I am building a desktop application that requires a SQL Database. I wish to offer clients 2 options: On Premises and Cloud database. For cloud databases I intend to use azure sql server. The requirements are:
- I wish to have some sort of "Azure DB Credentials" for clients to use, that can only access their database (which I will provide).
- I do not wish for the clients to have to install any other software to use the application.
My problem is, in testing I have run into the "IP Address not allowed to connect to server". This poses a problem:
- Clients will have many different IP addresses, therefore I cannot allow individual IP addresses.
- I do not want to open all IP Addresses due to security concerns.
As bizarre as this sounds, I cannot find a ready-to-use solution to this problem. I am a new programmer, and maybe have not googled enough... That being said, this seems like a simple problem without a simple obvious solution.
The best solution I have come up with is an embedded Open-VPN Client within the application. However, that seems unnecessarily complicated. Is there a better way?

