{"record":{"id":"9c4b5b5ca0bad34b","repo":"dbt-labs/dbt-core","slug":"for-snowflake-auth-method-authentication-fiel","errorCode":null,"errorMessage":"For Snowflake {auth_method} authentication, '{field}' will be ignored and can be safely removed from your profile.","messagePattern":"For Snowflake (.+?) authentication, '(.+?)' will be ignored and can be safely removed from your profile\\.","errorType":"console","errorClass":null,"httpStatus":null,"severity":"warning","filePath":"crates/dbt-auth/src/snowflake/mod.rs","lineNumber":128,"sourceCode":"            \"workload_identity_entra_resource can only be set if workload_identity_provider is Azure\",\n        ));\n    }\n\n    Ok(SnowflakeAuthIR::WorkloadIdentity {\n        provider,\n        entra_resource,\n        token: config.get_str(\"token\"),\n    })\n}\n\nstatic WARN_3DES_KEY_ONCE: Once = Once::new();\n\nfn warn_ignored_auth_field(\n    warning_printer: &dyn AuthWarningPrinter,\n    auth_method: &str,\n    field: &str,\n) {\n    warning_printer.warn(&format!(\n        \"For Snowflake {auth_method} authentication, '{field}' will be ignored and can be safely removed from your profile.\"\n    ));\n}\n\n#[derive(Debug)]\nenum SnowflakeAuthIR<'a> {\n    Warehouse {\n        user: &'a str,\n        password: &'a str,\n    },\n    WarehouseMFA {\n        user: &'a str,\n        password: &'a str,\n    },\n    KeypairPath {\n        user: &'a str,\n        path: &'a str,\n        passphrase: Option<&'a str>,","sourceCodeStart":110,"sourceCodeEnd":146,"githubUrl":"https://github.com/dbt-labs/dbt-core/blob/0267ce9170576975b76b64ce856b2e5848e96617/crates/dbt-auth/src/snowflake/mod.rs#L110-L146","documentation":"This is a deprecation-style warning emitted by the Snowflake auth parser when a profile contains a field that does not apply to the selected authentication method. The parser builds a SnowflakeAuthIR enum where each variant (password, keypair, OAuth, SSO, PAT, workload identity) only consumes a subset of profile fields; anything left over is passed to warn_ignored_auth_field so the user knows the value is dead configuration. The connection still proceeds using the relevant fields.","triggerScenarios":"Parsing a Snowflake profile whose auth_method variant does not use the supplied field — e.g. providing a 'password' with authenticator='externalbrowser' SSO, or 'private_key' with method='password', or a 'token' alongside keypair auth.","commonSituations":"Copying an example profile that mixes fields from multiple auth methods; switching authenticator from password to keypair or SSO without deleting the now-unused password/token fields; team profiles accumulated over years of method changes.","solutions":["Remove the named field from the Snowflake profile entry in profiles.yml","Verify the remaining fields match the documented set for the chosen auth method (e.g. user+password, or user+private_key_path/passphrase)","Re-run dbt and confirm the warning is gone and authentication still succeeds"],"exampleFix":"# before\nmy_snowflake:\n  method: externalbrowser\n  user: me@corp\n  password: hunter2   # ignored for SSO\n# after\nmy_snowflake:\n  method: externalbrowser\n  user: me@corp","handlingStrategy":"validation","validationCode":"import yaml\ndef check_snowflake_profile(profile: dict) -> list[str]:\n    field_sets = {\n        \"password\": {\"user\", \"password\"},\n        \"externalbrowser\": {\"user\"},\n        \"keypair\": {\"user\", \"private_key_path\"},\n    }\n    auth = profile.get(\"authenticator\") or profile.get(\"method\")\n    allowed = field_sets.get(auth)\n    if allowed is None:\n        return []\n    extra = set(profile) - allowed - {\"type\", \"account\", \"database\", \"schema\", \"warehouse\", \"role\", \"threads\"}\n    return [f\"Field '{f}' is ignored for auth '{auth}'\" for f in extra]","typeGuard":null,"tryCatchPattern":null,"preventionTips":["Keep one canonical profile template per Snowflake auth method","Delete unused fields immediately when switching authenticator/method","Run dbt debug after any profiles.yml change to surface ignored-field warnings early"],"tags":["snowflake","authentication","config","deprecation"],"backgroundTag":"unsupported-config-value","analyzedSha":"0267ce9170576975b76b64ce856b2e5848e96617","analyzedAt":"2026-09-07T21:53:39.732Z","contentChangedAt":"2026-09-07T21:53:39.732Z","schemaVersion":2},"datasetVersion":"2026-09-14T11:17:12.474Z"}