diff --git a/tests/integration/test_unified_profile.py b/tests/integration/test_unified_profile.py index 1163c4e61..283120376 100644 --- a/tests/integration/test_unified_profile.py +++ b/tests/integration/test_unified_profile.py @@ -87,12 +87,6 @@ def test_spog_workspace_azure_client_secret(isolated_env): # Environment: gcp-prod-ucacct def test_spog_workspace_google_credentials(isolated_env): - # google-credentials uses a GCP ID token with target_audience=cfg.host. - # On the unified host this produces the same token for both account and workspace - # requests (identical OIDC exchange, identical audience). Account-level APIs accept - # this token, but workspace-level APIs return 401. The X-Databricks-Org-Id header - # is set correctly. This appears to be a server-side limitation on unified hosts. - pytest.skip("google-credentials ID token is rejected for workspace operations on unified hosts") env = isolated_env("ucacct") host = env("UNIFIED_HOST") account_id = env("DATABRICKS_ACCOUNT_ID")