Skip to main content

FAQ: Masking (KBA4130)



KBA# 4130

How to configure the Masking Connector with an AD account?


The example below is how to use Active Directory (AD) on MS SQL Server. AD Accounts can be used on other databases as well. 



Do not use Basic Connector and don't use the format: "<DomainName>\<UserName>".

MS SQL Server

To use an Active Directory (AD) account on MS SQL Server follow these steps:

  1. Ensure a regular local SQLserver user, eg. "delphixmasking" shows as SQLserver authentication under SSMS and successfully tests with Delphix connector.
  2. On Windows SSMS: Check the AD account permissions:
    • Will need to add access to the specific DB desired.
    • The default MSSQL jtds JDBC connector string needs to add the domain=AD (use your DomainName) parameter.
  3. On Masking Engine: Configure a Masking Connector using Advanced option.
    • Use the advanced connector to be able to pass this parameter; sample string looks like: 
    • jdbc:jtds:sqlserver://;domain=AD

Related Articles: 

How to edit masked field/column?

To change the masked field/column, use the Edit icon (green pen). Depending on the change do the following:  

  1. Changing unmasked > masked:
    • Click the Edit icon (green pen).
    • Select Domain - and if needed alter the Algorithm
    • Click Save.
  2. Changing masked - alter Domain/Algorithm:
    • Click the Edit icon (green pen).
    • Select and alter Domain* - alternatively alter the Algorithm
    • Click Save.
  3. Changing masked > unmasked:
    • Click the Edit icon (green pen).
    • Click Domain and set this to Choose Domain.
    • Click Save.


To change and define Domains go to Settings > Domain in the UI.  

Related Articles