Authorization

When you add a Snowflake card to a flow for the first time, Okta Workflows prompts you to configure the connection. This connection links to your Snowflake account and saves your account information, so you can reuse the connection for future Snowflake flows.

You can create multiple unique connections and manage them from the Connections page in the Okta Workflows Console.

Before you begin

The Snowflake connector requires an account that has access to a Snowflake account.

You must have the USERADMIN role or higher in Snowflake to manage users and roles.

Your Snowflake user must be enrolled in all required Network Policies and Authentication Policies. For more information, see Snowflake Prerequisites.

Follow these steps to create a Snowflake programmatic access token:

  1. Sign in to your Snowflake account.
  2. In the navigation menu, go to SettingsAuthentication.
  3. In the Programmatic access tokens section, click Generate new token.
  4. In the dialog box, configure the token details:
    1. Name: Provide a descriptive name for the token.
    2. Comment (Optional): Add a comment describing the token's purpose.
    3. Expires in: Choose the expiration period for the token.
    4. Grant access: Select Single role (recommended) and select a role that should be used for privilege evaluation and object creation. This limits the privileges the token grants to Okta Workflows.
  5. Click Generate.

If you receive an HTTP 401 Status Code or Snowflake error code 390422, verify that your Snowflake Network Policy includes all required Okta IP addresses. See Allow access to Okta IP addresses. If you still face any issues, contact Okta Support.

Procedure

To create a Snowflake connection in Okta Workflows, perform the following steps:

  1. Open the Connections tab in the Workflows Console or open a Snowflake card.
  2. Click New Connection.
  3. Enter a connection Name. This is useful if you plan to create multiple connections to share with your team.
  4. Optional. Enter a connection Description. This is useful to have more information regarding your connection.
  5. In the Programmatic Access Token field, enter the token generated from the Snowflake account.
  6. In the Subdomain field, enter the subdomain of your Snowflake account.

    The subdomain is located under your Snowflake profile in AccountView Account details. If your Account/Server URL is test-account.snowflakecomputing.com, your subdomain is test-account.

  7. Click Create.