Snowflake 身份验证方法的合作伙伴支持情况

请参考本主题,了解您可通过哪些 Snowflake 身份验证方法从合作伙伴应用程序连接到 Snowflake。

TYPE = PERSON 用户支持的身份验证方式

当 Snowflake 用户是人类用户时,用户对象的 TYPE 属性设置为 PERSON。本部分详细介绍了从合作伙伴应用程序连接时,人类用户可以使用哪些 Snowflake 身份验证方法。有关这些身份验证方法的说明,请参阅 应用程序身份验证方法概述

Snowflake 建议您将合作伙伴应用程序配置为使用 OAuth 进行身份验证,因为它的安全性优于其他身份验证方法。如需在 External OAuth 和 Snowflake OAuth 之间选择的帮助,请参阅 为交互式应用程序选择身份验证。用户使用 OAuth 身份验证码流程进行身份验证,是因为该流程允许用户在认证过程中与授权服务器进行交互。

或者,只要密码字段支持 256 个字符,您也可以使用编程式访问令牌 (PAT) 作为密码的替代方式进行 Snowflake 身份验证。但请注意,PATs 的安全性较 OAuth 稍差。

应用程序

External OAuth

Snowflake OAuth

密钥对身份验证

编程访问令牌 (PAT)

PowerBI Cloud (BI) (https://learn.microsoft.com/en-us/fabric/data-factory/connector-snowflake#authentication)

**是**(仅支持 Microsoft Entra ID)

PowerBI Desktop (BI) (https://learn.microsoft.com/en-us/fabric/data-factory/connector-snowflake#authentication)

**是**(仅支持 Microsoft Entra ID)

Tableau Cloud (BI) (https://help.tableau.com/current/pro/desktop/en-us/examples_snowflake.htm)

Tableau Server (BI) (https://help.tableau.com/current/server/en-us/config_oauth_snowflake.htm)

DBT Cloud (Transform) (https://docs.getdbt.com/docs/cloud/connect-data-platform/connect-snowflake)

DBT Core (Transform) (https://docs.getdbt.com/docs/core/connect-data-platform/snowflake-setup)

Airflow (Workflow orchestration)

不适用

不适用

Qlik Sense Cloud (BI) (https://help.qlik.com/en-US/connectors/Subsystems/ODBC_connector_help/Content/Connectors_ODBC/Snowflake/Create-Snowflake-connection.htm)

Qlik Sense Desktop (BI) (https://help.qlik.com/en-US/connectors/Subsystems/ODBC_connector_help/Content/Connectors_ODBC/Snowflake/Create-Snowflake-connection.htm)

Fivetran (EL) (https://fivetran.com/docs/destinations/snowflake/setup-guide#optionalkeypairauthentication)

Matillion (ELT) (https://docs.matillion.com/data-productivity-cloud/administration/docs/snowflake-key-pair-authentication/)

Informatica (ETL) (https://docs.informatica.com/integration-cloud/data-integration-connectors/current-version/snowflake-data-cloud-connector/part-1--getting-started-with-snowflake-data-cloud-connector/connections-for-snowflake-data-cloud/connect-to-snowflake/authentication-typesdwsnowflakev2conn-authentication.html)

`ThoughtSpot(BI – 交互式)<https://docs.thoughtspot.com/software/10.1.0.sw/connections-snowflake-add>`_

Strategy Cloud (BI)

Strategy Workstation/Developer (BI)

TYPE = SERVICE 用户支持的身份验证方式

当服务(例如应用程序或工作流)向 Snowflake 进行身份验证时,用户对象的 TYPE 属性会被设置为 SERVICE。本节详细说明从合作伙伴应用程序以服务身份连接时,可使用哪些 Snowflake 身份验证方法。有关这些身份验证方法的说明,请参阅 应用程序身份验证方法概述

Snowflake 建议您将合作伙伴应用程序配置为使用 OAuth 进行身份验证,因为它的安全性优于其他可用的身份验证方法。服务使用 OAuth 客户端凭据流程进行身份验证,因为该场景下没有人员可与授权服务器交互。

或者,只要密码字段支持 256 个字符,您也可以使用编程式访问令牌 (PAT) 作为密码的替代方式进行 Snowflake 身份验证。但请注意,PATs 的安全性较 OAuth 稍差。

应用程序

External OAuth

密钥对身份验证

编程访问令牌 (PAT)

PowerBI Cloud (BI) (https://learn.microsoft.com/en-us/power-bi/connect-data/service-connect-snowflake)

PowerBI Desktop (BI) (https://learn.microsoft.com/en-us/power-bi/connect-data/service-connect-snowflake)

Tableau Cloud (BI) (https://help.tableau.com/current/pro/desktop/en-us/examples_snowflake.htm)

Tableau Server (BI) (https://help.tableau.com/current/server/en-us/config_oauth_snowflake.htm)

DBT Cloud (Transform) (https://docs.getdbt.com/docs/cloud/connect-data-platform/connect-snowflake)

DBT Core (Transform) (https://docs.getdbt.com/docs/core/connect-data-platform/snowflake-setup)

Airflow (Workflow orchestration)

Qlik Sense Cloud (BI) (https://help.qlik.com/en-US/connectors/Subsystems/ODBC_connector_help/Content/Connectors_ODBC/Snowflake/Create-Snowflake-connection.htm)

Qlik Sense Desktop (BI) (https://help.qlik.com/en-US/connectors/Subsystems/ODBC_connector_help/Content/Connectors_ODBC/Snowflake/Create-Snowflake-connection.htm)

Fivetran (EL) (https://fivetran.com/docs/destinations/snowflake/setup-guide#optionalkeypairauthentication)

Matillion (ELT) (https://docs.matillion.com/data-productivity-cloud/administration/docs/snowflake-key-pair-authentication/)

Informatica (ETL) (https://docs.informatica.com/integration-cloud/data-integration-connectors/current-version/snowflake-data-cloud-connector/part-1--getting-started-with-snowflake-data-cloud-connector/connections-for-snowflake-data-cloud/connect-to-snowflake/authentication-typesdwsnowflakev2conn-authentication.html)

`ThoughtSpot(BI – 交互式)<https://docs.thoughtspot.com/software/10.1.0.sw/connections-snowflake-add>`_

Strategy Cloud (BI)

Strategy Workstation/Developer (BI)