Login to Snowflake and setup new user accounts using Azure AD

To connect Snowflake to Azure use: alter account set saml_identity_provider = '{ "certificate": "64BIT CERTIFICATE", "ssoUrl":"SSO URL", "type": "custom", "label": "AzureAD"}'; To add the 'Azure AD sign in' option to your Snowflake sign-in page, use: alter account set sso_login_page = TRUE; To set up a role to be the owner of accounts added from Azure and generate a Snowflake Scim access token, use: //a new role with enough rights to manage the connection to Azure and crreate useers and roles create or replace role AzureConnection; //give permissions to create users grant create user on account to AzureConnection; //give permissions to create roles grant create role on account to AzureConnection; //give these right to the account admin grant role AzureConnection to role ACCOUNTADMIN; create or replace security integration AzureConnection type = scim scim_client = 'azure' run_as_role = 'AZURECONNECTION'; select system$generate_scim_access_token('AZURECONNECTION');