Versions Compared

Old Version 4

changes.mady.by.user Ciprian LUCACI

Saved on

compared with

New Version Current

changes.mady.by.user Ciprian LUCACI

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Info

This article describes the authentication flow for a user (Angela) that signs in to Lakehouse Monitor Optimizer (LHMLHO) using Active Directory (AD) enabled credentials and accesses Databricks Workspaces.

Image RemovedImage Added

Angela opens the browser and navigates to LHM login page (B1). Open Upen opening the linkLHO login page, she is presented with the “Login with Active Directory” screen.

...

Once Angela successfully authenticated herself using Microsoft's OAuth2 protocol (requests diagram here), at the end of B2 step LHM LHO will have an access token to use on-behalf-of Angela to access the Databricks resources (B3 and B4).

Active Directory’s App Registration is used to configure which user groups are allowed to perform Active Directory Authentication and perform Single-Sign-On in Lakehouse MonitorOptimizer.

Also Active Directory’s Graph is used to define LHM LHO Roles to be used within the Lakehouse Monitor Optimizer application.

For more details, please refer to the following related articles: