JWT Authentication - Teradata Fabric

Teradata® Fabric - Installation and User Guide - 3.11

Product
Teradata Fabric
Release Number
3.11
Publication Date
August 2026
Content Type
Administration
Configuration
Installation
User Guide
Publication ID
B035-5991-086K
ft:locale
en-US
ft:lastEdition
2026-08-15
dita:mapPath
svw1780362788070.ditamap
dita:ditavalPath
ezw1784752870623.ditaval
ft:sourceId
dita
dita:id
lxg1591800469257

To authenticate with a JWT, provide a JWT bearer token in the gRPC Authorization header when connecting. The Arrow Flight SQL Connector (SERVER Execution Type) forwards the token to the Teradata Database, which uses LOGMECH=JWT to validate it.

Before using this authentication method, confirm the following:

  • Configure the Teradata Database to integrate with an Identity Provider (IdP) that can validate JWTs
  • Provide a valid JWT bearer token in the gRPC Authorization header
  • If your environment requires On-Behalf-Of (OBO) token exchange, perform the token exchange before sending the JWT to the Arrow Flight SQL Connector (SERVER Execution Type)