If federated authentication is enabled for your Snowflake account, Snowflake recommends maintaining user passwords in Snowflake.

• A. True
• B. False
• C. Not applicable
• D. Depends on admin

Answer: (B)

Federated authentication delegates login to an external identity provider. When SSO is enabled, users authenticate through the IdP, not by supplying a Snowflake-stored password. Keeping passwords in Snowflake adds unnecessary risk and management overhead and isn’t the supported practice for users relying on SSO. In most setups, you’d rely on the IdP for authentication and avoid maintaining Snowflake passwords for those users.