Register more redirect URIs for OAuth U2M

[BenDataBricks]

I am following this guide on allowing OAuth U2M for Azure Databricks.

When I get to Step 2, I make a request to account.azuredatabricks.net and specify a redirect URI to receive a code.

The redirect URI in the example is localhost:8020. If I change this to anything else (e.g. localhost:8021, localhost:8020/myfile.html) it fails with this error:

{"error_description":"redirect_uri 'http:\/\/localhost:8021' not registered for OAuth application 'databricks-cli'","error":"invalid_request"}

 I found this page about allowing other redirect URIs but it uses username and password which I do not have, because everything I do is through SSO.

Is there a way for me to add additional redirect URIs through the databricks portal?

[Kaniz_Fatma]

Hi @BenDataBricks, 

OAuth user-to-machine (U2M) authentication in Azure Databricks allows real-time human sign-in and co...¹.

To configure OAuth U2M authentication with Azure Databricks, follow these steps:

1. Environment Variables:

   • For account-level operations, set the following environment variables:
     • DATABRICKS_HOST: Set it to the value of your Azure Databricks account console URL (e.g., ²(https://accounts.azuredatabricks.net)).
     • DATABRICKS_ACCOUNT_ID: Required for Azure Databricks account operations.
   • For workspace-level operations, set the following environment variables:
     • DATABRICKS_HOST: Set it to the value of your Azure Databricks per-workspace URL (e.g., ³(https://adb-1234567890123456.7.azuredatabricks.net)).

2. Configuration Profile:

   • Create or identify an Azure Databricks configuration profile in your .databrickscfg file.
   • Set the following values in your .databrickscfg file:
     • For account-level operations (using the Azure Databricks account console URL):

       [my_profile]
       DATABRICKS_HOST = https://accounts.azuredatabricks.net
       

     • For workspace-level operations (using the per-workspace URL):

       [my_profile]
       DATABRICKS_HOST = https://adb-1234567890123456.7.azuredatabricks.net
       

3. Use the Profile:

   • Integrate the profile within your code based on the participating tool or SDK.
   • Depending on the Azure Databricks operations your code calls, you may not necessarily need to be an administrator for the Azure Databricks account.

Remember that this setup allows you to authenticate without exposing credentials, even if you’re usi...¹. You can add additional redirect URIs through the Azure Databricks portal by configuring your OAuth application settings. However, please note that the specific steps may vary based on your organization’s policies and Azure AD configuration. If you encounter any issues, consider reaching out to your Azure AD administrator for further assistance.

Feel free to explore the Azure Databricks documentation for more details on OAuth U2M authentication...¹⁴.