Skip to content

External User ID Mapping

Audience: User Admins

Content Summary: External IDs for integrations can be mapped in for Databricks, Redshift, Snowflake, and Synapse based on attributes from an external IAM system, allowing you to link an external account to the corresponding Immuta account even when usernames do not match between Immuta and the external system.

This page illustrates the steps to map external user IDs to Immuta from Databricks, Redshift, Snowflake, and Synapse from the App Settings page. Links to other tutorials for specific integrations are provided at the end of this tutorial.

Configure External User ID Mapping on App Settings Page

External IDs for integrations can be mapped in for Databricks, Redshift, Snowflake, and Synapse based on attributes from an external IAM system.

  1. Click the App Settings icon in the left sidebar and click Identity Management.

  2. After you have clicked Add IAM, define the mapping in the Profile Schema section of this.

    IAM Mapping

    Note: Mappings can also be disabled on the App Settings page, so it’s possible that not all of these fields will be available.

  3. Click Save.

  4. Test a login to ensure that the values are picked up correctly.

Manually Configure External User ID Mapping on a User's Page

For IAMs where no mapping has been defined (including Immuta's built-in IAM), the external user ID mappings can be set manually.

  1. Click the People icon and select Admin in the left sidebar, and select a user from the Users tab.
  2. Click the dropdown menu in the top right corner of the user's page.

  3. Select Change Databricks Username, Change Redshift Username, Change Snowflake Username, or Change Synapse Username in the dropdown (these options are only visible if the ID is not mapped to an IAM schema value).

  4. Complete the Username field in the modal that appears and click Save.

All external IDs are displayed on the user profile page.