References → OAuth Configurations

Overview

Incorta supports OAuth 2.0 authentication for securely connecting to a variety of providers—both as data sources and data destinations—including Google Drive, OneDrive, Box, Dropbox, and Snowflake.
OAuth configuration steps on the provider’s side may differ, so it’s important to consult each provider’s documentation for accurate implementation guidance.

Prerequisites and requirements

• Secured communication
• Redirect URI/Callback URL
• OAuth configurations in Incorta

Secured communication

OAuth 2.0 requires your Incorta Cluster to use HTTPS for secure data exchange.

• Incorta Cloud clusters natively support HTTPS.
• For On-Premises deployments, refer to Security → HTTPS for Apache Tomcat with OpenSSL to configure HTTPS using Let’s Encrypt, Certbot, and OpenSSL.

Redirect URI/Callback URL

On the provider’s side، you must define a Redirect URI (or Callback URL). This URI determines where users are redirected after authentication.

The valid Redirect URI varies based on the cluster deployment type—Cloud or On-Premises—and the provider type—data source or data destination.

For data sources

• Incorta Cloud: https://cloud.incorta.com/api/gdrive
• Otherwise, for example, On-Premises clusters: https://<CLUSTER_URL>:<PORT_NO>/incorta/service/datasource/oauthRedirect
  Replace <CLUSTER_URL> and <PORT_NO> with the actual cluster URL and port number.

For data destinations

• Incorta Cloud:
  • Google Drive, Google Sheets, and Snowflake: https://cloud.incorta.com/api/gdrive
  • OneDrive: https://cloud.incorta.com/api/destination-oauth
  • Google Cloud Storage (GCS): https://<CLUSTER_NAME>.incorta.com/incorta/bff/v1/datadestinations/oauthRedirect
    Replace <CLUSTER_NAME> with the full name of your Incorta cloud cluster.
• Otherwise, for example, On-Premises clusters: https://<CLUSTER_URL>:<PORT_NO>/incorta/bff/v1/datadestinations/oauthRedirect
  Replace <CLUSTER_URL> and <PORT_NO> with the actual cluster URL and port number.

OAuth configurations in Incorta

After configuring OAuth on the provider’s side, you must enter the OAuth credentials in Incorta:

• For most providers, enter the OAuth credentials, such as the Client ID and Client Secret, directly within the data source or data destination definition.
• For the following providers, OAuth configuration is handled via the Cluster Management Console (CMC) under Tenant Configurations > Integration:
  • Google Drive & Google Sheets (as both data source and destination)
  • Box (as a data source)
  • Dropbox (as a data source)
    Incorta Cloud Configurations

    For Incorta Cloud clusters, these configurations are predefined in the CMC. No setup on the provider’s side is required. You simply authorize access during data source or destination creation.