Setup script in the "Always Encrypted" demo fails

Hello,

I tried to deploy the “always encrypted with secure enclave” demo, and got two errors during running the setup script

1. line 27. $userObjectId = $(Get-AzADUser -UserPrincipalName $userName).Id always return empty string, which will fail subsequent commands. Changing the code to $userObjectId = $(Get-AzADUser -SignedIn).Id works. Not sure why UserPrincipalName doesn't work for me, but at least this is not blocking.
2. line 117. $cmkSettings = New-SqlAzureKeyVaultColumnMasterKeySettings -KeyURL $key.Key.Kid -AllowEnclaveComputations fails with error like New-SqlAzureKeyVaultColumnMasterKeySettings: The given key 'AZURE_KEY_VAULT' was not present in the dictionary. The command works if we remove the -AllowEnclaveComputations option but it is not what we want.

So I could not encrypted the columns in the table.

I tried to deploy the demo in both Mac and linux, same error. I don't have a Window machine. So I couldn't use the SSMS to configure "Always encrypted". The Azure Data Studio doesn't support configuring "Always Encrypted"

Any suggestion on how to fix the second error above?

Thanks

Start with samples/features/security/always-encrypted-with-secure-enclaves/azure-sql-database/setup/setup.ps1 and reproduce the failures at lines 27 and 117 on the affected platforms. Check the referenced Az and SQL Azure Key Vault commands first; done means the setup script completes and the demo columns can be encrypted.