Service Accounts Authentication for Data Sources
This feature lets you access data sources using service account identities propagated from both native and external identity providers (IdPs).
Use this feature when you need to access data through a non-interactive authentication flow without compromising security. With service accounts, you can securely connect to data sources without using individual user credentials — making it especially useful for recurring, automated processes and scheduled runs.
Supported Data Sources
You can use service account authentication with the following data sources:
Adobe Analytics
Box
Databricks
Dataverse
Denodo
Dynamics 365
Exact Online
HubSpot
Marketo
NetSuite
Qlik Cloud
QuickBooks Online
REST API
ServiceNow
SharePoint
SharePoint Files
Snowflake
Synapse
Workday
Zoho CRM
Setting Up a Connection
The following instructions show you how to configure a connection with service account–based authentication.
As a workspace admin
Log in to your account, select your account icon, and choose Workspace admin.
Go to OAuth clients and select New.
Configure your OAuth client:
Name – enter a descriptive name for the client.
Technology – select the data sources for which the OAuth client will be used.
Grant type – select Client Credentials.
Client ID / Client secret – provide the client ID and client secret from your Identity Provider.
Client secret expiration – set the expiration date for the client secret.
Token URL – enter the token endpoint URL for the OAuth client.
Scopes – specify the API access scopes exposed by the OAuth client.
Select Create to save the client.
Assign access by selecting the user(s) and/or group(s), then select Assign.
As a workspace user
Log in to your account and go to Data.
To create a new connection, select New Connection and choose the desired technology (see the list of supported data sources).
Configure the connection by entering the required details.
Under Credential Type, select OAuth 2.0.
Locate the OAuth 2.0 client that your admin configured, then select Test connection to validate it.
Select Create to save the connection.