Databricks Community SSO (August 3rd, 2024)

[Sujitha]

The purpose of this FAQ document is to provide users and partners with answers to common queries or concerns related to the Databricks Community Single Sign-On process.

Why am I being asked to update my primary and recovery email?

Primary email: This should be an active email that you have access to, to receive and use Email OTP.
Recovery email: If you lose access to your primary email in the future, your profile data can be recovered using the recovery email.

What should I (user) do if I'm still unable to log in after several attempts?

Please ensure that you are using the correct email address and entering the correct OTP/Password. Additionally, we recommend using incognito mode while accessing the platform to avoid any cached data issues.

If you are still unable to log in after several attempts, please contact databricks-community@databricks.com for further assistance. There may be an issue with your account or the authentication process. 

User workflow seems to have stuck at any stage of the process

Try accessing the Community in an incognito window.

1. Ensure you are using the correct email address and entering the correct OTP/Password.
2. If the issue persists, please clear your browser cache and try again.
3. If steps 1 & 2 do not resolve the issue, restart your machine and try once more.

If you are still unable to log in after several attempts, please contact databricks-community@databricks.com for further assistance, as there may be an issue with your account or the authentication process.

Why am I not receiving the email with the OTP?

If you are not receiving the email with your OTP (One-Time Password), please follow these steps:

1. Verify Email Address: Ensure that the email address entered is correct and that you have access to this email account.
• Check Spam/Junk Folder: Sometimes, the OTP email might be mistakenly directed to your Spam or Junk folder. Please check there.
2. Retry the Login Process: After verifying the above, please retry the login process to request a new OTP.
3. Contact Databricks Support: If you are still unable to log in after several attempts, please contact databricks-community@databricks.com for further assistance. There may be an issue with your account or the authentication process.

How long is the OTP valid for?

Passwordless OTPs are valid for 5 minutes. If your OTP has expired, you will need to request a new one.

Can I use the OTP multiple times?

No, for security reasons, passwordless OTPs are intended for single use only. Each OTP can be used just once to log in. If you need to log in again, please request a new OTP.

My email OTP has expired. How can I login?

If your email OTP has expired, please request a new one and retry the login process.

Do I need to set up anything special on my device to use the passwordless login?

To use a passwordless login, you just need access to the email account associated with your Community profile. No additional device setup is required. You also have the option to configure passkey, which uses biometric authentication, but this is an optional step. If you have any further questions, please feel free to contact Databricks databricks-community@databricks.com for assistance.

What is this Passkey enrollment screen that I see when going through Email OTP?

A passkey is a digital credential that allows users to sign in to websites and apps without a password or username. Passkeys are designed to be a safer and easier alternative to passwords. Enrolling a passkey is optional, but we recommend passkey enrollment to keep your account more secure. More information can be found here.

Users can log in to Databricks Platform. But they see an error stating that ‘User account cannot be found or User account does not exist’ while using the same credentials to log in to Community.

If the customer uses enterprise SSO to log in to the Databricks platform, please contact the customer’s Databricks administrator to ensure that SSO is enabled at the account level instead of the workspace level. Instructions can be found here
Workaround: Please log in with the Email OTP workflow (The last option on the Community login screen)

I am a Databricks customer. Does anything change how I access Databricks platform account/workspace?

No, Databricks platform login remains the same. If you use your company’s enterprise SSO or have enabled Email OTP, please continue using that. This change (on Aug 3rd, 2024), is applicable to a few Databricks web resources (Databricks Academy, Partner Portal, and Help Center).

I am a Databricks customer who has enterprise SSO turned on to access Databricks platform. Does this release affect how I login to Databricks Platform with my enterprise account?

No, Databricks platform login remains the same. If you use your company’s enterprise SSO or have enabled Email OTP, please continue using that. This change (on Aug 3rd, 2024), is applicable to a few Databricks web resources (Databricks Academy, Partner Portal, and Help Center).

I am a Databricks customer and have Databricks platform credentials. Can I use the Email OTP workflow instead of the product login options?

Yes, you can log in with the Email OTP workflow (the Last option on the login screen) even if you are a customer. Product login options are made available so that customers can use their own enterprise SSO solution to log in to Databricks web resources (e.g., Customer Academy, Community, and Help Center) and enable seamless navigation from the Databricks product to the portals.

I am a Databricks customer who usually navigates to Community from the Databricks workspace. Do I have to re-authenticate to access Community?

If you are a customer, you do not need to re-authenticate to access Community.

You will be asked to re-authenticate in one of the following cases.

1. If you have enterprise SSO configured at the workspace level instead of the account level. Instructions to configure enterprise SSO in Databricks can be found here.
2. If you have a Databricks workspace session without an account-level session.

I am a Databricks customer. My existing Community profile is created with a different email address than what I use to log in to the the Databricks platform. Would I lose access to my existing profile if I log in with Databricks product credentials to Community?

We are providing an option to link your existing account to Databricks platform login when you access Community for the first time after our release on August 3rd. 

Once you successfully authenticate to Community with Databricks Platform credentials, you will be taken to a screen where you can enter the email address of the existing Community profile. So, your existing profile will be ‘linked’ to your Databricks platform 

I am a Databricks customer. When I try to access Community and go through the Databricks Platform login, I see a screen to enter my existing profile’s email. What is that?

This option can be used if the Databricks customer already has a Community profile, but the email associated with that profile is different from the email address associated with the Databricks platform. In that case, we give the user an option to ‘link’ their existing Community profile to the Databricks platform login.

I am a Databricks customer. My existing Community profile is created with a different email address than what I use to log in to the Databricks platform. I saw the screen to enter my existing profile email, but I skipped it. Now, a new profile has been created in the Community, and I have lost the data associated with my old profile. What should I do?

The ‘Linking’ option appears only when the user logs in through the Databricks SSO platform for the first time (Do not confuse this with Databricks product/platform/account/workspace login).

Please send your ticket to Databricks Community to do one of the following:

1. Re-trigger the account linking option.
2. Transfer data associated with the existing profile to the new profile.

I am a Databricks customer who uses Email OTP. Would I get 2 email OTPs?

No, typically you won’t get 2 OTPs.

 If you log in to the Databricks Platform using Email OTP, choose login with AWS or Azure (One of the top 2 options on the Help Center login page) and go through the Databricks Platform Email OTP option.

If you are logging into our SSO platform for the first time using a Databricks Platform account, we validate your email by sending an Email OTP. But this is a one-time validation. You will get only one Email OTP in the subsequent logins.