts directory traffic, keeping it confidential even when TLS isn't used.