Login to Snowflake and setup new user accounts using Azure AD

Показать описание

To connect Snowflake to Azure use:

alter account set saml_identity_provider = '{
"certificate": "64BIT CERTIFICATE",
"ssoUrl":"SSO URL",
"type": "custom",
"label": "AzureAD"}';

To add the 'Azure AD sign in' option to your Snowflake sign-in page, use:

alter account set sso_login_page = TRUE;

To set up a role to be the owner of accounts added from Azure and generate a Snowflake Scim access token, use:

//a new role with enough rights to manage the connection to Azure and crreate useers and roles
create or replace role AzureConnection;
//give permissions to create users
grant create user on account to AzureConnection;
//give permissions to create roles
grant create role on account to AzureConnection;
//give these right to the account admin
grant role AzureConnection to role ACCOUNTADMIN;
create or replace security integration AzureConnection
type = scim
scim_client = 'azure'
run_as_role = 'AZURECONNECTION';
select system$generate_scim_access_token('AZURECONNECTION');