Skip to main content
A Databricks connection authenticates Infisical to your Databricks workspace using a service principal that you create for it.
This guide doesn’t configure any behavior—it just authenticates Infisical with Databricks. Once the app connection is ready, you can use it to set up integrations.

​
Step 1: Configure a service principal in Databricks

1

Open workspace settings

In Databricks, open the dropdown in the top right and select Settings.Workspace Settings Page
2

Open service principals

Under Identity & Access, select Manage in the Service Principals section.Manage Service Principals
3

Add a service principal

Select Add Service Principal, then Add New, and create a service principal for Infisical.Add Service PrincipalCreate Service Principal
4

Generate a secret

Open the new service principal, select the Secrets tab, and select Generate secret. In the dialog:
  1. Set Lifetime (days) to how long Infisical can use the secret (up to 730 days)
  2. Under Scope, select Other APIs, then use Add scope to add the scopes for the features you plan to use:
    • secrets for secret syncs
    • authentication and scim for secret rotations
  3. Select Generate, then save the Client ID and Secret for the Infisical form
Generate SecretCopy IDs
You can’t change a secret’s scopes after you generate it. To use other scopes, or before the secret expires, generate a new secret and update the connection’s Client Secret and Scopes.

​
Step 2: Create the app connection

Next, create the app connection in Infisical.
To create the connection using the API, use the Create Databricks Connection endpoint.
1
In the sidebar, select Organization Settings, then open the App Connections tab.App Connections Tab
2
Select + Add Connection and choose Databricks Connection.Select Databricks Connection
3
Select the Service Principal method, then fill out the form’s fields:
  • Name: A descriptive name for the connection.
  • Description (optional): A note for future reference.
  • Workspace URL: The URL of your Databricks workspace.
  • Client ID: The Client ID of the Databricks service principal created for Infisical.
  • Client Secret: The secret generated for that service principal.
  • Scopes (optional): The scopes you selected for that secret (leave empty if the secret has the all-apis scope or no scopes)
Then, select Connect to Databricks.Connect via Databricks service principal
Your Databricks app connection is ready to use.

​
Step 3: Configure integrations

Now that your Databricks app connection is configured, you can use it to set up the following integrations:

Databricks secret sync

Sync secrets from Infisical to a Databricks secret scope.

Databricks service principal secret rotation

Rotate the OAuth client secret of a Databricks service principal.