OIDC auth support for MongoDB connections

[bartsipes]

I work with a MongoDB cluster which does not have simple username/password auth enabled. It only supports OIDC. Are there any plans to add support for this type of connection?

Example connection string:

mongodb+srv://theRealDBname.moowh.mongodb.net/?authMechanism=MONGODB-OIDC&authSource=%24external

[sajeetharan]

Hi @bartsipes Thanks for asking the question.

Currently, MongoDB vCore does not yet support Entra ID integration with OIDC, but it's coming soon. Once the service supports it, our VS Code extension will too.

[tnaum-ms]

Hi @bartsipes, great to hear from you!

Internally, we use the Node.js driver to connect to a MongoDB instance, and from what we see, it does support OIDC. In fact, OIDC is listed as one of the enterprise authentication mechanisms here.

We’re more than happy to explore adding more authentication methods.

Out of curiosity, could you share a bit more about your use case and hosting environment? That would help us understand how best to support this scenario.

Looking forward to your insights! Feel free to reach out to me or @sajeetharan directly as well.

[bartsipes]

Hi, yes, we're using MongoDB hosted in Azure. We have migrated to use only x.509 certs which are configured for apps connecting to Mongo. And for user access, we're only using OIDC. We previously had username and password creds configured but have removed that for better security.

[tnaum-ms]

Thank you for sharing, @bartsipes! This is really helpful.

Right now, we’re focusing on a set of developer productivity features, but connectivity is just as important. We’ll evaluate the scope of this request and gauge demand as we work on the 0.27.0 release. Based on that assessment, we’ll determine how to schedule the implementation.

[tnaum-ms]

🚀 We're now tracking the item here: #2586