Skip to main content

Prerequisites

The AzureServicePrincipal and AzureServicePrincipalCert authentication methods require a custom OAuth application registered in Microsoft Entra ID (formerly Azure AD). If you are connecting with the AzureAD method, you can skip this section. To create and register a custom OAuth application in Entra ID, follow these steps:
1
Sign in to the Azure portal and navigate to Microsoft Entra ID > App registrations, then click New registration.
2
Enter a Name for the application.
3
Under supported account types, select Any Microsoft Entra ID tenant - Multitenant, then click Register.
4
On the application’s overview page, record the Application (client) ID and the Directory (tenant) ID. You enter these values as the OAuth Client Id and the Azure Tenant in the setup steps below.
5
Open Certificates & Secrets and add the credential for your chosen method:
  • For the AzureServicePrincipal method, select New client secret, specify a duration, and click Add. Record the secret value (shown only once); you enter it as the OAuth Client Secret.
  • For the AzureServicePrincipalCert method, select Upload certificate and upload your client certificate.
6
Open the Authentication tab and enable the Access tokens option.
7
Open API permissions and add Azure Data Catalog > Delegated permissions > user_impersonation. Save your changes, then grant admin consent if your organization requires it.

Setup Guide

Follow these steps to connect Azure Data Catalog to your Connect AI account:
1
Open the Sources page of the Connect AI navigation menu.
2
Click + Add Connection in the upper-right corner.
3
Type Azure Data Catalog into the search field, then click the data source name.
4
On the Basic Settings tab of the new connection, enter a connection name or keep the default name.
5
(Optional) Enter the Catalog Name of the catalog to connect to. The default is defaultcatalog.
6
Select an Auth Scheme and follow the relevant instructions below.

Authentication Methods

1
Enter the Azure Tenant, which is the Azure Data Catalog tenant being used to access data. Accepts either the tenant’s domain name (for example, contoso.onmicrosoft.com ) or its directory (tenant) ID.
2
Click Sign in to connect securely through OAuth. This action opens the Azure Data Catalog sign-in page in a new tab.
3
Sign in to your Azure Data Catalog account and provide the requested permissions (if applicable).
4
At the top of the Connect AI Add Connection page, click Save & Test.
  • If the connection test succeeds, a Connection successfully saved message appears, indicating that your connection has been created. The Status on the Edit Connection page also changes to Authenticated. View the data model of your successful connection in the right pane of the Edit Connection page, in the Data Model tab.
  • If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the Sign in button. Correct the errors and try again.
  • Unsuccessful connections are saved as drafts and have a Status of Not Authenticated. You can return to the connection and authenticate it later.

More Information

For more information about interactions between Connect AI and Azure Data Catalog, see this information page.