Snowflake MFA token caching support?

1

Does EasyMorph support caching of MFA tokens from Snowflake? I'm migrating to MFA-enabled Snowflake accounts to get ahead of their stronger authentication policies being made mandatory in the future, but whenever I connect to my Snowflake repo, every query results in an MFA prompt coming from Snowflake.

2

EasyMorph's native Snowflake connector internally uses the Snowflake .NET Driver. And that driver doesn't support MFA token caching yet. They are working on this feature, but it's unclear when the feature will be ready.

As a workaround, you can use the ODBC connector with the Snowflake ODBC driver, which already supports MFA token caching.

3

I tried using Snowflake's ODBC driver (v3.5), embedded the password in registra via this article, and set up a new ODBC connector in EasyMorph pointing to my Snowflake ODBC DSN.

image
image495×482 8.55 KB

ALLOW_CLIENT_MFA_CACHING is enabled.

image
image973×166 19 KB

When I query in EasyMorph, I get the MFA prompt every time I try using it.

4

@mike, we will look into it

5

@mike, I was able to make the MFA token caching work with the following steps:

  1. Update the ODBC driver to the latest version (Snowflake docs state that the minimum required version is 2.23.0).

  2. Allow MFA token caching by running the following command in the Snowflake console:

ALTER ACCOUNT SET ALLOW_CLIENT_MFA_CACHING = TRUE;

  1. In the DSN settings, set the Authenticator to username_password_mfa:

image
image410×569 32.6 KB

  1. In the EasyMorph connector settings set Authentication to User name and password and provide the correct user name and password.