Authenticate SSO credentials to query data

Once your connection admins have configured SSO authentication, you can query data using your SSO credentials. Atlan currently supports the following connectors for SSO authentication:

• Amazon Redshift — currently only Okta is supported as the identity provider.
• Google BigQuery — Atlan uses Google OAuth 2.0, which handles integration with all identity providers. However, Atlan has only validated the integration with Okta.
• Snowflake — Atlan uses Snowflake External OAuth for SSO authentication, thus supporting all Snowflake-supported identity providers.

To query data using shared credentials instead, refer to Provide credentials to query data.

Set up your SSO credentials

Atlan supports SSO authentication for querying data from the following connections:

Amazon Redshift

Atlan supports Okta SSO authentication for Amazon Redshift connections. Before you can query data with SSO credentials, you will first need to enable Okta SSO authentication for Amazon Redshift in Atlan.

To set up your Okta SSO credentials for an Amazon Redshift connection:

1. From the left menu of any screen, click Insights.
2. Under the Explorer tab on the left, use the dropdown to select the Amazon Redshift connection that requires SSO credentials.
3. A Set up SSO authentication for Redshift dialog will appear. Click Get started to set up your SSO credentials for the connection:
   1. For Authentication, Okta is the default selection.
   2. For Username, enter your Okta username.
   3. For Password, enter the password for your Okta username.
   4. Click the Test Authentication button to confirm connectivity.
   5. Once authentication is successful, click Done.
4. Close the SSO authentication completed dialog to return to the query editor.

You can now run queries using your Okta SSO credentials! 🎉

Google BigQuery

Atlan supports Google OAuth 2.0 SSO authentication for Google BigQuery connections. Before you can query data with SSO credentials, you will first need to enable SSO authentication for Google BigQuery in Atlan.

To set up your SSO credentials for a Google BigQuery connection:

1. From the left menu of any screen, click Insights.
2. Under the Explorer tab on the left, use the dropdown to select the Google BigQuery connection that requires SSO credentials.
3. An Authorizing dialog will appear and you will be redirected to sign in with your Google account. From the corresponding screen, click Allow to enable authentication.
4. Once authorization is successful, close the Authorizing dialog to return to the query editor.

You can now run queries using your SSO credentials! 🎉

Snowflake

Atlan supports SSO authentication via Snowflake External OAuth for Snowflake connections. Before you can query data with SSO credentials, you will first need to enable SSO authentication for Snowflake in Atlan.

To set up your Snowflake OAuth credentials for a Snowflake connection:

1. From the left menu of any screen, click Insights.
2. Under the Explorer tab on the left, use the dropdown to select the Snowflake connection that requires Snowflake OAuth credentials.
3. An Authorizing dialog will appear. Once authorization is successful, close the Authorizing dialog to return to the query editor.
4. (Optional) To change roles and warehouses, click the connection name in the left menu or the Editor context tab with the connection name:
   1. For Role, click the Select role dropdown to select a granted role assigned to you in Snowflake. If no role is selected, Atlan will use the default PUBLIC role in Snowflake for authentication.
   2. For Warehouse, click the Select warehouse dropdown to change warehouses. 

You can now run queries using your Snowflake OAuth credentials! 🎉

Remove your SSO credentials

To remove your SSO credentials for a connection:

1. From the left menu of any screen, click Insights.
2. Under the Explorer tab on the left, use the dropdown to select the connection with SSO authentication enabled.
3. From the upper right of the query editor, click the Editor context tab with the connection name.
4. In the Editor context dialog, hover over the timestamp and then click Log out.
5. In the Log out from Insights dialog, click Log out to confirm.