You can use a SAML2 security integration to integrate Snowflake with the Identity Provider (IdP) you use to implement federated authentication. Use the CREATE SECURITY INTEGRATION command to create the security integration for your federated authentication. Learn more: Configuring Snowflake to use Federated Authentication | Snowflake Documentation

Set up SAML Security Integration with Okta

To configure SAML security integration with Okta:

1. Log in to Snowflake using the ACCOUNTADMIN role.

2. Enter the following command in the Snowflake Console:
   

   Code Block
   CREATE OR REPLACE SECURITY INTEGRATION <name of the integration> TYPE = SAML2 ENABLED = TRUE SAML2_ISSUER = '<Generate this variable from OKTA server side>' SAML2_SSO_URL = '<Generate this variable from OKTA server side>' SAML2_PROVIDER = 'OKTA' SAML2_X509_CERT = '<Generate this variable from OKTA server side>' SAML2_SP_INITIATED_LOGIN_PAGE_LABEL = 'OKTASSO' SAML2_ENABLE_SP_INITIATED = TRUE;

   For detailed instructions about how to generate the variables, refer to How to Configure SAML 2.0 for Snowflake. After you create the Okta integration, the option to Sign in using OKTASSO is displayed on the login page. If you already have SSO login enabled for Snowflake, the SSO option, Sign in using OKTASSO appears on the login page.

3. Validate your Snowflake OAuth2 Account for external authentication.

   1. In the Snowflake OAuth account settings, use the credentials generated in step 2.

   2. After you have successfully created the Okta integration from step 2, the Sign in using OKTASSO option is displayed on the redirect page above regular logins.
      

      

4. Choose the OKTASSO option, which will trigger a permission request. Click Allow to complete the authentication process.
   

   

Configure the Snowflake OAuth2 Account

To configure the Snowflake OAuth2 Account, refer to the relevant documentation:

...