nerdexam
SnowflakeSnowflake

SOL-C01 · Question #239

SOL-C01 Question #239: Real Exam Question with Answer & Explanation

The correct answer is C: The user 'analytics_user' exists in Snowflake, but the SAML identity associated with the user in. The most likely cause is a mismatch between the SAML identity in Snowflake and the username from Okta. When using SSO, Snowflake relies on the ldP to provide the user's identity. If the SAML identity (usually the login name) in Snowflake doesn't match what Okta sends, authenticat

Snowflake Account and Security

Question

A Snowflake account is configured to use Okta as its Identity Provider (ldP) for Single Sign-On (SSO). A user, 'analytics_user', reports being unable to log in to Snowflake via Okta, receiving an 'Invalid User' error. After verifying the user exists in Okta and is assigned to the correct Snowflake application, what is the MOST likely cause and what is the BEST approach to troubleshoot the issue within Snowflake?

Options

  • AThe user 'analytics_user' does not exist in Snowflake. Create the user in Snowflake with the same
  • BThe Okta integration in Snowflake is not properly configured. Verify the SSO integration settings
  • CThe user 'analytics_user' exists in Snowflake, but the SAML identity associated with the user in
  • DThe Snowflake virtual warehouse is suspended, preventing authentication. Resume the
  • EOkta is experiencing a service outage. Check Okta's status page to confirm if there are any known

Explanation

The most likely cause is a mismatch between the SAML identity in Snowflake and the username from Okta. When using SSO, Snowflake relies on the ldP to provide the user's identity. If the SAML identity (usually the login name) in Snowflake doesn't match what Okta sends, authentication will fail. Option C corrects this by updating the user's login name to match the Okta username. Option A is incorrect because creating the user doesn't necessarily link it to the Okta user. Option B is a good general check, but less specific. Option D is unlikely as authentication typically precedes warehouse usage. Option E is possible but should be checked after verifying Snowflake's configuration.

Topics

#SSO#Okta#User Authentication#SAML Identity

Community Discussion

No community discussion yet for this question.

Full SOL-C01 PracticeBrowse All SOL-C01 Questions