# Configuring the Snowflake SaaS Connector

To connect Snowflake to Agentic Fabric, you'll generate an encrypted private key for Snowflake. This will allow Agentic Fabric to discover Snowflake Cortex Agents and related resources.

!!! important

If your organization has already configured a Snowflake SaaS source, you can use the existing source for agent discovery. The fields will be prepopulated with the source's information. You can edit these fields to configure a new integration.

## Preparing Snowflake for Onboarding

Before you onboard Snowflake in Agentic Fabric, complete the following actions for Snowflake:

1. Use the following command to perform tasks as a global organization administrator:

```
    USE ROLE GLOBALORGADMIN;
    
    ```

For more information about this role, refer to the [Snowflake product documentation](https://docs.snowflake.com/en/user-guide/organization-administrators#using-the-globalorgadmin-role).

2. Perform the [Show Organization Accounts](https://docs.snowflake.com/en/sql-reference/sql/show-organization-accounts) command to find the Base URL, Organization, and Account values for the organization account in Snowflake. You'll need these values to connect [Snowflake and Agentic Fabric](#connecting-snowflake-to-agentic-fabric).

3. Follow the Snowflake [connector documentation](https://documentation.sailpoint.com/connectors/saas/snowflake/help/saas_connectivity/snowflake/required_permissions.html#Agent) to configure the permissions required to grant necessary access rights to resources or data.
4. [Generate an encrypted private key](https://docs.snowflake.com/en/user-guide/key-pair-auth#generate-the-private-keys) and passcode for Snowflake. The private key is generated in the PEM format.

!!! note

- To ensure maximum security, SailPoint only supports the encrypted private key to connect to Snowflake.
        - By default, Windows systems do not support OpenSSL. You might need to download and install the OpenSSL libraries to generate your keys. Apple systems support OpenSSL by default. Go to [OpenSSL](https://openssl-library.org/source/) to download OpenSSL for Windows.

## Connecting Snowflake to Agentic Fabric

1. Go to the **Connect Source** step of the Agentic Fabric onboarding experience.
2. Select **Snowflake SaaS** from the left pane.
3. In the **Snowflake SaaS** section, complete the following:

- In the **Source Name** field, enter a unique name for the source.

- In the **Source Owner** field, select the identity who will own the source.

- In the **Description** field, enter a unique description for the source to distinguish it from similar connections.

4. In the **Configure Authentication** section, complete the following:

- In the **Base URL** field, enter the base URL of your organization's Snowflake system (`https://<organization>-<account>.snowflakecomputing.com`).
      - In the **Authentication Type** dropdown list, select **Key Pair Authentication**.
      - In the **Organization** field, enter the value for `organization_name`.
      - In the **Account** field, enter the value for `account_name`.
      - In the **Username** field, enter the username used to log in to the Snowflake organization account.
      - In the **Private Key** field, enter the private key you generated.

!!! important

When you enter the private key, include the BEGIN PRIVATE KEY and END PRIVATE KEY lines.

- In the **Passphrase** field, enter the passcode to validate the private key.

5. Select **Test Connection** to ensure the connection is successful.

6. If the test is successful, select **Aggregate** to run an aggregation for the source. Select **Exit** to skip this step. You can configure aggregations for the source's [datasets](../../../sources/datasets.md#configuring-dataset-aggregations) later in the source's configuration. For information about datasets specific to Snowflake, refer to the Snowflake [connector documentation](https://documentation.sailpoint.com/connectors/saas/snowflake/help/saas_connectivity/snowflake/datasets.html).

A **Completed** status is now displayed next to the source in the left panel.

7. Choose another connector to configure or select **Continue** to proceed to the next onboarding step.

Configuring the Snowflake SaaS Connector

To connect Snowflake to Agentic Fabric, you'll generate an encrypted private key for Snowflake. This will allow Agentic Fabric to discover Snowflake Cortex Agents and related resources.

Important

If your organization has already configured a Snowflake SaaS source, you can use the existing source for agent discovery. The fields will be prepopulated with the source's information. You can edit these fields to configure a new integration.

Preparing Snowflake for Onboarding

Before you onboard Snowflake in Agentic Fabric, complete the following actions for Snowflake:

Use the following command to perform tasks as a global organization administrator:
```
USE ROLE GLOBALORGADMIN;
```
For more information about this role, refer to the Snowflake product documentation.
Perform the Show Organization Accounts command to find the Base URL, Organization, and Account values for the organization account in Snowflake. You'll need these values to connect Snowflake and Agentic Fabric.
Follow the Snowflake connector documentation to configure the permissions required to grant necessary access rights to resources or data.
Generate an encrypted private key and passcode for Snowflake. The private key is generated in the PEM format.
Note
- To ensure maximum security, SailPoint only supports the encrypted private key to connect to Snowflake.
- By default, Windows systems do not support OpenSSL. You might need to download and install the OpenSSL libraries to generate your keys. Apple systems support OpenSSL by default. Go to OpenSSL to download OpenSSL for Windows.

Connecting Snowflake to Agentic Fabric

Go to the Connect Source step of the Agentic Fabric onboarding experience.
Select Snowflake SaaS from the left pane.
In the Snowflake SaaS section, complete the following:
- In the Source Name field, enter a unique name for the source.
- In the Source Owner field, select the identity who will own the source.
- In the Description field, enter a unique description for the source to distinguish it from similar connections.
In the Configure Authentication section, complete the following:
- In the Base URL field, enter the base URL of your organization's Snowflake system (https://<organization>-<account>.snowflakecomputing.com).
- In the Authentication Type dropdown list, select Key Pair Authentication.
- In the Organization field, enter the value for organization_name.
- In the Account field, enter the value for account_name.
- In the Username field, enter the username used to log in to the Snowflake organization account.
- In the Private Key field, enter the private key you generated.
  
  Important
  
  When you enter the private key, include the BEGIN PRIVATE KEY and END PRIVATE KEY lines.
- In the Passphrase field, enter the passcode to validate the private key.
Select Test Connection to ensure the connection is successful.
If the test is successful, select Aggregate to run an aggregation for the source. Select Exit to skip this step. You can configure aggregations for the source's datasets later in the source's configuration. For information about datasets specific to Snowflake, refer to the Snowflake connector documentation.

A Completed status is now displayed next to the source in the left panel.
Choose another connector to configure or select Continue to proceed to the next onboarding step.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.