Snowflake Cortex 身份验证

Connect UiPath to Snowflake Cortex using a Personal Access Token, OAuth 2.0 Authorization code, or OAuth 2.0 Client credentials, by providing your account identifier and related credentials.

先决条件

This connector supports three authentication methods: Programmatic Access Token (default), OAuth 2.0 Authorization code, and OAuth 2.0 Client credentials.

要创建连接，您需要以下凭据：

• Programmatic Access Token:
  • 帐户标识符
  • 个人访问令牌
• OAuth 2.0 Authorization code:
  • 帐户标识符
  • 客户端 ID
  • 客户端密码
  • Scope - Defaults to session:role:SYSADMIN. You can change this to a different role, provided that role is granted to the connecting user.
• OAuth 2.0 客户端凭据：
  • 帐户标识符
  • Client ID and Client Secret - From the Microsoft Entra ID application registration.
  • Scope - The scope of the Microsoft Entra ID application representing Snowflake, in the form api://<application-id-uri>/.default.
  • Tenant ID - The Microsoft Entra ID directory (tenant) ID, available in the Overview section of your Microsoft Entra ID application registration.

检索您的凭据

您可以从“帐户详细信息”或帐户服务器的 URL 中提取帐户标识符。例如，URL YQXMADF-EWA19151.snowflakecomputing.com中的标识符为YQXMADF-EWA19151 。

可以在 Snowflake 仪表板的“设置” > “身份验证” > “程序访问令牌”下创建个人访问令牌 (PAT)。仅当您的角色允许创建 PAT 时，您才会看到 PAT 选项。请联系管理员以获取详细信息。

使用 OAuth 2.0 授权代码身份验证方法

备注：

By default, users with the ACCOUNTADMIN, ORGADMIN, or SECURITYADMIN role are blocked from using OAuth 2.0 authentication to create a connection. The role you enter in Scope must be granted to the connecting user and must not be one of these three. For details, refer to Snowflake OAuth authorization flow.

要为 Snowflake 创建 OAuth 2.0 客户端，请执行以下步骤：

1. Run the following query to create the OAuth integration. Make sure to include the correct redirect URL: https://{baseURL}/provisioning_/callback (for example, for Automation Cloud, https://cloud.uipath.com/provisioning_/callback).

   CREATE SECURITY INTEGRATION my_oauth_integration_uipath
      TYPE=OAUTH
      OAUTH_CLIENT=CUSTOM
      OAUTH_REDIRECT_URI='https://cloud.uipath.com/provisioning_/callback'
      OAUTH_CLIENT_TYPE='CONFIDENTIAL'
      OAUTH_ISSUE_REFRESH_TOKENS=true
      OAUTH_REFRESH_TOKEN_VALIDITY=86400
      ENABLED=true;
   

2. 运行以下查询以查看客户端详细信息。复制OAUTH_CLIENT_ID 。

   DESCRIBE SECURITY INTEGRATION my_oauth_integration_uipath
   

3. Run the following query to view the client secret. Copy OAUTH_CLIENT_SECRET (not OAUTH_CLIENT_SECRET_2).

   select system$show_oauth_client_secrets('MY_OAUTH_INTEGRATION_UIPATH');
   

有关详细信息，请参阅为自定义客户端配置 Snowflake OAuth 。

Using the OAuth 2.0 Client credentials authentication method

This method authenticates through Snowflake External OAuth with Microsoft Entra ID instead of Snowflake's own OAuth endpoint: the connector exchanges the Microsoft Entra ID application's client ID and secret for an access token, then sends that token to Snowflake.

To set up OAuth 2.0 Client credentials authentication, configure both Microsoft Entra ID and Snowflake:

1. In Microsoft Entra ID, register an application and create a client secret for it. This provides the Client ID and Client Secret, and the Tenant ID is available in the application's Overview section.
2. In Microsoft Entra ID, identify (or register) the application representing Snowflake and note its Application ID URI. Use it to build the Scope value: api://<application-id-uri>/.default.
3. In Snowflake, create a security integration for external OAuth with the application type set to Azure, the audience set to the Application ID URI from step 2, and a Snowflake user mapped to the service principal's token claim.

For the exact configuration syntax, refer to Snowflake External OAuth with Microsoft Entra ID in the Snowflake documentation.

添加 Snowflake Cortex 连接

1. 从产品启动器中选择“Orchestrator”。

2. 选择一个文件夹，然后导航到“连接”选项卡。

3. 选择“添加连接”。

4. 要打开连接创建页面，请从列表中选择连接器。您可以使用搜索栏查找连接器。

5. Select the authentication type: Programmatic Access Token, OAuth 2.0 Authorization code, or OAuth 2.0 Client credentials.

6. 输入所需的凭据，然后选择“连接” 。

   在可用的情况下，选择字段旁边的菜单，然后选择“使用凭据资产”或“使用 Orchestrator 资产”以引用 Orchestrator 资产，而不是直接输入值。有关更多信息，请参阅使用凭据资产进行连接。