Snowflake connector authentication failure in Adobe Experience Platform

Authentication failures in Adobe Experience Platform (AEP) and Snowflake stem from private key formatting or configuration issues. Verify the key, update settings, and ensure synchronization.

Description description

Environment

  • Product: Adobe Experience Platform (AEP)
  • Feature: Snowflake Connector
  • Constraints:  This applies to scenarios where authentication fails during connection setup.

Issue/Symptoms

  • Error message: Authentication failed. Try entering your credentials again.
  • No login attempts visible in Snowflake’s login history when using AEP.
  • Logs indicate errors such as [ Snowflake] Failed to parse PEM block containing the private key.
  • The issue persists despite verifying that the private-public key pair works correctly outside of AEP.

Resolution resolution

  1. Ensure the private key is formatted correctly with proper headers

    --BEGIN PRIVATE KEY-- [ Key Content] --END PRIVATE KEY--
    Alternatively, if using an encrypted private key:
      --BEGIN ENCRYPTED PRIVATE KEY-- [ Key Content] --END ENCRYPTED PRIVATE KEY--

  2. Regenerate the private key using OpenSSL with the following command:

    openssl genrsa 2048 | openssl pkcs8 -topk8 -v2 des3 -inform PEM -out rsa_key.p8.

    Encode the regenerated key in Base64 format without trailing newline characters. (\n) Avoid sending keys via email or messaging platforms like Teams, as this can introduce formatting issues (for example, extra spaces).

  3. Verify that the user account in Snowflake is tied to the corresponding public key. For steps, refer to How to: Verify the Public/Private Key Connectivity using SnowSQL and Key-pair authentication and key-pair rotation in the Snowflake community.

  4. Confirm that the account name adheres to Snowflake’s naming conventions. For example, prepend your organization name to the account name (e.g.,  orgname-account_name). For more information, refer to Account Identifiers in Snowflake documentation.

  5. Ensure all required IP ranges for AEP are whitelisted in your Snowflake environment. For more information, refer to IP address allowlist for source connectors.

  6. To confirm whether AEP is attempting a connection, use an invalid private key intentionally and check if any login attempts appear in Snowflake’s login history.

  7. Analyze logs generated during connection attempts for specific error codes or messages such as The request could not be processed  or Failed to parse PEM block.

  8. If issues persist after performing these checks, escalate through Adobe supportwith detailed logs and request IDs.

This guide provides actionable steps for troubleshooting authentication failures when connecting Adobe Experience Platform with Snowflake databases.

recommendation-more-help
3d58f420-19b5-47a0-a122-5c9dab55ec7f