Azure AD to Databricks: Setup SCIM Provisioning

0:00hello my name is Yousef and in today's video I will show you how to push identities from Azure active directory to databricks and first of all you need to make sure that you have access to the account console and that you have the proper permission in Azure active directory to login into

0:25the account console we need to make sure that you have access to the accounts.azurdatabricks.net of course I will have over here I already have my workspace or this setup my meta store is already there of course only I'm only only user over here so what I will do I'll go to settings and click on setup user provisioning and I'll copy the

0:49scheme token and of course the scheme the account scheme URL and I'll need to go to Azure click on Azure active directory go to Enterprise applications click on new application then look for databricks once I'm here I need to create my

1:13Azure databricks scheme provisioning connector and then I need to set up or to copy the uh the URL and the uh the token that has been created so let's just wait a few seconds yes and then I need to go to

1:36provisioning get started I mean I can either choose manual or automatic so I'll choose automatic here I'll copy the secret token and I will grab of course the account scheme URL I will test the connection

1:58and once it's good I'll save it everything is saved now I'll go back again to up yeah now I'll go to users and groups and over here I can add like the users I

2:20can select the users what's also the groups who will be uh pushed to database so over here I'll choose Ali iuf Lauren Quinton yes scene I'll select them of course I can also select the groups but I don't have groups because I I don't have the right active directory plan level but that's only for the demo purpose

2:42I'll assign them and of course they are now assigned and now what I need to do I will go to provision and here I can start the provisioning of course that if I go to the details you will see that it will go and pop up or try to update this

3:04every uh every 14 minutes which means if I have a new user it will be pushed to the account after uh let's say 40 each 40 minutes so now you see that it's completed like I did sync all my uh all my users or the four users I do have if I go back to the

3:26accounts console and click on user management you'll see now I have those users over here and then like now I can either for example go I can click for example on yes scene and make sure to enable for example the access to the account console or or not