Microsoft Entra ID
GeneralSnowflake Tutorial
In brief
The tutorial now uses single quotes in the Snowflake ALTER SECURITY INTEGRATION commands and links to Snowflake’s SAML2 security integration guide.
What Entra admins need to know
Administrators should use the revised SQL examples and reference when configuring Snowflake SAML2 integration. No required action is stated.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Create a SQL notebook, paste the following, but do not run it. For more information, see the CREATE SECURITY INTEGRATION (SAML2) guide on how to create a SAML2 security integration in Snowflake.
CREATE [ OR REPLACE ] SECURITY INTEGRATION [ IF NOT EXISTS ] <your security integration name goes here> TYPE = SAML2 ENABLED = TRUE | FALSE SAML2_ISSUER = '<EntityID/Issuer value which you have copied>'
- [ SAML2_SNOWFLAKE_ISSUER_URL = '
' ]
alter security integration `'<your security integration name goes here>`' set SAML2_SNOWFLAKE_ISSUER_URL = `https:'https://<organization_name>-<account name>.snowflakecomputing.com`com';
- [ SAML2_SNOWFLAKE_ACS_URL = '
' ]
alter security integration `'<your security integration name goes here>`' set SAML2_SNOWFLAKE_ACS_URL = `https:'https://<organization_name>-<account name>.snowflakecomputing.com/fed/login`login';
@@ -117,11 +117,11 @@ Follow these steps to enable Microsoft Entra SSO.  -1. Create a SQL notebook, paste the following, but do not run it.+1. Create a SQL notebook, paste the following, but do not run it. For more information, see the [CREATE SECURITY INTEGRATION (SAML2)](https://docs.snowflake.com/en/sql-reference/sql/create-security-integration-saml2) guide on how to create a SAML2 security integration in Snowflake. ``` CREATE [ OR REPLACE ] SECURITY INTEGRATION [ IF NOT EXISTS ]- <name>+ <your security integration name goes here> TYPE = SAML2 ENABLED = TRUE | FALSE SAML2_ISSUER = '<EntityID/Issuer value which you have copied>'@@ -157,16 +157,14 @@ Follow these steps to enable Microsoft Entra SSO. - [ SAML2_SNOWFLAKE_ISSUER_URL = '<string_literal>' ] -```- alter security integration `<your security integration name goes here>` set SAML2_SNOWFLAKE_ISSUER_URL = `https://<organization_name>-<account name>.snowflakecomputing.com`;-```+ ```+ alter security integration '<your security integration name goes here>' set SAML2_SNOWFLAKE_ISSUER_URL = 'https://<organization_name>-<account name>.snowflakecomputing.com';+ ``` - [ SAML2_SNOWFLAKE_ACS_URL = '<string_literal>' ]-```- alter security integration `<your security integration name goes here>` set SAML2_SNOWFLAKE_ACS_URL = `https://<organization_name>-<account name>.snowflakecomputing.com/fed/login`;-```-> [!NOTE]-> Follow [this](https://docs.snowflake.com/en/sql-reference/sql/create-security-integration.html) guide to know more about how to create a SAML2 security integration.+ ```+ alter security integration '<your security integration name goes here>' set SAML2_SNOWFLAKE_ACS_URL = 'https://<organization_name>-<account name>.snowflakecomputing.com/fed/login';+ ``` > [!NOTE] > If you have an existing SSO setup using `saml_identity_provider` account parameter, then follow [this](https://docs.snowflake.com/en/user-guide/admin-security-fed-auth-advanced.html) guide to migrate it to the SAML2 security integration.