Azure Synapse

Hightouch can turn Azure Synapse into a marketing, sales, success and operational engine.

Overview

Hightouch lets you pull data stored in Azure Synapse and push it to downstream destinations. Connecting Hightouch to Azure Synapse requires some setup in both platforms. In Azure Synapse, you need to configure your firewall settings.

Azure firewall setup

By default, Azure protects your Synapse data from any external IP address from connecting to your Synapse workspace. Follow these steps to add Hightouch's IP addresses to the firewall.

1. Log into your Azure Console Dashboard.
2. Click on your Synapse workspace under Resources.
3. In the left sidebar, select Security > Networking .
4. Allowlist the Hightouch IP addresses for your region.

   

5. Click the Save button in upper left corner.

Connection configuration

In Hightouch, go to the Sources overview page and click the Add source button. Select Azure Synapse and follow the steps below.

Choose authentication method

When creating an Azure synapse source, you have three options to authenticate:

• Password: Use a username and password
• Connection String: Provide the full URI Connection String
• Microsoft Service Principal: Use a Microsoft Service Principal created using Microsoft Entra ID

Choose connection type

Hightouch can connect directly to Azure Synapse over the public internet or via an SSH tunnel. Since data is encrypted in transit via TLS, a direct connection is suitable for most use cases. You may need to set up a tunnel if your Azure Synapse instance is on a private network or virtual private cloud (VPC).

Hightouch supports both standard and reverse SSH tunnels. To learn more about SSH tunneling, refer to Hightouch's tunneling documentation.

Configure your source

If connecting via Password or Microsoft Service Principal, you must first enter the following required fields into Hightouch:

• Host: The hostname or IP address of your Azure Synapse.
• Port: The port number of your Azure Synapse. The default is 1433, but yours may be different.
• Database: The name of the database in your Azure Synapse.

Optionally you can enter a Request timeout duration and whether to Trust server certification.

Password

To connect using a username and password, enter the following fields into Hightouch:

• Username: This can be your personal Azure Synapse login or a dedicated user for Hightouch.
• Password: The password for the user specified above.

Microsoft Service Principal

To connect using a Microsoft Service Principal, use the following instructions to create a new Service Principal:

1. Sign in to the Microsoft Entra admin center.
2. On the sidebar, select Identity > Applications > App registrations.
3. Select New registration.
4. Pick a name for your application and select Accounts in this organizational directory only as the supported account type.
5. Click Register.
6. Note your newly created Application (client) ID and Directory (tenant) ID.
7. Click Add a certificate or secret and then New client secret.
8. Name your client secret and select its expiration date. To maintain access to Azure Synapse, make sure to refresh your client secret prior to its expiration.
9. Note your client secret Value now as it cannot be retrieved later. It will be used to connect Hightouch to Azure Synapse.

For more detailed instructions on service principal creation, you can check out Microsoft's documentation.

Next, we need to grant the service principal access to the Azure Synapse instance:

1. Navigate to your instance with the Azure Portal
2. On the sidebar, select Access control (IAM)
3. Click Add > Add role assignments
4. Select the role you would like to assign to your service principal (Hightouch will need at least the Reader role)
5. On the next screen, select the service principal that was created above and apply the changes.

For more details, please take a look at Microsoft's documentation.

Finally, you can enter the following fields into Hightouch that were created during the above instructions:

• Tenant ID (or Directory ID)
• Client ID (or Application ID)
• Client Secret

Connection String

If connecting via Connection String, simply enter your connection string in this format: Server=server;Database=database;User Id=username;Password=password;Encrypt=boolean.

Test your connection

When setting up Azure Synapse as a source for the first time, Hightouch validates your credentials and access to your database. Once the test passes, click Continue to finish setup.

If you see the following error message, you need to update your firewall settings in your Azure Console.

Cannot open server 'hightouch-test' request by login. Client with IP address '54.196.30.169' is not allowed to access the server. To enable access, use the Windows Azure Management Portal or run sp_set_firewall_rule on the master database to create a firewall rule for this IP address or address range. It may up take up to five minutes for this change to take effect.

Next steps

Once your source configuration has passed the necessary validation, you've completed setting up Azure Synapse as a source. Next, you can set up models to define which data you want to pull from Azure Synapse.

The Azure Synapse source supports these modeling methods:

• writing a query in the SQL editor
• using the visual table selector
• leveraging existing dbt models

Tips and troubleshooting

To date, our customers haven't experienced any errors while using this source. If you run into any issues, please don't hesitate to reach out. We're here to help.