# Create a Snowflake data source with Google Workspace SSO and Google Authenticator MFA

Procedure: Enable the Database Tools and SQL plugin

This functionality relies on the  Database Tools and SQL plugin, which  is bundled and enabled in IntelliJ IDEA   by default. If the relevant features are not available, make sure that you did not disable the plugin.

> **Note:**
> Database Tools and SQL functionality support is limited in IntelliJ IDEA without the Ultimate subscription.

1. Press `Ctrl+Alt+S` (Windows), `⌘ Comma` (macOS), `⌘ Comma` (IntelliJ IDEA Classic (macOS)), `⌘ Comma` (macOS System Shortcuts), `Ctrl+Alt+S` (XWin), `Ctrl+Alt+S` (GNOME), `Ctrl+Alt+S` (KDE), `Ctrl+Alt+S` (Emacs), `Ctrl+Alt+S` (Sublime Text), `⌘ Comma` (Sublime Text (macOS)), `Ctrl+Alt+S` (NetBeans), `Ctrl+Alt+S` (Visual Studio), `⌘ Comma` (Visual Studio (macOS)), `Ctrl+Alt+S` (Eclipse), `⌘ Comma` (Eclipse (macOS)) to open settings and then select `Plugins`.

2. Open the Installed tab, find the Database Tools and SQL plugin, and select the checkbox next to the plugin name.

Procedure: Official documentation

* For full information about Snowflake, refer to [the official documentation](https://docs.snowflake.net/manuals/user-guide.html).

* [How To: Configure Google Workspace as an Identity Provider for SSO with Snowflake](https://community.snowflake.com/s/article/configuring-g-suite-as-an-identity-provider)

* [Managing federated authentication: Browser-based SSO](https://docs.snowflake.com/user-guide/admin-security-fed-auth-use#browser-based-sso)

* [SAML app error messages at support.google.com](https://support.google.com/a/answer/6301076?sjid=17036710538318148576-NC)

In this tutorial, we will take a closer look at creating data sources and connecting to Snowflake with SSO authentication and MFA. We will use Google Workspace as an identity provider and Google Authenticator for MFA.

> **Note:**
> If your Snowflake `login_name` and Google username do not match, set up the mapping in Google integration settings first.
>
>
>
> Note that in Snowflake integration settings, `SAML2_SNOWFLAKE_ACS_URL` and `SAML2_SNOWFLAKE_ISSUER_URL` are case-sensitive.

## SSO using Google Workspace

In this case, authentication is performed by logging into your Google account in a web browser window with your credentials.

Procedure: Create a Snowflake data source to use with Google Workspace SSO

1. In the    Database   tool window   ,  click ![the New icon](https://resources.jetbrains.com.cn/help/img/idea/2026.2/app.expui.general.add.svg) New on the toolbar and navigate to  `Data Source | Snowflake`.

![Select the Snowflake data source](https://resources.jetbrains.com.cn/help/img/idea/2026.2/create_new_data_source_snowflake.png)

2. Check if there is a Download missing driver files link at the bottom of the connection settings area. Click this link to download drivers that are required to interact with a database.

![The Download missing driver files link](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_connection_download_missing_drivers_link.png)

3. Specify the database connection details.

1.

In the Name field, enter your new data source name.

For example, `Snowflake [SSO]`.

2.

In the Host field, type the URL to connect to your Snowflake account with. For example, `myorg-myconnection.snowflakecomputing.com`.

3. From the Authentication dropdown, select Authenticator.

4.

In the Authenticator field, type `externalbrowser` .

5.

In the User field, type the email address you use to log in to both your Snowflake and Google accounts. In Snowflake, it is your `login_name`.

6.

Leave the Password field empty.

> **Tip:**
> You can set the Password field empty by right-clicking it and selecting Set Empty.
>
>
>
> ![the Set Empty context menu action](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_connection_password_set_empty.png)

7.  In the Warehouse field, type the name of a compute resources cluster in Snowflake that you want to use.

Alternatively, type your JDBC URL in the URL field. The general URL to use is as follows:

* Format: `jdbc:snowflake://<organization_name>-<connection_name>.snowflakecomputing.com/?warehouse=<warehouse_name>&db=<database_name>&schema=<schema_name>&user=<okta_username>&password=<okta_password>&authenticator=externalbrowser`

* Example: `jdbc:snowflake://myorg-myconnection.snowflakecomputing.com/?warehouse=AUTH_WH&db=TESTDB&schema=MYSCHEMA&user=MYUSERNAME@DOMAIN.COM&password=DUMMY-PASSWORD&authenticator=externalbrowser`

4. Click the Test Connection link at the bottom of the connection details area to initiate a test connection to your database.

