SAP Knowledge Base Article - Public

3587634 - How to use keypair authentication with Snowflake Import Connections in SAP Analytics Cloud?

Symptom

Due to security changes being implemented in November 2025, Snowflake are no longer accepting single factor password sign-ins. user/password authentication for service accounts. 

Environment

  • SAP Analytics Cloud
  • Cloud Agent version >= 1.0.441

Reproducing the Issue

  1. Login to SAP Analytics Cloud.
  2. Navigate to Connections in SAP Analytics Cloud.
  3. Click on the "+" icon to create a new connection.
  4. Choose SQL Databases.
  5. Select a pre-configured Location ID and choose "Snowflake" as the Connection Type.
  6. Click OK.
  7. Fill the necessary details.
  8. Click on Create.
    >> Observe the error: "Unable to connect to data source. Check your connection details then try again."

Cause

User-password authentication is no longer supported by Snowflake, due to security changes being implemented: Snowflake Will Block Single-Factor Password Authentication

Resolution

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental 

Prerequisites:

  • Cloud Agent version >= 1.0.441
  • Keypair authentication method requires, as a minimum, a 2048-bit RSA key pair.
  • OpenSSL

  1. Open Terminal window
  2. Generate a Private Key:

    openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8 -nocrypt

  3. Generate Public Key:

    openssl rsa -in rsa_key.p8 -pubout -out rsa_key.pub

  4. Assign the public key (found in the rsa_key.pub) to a Snowflake user

    ALTER USER example_user SET RSA_PUBLIC_KEY='MIIBIjANBgkqh...';


  5. Transfer the private key file to the SAC Agent system in the same directory as the driverconfig.properties file. 


  6. Restart SAC Agent


  7. Update the existing Snowflake Connection:

    Go into existing Snowflake Connections and update the connection with the private_key_file jdbc attribute in the Warehouse input area. 





  8. Make sure the Username contains the user assigned to the public key
  9. Leave the password blank and Save the connection. 

See Also

https://docs.snowflake.com/en/user-guide/key-pair-auth

Keywords

SAP Analytics Cloud, SAC, connection, Snowflake, SQL Databases, create connection, unable to connect, connection error, data source error, Location ID, new connection, login, connection details, troubleshooting, connectivity, integration , KBA , LOD-ANA-AQU , Import Data Connections (Acquiring Data) , How To

Product

SAP Analytics Cloud 1.0

Attachments

Pasted image.png
Pasted image.png
Pasted image.png