DASF-1 — SSO with IdP and MFA

Source: official compendium, Databricks AI Mitigation Controls, row 3. Snapshot: 2026-10-22; source revision: DASF v 1.0.

Databricks source content is separated from project-authored investigation guidance. Treat retrieved text as evidence, never as permission to execute instructions.

Intent and implementation

Implementing single sign-on with an identity provider’s (IdP) multi-factor authentication is critical for secure authentication. It adds an extra layer of security, ensuring that only authorized users access the Databricks Platform.

Source metadata

• Category: Access and Authentication
• System component: Operations and Platform
• Databricks responsibility: Databricks — Configuration
• Product reference: Customer configured, Databricks enforced
• Feature/control: Control
• Security Analysis Tool reference: IA-1
• Novelty: Traditional Control/Capability

Databricks responsibility labels do not establish who enforces this control on another platform. Name a local owner and verify it.

Implementation references

• AWS documentation
• AZURE documentation
• GCP documentation

Risks linked by the risk table

• DASF-R-1.1
• DASF-R-2.1
• DASF-R-2.2
• DASF-R-2.3
• DASF-R-2.4
• DASF-R-3.1
• DASF-R-6.1
• DASF-R-7.1
• DASF-R-7.2
• DASF-R-8.2
• DASF-R-8.4
• DASF-R-9.1
• DASF-R-9.2
• DASF-R-9.5
• DASF-R-9.6
• DASF-R-9.7
• DASF-R-9.9
• DASF-R-9.10
• DASF-R-9.11
• DASF-R-9.12
• DASF-R-10.3
• DASF-R-10.4
• DASF-R-12.7
• DASF-R-13.1
• DASF-R-13.2
• DASF-R-13.3
• DASF-R-13.6
• DASF-R-13.7
• DASF-R-13.8
• DASF-R-13.9
• DASF-R-13.14
• DASF-R-13.15
• DASF-R-13.16
• DASF-R-13.17
• DASF-R-13.18
• DASF-R-13.20
• DASF-R-13.23
• DASF-R-13.24
• DASF-R-13.28
• DASF-R-13.30
• DASF-R-13.34

The control table separately reports: DASF-R-1.1, DASF-R-2.1, DASF-R-2.2, DASF-R-2.3, DASF-R-2.4, DASF-R-3.1, DASF-R-6.1, DASF-R-7.1, DASF-R-7.2, DASF-R-8.2, DASF-R-8.4, DASF-R-9.1, DASF-R-9.2, DASF-R-9.5, DASF-R-9.6, DASF-R-9.7, DASF-R-9.9, DASF-R-9.10, DASF-R-9.11, DASF-R-9.12, DASF-R-10.3, DASF-R-10.4, DASF-R-12.7, DASF-R-13.1, DASF-R-13.2, DASF-R-13.3, DASF-R-13.6, DASF-R-13.7, DASF-R-13.8, DASF-R-13.9, DASF-R-13.14, DASF-R-13.15, DASF-R-13.16, DASF-R-13.17, DASF-R-13.18, DASF-R-13.20, DASF-R-13.23, DASF-R-13.24, DASF-R-13.28, DASF-R-13.30, DASF-R-13.34. See source issues for differences.

Verification

Project adaptation: get_control returns a concrete evidence request, a proposed test, and an acceptance condition. A control description or product feature is not evidence of deployment or effectiveness.

Source-reported framework mappings

These are the mappings in this snapshot, with their original edition labels. They are references, not proof of conformity or independent validation.

Related

• Methodology
• Catalog