This guide will walk you through how to connect to Snowflake. You may need to contact the administrator of your Snowflake account if you lack some of the credentials discussed below.

1. Open the connections page in preferences, see managing connections for more information.
2. Click the Add new Connection button at the top of the connections page.
3. Select Snowflake from the list.
4. Give a Connection name for your own internal reference.
5. Select authentication type. If using OAuth, see below for details.
6. Your Snowflake Account is whatever comes before snowflakecomputing.com when you sign into Snowflake directly.
7. For Warehouse, in your Snowflake account, click Warehouses, and choose your desired warehouse under the column Warehouse Name.
8. To find your Database, in your Snowflake account, click Databases, and look in the Database column.
9. If using Username/Password, for Username and Password, enter the same credentials as you would enter when logging into your Snowflake account.
10. Toggle connection type for direct or cloud.
11. Share the connection with your team.
12. Configure SSH settings. This is optional.
13. Hit Connect and you're all set!

Happy querying! 🍭

SSO, Okta, MFA/2FA

If you need MFA and/or Okta to sign into Snowflake, we support that on our Enterprise plan. Please get in touch with us if this applies to you.

The only thing your Snowflake administrator needs to do in the Snowflake UI is:

-- Create OAuth security integration
create or replace security integration popsql
  type = oauth
  enabled = true
  oauth_client = custom
  oauth_client_type = 'CONFIDENTIAL'
  oauth_allow_non_tls_redirect_uri = true
  oauth_redirect_uri = 'https://popsql.com/users/auth/snowflake_oauth2/callback'
  oauth_issue_refresh_tokens = true
  oauth_refresh_token_validity = 86400;

-- Get the client ID and secrets. Note the integration name must be uppercase here
select system$show_oauth_client_secrets('POPSQL');

-- Describe the security integration
-- In order to successfully use refresh tokens, ensure `PRE_AUTHORIZED_ROLES_LIST` is empty
describe security integration popsql;

If your Snowflake network policy has an IP whitelist, you'll also need to whitelist our static IPs: 23.20.131.72, 54.211.234.135