Create Snowflake data sources with Okta SSO and Duo MFA

Create a Snowflake data source to use with Okta

1. In the Database Explorer (⌘ 1) , click New on the toolbar and navigate to Data Source | Snowflake.

   

2. Check if there is a Download missing driver files link at the bottom of the connection settings area. Click this link to download drivers that are required to interact with a database. For a direct download link, refer to the JetBrains JDBC drivers page.

   

3. Specify the database connection details.

   1. In the Host field, type the URL to connect to your Snowflake account with. For example, myorg-myconnection.snowflakecomputing.com.

   2. From the Authentication dropdown, select Authenticator.

   3. In the Authenticator field, type externalbrowser.

   4. In the User field, type the email address you use to log in to your Okta account.

   5. In the Password field, type your Okta account password.

   6. In the Database field, type the database name to which you want to connect.

   7. In the Schema field, type the schema name to which you want to connect.

   8. In the Warehouse field, type the name of a compute resources cluster in Snowflake that you want to use.

   Alternatively, type your JDBC URL in the URL field. The general URL to use is as follows:

   • Format:

     jdbc:snowflake://<organization_name>-<connection_name>.snowflakecomputing.com/?warehouse=<warehouse_name>&db=<database_name>&schema=<schema_name>&user=<okta_username>&password=<okta_password>&authenticator=externalbrowser

   • Example:

     jdbc:snowflake://myorg-myconnection.snowflakecomputing.com/?warehouse=AUTH_WH&db=TESTDB&schema=MYSCHEMA&user=MYUSERNAME@DOMAIN.COM&password=DUMMY-PASSWORD&authenticator=externalbrowser

4. Click the Test Connection link at the bottom of the connection details area to initiate a test connection to your database.

   

5. On the Okta website that opens in the browser, enter your user credentials and log in to your Okta account.

   

6. Verify your identity using one of the available security methods.

   

7. Once Okta confirms your identity, return to DataGrip.

   

8. In the IDE, click OK to save your new data source.

Create a Snowflake data source to use with Duo

Depending on which Duo authentication mechanism is used, use the corresponding instructions. For more information about Duo authentication mechanisms, refer to the official documentation.

In this tutorial, we will take a look at the Duo Push request and Duo-generated passcode methods.

1. In the Database Explorer (⌘ 1) , click New on the toolbar and navigate to Data Source | Snowflake.

   

2. Check if there is a Download missing driver files link at the bottom of the connection settings area. Click this link to download drivers that are required to interact with a database. For a direct download link, refer to the JetBrains JDBC drivers page.

   

3. Specify the database connection details.

   1. In the Host field, type the URL to connect to your Snowflake account with. For example, myorg-myconnection.snowflakecomputing.com.

   2. In the User and Password fields, type your Snowflake account user credentials.

   3. In the Database field, type the database name to which you want to connect.

   4. In the Schema field, type the schema name to which you want to connect.

   5. In the Warehouse field, type the name of a compute resources cluster in Snowflake that you want to use.

   Alternatively, type your JDBC URL in the URL field. The general URL to use is as follows:

   • Format:

     jdbc:snowflake://<organization_name>-<connection_name>.snowflakecomputing.com/?warehouse=<warehouse_name>&db=<database_name>&schema=<schema_name>&user=<snowflake_username>&password=<snowflake_password>

   • Example:

     jdbc:snowflake://myorg-myconnection.snowflakecomputing.com/?warehouse=AUTH_WH&db=TESTDB&schema=MYSCHEMA&user=MYUSERNAME&password=DUMMY-PASSWORD

4. Click the Test Connection link at the bottom of the connection details area to initiate a test connection to your database.

   

5. In the Duo Mobile application, you will receive a push with login approval request. Click Approve to approve it.

   

6. In the IDE, click OK to save your new data source.

1. In the Database Explorer (⌘ 1) , click New on the toolbar and navigate to Data Source | Snowflake.

   

2. Check if there is a Download missing driver files link at the bottom of the connection settings area. Click this link to download drivers that are required to interact with a database. For a direct download link, refer to the JetBrains JDBC drivers page.

