Share via

Enterprise Application -> Snowflake provisioning -> DefaultRole & DefaultWareHouse attributes

MM 1 Reputation point
2022-02-28T22:38:54.643+00:00

Hi,

im trying to enable provisioning for Snowflake, the below URL talk about mapping defaultRole & defaultWareHouse

when i go to mapping, i dont find the targetAttributes for role, WH - please advise to add those ?

https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/snowflake-provisioning-tutorial#step-3-add-snowflake-from-the-azure-ad-application-gallery

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Danny Zollner 10,801 Reputation points Microsoft Employee Moderator
    2022-03-01T15:18:39.25+00:00

    You should be able to manually add those attributes if they aren't present. It's worth noting that urn:ietf:params:scim:schemas:extension:enterprise namespace is a protected namespace for the User Enterprise schema extension defined in the SCIM RFC, and Snowflake's SCIM implementation is violating the SCIM standard if they are still using that namespace. They should be using something such as urn:ietf:params:scim:schemas:extension**:snowflake:**2.0:User:defaultRole instead. Mapping to these attributes may not work consistently as defaultRole and defaultWarehouse are not a part of the User Enterprise schema extension.

    I'll let our team that manages the tutorials know that the screenshots should be updated to reflect the current state of the integration as well.

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.