Snowflake 403 error using Google as Identity Provider IdP

user_16790789 0
Viewed 584

I'm trying to configure google IdP on my Snowflake following this tutorial from Snowflake community: https://community.snowflake.com/s/article/configuring-g-suite-as-an-identity-provider?t=1630354048853

After the whole configuration is complete when I click on the SSO button on the login page SSO Screen

I receive the following error: Error Message

I have already double-checked the SAML configuration on both platforms SAML Configurations

And APP configuration on Google seems correct Google Snowflake App configurations Google Snowflake App configurations

But the 403 error still persists. How can I identify exactly where is the problem (Snowflake or Google) and how to fix it? Is there any log I should be checking or any configuration missing? Thanks!

snowflake-cloud-data-platform
2 Answers

We ran into this error as well, but fortunately the solution was rather simple in our case:

  • Either use incognito mode
  • Or log out & back in to the Google account

Afterwards, it works flawlessly!

user_44067930

I found this article from Google Support:

403 app_not_configured_for_user To resolve the 403 app_not_configured_for_user error:

Verify that the value in the saml:Issuer tag in the SAMLRequest matches the Entity ID value configured in the SAML Service Provider Details section in the Admin console. This value is case-sensitive.

user_121657560
Related