External services with managed OAuth

Databricks offers managed OAuth flows for select API tool providers. You don't need to register your own OAuth app or manage credentials. Databricks recommends Managed OAuth for development and testing. If production use cases require generating custom OAuth credentials, see the providers' documentation for more information.

Requirements

Create a Unity Catalog HTTP connection with the OAuth User to Machine Per User auth type, and select your provider from the OAuth Provider drop-down menu. For detailed steps, see Create a connection to the external service.

Services with managed OAuth support

The following integrations use OAuth credentials that Databricks manages and stores securely in the backend.

Provider	Configuration notes	Supported scopes	Description
Google Drive API	None	https://www.googleapis.com/auth/drive.readonly https://www.googleapis.com/auth/documents.readonly https://www.googleapis.com/auth/spreadsheets.readonly https://www.googleapis.com/auth/drive.file offline_access	Read access to Google Drive files, including Google Docs and Google Sheets, plus write access to files the app creates or opens.
Gmail API	None	https://www.googleapis.com/auth/gmail.modify offline_access	Read and write access to Gmail messages, threads, drafts, and labels.
Google Calendar API	None	https://www.googleapis.com/auth/calendar.readonly https://www.googleapis.com/auth/calendar.events offline_access	Read access to Google Calendar calendars and free/busy information, plus read and write access to events.
Microsoft 365 API	None	https://graph.microsoft.com/Sites.Read.All https://graph.microsoft.com/User.Read https://graph.microsoft.com/Files.Read.All https://graph.microsoft.com/Chat.Read https://graph.microsoft.com/Channel.ReadBasic.All https://graph.microsoft.com/ChannelMessage.Read.All https://graph.microsoft.com/Mail.Read https://graph.microsoft.com/Mail.Read.Shared https://graph.microsoft.com/Calendars.Read https://graph.microsoft.com/Calendars.Read.Shared https://graph.microsoft.com/OnlineMeetingTranscript.Read.All https://graph.microsoft.com/OnlineMeetingAiInsight.Read.All https://graph.microsoft.com/OnlineMeetingArtifact.Read.All https://graph.microsoft.com/OnlineMeetingRecording.Read.All https://graph.microsoft.com/User.ReadBasic.All https://graph.microsoft.com/Team.ReadBasic.All https://graph.microsoft.com/Sites.ReadWrite.All https://graph.microsoft.com/ChatMessage.Send https://graph.microsoft.com/ChannelMessage.Send https://graph.microsoft.com/Mail.ReadWrite https://graph.microsoft.com/Calendars.ReadWrite offline_access openid profile email	Read and write access via Microsoft Graph to SharePoint and OneDrive files, Outlook mail and calendar, and Microsoft Teams chats, channels, and meetings.

Provider	Configuration notes	Supported scopes	Description
Google Drive API	None	https://www.googleapis.com/auth/drive.readonly https://www.googleapis.com/auth/documents.readonly https://www.googleapis.com/auth/spreadsheets.readonly https://www.googleapis.com/auth/drive.file offline_access	Read access to Google Drive files, including Google Docs and Google Sheets, plus write access to files the app creates or opens.
Gmail API	None	https://www.googleapis.com/auth/gmail.modify offline_access	Read and write access to Gmail messages, threads, drafts, and labels.
Google Calendar API	None	https://www.googleapis.com/auth/calendar.readonly https://www.googleapis.com/auth/calendar.events offline_access	Read access to Google Calendar calendars and free/busy information, plus read and write access to events.
Microsoft 365 API	None	https://graph.microsoft.com/Sites.Read.All https://graph.microsoft.com/User.Read https://graph.microsoft.com/Files.Read.All https://graph.microsoft.com/Chat.Read https://graph.microsoft.com/Channel.ReadBasic.All https://graph.microsoft.com/ChannelMessage.Read.All https://graph.microsoft.com/Mail.Read https://graph.microsoft.com/Mail.Read.Shared https://graph.microsoft.com/Calendars.Read https://graph.microsoft.com/Calendars.Read.Shared https://graph.microsoft.com/OnlineMeetingTranscript.Read.All https://graph.microsoft.com/OnlineMeetingAiInsight.Read.All https://graph.microsoft.com/OnlineMeetingArtifact.Read.All https://graph.microsoft.com/OnlineMeetingRecording.Read.All https://graph.microsoft.com/User.ReadBasic.All https://graph.microsoft.com/Team.ReadBasic.All https://graph.microsoft.com/Sites.ReadWrite.All https://graph.microsoft.com/ChatMessage.Send https://graph.microsoft.com/ChannelMessage.Send https://graph.microsoft.com/Mail.ReadWrite https://graph.microsoft.com/Calendars.ReadWrite offline_access openid profile email	Read and write access via Microsoft Graph to SharePoint and OneDrive files, Outlook mail and calendar, and Microsoft Teams chats, channels, and meetings.

The provider prompts each user to authorize on first use.

If needed, allowlist the following redirect URIs that managed OAuth uses:

Cloud	Redirect URI
AWS	https://oregon.cloud.databricks.com/api/2.0/http/oauth/redirect
Azure	https://westus.azuredatabricks.net/api/2.0/http/oauth/redirect
GCP	https://us-central1.gcp.databricks.com/api/2.0/http/oauth/redirect

Cloud	Redirect URI
AWS	https://oregon.cloud.databricks.com/api/2.0/http/oauth/redirect
Azure	https://westus.azuredatabricks.net/api/2.0/http/oauth/redirect
GCP	https://us-central1.gcp.databricks.com/api/2.0/http/oauth/redirect

For managed OAuth providers with a published MCP server, such as Glean, GitHub, Atlassian, and Slack, Databricks can manage the OAuth credentials when you register the server as an MCP Service. See Managed OAuth providers.