Create a Salesforce connection
Create a Salesforce connection in Catalog Explorer to store authentication credentials for Lakeflow Connect ingestion. Any user with the USE CONNECTION privilege on the connection can then create Salesforce ingestion pipelines without needing direct access to the credentials.
Alternatively, admin users can create a connection and a pipeline at the same time in the data ingestion UI. See Create an ingestion pipeline.
For privilege requirements, see Connect to managed ingestion sources.
Prerequisites
Salesforce applies usage restrictions to connected apps. The permissions in the following table are required for a successful first-time authentication. If you lack these permissions, Salesforce blocks the connection and requires an admin to install the Databricks connected app.
Condition | Required permission |
|---|---|
API Access Control is enabled. |
|
API Access Control is not enabled. |
|
For background, see Prepare for Connected App Usage Restrictions Change in the Salesforce documentation.
Create a connection
-
In the Databricks workspace, click Catalog > External locations > Connections > Create connection.
-
On the Connection basics page of the Set up connection wizard, specify a unique Connection name.
-
In the Connection type drop-down menu, select Salesforce.
-
(Optional) Add a comment.
-
Click Next.
-
If you're ingesting from a Salesforce sandbox account, set Is sandbox to
true. -
Click Sign in with Salesforce.
You're redirected to Salesforce.
-
If you're ingesting from a Salesforce sandbox, click Use Custom Domain, provide the sandbox URL, and then click Continue.
-
Enter your Salesforce credentials and click Log in. Databricks recommends logging in as a Salesforce user that's dedicated to Databricks ingestion.
importantFor security purposes, only authenticate if you clicked an OAuth 2.0 link in the Databricks UI.
-
After returning to the ingestion wizard, click Create connection.