Azure Databricks Enterprise Application User Impersonation Token Group Claims Issue

ahsan_aj
Contributor II

‎09-26-2024 09:08 AM - edited ‎09-26-2024 09:10 AM

Hi all,

 
I am using the Azure Databricks Microsoft Managed Enterprise Application scope (2ff814a6-3304-4ab8-85cb-cd0e6f879c1d/user_impersonation) to fetch an access token on behalf of a user. The authentication process is successful; however, the access token includes group claims. For users who are part of many Azure AD groups, the token becomes quite large because it lists all the groups in the claims. How can I modify my request for the token to exclude group claims from the access token?
 
I am using the React MSAL library, and here’s a sample of the code I am working with:

 

export const getDatabricksToken = async () => {
    const account = msalInstance.getActiveAccount();
    const response = await msalInstance.acquireTokenSilent({
        scopes: ["2ff814a6-3304-4ab8-85cb-cd0e6f879c1d/user_impersonation"],
        account: account,
    })
    return response.accessToken
};

 

0 Kudos