Forum Discussion

apacheco05's avatar
apacheco05
Frequent Visitor
8 months ago
Solved

Invalid Credentials - Snowflake Connection

We have a dashboard connected to Snowflake. It is in Direct Query mode and I have setup the connection as Single Sing-On. I have a buch of users for that dashboard all have been setup the exact same ...
  • GrowthNatives's avatar
    8 months ago

    Hi apacheco05 , you can try these steps to solve the query :

    1. Reset Power BI + OAuth cache

    • Log out of Power BI Service

    • Clear cookies for:

      • powerbi.com

      • login.microsoftonline.com

    • Reopen browser and log in again

     

    2. Re-authenticate dataset credentials in Power BI

     

    • Power BI Service β†’ Workspace

    • Open Dataset β†’ Settings

    • Go to Data source credentials

    • Click Edit credentials

    • Confirm:

      • Authentication = Single Sign-On (SSO)

      • Status = Signed in

    • Ask affected users to refresh the report once

     

    3. Verify Azure AD UPN matches Snowflake LOGIN_NAME

    Check in Azure AD:

    • User Principal Name (UPN)

    Check in Snowflake:

    SHOW USERS LIKE '%username%';

    Ensure:

    • LOGIN_NAME = Azure AD UPN

    • No extra spaces

    • Same domain

    • Same casing (recommended)

     

    4. Confirm Snowflake default role exists

    DirectQuery requires a valid default role.

    Run:

    DESC USER <username>;

    Verify:

    • DEFAULT_ROLE is set

    • Role still exists

    • Role has:

      • USAGE on warehouse

      • USAGE on database

      • USAGE on schema

    If unsure, explicitly set it:

    ALTER USER <username> SET DEFAULT_ROLE = <role_name>;

    5. Check Azure AD sign-in logs (critical diagnostic)

    This tells you exactly why the login failed.

    Steps:

    1. Azure Portal β†’ Azure AD

    2. Go to Sign-in logs

    3. Filter:

      • Application: Microsoft Power BI

      • User: affected user

      • Status: Failure


    6. Verify Conditional Access / MFA policies

    If only some users fail, they often fall under different policies.

    Check:

    • Device compliance

    • Location restrictions

    • MFA enforcement

    Temporary test:

    • Exclude one affected user from CA policy

    • Retry login

     
    ⭐Hope this solution helps you make the most of Power BI! If it did, click 'Mark as Solution' to help others find the right answers.
    πŸ’‘Found it helpful? Show some love with kudos πŸ‘ as your support keeps our community thriving!
    πŸš€Let’s keep building smarter, data-driven solutions together!πŸš€