Databricks automatically deletes unused OAuth client secrets after 90 days
Databricks has introduced a new security measure that automatically deletes service principal OAuth client secrets after 90 days of disuse. This change aligns with the existing policy for cleaning up unused access tokens, enhancing security by reducing the window for potential credential compromise. This affects any user or system relying on service principal OAuth secrets, who may need to generate a new secret if an old, unused one is required again.
Security (1) ›
- Automatic deletion of unused OAuth client secrets
Databricks now automatically deletes a service principal's OAuth client secret after 90 days without use. This new policy is consistent with the existing cleanup process for unused access tokens, enhancing the platform's security posture. If a deleted secret is still needed for operations, a new OAuth secret must be created.
https://docs.databricks.com/aws/en/release-notes/product/2026/september#unused-oauth-client-secrets-are-automatically-deleted-after-90-days
Related releases
- AIOps Explained: Automating IT Operations with AI, ML, and Observability Databricks Blog ·
- Databricks Genie One Skills Now Support Multiple Files and Folders Databricks Release Notes ·
- Databricks Unity Catalog Introduces Metastore-Level ABAC Policies (Beta) Databricks Release Notes ·
- Databricks and Omnigent streamline AI agent development with Nimble web search Databricks Blog ·
- databricks/databricks-sdk-go v0.181.0 Databricks Go SDK Releases ·
- Databricks Java SDK v0.156.0 Adds AI Gateway and Pipeline Enhancements Databricks Java SDK Releases ·