Which statement about Snowflake authentication is true?

• A. Verification and authentication are optional for users and MFA/SSO are not supported.
• B. Verification and authentication are required for users and include MFA and SSO.
• C. MFA is supported, but SSO is not.
• D. SSO is supported, but MFA is not.

Answer: (B)

Snowflake requires every user to be authenticated; there’s no access without proving who you are. Authentication is the process of confirming a user’s identity when they sign in, and Snowflake supports several ways to do this. You can verify a user with a password or a key-pair, or use OAuth for token-based access, and you can enable SSO with a SAML-based identity provider. In practice, MFA can be enforced through the identity provider during SSO, giving an extra security factor in the sign-in process. Because authentication is required and Snowflake offers MFA and SSO as supported options, the statement is true. Options claiming that verification or authentication is optional, or that MFA or SSO aren’t supported, don’t align with how Snowflake secures access.