Snowflake retiring single-factor password authentication in Nov 2025

Tasleema
Tasleema Domo Product Manager
in Connectors

Snowflake has announced it will block single-factor password authentication by Nov 2025. ( https://www.snowflake.com/en/blog/blocking-single-factor-password-authentification/ ). This effectively means that connectors that require only username and password will no longer be able to connect to Snowflake starting Nov 2025.  Customers who wish to connect their Snowflake data to Domo will need to use a connection strategy that supports OAuth or Key Pair authentication. 

 

What does this mean for customers? 

Customers using the Snowflake connectors will need to migrate to a connection strategy that either uses OAuth or Key Pair authentication.  There are currently 2 options: 

 

  1. If a customer is on Consumption, they can take advantage of Cloud Amplifier (CA) for Snowflake.  CA supports both OAuth and Key Pair authentication, as well as write capabilities. 
  2. Domo has OAuth and Key Pair versions of the connectors that use username and password.  If a customer is not on Consumption, or they are on Consumption but are not ready to move to CA, they can use the appropriate OAuth or Key Pair version of the connector.  A mapping of the connectors that require username and password, and their OAuth and/or Key Pair alternatives is at the bottom of this post. 

 

Can Domo help customers with the migration to a different version of the connector? 

Domo can migrate datasets from a connector using the username password version to the corresponding OAuth or Key Pair version.   We cannot migrate datasets from one version to another that is not an OAuth or Key Pair version of the original connector.  E.g, we cannot migrate customers from the standard connector to an unload connector. 

 

How is Domo communicating this information to customers? 

Domo will communicate this update as follows: 

 

  1. All Knowledge Base (KB) articles will be updated to say that the username/password connectors are deprecated as of April 15th 2025.  This is to prevent further power ups on the username/password connectors.  The KB articles will direct users to use CA, or the OAuth/Key-Pair alternative. 
  2. Datasets using the username/password connectors will still run, however Domo will try to prevent new power ups using these connectors as of April 15th 2025.
  3. An email message will be sent to affected dataset owners.  The email will include the connection options above, and instructions on how to migrate their datasets to a different connector if they wish to. 

 

  

 Mapping of username/password connectors to OAuth/Key Pair connectors.

 

Username/Password version 

OAuth Version 

Key Pair Version 

Snowflake 

Snowflake OAuth 

SnowflakeEnterprise OAuth 

Snowflake Key Pair 

Snowflake Unload 

Snowflake OAuth Unload 

Snowflake Key Pair Unload 

Snowflake Unload v2 

Snowflake OAuth Unload v2 (coming soon) 

Snowflake Key Pair Unload v2 

Snowflake Managed Unload 

Snowflake OAuth Internal Unload v2 Connector 

Snowflake Key Pair Internal Managed Unload 

Snowflake High Bandwidth With Advanced Partitions 

Snowflake OAuth High Bandwidth With Advanced Partitions 

Snowflake Key Pair High Bandwidth With Advanced Partitions (coming soon) 

Snowflake Partition Connector 

Snowflake OAuth High Bandwidth With Advanced Partitions 

Snowflake Key Pair Partition Connector 

Snowflake Writeback 

Snowflake OAuth Writeback  

Snowflake Key Pair Writeback. 

Categories