This page describes the initial setup steps for using TrustLogin as the source of identity
to perform Identity Provisioning to Snowflake.

Note: For detailed instructions on operating Snowflake, please refer to the documentation provided by Snowflake.

Setup Steps

Snowflake Settings

1. Log in to Snowflake with administrator privileges.
   

2. From the menu on the left side of the screen, select "Projects".

   .
   

3. From the "+Add new" button, select "SQL File".

   
   

4. Give the "SQL File" you created any name you like. (In the screenshot, it is named TEST.aql)

   
   

5. Get the SQL query for generating a SCIM access token.
   The query text is provided in Snowflake’s official documentation (external site).
   Copy the query text for SCM (System for Cross-domain Identity Management) integration from the Snowflake official documentation.

   
   

6. Paste the SCIM integration query text from step 5 into the "SQL File" you created in step 4.

   

7. Click the "▶" button in the upper left to run the query.
   Click the value inside the red box next to "SYSTEM$GENERATE_SCIM_ACCESS_TOKEN" displayed in "Results(just now)".

   
   

8. The access token value is shown in the pop-up that appears. Click the "copy" icon in the upper right, and copy it to a notepad or similar for safekeeping.

   
   

9. Get the account URL used to specify the SCIM endpoint. From the "Admin" menu, select "Accounts". From the "Admin" menu, select "Accounts".

   
   

10. Click the copy icon in the "Locator" column of the displayed account, and copy the URL.

    
    
    This completes the preliminary preparation on the Snowflake side. Next, configure the settings on the TrustLogin side.
    

TrustLogin Settings

1. Log in to the TrustLogin Admin Page, and from the "Admin Page ＞ Settings ＞ Optional Features" menu,
   open "Settings" next to "Identity Provisioning".
   
   

2. Click "Add Service".
   
   
3. On the Add Service screen, search for and select "Snowflake", then click the "Add" button.
   
   
4. You will be redirected to the "Identity Provisioning ＞ Snowflake" page.
   Click the "Edit" button.
   
   

5. Open "Access Settings", enter the following values for the settings items, and click "Save".

   API URL	Enter the URL value copied in Snowflake Settings step 10, and add "/scim/v2" to the end. Example: https://xxxxx.xxxxxxxxxxxxx-1.snowflakecomputing.com/scim/v2
   Access Token	Enter the token value copied in Snowflake Settings step 8.

   
   
   

6. Click the "Connect" button in the upper right of the screen.
   
   

7. Once the button status updates to "Connected", the initial setup is complete.
   
   

Next step: The manual for configuring user synchronization is available here

Values You Can Configure in Attribute Mapping

You can map any attribute on the TrustLogin side to any attribute on the Snowflake side.
For configuration instructions, see here

Available Default Functions

• default functions common to all services can be specified.