![Test Connection link](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_test_connection_link.png)

5. On the   Google website that opens in the browser, enter your user credentials and log in to your   Google account.

![Log in to your Google account on the Google website](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_snowflake_google_log_in_to_google.png)

6. Once   Google confirms your identity, return to IntelliJ IDEA.

![Identity confirmation message from Okta](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_snowflake_google_sso_verified.png)

7. In the IDE, click   OK to save your new data source.

![Database connection details](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_connection_details_snowflake_google_sso_connection.png)

## Google Workspace SSO and Google Authenticator MFA

In this case, authentication is performed by logging into your Google account with your credentials and then verifying your identity using two-factor authentication.

As your two-factor authentication method, you can use your phone number, Google Authenticator mobile application, or a passkey. In our example, we will use the Google Authenticator mobile application.

Procedure: Create a Snowflake data source to use with Google Workspace SSO and Google Authenticator MFA

1. In the    Database   tool window   ,  click ![the New icon](https://resources.jetbrains.com.cn/help/img/idea/2026.2/app.expui.general.add.svg) New on the toolbar and navigate to  `Data Source | Snowflake`.

![Select the Snowflake data source](https://resources.jetbrains.com.cn/help/img/idea/2026.2/create_new_data_source_snowflake.png)

2. Check if there is a Download missing driver files link at the bottom of the connection settings area. Click this link to download drivers that are required to interact with a database.

![The Download missing driver files link](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_connection_download_missing_drivers_link.png)

3. Specify the database connection details.

1.

In the Name field, enter your new data source name.

For example, `Snowflake [SSO + MFA]`.

2.

In the Host field, type the URL to connect to your Snowflake account with. For example, `myorg-myconnection.snowflakecomputing.com`.

3. From the Authentication dropdown, select Authenticator.

4.

In the Authenticator field, type `externalbrowser` .

5.

In the User field, type the email address you use to log in to both your Snowflake and Google accounts. In Snowflake, it is your `login_name`.

6.

Leave the Password field empty.

> **Tip:**
> You can set the Password field empty by right-clicking it and selecting Set Empty.
>
>
>
> ![the Set Empty context menu action](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_connection_password_set_empty.png)

7.  In the Warehouse field, type the name of a compute resources cluster in Snowflake that you want to use.

Alternatively, type your JDBC URL in the URL field. The general URL to use is as follows:

* Format: `jdbc:snowflake://<organization_name>-<connection_name>.snowflakecomputing.com/?warehouse=<warehouse_name>&db=<database_name>&schema=<schema_name>&user=<okta_username>&password=<okta_password>&authenticator=externalbrowser`

* Example: `jdbc:snowflake://myorg-myconnection.snowflakecomputing.com/?warehouse=AUTH_WH&db=TESTDB&schema=MYSCHEMA&user=MYUSERNAME@DOMAIN.COM&password=DUMMY-PASSWORD&authenticator=externalbrowser`

4. Click the Test Connection link at the bottom of the connection details area to initiate a test connection to your database.

![Test Connection link](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_test_connection_link.png)

5. On the   Google website that opens in the browser, enter your user credentials and log in to your   Google account.

![Log in to your Google account on the Google website](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_snowflake_google_log_in_to_google.png)

6. In Google Authenticator, find the verification code for your Google account.

7. In the web browser window, verify your identity by entering the verification code from Google Authenticator.

![Verify your identity using Google Authenticator](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_snowflake_google_google_mfa_code_enter.png)

8. Once   Google confirms your identity, return to IntelliJ IDEA.

![Identity confirmation message from Okta](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_snowflake_google_sso_verified.png)

9. In the IDE, click   OK to save your new data source.

![Database connection details](https://resources.jetbrains.com.cn/help/img/idea/2026.2/db_connection_details_snowflake_google_sso_google_mfa_connection.png)