Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Important
This feature is in Beta. To use it, a workspace admin must turn on Lakeflow Connect for Okta from the Previews page. See Manage Azure Databricks previews.
The managed Okta connector in Lakeflow Connect ingests identity and access data from your Okta organization into Azure Databricks. This data includes users, groups, group memberships, app integrations and their assignments, devices, policies, authenticators, and administrator roles.
The connector uses the Okta Management API. To ingest Okta System Log events, use the Okta System Logs connector.
Feature availability
| Feature | Availability |
|---|---|
| UI-based pipeline authoring |  Supported |
| API-based pipeline authoring | Supported |
| Declarative Automation Bundles | Supported |
| Incremental ingestion | Supported |
| Unity Catalog governance | Supported |
| Orchestration using Lakeflow Jobs | Supported |
| API-based column selection and deselection | Supported |
| API-based row filtering |  Not supported |
| Slowly changing dimensions (SCD) type 2 | Not supported |
| Automated schema evolution: New and deleted columns | Supported |
| Automated schema evolution: Data type changes | Not supported |
| Automated schema evolution: Column renames | Not supported Requires a full refresh. |
Authentication methods
| Authentication method | Availability |
|---|---|
| OAuth user-to-machine (U2M) | Not supported |
| OAuth machine-to-machine (M2M) | Not supported |
| Basic authentication (username/password) | Not supported |
| SSWS API token | Supported An Okta API token that authenticates with the SSWS authorization scheme. |
Ingest from Okta in 3 steps
Note
Before starting, review the Azure Databricks user persona, supported interfaces, ingestion frequency, and common patterns.
- Configure Okta for ingestion (Admins): Create an Okta API token for Azure Databricks to authenticate with.
- Create a Unity Catalog connection (Admins): Create a connection in Catalog Explorer to store credentials for Azure Databricks to authenticate with Okta.
- Create an ingestion pipeline (Admins or non-admins): Select any supported interface and create a pipeline from an existing connection.