AspNetCore.Docs/aspnetcore/includes/managed-identities-conn-strings.md

author	ms.author	ms.date	ms.topic
tdykstra	tdykstra	10/16/2024	include

[!WARNING] This article shows the use of connection strings. With a local database the user doesn't have to be authenticated, but in production, connection strings sometimes include a password to authenticate. A resource owner password credential (ROPC) is a security risk that should be avoided in production databases. Production apps should use the most secure authentication flow available. For more information on authentication for apps deployed to test or production environments, see Secure authentication flows.