Azure Entra SSO Error: Your user has not been registered

[lgepp11]

I have set up SSO within databricks and automatic user provisioning with Azure Entra and confirmed it is working for all users. However 1 user is presented with this when signing in. The user is in the enterprise app within Azure Entra and the user is also account admin from within the databricks user management console. the user can still login using their email and password but when going through the SSO login process the user always finishes here, even after being re-directed through the entra portal.

[Kaniz]

Hi @lgepp11 , This issue could be caused by a number of factors, such as incorrect configuration settings, network issues, or browser-related issues. To troubleshoot this issue, I recommend checking the following:

1. Ensure that the user is assigned the correct roles and permissions in both Azure Entra and Databricks.
2. Check if the user is able to sign in using SSO from a different device or browser.
3. Verify that the user’s account is correctly configured for SSO in Azure Entra and Databricks.
4. Check if there are any network issues that could be preventing the user from signing in using SSO.
5. Check if there are any browser-related issues that could be preventing the user from signing in using SSO.

If the issue persists, I recommend contacting Databricks support for further assistance.

I hope this helps!

[lgepp11]

I have gone ahead and removed the user from the Entra enterprise applications removed the user from the workspace and replaced all the ownership of that user to a service principal & service user. 

I re-added the user the the correct enterprise application and the re-enabled the user for the workspace within the databricks admin console and gave the user, account admin privileges to the workspace.

I told the user to attempt to sign in using SSO to the workspace and this is the error now.

Quick FYI. This Databricks account and workspaces were setup before SSO was seamlessly enabled for subsequent workspaces when enabled on the admin console. The SSO setup in Entra looks like 3 Applications each with their own SSO configuration.
1 Enterprise SSO App in Entra for the databricks admin console
1 Enterprise SSO App in Entra for the databricks development workspace
1 Enterprise SSO App in Entra for the databricks production workspace

This user has the correct permissions (GA) in Entra and is assigned to the enterprise applications for all 3 applications. Yet we are still facing SSO sign in issues.

Another FYI, this user we are trying to remediate is the email used to sign up for databricks admin console.