Skip to main content
Last updated on

Configure authentication to Anaplan

Beta

This feature is in Beta. Workspace admins can control access to this feature from the Previews page. See Manage Databricks previews.

This page shows how to configure Anaplan to enable authentication from Databricks for the Anaplan connector. Use the credentials retrieved from the steps on this page to create a Unity Catalog connection in Databricks.

Prerequisites​

  • An Anaplan tenant with the Audit feature enabled.
  • A user or service account that the connector authenticates as, with the Tenant Auditor role (to read the audit events API) and administrative access to read the tenant's users (for the users API).
  • A Tenant Administrator to register the CA certificate for the tenant.

Configure Anaplan​

Anaplan authenticates API clients with a CA certificate. Acquire an S/MIME certificate, register its public certificate with your tenant, then provide the certificate and its paired private key — both in PEM format — when you create the Unity Catalog connection. The connector uses them to obtain a short-lived access token automatically.

  1. Acquire a CA certificate. Obtain an S/MIME ("Client authentication") certificate from a certificate authority that Anaplan supports: either purchase one directly, or self-generate a private key and certificate signing request (CSR) with OpenSSL and submit the CSR to your CA. The certificate must be the S/MIME type so that it carries the required email-address attribute. See Acquire your CA certificate.

  2. Register the public certificate. As a Tenant Administrator, go to Administration > Security > Certificates and select Add Certificate. Upload only the public certificate in PEM format — the single block between -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----. Do not upload the private key to Anaplan; keep it to provide to Databricks. See Implement your CA certificate in API integrations.

Provide the following to create the connection:

  • Certificate (PEM): the Anaplan CA certificate registered with the tenant. Paste the full PEM block, including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.
  • Private Key (PEM): the private key paired with that certificate. Paste the full PEM block, including the -----BEGIN...----- and -----END...----- lines.

Next steps​

Create a Anaplan connection in Databricks. See Create a Anaplan connection.

On this page