Configure OAuth U2M for GitHub ingestion

Beta

This feature is in Beta. Workspace admins can control access to this feature from the Previews page. See Manage Databricks previews.

This page describes how to configure OAuth user-to-machine (U2M) authentication for GitHub ingestion into Databricks.

Prerequisites

To ingest from GitHub, you must have the following:

• A GitHub account with access to the organization you want to ingest data from.
• Permission to create OAuth Apps in your GitHub account's developer settings.

Configure a GitHub OAuth app

1. Sign in to your GitHub account.

2. In the upper-right corner of any page, click your profile photo to open the user navigation menu.

3. Click Settings.

4. Click Developer settings.

5. In the OAuth Apps section, click New OAuth App.

6. Enter a memorable application name in the Application name field.

7. In the Homepage URL field, enter your Databricks instance's primary URL. For example, https://my-databricks-account.cloud.databricks.com. Optionally, enter an application description.

8. Set the authorization callback URL to the following:

   https://<your_workspace_domain>/login/oauth/lakehousefederation.html

   For example:

   https://my-databricks-account.cloud.databricks.com/login/oauth/lakehousefederation.html

9. Click Register Application. This takes you to the application's details page.

10. Note the Client ID. You need it when you create your Unity Catalog connection.

11. Click Generate a new client secret to generate a client secret for your application.

12. Note the generated Client Secret. This value is displayed only once.

Next steps

An admin can now use Catalog Explorer to create a connection so that non-admins can create pipelines.