Setting up OAuth for Snowflake

In Q3 of 2025, Snowflake will force users to log in using Multi Factor Authentication which means that using a username and password to connect Replicate to Snowflake will no longer be supported. One of the other 2 Authentication methods available in the Snowflake endpoint must be used; Key-Pair or OAuth. This article goes through how the OAuth method can be set up.

1. In a Snowflake worksheet, run the below query as an 'ACCOUNTADMIN':

   create or replace security integration <name of security integration>
type=oauth
enabled=true
oauth_client=CUSTOM
oauth_client_type='CONFIDENTIAL'
oauth_redirect_uri='http://{localhost}/attunityreplicate/rest/oauth_complete'
oauth_issue_refresh_tokens=TRUE
oauth_refresh_token_validity=86400;

   Where <name of security integration> is a unique name of the integration, and {localhost} is the name of the Replicate server
   
   

2. In the same worksheet, run the describe query below as an 'ACCOUNTADMIN. This will display all the necessary connection information required by Replicate aside from the Client Secret.

   desc integration <name of security integration>

   
   
3. Run the function 'SHOW_OAUTH_CLIENT_SECRETS' (see below) to get the Client Secret:
   select SYSTEM$SHOW_OAUTH_CLIENT_SECRETS('<name of security integration>')
   
   
4. In the Replicate console, on your Snowflake endpoint's general connection properties, change the Authentication method to 'OAuth' and enter in the values obtained from steps 2 and 3. 
   ​
   
   
5. Untick the option for 'Use default proxy settings'
   
   
6. Next to the 'Refresh Token' option, click on 'Generate...' to generate a token.
   
   
7. Click on 'Test Connection' to confirm whether the connection to Snowflake is successful.