Snowflake MFA Key - Pair authentication for Powerbi

Hariharan R 15 Reputation points
2025-07-11T07:13:12.9366667+00:00

Problem:

  • Snowflake enforces Multi-Factor Authentication (MFA) on all users, in line with our security policies.
  • Power BI does not support key pair authentication, which Snowflake offers for M2M scenarios
  • Power BI's supported auth methods to Snowflake are:
  • Username/password (blocked by MFA)
  • OAuth (but unclear if non-interactive / service principal-based flow is fully supported)

Since this is a fully automated machine-to-machine (M2M) setup with no user interaction, Power BI’s current authentication mechanisms are not suitable when MFA is enforced in Snowflake.Problem:

  • Snowflake enforces Multi-Factor Authentication (MFA) on all users, in line with our security policies.
  • Power BI does not support key pair authentication, which Snowflake offers for M2M scenarios/
  • Power BI's supported auth methods to Snowflake are:
  • Username/password (blocked by MFA)
  • OAuth (but unclear if non-interactive / service principal-based flow is fully supported)
  • how to Achieve Key-pair Authenticaion at powerbi?

Since this is a fully automated machine-to-machine (M2M) setup with no user interaction, Power BI’s current authentication mechanisms are not suitable when MFA is enforced in Snowflake.

Community Center | Not monitored
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Harry Vo (WICLOUD CORPORATION) 3,585 Reputation points Microsoft External Staff Moderator
    2025-07-15T03:25:17.9966667+00:00

    Hi Hariharan R,

    OAuth (but unclear if non-interactive / service principal-based flow is fully supported)

    Power BI supports OAuth 2.0 authentication to Snowflake using Microsoft Entra ID (formerly Azure AD) service principals, which enables true M2M connectivity without requiring MFA or user interaction.

    how to Achieve Key-pair Authenticaion at powerbi?

    Here’s a quick outline of how you can achieve this setup:

    • Register a service principal in Microsoft Entra ID.
    • In Snowflake, create a security integration object that maps Entra ID token claims to Snowflake roles.
    • Use Power BI’s OAuth option in the Snowflake connector to configure the service principal credentials.
    • This setup allows Power BI to connect to Snowflake seamlessly, fully automated and MFA-compliant.

    Feel free to ask if you have any question! Thank you!


  2. Hong Zhang (Fletcher Building) 0 Reputation points
    2025-11-21T01:23:03.6+00:00

    Power BI now supports Snowflake Key Pair Authentication.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.