{"id":577,"date":"2023-02-07T10:41:41","date_gmt":"2023-02-07T02:41:41","guid":{"rendered":"https:\/\/codestrian.com\/?p=577"},"modified":"2023-02-07T11:02:48","modified_gmt":"2023-02-07T03:02:48","slug":"snowflake-aad-provisioning-systemforcrossdomainidentitymanagementcredentialvalidationunavailable","status":"publish","type":"post","link":"https:\/\/codestrian.com\/index.php\/2023\/02\/07\/snowflake-aad-provisioning-systemforcrossdomainidentitymanagementcredentialvalidationunavailable\/","title":{"rendered":"Snowflake AAD Provisioning: SystemForCrossDomainIdentityManagementCredentialValidationUnavailable"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/codestrian.com\/wp-content\/uploads\/2023\/02\/snowflake_provisioning_SystemForCrossDomainIdentityManagementCredentialValidationUnavailable.png\" alt=\"\" \/><\/p>\n<p>You are here because you have encountered the above error while setting up automatic user provision for Snowflake on Azure AD. The reason why this happened is due to Azure IP being blocked by snowflake. In order to resolve this, we need to first find out the Azure IP address that is being used here. To do that, run the following from your snowflake worksheet. Please replace the date with the date that belongs to the correct timezone. If your instance is running in the US, it is using the US timezone.<\/p>\n<pre><code>use role accountadmin;\nuse schema snowflake.information_schema;\nSELECT *\n  FROM TABLE(rest_event_history(\n        &#039;scim&#039;,\n        DATEADD(&#039;minutes&#039;,-3600,CURRENT_TIMESTAMP()),\n        CURRENT_TIMESTAMP(),\n        200))\n WHERE details like &#039;%FORBIDDEN%&#039;\n   AND DATE_TRUNC(&#039;DAY&#039;, event_timestamp) = &#039;2023-02-06&#039;\nORDER BY event_timestamp DESC;<\/code><\/pre>\n<p>After running the above query, you should see the IP address under the <code>CLIENT_IP<\/code> column.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/codestrian.com\/wp-content\/uploads\/2023\/02\/snowflake_error_result-1024x472.png\" alt=\"\" \/><\/p>\n<p>Next white list <strong>ALL<\/strong> the IP addresses that you see under that column.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/codestrian.com\/wp-content\/uploads\/2023\/02\/ip_white_list-1-1024x401.png\" alt=\"\" \/><\/p>\n<p>Go back to your provision page on azure and try again. This time it should succeed just like below.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/codestrian.com\/wp-content\/uploads\/2023\/02\/success.png\" alt=\"\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>You are here because you have encountered the above error while setting up automatic user provision for Snowflake on Azure AD. The reason why this happened is due to Azure IP being blocked by snowflake. In order to resolve this, we need to first find out the Azure IP address [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[67,68],"_links":{"self":[{"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/posts\/577"}],"collection":[{"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/comments?post=577"}],"version-history":[{"count":6,"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/posts\/577\/revisions"}],"predecessor-version":[{"id":588,"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/posts\/577\/revisions\/588"}],"wp:attachment":[{"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/media?parent=577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/categories?post=577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/codestrian.com\/index.php\/wp-json\/wp\/v2\/tags?post=577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}