Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Azure Databricks offers managed OAuth flows for select API tool providers. You don't need to register your own OAuth app or manage credentials. Azure Databricks recommends Managed OAuth for development and testing. If production use cases require generating custom OAuth credentials, see the providers' documentation for more information.
Requirements
Create a Unity Catalog HTTP connection with the OAuth User to Machine Per User auth type, and select your provider from the OAuth Provider drop-down menu. For detailed steps, see Create a connection to the external service.
Services with managed OAuth support
The following integrations use OAuth credentials that Azure Databricks manages and stores securely in the backend.
| Provider | Configuration notes | Supported scopes | Description |
|---|---|---|---|
| Google Drive API | None | https://www.googleapis.com/auth/drive.readonly https://www.googleapis.com/auth/documents.readonly https://www.googleapis.com/auth/spreadsheets.readonly https://www.googleapis.com/auth/drive.file offline_access |
Read access to Google Drive files, including Google Docs and Google Sheets, plus write access to files the app creates or opens. |
| Gmail API | None | https://www.googleapis.com/auth/gmail.modify offline_access |
Read and write access to Gmail messages, threads, drafts, and labels. |
| Google Calendar API | None | https://www.googleapis.com/auth/calendar.readonly https://www.googleapis.com/auth/calendar.events offline_access |
Read access to Google Calendar calendars and free/busy information, plus read and write access to events. |
| Microsoft 365 API | None | https://graph.microsoft.com/Sites.Read.All https://graph.microsoft.com/User.Read https://graph.microsoft.com/Files.Read.All https://graph.microsoft.com/Chat.Read https://graph.microsoft.com/Channel.ReadBasic.All https://graph.microsoft.com/ChannelMessage.Read.All https://graph.microsoft.com/Mail.Read https://graph.microsoft.com/Mail.Read.Shared https://graph.microsoft.com/Calendars.Read https://graph.microsoft.com/Calendars.Read.Shared https://graph.microsoft.com/OnlineMeetingTranscript.Read.All https://graph.microsoft.com/OnlineMeetingAiInsight.Read.All https://graph.microsoft.com/OnlineMeetingArtifact.Read.All https://graph.microsoft.com/OnlineMeetingRecording.Read.All https://graph.microsoft.com/User.ReadBasic.All https://graph.microsoft.com/Team.ReadBasic.All https://graph.microsoft.com/Sites.ReadWrite.All https://graph.microsoft.com/ChatMessage.Send https://graph.microsoft.com/ChannelMessage.Send https://graph.microsoft.com/Mail.ReadWrite https://graph.microsoft.com/Calendars.ReadWrite offline_access openid profile email |
Read and write access via Microsoft Graph to SharePoint and OneDrive files, Outlook mail and calendar, and Microsoft Teams chats, channels, and meetings. |
The provider prompts each user to authorize on first use.
If needed, allowlist the following redirect URIs that managed OAuth uses:
| Cloud | Redirect URI |
|---|---|
| AWS | https://oregon.cloud.databricks.com/api/2.0/http/oauth/redirect |
| Azure | https://westus.azuredatabricks.net/api/2.0/http/oauth/redirect |
| GCP | https://us-central1.gcp.databricks.com/api/2.0/http/oauth/redirect |
For managed OAuth providers with a published MCP server, such as Glean, GitHub, Atlassian, and Slack, Azure Databricks can manage the OAuth credentials when you register the server as an MCP Service. See Managed OAuth providers.