How to Use Snowflake Data Source with Key-Pair Authentication in Tableau Cloud

Starting with Tableau version 2024.3.x, both Tableau Desktop and Tableau Cloud now support connecting to Snowflake data sources using key-pair authentication, providing a more secure and efficient way to authenticate and manage connections to Snowflake. Below is a detailed step-by-step guide to set up key-pair authentication on different platforms, including macOS and Windows. 

Connecting to Snowflake Data Source on Tableau Desktop for Windows :

• For Versions above 2024.3.x, 
  • On Tableau Desktop 2024.3.x or later versions running on Windows, you need to install the Snowflake ODBC driver to enable the connection.
  • Once installed, proceed with the usual connection steps, selecting Key-Pair Authentication as the method to connect to Snowflake.
• For Versions below 2024.3,

  • For older versions of Tableau Desktop, you can still connect to Snowflake using key-pair authentication, but with a different setup.

    1. Select "Username and Password" in the Authentication Section:

       • Enter your Username and leave the Password field blank.

    2. Enter Custom Driver Parameters:

       • Go to Advanced Settings and enter the following in the "Custom Driver Parameters" field:
         Copy code

         PRIV_KEY_FILE=PATH-TO-KEY-FILE;PRIV_KEY_FILE_PWD=PASSPHRASE

    3. Sign In:

       • Click on Sign In to connect to Snowflake using the private key credentials.

Connecting to Snowflake Data Source on Tableau Desktop for macOS

1. Install the ODBC Driver:

   • On Tableau Desktop 2024.3.x or later versions running on macOS, you need to install the Snowflake ODBC driver to enable Snowflake connectivity.

2. Configure the ODBC Driver on macOS:

   • After installing the ODBC driver, follow these steps to ensure proper detection of the Snowflake driver:

   • Step 1: Go to ~/Library/ODBC/odbcinst.ini and ensure the following lines are present:

     ruby

     Copy code

     [ODBC Drivers] Snowflake = Installed [Snowflake] Driver = /opt/snowflake/snowflakeodbc/lib/universal/libSnowflake.dylib

   • Step 2: Go to /Library/ODBC/odbcinst.ini and ensure the same lines are present as shown above.

   • Step 3: Go to /Library/ODBC/odbc.ini and verify the following:

     ruby

     Copy code

     [ODBC Data Sources] Snowflake = Snowflake [Snowflake] Driver = /opt/snowflake/snowflakeodbc/lib/universal/libSnowflake.dylib

These steps ensure that your macOS system correctly detects the Snowflake driver and allows Tableau to establish the connection.

Publishing to Tableau Server (till 2024.2.x) Using Key-Pair Authentication

As of now, Tableau Server does not natively support publishing content using key-pair authentication for Snowflake connections. This functionality is still under development and is not built into the product at this time.

Publishing a workbook with Key-Pair Authentication to Tableau Cloud

1. After creating your workbook in Tableau Desktop using key-pair authentication, navigate to Server > Publish Workbook.

2. In the publishing dialog box, under Data Sources, click Edit.

3. For Authentication, select Embed password. While you are not using a password, this setting tells Tableau Cloud to use the credentials embedded within the connection, which in this case is your key-pair authentication.

4. Alternatively, you can save your Snowflake key-pair credentials in Tableau Cloud under My Account Settings > Saved Credentials. If you do this, you can select Prompt user during publishing.

Important Notes:

• Web Editing and Authoring Limitations:
  • Key-pair authentication is not yet fully supported in Tableau Cloud’s web-editing environment. Although you can see the option for entering the private key file when connecting to the data source, the option will be greyed out.
  • This is due to a limitation related to the file picker in Tableau Cloud.
  • Additionally, the Advanced tab does not include the option for entering Custom Driver Parameters, which is necessary for key-pair authentication

Workaround for Using Key-Pair Authentication in Tableau Cloud

Currently, the only way to use key-pair authentication with Tableau Cloud is to create your workbook in Tableau Desktop and then publish it to Tableau Cloud. Once the workbook is published, you can continue working with the data source on Tableau Cloud, but the web-editing features will still have the limitations mentioned above.