Connecting to Snowflake (Managing Your User Preferences):
Aside from facilitating tasks such as changing your password, logging out of the interface, and handling other session-related activities, the dropdown menu adjacent to your login name provides options to manage your user preferences. This encompasses:
Enrolling in Multi-Factor Authentication (MFA).
Validating your email address and specifying notification preferences (applicable for account administrators). Notifications serve to alert account administrators when a credit quota threshold for a resource monitor has been reached. For additional information, consult the "Working with Resource Monitors" guide.
Enrolling in MFA (Multi-Factor Authentication):
Multi-Factor Authentication (MFA) is an inherent feature in Snowflake, accessible across all Snowflake Editions. It enhances user login security by necessitating a second form of authentication, beyond standard credentials, to access Snowflake. This additional layer of authentication is facilitated by the Duo Mobile application, which you need to install on a smartphone or a similar device.
By default, MFA is not activated for individual Snowflake users. To implement MFA for a more secure login, enrollment is required through the Snowflake web interface.
To enroll in MFA using the Classic Console:
1. Choose "Preferences" from the dropdown menu adjacent to your login name. This action will lead you to the Preferences page.
2. Click the Enroll in MFA link and follow the instructions provided in the wizard. Enrollment requires a smart phone with a valid phone number and the Duo Mobile application installed.
Upon enrollment, each time you attempt to log into Snowflake, whether through the web interface or a command line client (e.g., SnowSQL), you will be required to enter your standard user credentials (login name and password). Subsequently, you must provide the temporary authentication token or passcode generated by the Duo Mobile application. Further details are available in the Multi-Factor Authentication (MFA) documentation.
Note:
If you encounter difficulties logging into Snowflake due to an MFA-related issue (e.g., lack of access to your phone), please reach out to one of your account administrators. They have the capability to temporarily disable MFA, allowing you to log in. Alternatively, they can deactivate MFA for you, effectively canceling your enrollment.
Disabling MFA:
After enrolling in MFA, it is not possible to unenroll using the web interface. Instead, an account administrator must employ a SQL command to either temporarily or permanently disable MFA for you. For additional information, refer to the guide on Managing MFA for an account and users.
Verifying Your Email Address in the Classic Console:
Navigate to "User menu" and select "Preferences."
Verify the email address linked to your Snowflake user account. Prior to receiving email notifications for resource monitors, users are required to confirm their email address.
Enter your email address and click the "Ok" button.
Select the "Send Verification Email" link. Snowflake will dispatch a verification email to the provided address.
Click the activation link within the email to complete the process.
