Introducing new Snowflake SQL workspaces supporting Key Pair authentication

Users can now choose the authentication type when creating a Snowflake SQL workspace. Specifically, they can create new Person type workspace, which supports:

• SSO login to Snowsight, and
• Key Pair authentication for third-party tools.

New workspaces will be introduced to the platform on July 3rd.

Obtaining the Private Key

The required Private Key for Key Pair authentication can be generated and downloaded immediately during the workspace creation process:

If the key needs to be reset later, users can do so via the Credentials dialog, accessible under the Connect button:

Note: For security reasons, the Private Key is not stored anywhere. Be sure to save it right after creation. If you lose it, you’ll need to reset the Key Pair to generate a new Private Key.

Legacy Workspaces Still Available

Users may still create Legacy Service type workspace, which supports:

• SSO login to Snowsight, and
• Single-factor Password authentication for third-party tools.

However, Snowflake is deprecating Legacy Service users and single-factor password authentication later this year.

We strongly recommend switching to Person type workspaces with Key Pair authentication whenever possible — unless your use case requires password-based login, as some third-party tools still do not support Key Pair authentication.

To avoid disrupting our users’ existing workflows, we will keep the Legacy Service workspace with Password authentication as the default option until the end of August. After that, we will update the default alongside the planned changes related to the deprecation of Legacy Service workspaces.

Using Key Pair Authentication with Third-Party Tools

Below are links to documentation for popular database IDEs used by Keboola users that support Key Pair authentication.

• DBeaver Community Edition: https://community.snowflake.com/s/article/Using-Private-Key-authentication-in-DBeaver
• DBeaver Commercial Editions: https://dbeaver.com/docs/dbeaver/Authentication-Snowflake/#private-key-authentication
• DataGrip: https://www.jetbrains.com/help/datagrip/create-snowflake-data-source-with-key-pair-authentication.html
• VSCode/Cursor Snowflake Extension: https://docs.snowflake.com/en/user-guide/vscode-ext#sign-in-to-snowflake-with-the-vs-code-extension
• VSCode/Cursore DBCode Extension: https://dbcode.io/docs/supported-databases/snowflake (The extension supports Key Pair authentication by selecting the appropriate Type, but this is not documented at the time of this post's release.)