Why does use of Azure SSO require Databricks PAT enabled ?

[phguk]

My org uses Databricks and SSO. 

We are keen to disable the use of PAT but have noticed that when it's disabled, we're not able to use SSO. May I ask why does SSO have a dependency on PATs [arguably they are two distinct authentication methods] ?

Also, when a user logs on using SSO, when we inspect Access tokens, we see "This token is created by AzureAD". 

Any insight appreciated. Is this the way Databricks has worked before, or is this new behaviour ?

Thanks Paul

[phguk]

Hi @Retired_mod , thanks for responding.  If we want to disable use of personal PATs and only rely on SSO authentication, how do we accomplish this ? Settings/Advanced provides the ability to disable the use of PAT but our experience suggests this breaks SSO. Might the answer be to use the Permission Settings button and just disable tokens for non-named users ?

Rgds Paul