Key pair authentication to snowflake db

[petrbocek]

Hi, Since Snowflake is phasing out username and password logins and migrating to key pair authentication, is there any way to configure this in TE3? Currently, I can't update the table schema through the defined data source in Power Query.

Thanks
Peťa

[mlonsk]

Hi @petrbocek

Good question, and thank you for drawing your attention to the phase out of username/password for Snowflake. One clarification though: key pair is only one of the accepted strong-auth methods. SSO/MFA via browser and OAuth are equally valid, and accounts using those aren't affected (as long as no local password is still set on the user).

That matters here because TE3 already supports two of those methods for Snowflake natively:

• ExternalBrowser (browser-based SSO/MFA)
• OAuth

Switching your Snowflake data source to ExternalBrowser is usually the quickest fix as it satisfies Snowflake's MFA requirement without needing key pair at all. You can set this in the connection dialog as shown above.

On key pair specifically: TE3 doesn't currently expose a key-pair option in the native Snowflake connector. If you specifically need key pair (e.g. an unattended/service identity), a potential workaround is to go through an ODBC DSN instead: configure a Snowflake ODBC DSN with AUTHENTICATOR=SNOWFLAKE_JWT and your private key, then connect TE3 via the ODBC data source path. The Snowflake ODBC driver handles the key-pair auth, and TE3 supports import/schema-update over ODBC.

If native key-pair support in the Snowflake connection dialog would be valuable for you, let us know and we can track it as a feature request. Hope this unblocks you in the meantime!

[petrbocek]

Thanks Morten for your reply. Unfortunatelly I can't use External browser option. I'm accessing snowflake in Keboola platform and via browser option i'm getting error "Keboola Connection SAML2 login not available". I will try to do it through ODBC option. However it would be greate to have it in dialog I think it could make the life easier for everybody :)

[mlonsk]

Hi @petrbocek
We have added this a request to our backlog, but I cannot at this time give an estimate of when it would be possible for us to implement the change.

[mlonsk]

Hi @petrbocek
We have started scoping this request and expect to have KeyPair Authentication in our next release.

[petrbocek]

Hi @mlonsk, splendid. Thanks a lot.