You need to ensure that the application calls a stored procedure that accepts a table-valued parameter