Skip to main content
Documentation
Documentation
Adaptive Planning
Last Updated: 2026-07-10
Set up Cloud Data Connect Snowflake OAuth2 Credentials

Set up Cloud Data Connect Snowflake OAuth2 Credentials

  • A Snowflake cloud data warehouse environment.
  • Network policy configured in Snowflake to support OAuth2. Refer to Snowflake documentation or contact your Snowflake administrator.
  • Authentication and authorization details for the environment you want to connect to.
  • Access to an administrator who can create views in the environment.
Security:
  • Integration Operator
     permission.
  • Data Designer
     permission.
Cloud Data Connect (CDC) for Snowflake connector supports OAuth2 authentication. You can create the OAuth2 credential for CDC with Design Integrations. You then can select the credential in either the CDC pipeline-interface or CDC connections in Design Integrations.
For help running scripts in Snowflake, consult their documentation or your Snowflake admin or account manager.
  1. In Adaptive Planning, select
    Integration
    Design Integrations
     from the main menu.
  2. Select
    OAuth 2
    Create New Credential
    .
  3. Copy the
    Redirect URI
    .
  4. In Snowflake, run this SQL script as ACCOUNTADMIN: 
    CREATE SECURITY INTEGRATION MY_OAUTH_INTEGRATION
    TYPE = OAUTH
    ENABLED = TRUE
    OAUTH_CLIENT = CUSTOM
    OAUTH_CLIENT_TYPE = 'CONFIDENTIAL'
    OAUTH_REDIRECT_URI = 'https://your-app.com/callback'
    OAUTH_ISSUE_REFRESH_TOKENS = TRUE
    OAUTH_REFRESH_TOKEN_VALIDITY = 86400;
    • Rename MY_OAUTH_INTEGRATION to something unique if multiple users are using the same Snowflake environment.
    • Replace https://your-app.com/callback with your actual redirect URI from step 2.
    • The refresh token validity is set to 86400 seconds (24 hours). You can change this value as needed.
  5. To retrieve OAuth configuration details, run this SQL script and download the CSV file for reference: 
    DESC SECURITY INTEGRATION MY_OAUTH_INTEGRATION;
    The script returns:
    • OAUTH_CLIENT_ID (needed for authentication).
    • OAUTH_AUTHORIZATION_ENDPOINT (where users authenticate).
    • OAUTH_TOKEN_ENDPOINT (where you exchange the authorization code for an access token).
  6. Run this SQL script to obtain the client secret: 
    SELECT SYSTEM$SHOW_OAUTH_CLIENT_SECRETS('MY_OAUTH_INTEGRATION');
    The script returns 2 secrets. You can use either 1 for authentication.
  7. Run this SQL script to set a default warehouse for the user who is going to authorize: 
    ALTER USER <your_user_name> SET DEFAULT_WAREHOUSE = '<your_user_name>';
  8. (Optional) Run this SQL script to create an Admin Role to use as Scope to allow admin operations using OAuth2 credential later: 
    CREATE ROLE MyRole1;
 
GRANT ROLE ACCOUNTADMIN TO ROLE MyRole1;
 
ALTER ACCOUNT SET OAUTH_ADD_PRIVILEGED_ROLES_TO_BLOCKED_LIST = false;
 
ALTER SECURITY INTEGRATION MY_OAUTH_INTEGRATION
    SET PRE_AUTHORIZED_ROLES_LIST = ('MyRole1', 'PUBLIC', 'ACCOUNTADMIN', 'SYSADMIN');
 
GRANT ROLE MyRole1 TO USER username;
 
ALTER USER username SET DEFAULT_ROLE = 'MyRole1';
  9. In Adaptive Planning, select
    Integration
    Design Integrations
     and enter these values:
    • Consumer Key
    • Consumer Secret
    • Authorize Redirect
    • URL Access Token Service Http Method: POST
    • Access Token Service Endpoint
  10. Save and select
    Request Authorization
    .
  11. Sign into Snowflake and select
    Allow
    .
You can select OAuth2 credentials for use in CDC Snowflake pipelines.