Configure Security Integration in Snowflake to use in Snowflake OAuth2 Accounts

Owned by Kalpana Malladi
Last updated: Feb 16, 2024
3 min read

In this article

Configure Security Integration in Snowflake

A Security Integration is a Snowflake object that provides an interface between Snowflake and SnapLogic that supports OAuth2. To configure your Snowflake OAuth2 account, you must first create a Security Integration in Snowflake.

Prerequisites

  • You must be the ACCOUNTADMIN or you must have a role with the CREATE INTEGRATION privilege to create and manage integrations for OAuth.

Generate a Client ID and a Client Secret

  1. Log in to Snowflake.

  2. Enter the following command in the Snowflake Console:

CREATE OR REPLACE SECURITY INTEGRATION <name of the integration> TYPE = OAUTH ENABLED = TRUE OAUTH_CLIENT = custom OAUTH_CLIENT_TYPE = 'PUBLIC' OAUTH_REDIRECT_URI = 'https://elastic.snaplogic.com/api/1/rest/admin/oauth2callback/snowflake' OAUTH_ISSUE_REFRESH_TOKENS = TRUE OAUTH_REFRESH_TOKEN_VALIDITY = 7776000 <integer> OAUTH_ALLOW_NON_TLS_REDIRECT_URI = TRUE;

The Redirect URI should be set to a specific endpoint (within SnapLogic) that handles the OAuth callbacks for the Snowflake Snap Pack.

3. Click Run to run the command. In the preview panel, you can see that the OAuth client ID is generated.

4. To generate the OAuth client secret, enter the following command:

SELECT SYSTEM$SHOW_OAUTH_CLIENT_SECRETS ('TEST_OAUTH_SL' <name of the integration>)

You must specify the integration name in upper case, else the command SHOW_OAUTH_CLIENT_SECRETS fails if you create the integration without using quotes.

Quoted Identifier Rules for Integration Names

For instance, if the Security Integration name is "Snaplogic_security_Integration" (where double quotes are part of the syntax of the CREATE SECURITY INTEGRATION command, then:

  • When you use a quoted identifier and the name is in mixed case, you should enter the command as shown below for it to work.
    SELECT SYSTEM$SHOW_OAUTH_CLIENT_SECRETS ('Snaplogic_security_Integration')

  • If you enter the command as shown below, then it would fail.
    SELECT SYSTEM$SHOW_OAUTH_CLIENT_SECRETS ('SNAPLOGIC_SECURITY_INTEGRATION')

5. Click Run .
The OAuth Client Secret is generated for the given integration.

Snowflake_OAuth_Client_Secret.png

Get the OAuth Authorization Endpoint and the OAuth Token Endpoint

  1. Enter the DESCRIBE integration test_oauth_SL <integration name> command in your Snowflake Console.

  2. Click Run . The OAuth authorization and token endpoints are generated.

Locate and Define the Information Required to Create Your Snowflake OAuth2 Account

Specify the values required to create a successful Snap OAuth2 account connection.

  1. Navigate to the Snowflake Snap of your choice and set up the SnapLogic Snowflake Azure/Google Cloud Storage/S3 OAuth2 Account with the following details:

    • Client Id: Provide the client ID that you have generated in Snowflake.

    • Client Secret: Provide the client secret that you have generated in Snowflake.

    • Token Endpoint Configuration

      • OAuth2 Endpoint: https://xyz123.snowflakecomputing.com/oauth/authorize (https://<account_identifier>.snowflakecomputing.com/oauth/authorize)

      • OAuth2 Token: https://xyz123.snowflakecomputing.com/oauth/token-request (https://<account_identifier>.snowflakecomputing.com/oauth/token-request)

  2. Click Authorize. 
    You will be redirected to the login page of Snowflake.

    1. Log in to Snowflake and accept the permissions.
      The authorization code is generated and supplied to the callback (Redirect) URL, after which, the Access token is issued.

    2. Select the Auto-refresh token checkbox and save the account.

Related Links

 

Have feedback? Email documentation@snaplogic.com | Ask a question in the SnapLogic Community
© 2017-2024 SnapLogic, Inc.