โ04-16-2024 09:51 AM
My org uses Databricks and SSO.
We are keen to disable the use of PAT but have noticed that when it's disabled, we're not able to use SSO. May I ask why does SSO have a dependency on PATs [arguably they are two distinct authentication methods] ?
Also, when a user logs on using SSO, when we inspect Access tokens, we see "This token is created by AzureAD".
Any insight appreciated. Is this the way Databricks has worked before, or is this new behaviour ?
Thanks Paul
โ04-17-2024 07:10 AM
Hi @phguk ,
Disabling Personal Access Tokens (PATs):
SSO Configuration:
Permission Settings:
In summary, disabling PATs and relying solely on SSO involves adjusting settings, validating configurations, and ensuring proper permissions. If you encounter any challenges, consider reaching out. Keep securing those data pipelines, Paul! ๐๐
โ04-17-2024 04:55 AM
Hi @phguk, Letโs delve into the intricacies of Databricks, SSO, and personal access tokens (PATs). ๐
SSO and PATs:
โThis token is created by AzureADโ:
Historical Context:
Keep exploring the data galaxy, Paul! ๐๐
โ04-17-2024 06:42 AM
Hi @Kaniz_Fatma , thanks for responding. If we want to disable use of personal PATs and only rely on SSO authentication, how do we accomplish this ? Settings/Advanced provides the ability to disable the use of PAT but our experience suggests this breaks SSO. Might the answer be to use the Permission Settings button and just disable tokens for non-named users ?
Rgds Paul
โ04-17-2024 07:10 AM
Hi @phguk ,
Disabling Personal Access Tokens (PATs):
SSO Configuration:
Permission Settings:
In summary, disabling PATs and relying solely on SSO involves adjusting settings, validating configurations, and ensuring proper permissions. If you encounter any challenges, consider reaching out. Keep securing those data pipelines, Paul! ๐๐
Join a Regional User Group to connect with local Databricks users. Events will be happening in your city, and you wonโt want to miss the chance to attend and share knowledge.
If there isnโt a group near you, start one and help create a community that brings people together.
Request a New Group