-
|
Hey, crew, I did a little research and didn't find anything, but: is it possible to use an externalbrowser authenticator with the CLI tools (snowddl-converter, snowddl)? I have the access I need to a d/b via SSO, but not via the service account whose password I know. Did I miss something obvious? (P.S. On Windows.) John. |
Beta Was this translation helpful? Give feedback.
Replies: 3 comments 2 replies
-
|
I did not consider SSO as viable option for CLI tools. You would normally want to use password or private key for scripts. However, according to this article, it seems like Snowflake Python connector already implements all the groundwork: I'll see if I can add it in next versions. In the meantime, if you need it urgently, you may overload this method: And add connection option: In theory, it should work out-of-the-box. |
Beta Was this translation helpful? Give feedback.
-
|
Thank you! I asked our db admin to grant me permission and, to my surprise, he actually did set me up with a new service account, so we're off the hook for now. I will eventually be scripting this, but, for now, I'm in exploration/POC mode. John. |
Beta Was this translation helpful? Give feedback.
-
|
I'm interested in this feature as well:
|
Beta Was this translation helpful? Give feedback.
-
|
It is available in the latest version. Try adding If you want SSO caching, try installing with I'll update docs when I have a bit more time. |
Beta Was this translation helpful? Give feedback.
-
|
W00t!
…--
Sent from my tablet, which has a funny keyboard. Makes me sound more curt
and muted than normal.
On Tue, Mar 26, 2024, 8:05 PM littleK0i ***@***.***> wrote:
It is available in the latest version.
Try adding --authenticator externalbrowser to CLI options.
If you want SSO caching, try installing with snowddl[sso-caching]
optional dependency.
I'll update docs when I have a bit more time.
—
Reply to this email directly, view it on GitHub
<#77 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAF3TCE2OXXDUIUEIGUXMRTY2H5JZAVCNFSM6AAAAABEJX4TPKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DSMRRGY2DM>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>
|
Beta Was this translation helpful? Give feedback.
I did not consider SSO as viable option for CLI tools. You would normally want to use password or private key for scripts.
However, according to this article, it seems like Snowflake Python connector already implements all the groundwork:
https://community.snowflake.com/s/article/Using-Single-Sign-On-SSO-with-Python-using-Jupyter-Notebook
I'll see if I can add it in next versions.
In the meantime, if you need it urgently, you may overload this method:
https://github.com/littleK0i/SnowDDL/blob/master/snowddl/app/base.py#L385-L415
And add connection option:
"authenticator": "externalbrowser",In theory, it should work out-of-the-box.