Create a Microsoft Entra ID connection

Beta

This feature is in Beta. To use it, a workspace admin must turn on Lakeflow Connect for Microsoft Entra ID from the Previews page. See Manage Databricks previews.

Create a Microsoft Entra ID connection in Catalog Explorer to store authentication credentials for Lakeflow Connect ingestion. Any user with the USE CONNECTION privilege on the connection can then create Microsoft Entra ID ingestion pipelines without needing direct access to the credentials.

Alternatively, admin users can create a connection and a pipeline at the same time in the data ingestion UI. See Ingest data from Microsoft Entra ID.

For privilege requirements, see Connect to managed ingestion sources.

Prerequisites

Complete the source setup. Use the credentials retrieved there to create the connection.

Create a connection

1. In the Databricks workspace, click Catalog > Create > Create a connection.
2. On the Connection basics page of the Set up connection wizard, specify a Connection name.
3. In the Connection type drop-down menu, select Microsoft Entra ID.
4. (Optional) Add a comment.
5. Click Next.
6. On the Authentication page, enter the following credentials from Configure authentication to Microsoft Entra ID:
   • Application (client) ID: Application (client) ID of your Microsoft Entra app.
   • Client Secret: Client secret of your Microsoft Entra app.
   • Directory (tenant) ID: Directory (tenant) ID of your Microsoft Entra app.
   • Microsoft Cloud Region: Microsoft cloud where your tenant is hosted.
7. Click Create connection.

Next steps

Create an ingestion pipeline.