We are doing a good bit of work on Azure using a lot of QF profiles, WFs, custom scripts and C# code that implements a good bit of r/w to SQL.  We use the SQL connection strings with everything which works fine.  The challenge we are beginning to face is MS want to use MFA for service accounts and there does not appear to be a way to do this either through the API or the QF interfaces.  Does the future roadmap hold anything in store for this sort of preferred log in?