Configure OAuth U2M: Databricks-managed for Microsoft SharePoint ingestion

Important

This feature is in Beta. Workspace admins can control access to this feature from the Previews page. See Manage Azure Databricks previews.

This page describes how to configure OAuth U2M: Databricks-managed authentication for Microsoft SharePoint ingestion into Azure Databricks. With this method, Azure Databricks manages the OAuth app registration and token refresh automatically. No Azure app registration is required.

Tip

This is the recommended authentication method for most users. If your organization requires control over the OAuth application registration, see OAuth U2M: Custom-managed instead.

Prerequisites

• A Azure Databricks workspace with Unity Catalog enabled.
• The CREATE CONNECTION privilege on the metastore.

Create the connection

1. In the Azure Databricks workspace, click Catalog > Create > Create a connection.
2. On the Connection basics page of the Set up connection wizard, specify a unique Connection name.
3. In the Connection type drop-down menu, select Microsoft SharePoint.
4. In the Auth type drop-down menu, select OAuth U2M: Databricks-managed.
5. Click Next.
6. On the Authentication page, enter the following:
   • Domain: The SharePoint instance URL in the following format: https://MYINSTANCE.sharepoint.com
   • Tenant ID: Your Microsoft Entra ID tenant ID.
7. Click Sign in.
8. In the sign-in window, choose the account you want to authenticate with and complete the sign-in flow.
9. Click Create connection.

Warning

Only share this connection with other Azure Databricks users if you authenticated with a service account in the previous step. If you authenticated with a personal account, do not share the connection. Sharing a personal-account connection grants other users access to your personal account's credentials and data.

Next steps

1. Ingest data from SharePoint
2. Common pipeline maintenance tasks