## Authenticate with SSO to query data and view samples

URL: https://docs.atlan.com/product/integrations/identity-management/sso/how-tos/authenticate-sso-credentials-to-query-data

> Sign in with your own SSO credentials to query data in Insights and preview sample data on asset profiles. Supported for Snowflake, Databricks, Amazon Redshift, and Google BigQuery.

When a connection admin has enabled bring-your-own-credentials (BYOC) SSO for a data source, you sign in with your own SSO credentials instead of using a shared Atlan service account. This means your individual permissions in the source apply: you can only query or preview data you have access to in that system.

The one-time sign-in is the same for both **Insights** (querying) and **asset profile sample data** (previewing). Once authenticated, Atlan stores your token and reuses it for both flows until it expires or you log out.

:::info Not all connections require per-user authentication
Connections using BYOC SSO show a small icon next to them in the connection list. If a connection doesn't show this icon, it uses Atlan's default shared credentials and no per-user authentication is needed.
:::

## Prerequisites

- You have [data access](https://docs.atlan.com/llms/governance/access-control/what-are-purposes/llms.txt) to the asset you want to query or preview.
- Your connection admin has enabled BYOC SSO for the connection. Supported sources: Amazon Redshift, Google BigQuery, Snowflake, and Databricks.
- You have active credentials for the source's identity provider.

## Authenticate in Insights (to run queries)

Select your connector below.

### Amazon Redshift

1. In Atlan, click **Insights** from the left menu.

2. Under the _Explorer_ tab, select the Amazon Redshift connection.

3. In the _Set up SSO authentication for Redshift_ dialog, click **Get started**.

4. Enter your Okta **Username** and **Password**. Authentication is preset to Okta.

5. Click **Test Authentication** to confirm connectivity, then click **Done**.

You can now [run queries](https://docs.atlan.com/llms/catalog/insights/query-data/llms.txt) using your Okta credentials.

### Google BigQuery

1. In Atlan, click **Insights** from the left menu.

2. Under the _Explorer_ tab, select the Google BigQuery connection.

3. An _Authorizing_ dialog opens and redirects you to sign in with Google. Click **Authorize**.

4. Close the _Authorizing_ dialog after success.

You can now [run queries](https://docs.atlan.com/llms/catalog/insights/query-data/llms.txt) using your Google credentials.

### Snowflake

1. In Atlan, click **Insights** from the left menu.

2. Under the _Explorer_ tab, select the Snowflake connection.

3. An _Authorizing_ dialog opens. Complete the Snowflake OAuth authorization, then close the dialog.

4. (Optional) Click the **Editor context** tab to change your role or warehouse:

 - **Role:** click **Select role** and pick a Snowflake role assigned to you. If none is selected, Atlan uses the default `PUBLIC` role.
 - **Warehouse:** click **Select warehouse** to change warehouses.

You can now [run queries](https://docs.atlan.com/llms/catalog/insights/query-data/llms.txt) using your Snowflake OAuth credentials.

### Databricks

1. In Atlan, click **Insights** from the left menu.

2. Under the _Explorer_ tab, select the Databricks connection.

3. For a cross-workspace Databricks connection, click **Login** and pick the workspace you want to use.

4. An _Authorizing_ dialog opens and redirects you to sign in with Databricks. Click **Authorize**, then close the dialog after success.

5. **Required:** Click the **Editor context** tab in the upper right, and under _Warehouse_, pick a warehouse. Without a warehouse selected, Atlan cannot connect to the source.

You can now [run queries](https://docs.atlan.com/llms/catalog/insights/query-data/llms.txt) using your Databricks credentials.

## Authenticate from asset profiles (to preview sample data)

Use this flow to preview up to 100 rows of sample data on an asset's profile page.

1. Open the asset profile and click **Sample data**.

2. In the setup dialog, click **Get started**.

3. Complete the authentication for your connector:

### Amazon Redshift

Enter your Okta **Username** and **Password**, click **Test Authentication**, then click **Done**.

### Google BigQuery

Click **Authorize** on the Google sign-in screen and complete the OAuth flow.

### Snowflake

Complete the Snowflake OAuth authorization in the redirect.

### Databricks

Sign in with Databricks and click **Authorize**. For cross-workspace connections, pick the workspace first.

4. Close the dialog after success. You can now preview sample data on this asset's profile.

:::info Download sample data as CSV
If your Atlan admin has [enabled sample data download](https://docs.atlan.com/llms/governance/administration/enable-sample-data-download/llms.txt), you can export the preview as a CSV from the same view.
:::

## Remove your SSO credentials

To sign out of a connection and clear your stored credentials:

**From Insights:**

1. Click **Insights** from the left menu and select the connection.
2. Click the **Editor context** tab in the upper right.
3. Hover over the timestamp and click **Log out**.
4. Click **Log out** again to confirm.

**From an asset profile:**

1. Open the asset and click **Sample data**.
2. At the bottom of the sample data view, hover over the timestamp and click **Log out**.
3. Confirm the log out.

## Need help?

If authentication fails or queries return permission errors, see [Connector-specific SSO authentication troubleshooting](https://docs.atlan.com/llms/governance/access-control/troubleshooting-sso/llms.txt). Contact [**Atlan Support**](https://docs.atlan.com/support/submit-request) if the issue persists.

## See also

- [Set up authentication](https://docs.atlan.com/llms/governance/access-control/authentication-and-authorization/llms.txt): The workspace-level SSO setup admins do before users can authenticate per connection.
- [Query data in Insights](https://docs.atlan.com/llms/catalog/insights/query-data/llms.txt): What to do once your SSO is set up.
- [Query without shared credentials](https://docs.atlan.com/llms/governance/access-control/query-without-shared-credentials/llms.txt): The admin-side configuration that enables this per-user flow.
- [Provide credentials to query data](https://docs.atlan.com/llms/governance/access-control/provide-credentials-to-query-data/llms.txt): If you cannot use SSO, supply credentials manually.

---