Snowflake is now enforcing Multi-Factor Authentication (MFA), meaning password-based authentication will no longer be supported. If your Coefficient connection currently uses a username and password, your data imports may fail to refresh.
❄️ Snowflake official documentation on this can be found here. ❄️
We recommend transitioning to one of the following authentication methods:
OAuth Authentication (Requires Snowflake Admin)
Temporarily Disable MFA (Requires Snowflake Admin)
Let's go through each option together!
Key-Pair Authentication
Key-pair authentication provides a secure login method using RSA keys instead of passwords.
|
1. Open the Coefficient Sidebar and click on the Menu. |
2. Select “Connected Sources”.
|
3. Locate your Snowflake connection in the list. Click the 3-vertical dots and select "Manage" from the options listed. |
|
4. Select "Edit" on the Connection details. |
5. Under Private Key, select "Configure". |
|
6. You will be presented with two options; "Generate Key Pair" and "Upload Key Pair" |
6A. "Generate Key Pair" – Let Coefficient create the key for you. |
6A1. Once the query provided is run in Snowflake, click "Save," and Coefficient will verify the connection. |
|
6B. Upload Key Pair - If you already have a private key, you can upload it manually. NOTE: Encrypted private keys are not supported at this time. The accepted format for key uploads is: -----BEGIN PRIVATE KEY-----
|
6B1. After uploading a valid private key, Coefficient will generate a query for you to execute in Snowflake to register the corresponding public key. You can disregard the query if the key is already stored in Snowflake. |
6B2. Click "Save," and Coefficient will verify the connection. |
ℹ️ NOTE: You may need to refresh key imports that previously failed, or they will refresh automatically on the next scheduled run.
OAuth Authentication
NOTE: Requires a Snowflake Admin
Snowflake OAuth enables users in your organization to connect to your Snowflake instance using their individual Snowflake logins, eliminating the need to generate separate key pairs. This is especially beneficial for organizations with multiple users, as it streamlines access and reduces the administrative workload for managing new connections.
NOTE: Once the OAuth-based connection is set up, your imports will NOT automatically migrate to it. Once all users have been set up, please reach out to our support team (support@coefficient.io) for assistance. They can help migrate your imports so they continue to run on the newly set-up OAuth connection.
Steps to setup Snowflake OAuth can be found here.
Temporarily Disable MFA
ℹ️ NOTE: Requires a Snowflake Admin
If you require more time, your Snowflake Admin can temporarily disable MFA enforcement by executing the following SQL command.
ℹ️ NOTE: Remember to replace the <snowflake_username> in the query with your username
CREATE AUTHENTICATION POLICY disable_mfa_enforcement
MFA_ENROLLMENT = OPTIONAL;
ALTER USER <snowflake_username>
SET AUTHENTICATION POLICY disable_mfa_enforcement;
⚠️ NOTE: This is a TEMPORARY solution and will only be available until August 2025! We STRONGLY RECOMMEND you migrate to the Key-Pair Auth OR OAuth as soon as possible. ⚠️
ℹ️ NOTE: This will only work if you have not already set up MFA for your account.
FAQs
How can I generate my own private/public keys?
You can find directions on how to generate these key(s) here.
If you would like to generate an encrypted version, please use the following command in Snowflake:
openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8 -nocrypt
I have more questions about this. Where can I go for help?