🔌Add a Snowflake connector

Connector features

You can use the Toucan Snowflake connector to connect to your Snowflake account with a key-pair authentication or basic authentication and access tables or views with a SQL query or by using our no-code form .

With this connection, you can fetch data from your Snowflake to fill your charts and dashboards.

Changelog

December 23 - This connector is NativeSQL compatible November 2024 - This connector supports hybrid pipelines

September 25 - This connector supports key-pair authentification following Snowflake rules

October 25 - This data connector is supported for connection and NativeSQL by our new Data Execution system

Configuring a Snowflake connection

Follow the steps described in Add a connector, choose Snowflake and fill out the form with the following info:

Field	Format / Type	Description	Example
Name (mandatory)	String	Use it to identify your connection	MySnowflakeConnection
Account (mandatory)	String	in the form account_id.region_id.cloud_platform. When you connect to your snowflake UI, it is the first part of the url <account_identifier>.snowflakecomputing.com. You can read more about it here	<account_identifier>
Authentication method (mandatory)	Enum	List with Snowflake (ID+Password) (deprecated by Snowflake in November 2025) Key pair and oAuth (deprecated)	Key pair
User	String	- Snowflake (ID+Password) - Key pair The user with rights to access to the Snowflake database	my_snowflake_user
Password	String	- Snowflake (ID+Password) - Key pair Password associated to the user or to the private key if your key is protected by a password (will be stored as a secret)	mysecretpassword
Private Key	String	- Key pair the key generated to access to your Snowflake database the key in PEM-encoded PKCS#8 format (will be stored as a secret)	-----BEGIN ENCRYPTED PRIVATE KEY----- MIIJpDBW[...]-----END ENCRYPTED PRIVATE KEY-----
Token Endpoint	String	- oAuth The token endpoint URL	https://<your_snowflake_account>.snowflakecomputing.com/oauth/token-request
Token Endpoint Content Type	String	- oAuth The content type to use when requesting the token endpoint	application/x-www-form-urlencoded
Role (optional)	String	The user role that you want to connect with. See more details here.	USER
Default Warehouse (mandatory)	String	The default warehouse that shall be used for any data source	COMPUTE_WH
Retry Policy (optional)	Boolean	Boolean allows to configure a retry policy if the connection is flaky. max attempts: maximum number of retries before giving up max_delay: in seconds, above the connection is dropped wait_time: time in seconds between each retry
Slow Queries' Cache Expiration Time (optional)	Integer	Slow queries' cache expiration time in seconds

• Click on the TEST CONNECTION button then SAVE the connection

  {% hint style="success" %} After successfully configuring the connector, you will be able to find it in the Connector section of the DataHub "Datasource" tab {% endhint %}

Create a dataset from a Snowflake connection

This data connector is supported in simple and code/SQL mode with:

• our current Data Execution system

• our new Data Execution System

To create a dataset from Snowflake, click on the "create from" icon, you will then be able to:

• Select the Database

• Select the Data warehouse

• Select the Schema

• Select Table or Views

• Only keep the columns you need

For more info, see the dedicated section Create a new dataset from a dataset

After selecting data from your connector you will be able to create a dataset thanks to YouPrep using the selection as "source step".

How to troubleshoot a Snowflake connection

Generally ensure all mandatory fields (Name, Account, User, Private Key, Password if your private Key is protected by a password) are filled.

Test connection modal

Use the Test connection modal to troubleshoot a misconfiguration

The Snowflake test connection modal is composed fo two steps:

• Connection to Snowflake : check if Toucan is allowed to connect to Snowflake, on the network, the account listed is a Snowflake account, the user and private key are valid means of authentication.

• Default warehouse exists : checks if the Default Warehouse entered is valid / or accessible to your user.

Network access

Verify that your Snowflake account is reachable from Toucan IP and is not blocked by firewalls.

If you have made an error entering your account, you will have an

internal server error

Check our IP for our Current Data Execution System and New Data Execution System

Authentication

If the modal displays a warning icon on Connection to Snowflake line and the message displayed is:

Connection failed for the user '{{user_entered}}', please check your credentials

• Confirm User , Private Key, Password are valid and have been granted connect permissions to the target warehouse.

Other options

Default warehouse

If the modal displays a warning icon on Default warehouse exists line and the message displayed is:

The warehouse '{{YOUR_WAREHOUSE}}' does not exist.

• Check the spelling of the warehouse that it exists or that your user has access to it.

Advanced troubleshooting

• Review logs on your Snowflake account for more detailed error information.

• For persistent issues, attempt to connect using CLI with the same parameters to isolate issues.