1# Azure SQL Recipe
2 
3SQL change tracking trigger with Entra ID managed identity authentication.
4 
5## Template Selection
6 
7Resource filter: `sql`  
8Discover templates via MCP or CDN manifest where `resource == "sql"` and `language` matches user request.
9 
10## Troubleshooting
11 
12### SQL Trigger Not Firing
13 
14**Cause:** Change tracking not enabled on the target table.  
15**Solution:** Run these T-SQL commands on your database:
16 
17```sql
18ALTER DATABASE [YourDatabase] SET CHANGE_TRACKING = ON;
19ALTER TABLE [dbo].[ToDo] ENABLE CHANGE_TRACKING;
20```
21 
22### "Login failed" or "Unauthorized" Errors
23 
24**Cause:** Missing managed identity authentication or SQL access not granted.  
25**Solution:** Set the SQL connection string with managed identity authentication:
26 
27```
28Server=tcp:<server>.database.windows.net,1433;Database=<database>;Authentication=Active Directory Default;Encrypt=True;TrustServerCertificate=False;
29```
30 
31For user-assigned managed identity, add `User Id=<ClientId>`:
32 
33```
34Server=tcp:<server>.database.windows.net,1433;Database=<database>;Authentication=Active Directory Default;User Id=<ClientId>;Encrypt=True;TrustServerCertificate=False;
35```
36 
37Also run post-deploy T-SQL to grant the function app data access:
38 
39```sql
40CREATE USER [<function-app-name>] FROM EXTERNAL PROVIDER;
41ALTER ROLE db_datareader ADD MEMBER [<function-app-name>];
42ALTER ROLE db_datawriter ADD MEMBER [<function-app-name>];
43```
44 
45See [SQL managed identity](https://learn.microsoft.com/en-us/azure/azure-functions/functions-identity-access-azure-sql-with-managed-identity) for identity-based config — refer to the **"Configure the function app"** section for connection string and identity settings.
46 
47## Eval
48 
49| Path | Description |
50|------|-------------|
51| [eval/summary.md](eval/summary.md) | Evaluation summary |
52| [eval/python.md](eval/python.md) | Python evaluation results |
53