Error: Authentication Attempt Rejected by the Current Authentication Policy
Issue
While creating a new Snowflake destination in Fivetran, the setup tests fail with the following error:
Authentication attempt rejected by the current authentication policy.
Environment
Destination: Snowflake
Resolution
To resolve this issue, update your Snowflake destination to use key-pair authentication instead of password authentication:
- Generate a public and private key pair. For more information, see our Configure key-pair authentication documentation.
- In a Snowflake worksheet, assign the public key to the relevant Snowflake user using the following command:
alter user <USERNAME> set rsa_public_key='<PUBLIC_KEY>'
In Fivetran, update your authentication mode.
i. Go to your Snowflake destination page.
ii. In the Actions drop-down menu, click Edit connection details.
iii. Set the authentication mode to KEY-PAIR, then enter the private key.
iv. Click Save & Test.
Cause
Your Snowflake account's authentication policy defines which authentication methods are permitted. For more information, see the Snowflake authentication policy documentation.
If you attempt to connect using a method not permitted by the policy, Snowflake rejects it. This issue occurs when you configure your destination to use password authentication in Fivetran while the policy requires key-pair authentication.