## Enable SSO for Databricks

URL: https://docs.atlan.com/apps/connectors/data-warehouses/databricks/how-tos/enable-sso-for-databricks

> Set up OAuth SSO authentication for Databricks connections in Atlan.

Enable SSO authentication for your Databricks connections in Atlan to let users securely query and preview data using their SSO credentials. This guide walks you through setting up a custom OAuth application in Databricks and configuring SSO authentication in Atlan.

## Prerequisites

Before you begin, make sure you have:
* Databricks account administrator access to create OAuth applications
* Connection admin permissions in Atlan to configure SSO settings
* The Atlan instance URL

## Create OAuth application

1. In Databricks, from the left menu, click **Settings**.
2. Under **Settings**, click **App connections**.
3. On the _App connections_ page, from the upper right, click **Add connection**.
4. In the _Add connection_ screen, enter the following details:
 - _Application Name_: Enter a meaningful name (for example, `Atlan_SSO`).
 - _Redirect URLs_: Enter your Atlan endpoint URI: `https://<your-atlan-instance>.atlan.com/api/service/oauth`
 - _Access scopes_: Select one:
 - `SQL` (minimum required)
 - `ALL APIS` (broader access)
 - _Client secret_: Select **Generate a client secret**.
 - (Optional) For _Access token TTL (in minutes)_, you can keep the default of `60`.
 - (Optional) For _Refresh token TTL (in minutes)_, you can keep the default of `10080`.
5. Click **Add** to create the application.
6. From the dialog that appears, copy the **Client ID** and **Client secret** and store them securely.
7. Once you have copied the credentials, you can close the dialog.

## Configure SSO authentication

1. In Atlan, from the left menu of any screen, click **Assets**.
2. From the _Assets_ page, click the **Connectors** filter, and from the dropdown, select **Databricks**.
3. From the pills below the search bar at the top of the screen, click **Connection**.
4. From the list of results, select a Databricks connection to enable SSO authentication.
5. From the sidebar on the right, next to _Connection settings_, click **Edit**.
6. In the _Connection settings_ dialog:
 - Under _Query access_, for _Authentication type_, click **SSO authentication** to enforce SSO credentials for querying data.
 - For _SSO authentication_, enter the following details:
 1. For _Client ID_, enter the client ID you copied from Databricks.
 2. For _Client secret_, enter the client secret you copied from Databricks.
 - Under _Display sample data_, for _Source preview_, click **SSO authentication** to enforce SSO credentials for viewing sample data.
 - If SSO authentication is enabled for querying data, the same connection details are reused for viewing sample data.
 - If a different authentication method is enabled for querying data, enter the client ID and client secret you copied from Databricks.
 - (Optional) Toggle on **Enable data policies created at source to apply for querying in Atlan** to apply any data policies and user permissions at source to querying data and viewing sample data in Atlan. If toggled on, any existing [data policies](https://docs.atlan.com/llms/governance/access-control/what-are-purposes/llms.txt) on the connection in Atlan are deactivated and creation of new data policies is disabled.
7. At the bottom right of the _Connection settings_ dialog, click **Update**.

Users can now [query data](https://docs.atlan.com/llms/governance/access-control/authenticate-sso-credentials-to-query-data/llms.txt) and [view sample data](https://docs.atlan.com/llms/governance/access-control/authenticate-sso-credentials-to-query-data/llms.txt) data in Atlan using their SSO credentials.

## Next steps

* [Crawl Databricks assets](https://docs.atlan.com/llms/connectors/databricks/crawl-databricks/llms.txt): Discover and catalog Databricks metadata in Atlan.

---