CNAME records for westus.pl-auth.azuredatabricks.net for multiple Azure databricks workspace usign custom DNS

Question

How to set up CNAME records for multiple Azure Databricks workspaces for Azure Active Directory OAuth flow reply URL, using Custom DNS and my databricks workspaces has backend private endpoint configured but not browser authentication private endpoints.

Name:  westeurope-c2.pl-auth

value: workspace1.privatelink.azuredatabricks.net

Name: westeurope-c2.pl-auth

value: workspace2.privatelink.azuredatabricks.net

As CNAME records cannot contain the same name, how to set this up?

Answer 1

@Gaikwad, Ashwini Welcome to Microsoft Q&A forum and thanks for reaching out here.

After going through the below documentation my understanding is that when an organization has multiple workspaces, Databricks recommends having one workspace (a private web auth workspace that you create in the same region as your Azure Databricks workspaces) for the AAD, whose purpose is no other than authentication. Its only purpose is hosting the browser authentication private endpoint connection from a specific transit VNet to your actual production Azure Databricks workspaces in that region.

It is important to understand that a properly configured network configuration is exactly one browser authentication private endpoint for each Azure Databricks region for each private DNS zone. The browser authentication private endpoint configures private web authentication for all Private Link workspaces in the region that share the same private DNS zone.

As you are using Custom DNS, I would highly encourage you to please reach out to your Azure Databricks representative for a detailed discussion about the implementation.

Source article: Enable Azure Private Link as a standard deployment

Hope this info helps.

Thank you