Loading

Snowflake Deprecation of Single-Factor Authentication (Username and Password)

Veröffentlichungsdatum: Sep 17, 2025
Beschreibung

Snowflake is beginning their plan to deprecate their use of single-factor authentication (Username and Password) starting in May 2025. To avoid connection errors in Tableau, you must migrate your existing Snowflake connections to a more secure authentication method. This guide provides the supported methods and steps for migration. 

If unaddressed, users may see an error in the connection dialog box in Tableau Desktop when trying to use single factor (Username and Password) authentication for their Snowflake connection.

Can't connect to Snowflake
Detailed Error Message
The username or password is not valid. Check the database name and credentials and try again.
User is locked from Duo Security. Contact your local system administrator.

Cause

Environment

  • All Tableau Products
Lösung

Migrating Your Snowflake Connections

To continue connecting to Snowflake, you must update your Tableau data sources from Username/Password to one of the supported modern authentication methods.

Authentication Method Support

Here is a summary of the recommended authentication methods and their platform support:

Authentication Method

Description

Supported Platforms

OAuth / External OAuth

(Recommended) Prompts users to sign in through a secure web pop-up. "External OAuth" allows you to use your company's identity provider, such as Okta or Microsoft Entra ID.

Tableau Desktop, Server, Cloud, Prep

Programmatic Access Token (PAT)

Uses a token generated in Snowflake that is pasted into the password field in Tableau. For more details, see Snowflake's guide on Using programmatic access tokens for authentication.

Tableau Desktop, Server, Cloud, Prep

Key Pair Authentication

Uses a public/private key file pair for authentication.

Tableau Desktop, Server, Cloud (Not supported for Tableau Prep)

Export to Sheets

 

 

Migration Steps

Follow the steps below based on your chosen authentication method. To identify which data sources need to be updated, you can use the Tableau REST API to Query Data Source Connections.

Option A: Migrating to OAuth or External OAuth (Recommended Method)

This is often the simplest method for users.

  • For Published Data Sources:

    1. In Tableau Cloud/Server, navigate to your Snowflake data source.

    2. Select Actions > Edit Connection.

    3. Change the Authentication dropdown from "Username and Password" to "Sign in with OAuth".

    4. Click Save. The next time a connection is required, users will be prompted to enter their credentials in a pop-up window.

  • For Embedded Data Sources:

    1. Download the workbook from Tableau Cloud/Server and open it in Tableau Desktop.

    2. Go to the Data Source tab.

    3. Select Data > [Your Snowflake Source] > Edit Connection.

    4. In the connection dialog, change the Authentication to "Sign in with OAuth" and sign in when prompted.

    5. Republish the workbook to Tableau Cloud/Server.

Option B: Migrating to Programmatic Access Token (PAT)

  • For Published Data Sources:

    1. Create a PAT in Snowflake.

    2. Navigate to the data source in Tableau Cloud/Server and click Edit Connection.

    3. In the password field, paste your PAT and click Save.

  • For Embedded Data Sources:

    1. Download the workbook and open it in Tableau Desktop.

    2. Edit the data source connection and paste the PAT into the password field.

    3. Republish the workbook.

Option C: Migrating to Key Pair Authentication

  • For Published or Embedded Data Sources:

    1. Download the workbook or data source and open it in Tableau Desktop.

    2. Edit the connection and change the authentication type to Key Pair, providing your private key and passphrase.

    3. Republish the workbook or data source to Tableau Cloud/Server.

Nummer des Knowledge-Artikels

004810953

 
Laden
Salesforce Help | Article