   

3. In the URL field, type your JDBC URL. Depending on which parameter you use, the general URL to use is as follows:

   1. Using passcode=<passcode_from_app>:

      • Format:

        jdbc:snowflake://<organization_name>-<connection_name>.snowflakecomputing.com/?warehouse=<warehouse_name>&db=<database_name>&schema=<schema_name>&user=<snowflake_username>&password=<snowflake_password>&passcode=<passcode_from_app>

      • Example:

        jdbc:snowflake://myorg-myconnection.snowflakecomputing.com/?warehouse=AUTH_WH&db=TESTDB&schema=MYSCHEMA&user=MYUSERNAME&password=DUMMY-PASSWORD&passcode=123456

   2. Using passcodeInPassword=on:

      • Format:

        jdbc:snowflake://<organization_name>-<connection_name>.snowflakecomputing.com/?warehouse=<warehouse_name>&db=<database_name>&schema=<schema_name>&user=<snowflake_username>&password=<snowflake_password><passcode_from_app>&passcodeInPassword=on

      • Example:

        jdbc:snowflake://myorg-myconnection.snowflakecomputing.com/?warehouse=AUTH_WH&db=TESTDB&schema=MYSCHEMA&user=MYUSERNAME&password=DUMMY-PASSWORD123456&passcodeInPassword=on

   

4. In the Duo Mobile application, obtain the passcode.

   

5. In DataGrip, type the passcode into the prepared JDBC URL in URL field.

   

6. Click the Test Connection link at the bottom of the connection details area to initiate a test connection to your database.

   

7. Click OK to save your new data source.

Create a data source using Duo MFA

1. In the Database Explorer (⌘ 1) , click New on the toolbar and navigate to Data Source | Snowflake.

   

2. Check if there is a Download missing driver files link at the bottom of the connection settings area. Click this link to download drivers that are required to interact with a database. For a direct download link, refer to the JetBrains JDBC drivers page.

   

3. Specify the database connection details.

   1. In the Host field, type the URL to connect to your Snowflake account with. For example, myorg-myconnection.snowflakecomputing.com.

   2. From the Authentication dropdown, select Authenticator.

   3. In the Authenticator field, type externalbrowser.

   4. In the User field, type the email address you use to log in to your Okta account.

   5. In the Password field, type your Okta account password.

   6. In the Database field, type the database name to which you want to connect.

   7. In the Schema field, type the schema name to which you want to connect.

   8. In the Warehouse field, type the name of a compute resources cluster in Snowflake that you want to use.

   Alternatively, type your JDBC URL in the URL field. The general URL to use is as follows:

   • Format:

     jdbc:snowflake://<organization_name>-<connection_name>.snowflakecomputing.com/?warehouse=<warehouse_name>&db=<database_name>&schema=<schema_name>&user=<okta_username>&password=<okta_password>&authenticator=externalbrowser

   • Example:

     jdbc:snowflake://myorg-myconnection.snowflakecomputing.com/?warehouse=AUTH_WH&db=TESTDB&schema=MYSCHEMA&user=MYUSERNAME@DOMAIN.COM&password=DUMMY-PASSWORD&authenticator=externalbrowser

4. Click the Test Connection link at the bottom of the connection details area to initiate a test connection to your database.

   

5. On the Okta website that opens in the browser, enter your user credentials and log in to your Okta account.

   

6. Okta redirects you to the Duo Security website to verify your identity.

   

7. On the Duo Security website, select an option to log in. In this tutorial, we will use the Duo Push one.

   

8. Duo Security provides you with a 3-digit verification code that you have to enter in the Duo Mobile application.

   

9. In the Duo Mobile application, enter your verification code and click Verify.

   

10. Duo Security logs you in to the account and redirects to the Okta website.

    

11. Once Okta confirms your identity, return to DataGrip.

    

12. In the IDE, click OK to save your new data source.