Finding your Account URL, Account Locator, Client ID and Client Secret

Prerequisites for Snowflake Integration

WARNING

• You need to be an ACCOUNTADMIN for creating an OAuth application in Snowflake.

You'll now be prompted to add the Account URL, Account Locator, Client ID and Client Secret.

Finding Account URL and Account Locator

1. Sign in to your Snowflake Account.
2. In the left navigation bar at bottom, you will find your Account URL and Account Locator as shown below.
3. Copy and enter it in Truto interface.

Create your Client ID and Client Secret

1. To create your Client ID and Client Secret, Go to Worksheets from left navigation bar.
2. Click on the Add button and select SQL Worksheet as shown below.
3. Make sure that the Database is Snowflake and the Schema is Account_Usage.
4. Now execute below commands in Worksheet to create your OAuth application.

CREATE ROLE TRUTO_ROLE;

TIP

• You can create any Role name by replacing TRUTO_ROLE above. But it should be replaced in all the following commands as well.

CREATE SECURITY INTEGRATION
         Truto
         TYPE = OAUTH
         OAUTH_CLIENT = CUSTOM
         OAUTH_CLIENT_TYPE = 'CONFIDENTIAL'
         OAUTH_REDIRECT_URI = 'https://api.truto.one/connect/snowflake/callback'
         ENABLED = TRUE
         PRE_AUTHORIZED_ROLES_LIST = ( 'TRUTO_ROLE' )
         OAUTH_ISSUE_REFRESH_TOKENS = TRUE
         OAUTH_REFRESH_TOKEN_VALIDITY = 7776000

WARNING

• OAUTH_REFRESH_TOKEN_VALIDITY can be set to maximum value of 7776000 seconds (90 Days). After this the integration should be re-authenticated.

• If you need to raise the maximum value for Refresh Token's validity upto one year, refer to this link.

5. To view Client ID and Client Secret run the below command in worksheet.

SELECT SYSTEM$SHOW_OAUTH_CLIENT_SECRETS('TRUTO');

6. Copy your OAUTH_CLIENT_ID and OAUTH_CLIENT_SECRET and enter it in Truto interface as Client ID and Client Secret respectively.
7. Now go to Users & Roles from left navigation bar as shown below.
8. Go to Roles and select TRUTO_ROLE.
9. Now click on more options in TRUTO_ROLE and then Grant to user as shown below.
10. Select a user to grant this role and click on Grant.
11. Now click on more options in TRUTO_ROLE again and then Grant role as shown below.
12. Select ACCOUNTADMIN and click on Grant.
13. Now click on name tab on the top left and then Switch Role and under TRUTO_ROLE select Set as default for now.

    TIP

    • It is required to complete the OAuth flow with allowed role.You can change it after OAuth flow is completed.
    
14. After filling the data in Truto, click on Connect.