[Snowflake] Action required: November authentication changes

Nick Stanchenko  
Edited

[12-May-2025] This notice only applies to Snowflake customers

Snowflake has announced that password authentication will no longer be supported starting November 2025. Depending on your Snowplow setup, you might need to make changes to comply with this policy.

To review all your Snowplow-related Snowflake connections at a glance, head to the Connections page in the Console.

Loading data to Snowflake

For loader connections, the last column of the Connections page will specify the type of loader deployed.

If you are using the Streaming loader, then you are already compliant with the new policy and do not need to make changes.

If you are using RDB Loader, you will need to migrate to the Streaming loader to use key-based authentication. The Streaming loader was released more than a year ago and has a number of advantages:

The Streaming loader maintains the same data format and would be loading to the same table. To migrate, follow these steps:

  • On the Connections page, click “Set up connection”, then select “Loader connection” and Snowflake.
  • Add connection details, including the authentication key. Make sure to select the same role that currently owns your atomic events table (in the “advanced options”).
  • Once you test and create the connection, open a Support ticket to schedule migration.

Data modeling

If you are using SQL Runner models, we strongly recommend migrating to our dbt models, which incorporate many improvements, are regularly maintained and support key-based authentication via existing dbt functionality. We will post an update on support for this in SQL Runner in a few weeks.

If you are using out of the box models, you will need to update the respective connections (via the Connections page) to use key-based authentication.

For custom models, please open a Support ticket so that we can adjust your configuration.

Data visualizations

Snowplow-authored data visualizations (previously known as data apps) will support key-based authentication by end of June. We will post another update at that point.

In the meantime

For any Snowflake username that needs to use password authentication, follow the Snowflake documentation to set the TYPE of that user to LEGACY_SERVICE.

In case of any doubts, please don’t hesitate to contact Snowplow Support.