Hello - Starting soon, Snowflake is going to requi...
# gooddata-platform
m
Hello - Starting soon, Snowflake is going to require users either authenticate with MFA or key-pair (or OAUTH). However, I don't see an option to authenticate with key-pair in the platform. Is there a way to do that? https://www.snowflake.com/en/blog/blocking-single-factor-password-authentification/
image.png
i
Hi Mitchel, Please be aware that Snowflake is one of our partners and we always make sure that the integration with GoodData runs smoothly on both sides. Any required changes related to the authentication would be announced in advance from our end as well. Currently, the actual integration details can be found here.
m
Hi @Ivana Gasparekova - Yes, I found that documentation, but it doesn't talk about authentication. I need to be able to authenticate with more than just a username password (an upcoming Snowflake requirement) and don't see how to do that. Maybe I'm just missing it?
i
Unfortunately, it is not supported right now. Please let me double-check with our Product team when do we plan to update the authentication methods here. I will get back to you with my findings shortly.
m
Ok, yes please keep me posted. Without support for these authentication methods, Snowflake essentially becomes unusable. I do see that you support key pair in CN, so hopefully that is easy to port over? https://www.gooddata.com/docs/cloud-native/3.13/connect-data/create-data-sources/snowflake/
i
Ye you are correct, the Key Pair Method is already supported under the newer Products, such as GD Cloud and CN. I am waiting for the feedback regarding the GD Platform vs. Snowflake.
m
Thanks for making us aware of this. Our engineers were informed about this feature release and there is nothing needed from us, Snowflake will continue to support basic authentication (user and password) and you can explicitly allow the user/password without MFA.
m
Hi @Moises Morales - That's true, but only until November 2025 when they will require more than a username/password for 100% of all accounts. No exception.
m
Hi @Mitchel Roling, when the block is in place, users will still be able to set up special user profile (customized) and allow the basic authentication again without the MFA. This will be completely up to you to do it.
m
image.png
That's simply not true. They are going to block all users starting in November 2025. No matter what overrides I put on the user.
They will require either SAML, OAuth or key-pair authentication for all users.
@Moises Morales
From April 2025 to November 2025, I can do exactly as you say. I can set he user to be a LEGACY_SERVICE user and continue to use just a username and password. However, from Nov 2025 onward, that will become impossible.
m
I know where you are coming from. I have checked this once more with our engineers and we will recheck the current scenario, although at this time I do not have more details, we will keep you posted. Please also feel free to reach out to your Account Manager @Nikolaos Arampatzis for any update.
m
@Moises Morales Ok, just something you are likely going to want to get ahead of since Snowflake remains the preferred connector of Good Data. Snowflake has made it very clear with endless emails to me that my users, as they are set up currently with MFA disabled, will be unable to access Snowflake in the near future without enabling one of the authentication services I mentioned.
And when I turn on those additional authentication methods, Good Data becomes unable to connect to my Snowflake instances, so I have to revert them.
And this isn't really for me anymore as I'm being forced to scale back my own business. Still, you'll definitely want to confirm with Snowflake that users will continue to be able to log in with just a username and password because all their communication suggests otherwise. I'd hate for you to be caught off guard.