CloudBeaver - Pass Entra ID OIDC token into Athena connection string

[jwrightz]

AWS released an Athena JDBC driver that supports Trusted Identity Propagation.

Is it possible to pass the OIDC token used to log in to CloudBeaver, which I have integrated with Microsoft Entra ID, into the Athena connection string or driver property?

[dariamarutkina]

Hello, @jwrightz !

Could you please let us know if you are using the Community Edition or the Enterprise/Pro version?

[jwrightz]

Hi, @dariamarutkina

I'm using the CloudBeaver AWS Server version 25.2.0.202509081004

[dariamarutkina]

Thank you for your reply! 🙏

Please contact our support team:

• If you already have an account, create a ticket here: https://dbeaver.com/profile/_username_/tickets
• If you don’t have an account, please use this form: https://dbeaver.com/support/

[jwrightz]

Thanks @dariamarutkina. I've reached out to the support team.

As additional context, I've read the following documentation which describes using Athena with Trusted Identity Propagation with DBeaver. https://docs.aws.amazon.com/athena/latest/ug/using-trusted-identity-propagation-setup.html#using-trusted-identity-propagation-step6

The documentation provides an example connection string: jdbc:athena://Workgroup=;Region=;OutputLocation=;CredentialsProvider=JWT_TIP;ApplicationRoleArn=;WorkgroupArn=;JwtRoleSessionName=JDBC_TIP_SESSION;JwtWebIdentityToken=;

My question is specific to the last parameter: JwtWebIdentityToken=. Is it possible to pass the token used to sign into CloudBeaver into that connection string?