Authenticate with SSO to query data and view samples
When a connection admin has enabled bring-your-own-credentials (BYOC) SSO for a data source, you sign in with your own SSO credentials instead of using a shared Atlan service account. This means your individual permissions in the source apply: you can only query or preview data you have access to in that system.
The one-time sign-in is the same for both Insights (querying) and asset profile sample data (previewing). Once authenticated, Atlan stores your token and reuses it for both flows until it expires or you log out.
Connections using BYOC SSO show a small icon next to them in the connection list. If a connection doesn't show this icon, it uses Atlan's default shared credentials and no per-user authentication is needed.
Prerequisites
- You have data access to the asset you want to query or preview.
- Your connection admin has enabled BYOC SSO for the connection. Supported sources: Amazon Redshift, Google BigQuery, Snowflake, and Databricks.
- You have active credentials for the source's identity provider.
Authenticate in Insights (to run queries)
Select your connector below.
- Amazon Redshift
- Google BigQuery
- Snowflake
- Databricks
-
In Atlan, click Insights from the left menu.
-
Under the Explorer tab, select the Amazon Redshift connection.
-
In the Set up SSO authentication for Redshift dialog, click Get started.
-
Enter your Okta Username and Password. Authentication is preset to Okta.
-
Click Test Authentication to confirm connectivity, then click Done.
You can now run queries using your Okta credentials.
-
In Atlan, click Insights from the left menu.
-
Under the Explorer tab, select the Google BigQuery connection.
-
An Authorizing dialog opens and redirects you to sign in with Google. Click Authorize.
-
Close the Authorizing dialog after success.
You can now run queries using your Google credentials.
-
In Atlan, click Insights from the left menu.
-
Under the Explorer tab, select the Snowflake connection.
-
An Authorizing dialog opens. Complete the Snowflake OAuth authorization, then close the dialog.
-
(Optional) Click the Editor context tab to change your role or warehouse:
- Role: click Select role and pick a Snowflake role assigned to you. If none is selected, Atlan uses the default
PUBLICrole. - Warehouse: click Select warehouse to change warehouses.
- Role: click Select role and pick a Snowflake role assigned to you. If none is selected, Atlan uses the default
You can now run queries using your Snowflake OAuth credentials.
-
In Atlan, click Insights from the left menu.
-
Under the Explorer tab, select the Databricks connection.
-
For a cross-workspace Databricks connection, click Login and pick the workspace you want to use.
-
An Authorizing dialog opens and redirects you to sign in with Databricks. Click Authorize, then close the dialog after success.
-
Required: Click the Editor context tab in the upper right, and under Warehouse, pick a warehouse. Without a warehouse selected, Atlan cannot connect to the source.
You can now run queries using your Databricks credentials.
Authenticate from asset profiles (to preview sample data)
Use this flow to preview up to 100 rows of sample data on an asset's profile page.
-
Open the asset profile and click Sample data.
-
In the setup dialog, click Get started.
-
Complete the authentication for your connector:
- Amazon Redshift
- Google BigQuery
- Snowflake
- Databricks
Enter your Okta Username and Password, click Test Authentication, then click Done.
Click Authorize on the Google sign-in screen and complete the OAuth flow.
Complete the Snowflake OAuth authorization in the redirect.
Sign in with Databricks and click Authorize. For cross-workspace connections, pick the workspace first.
- Close the dialog after success. You can now preview sample data on this asset's profile.
If your Atlan admin has enabled sample data download, you can export the preview as a CSV from the same view.
Remove your SSO credentials
To sign out of a connection and clear your stored credentials:
From Insights:
- Click Insights from the left menu and select the connection.
- Click the Editor context tab in the upper right.
- Hover over the timestamp and click Log out.
- Click Log out again to confirm.
From an asset profile:
- Open the asset and click Sample data.
- At the bottom of the sample data view, hover over the timestamp and click Log out.
- Confirm the log out.
Need help?
If authentication fails or queries return permission errors, see Connector-specific SSO authentication troubleshooting. Contact Atlan Support if the issue persists.
See also
- Set up authentication: The workspace-level SSO setup admins do before users can authenticate per connection.
- Query data in Insights: What to do once your SSO is set up.
- Query without shared credentials: The admin-side configuration that enables this per-user flow.
- Provide credentials to query data: If you cannot use SSO, supply credentials manually.