04-16-2024 09:51 AM
My org uses Databricks and SSO.
We are keen to disable the use of PAT but have noticed that when it's disabled, we're not able to use SSO. May I ask why does SSO have a dependency on PATs [arguably they are two distinct authentication methods] ?
Also, when a user logs on using SSO, when we inspect Access tokens, we see "This token is created by AzureAD".
Any insight appreciated. Is this the way Databricks has worked before, or is this new behaviour ?
Thanks Paul
04-17-2024 07:10 AM
Hi @phguk ,
Disabling Personal Access Tokens (PATs):
SSO Configuration:
Permission Settings:
In summary, disabling PATs and relying solely on SSO involves adjusting settings, validating configurations, and ensuring proper permissions. If you encounter any challenges, consider reaching out. Keep securing those data pipelines, Paul! 🔒🔍
04-17-2024 04:55 AM
Hi @phguk, Let’s delve into the intricacies of Databricks, SSO, and personal access tokens (PATs). 🚀
SSO and PATs:
“This token is created by AzureAD”:
Historical Context:
Keep exploring the data galaxy, Paul! 🌟🔍
04-17-2024 06:42 AM
Hi @Kaniz_Fatma , thanks for responding. If we want to disable use of personal PATs and only rely on SSO authentication, how do we accomplish this ? Settings/Advanced provides the ability to disable the use of PAT but our experience suggests this breaks SSO. Might the answer be to use the Permission Settings button and just disable tokens for non-named users ?
Rgds Paul
04-17-2024 07:10 AM
Hi @phguk ,
Disabling Personal Access Tokens (PATs):
SSO Configuration:
Permission Settings:
In summary, disabling PATs and relying solely on SSO involves adjusting settings, validating configurations, and ensuring proper permissions. If you encounter any challenges, consider reaching out. Keep securing those data pipelines, Paul! 🔒🔍
Excited to expand your horizons with us? Click here to Register and begin your journey to success!
Already a member? Login and join your local regional user group! If there isn’t one near you, fill out this form and we’ll create one for you to join!