Data Stream- Model 1 -Single Sign-On (SSO) Configuration
Updated
To enable secure access to your Snowflake Reader Account, Sprinklr will configure Single Sign-On (SSO) using your organisation’s Identity Provider (IdP). This allows your users to access Snowflake through your existing authentication and security controls.
Single Sign-On (SSO) Configuration Requirements
To enable secure access to your Snowflake environment through Single Sign-On (SSO), please provide the following information from your Identity Provider (IdP):
SAML Certificate: The public certificate used by your Identity Provider to sign authentication responses. This enables secure validation of user authentication during the SSO process.
Issuer / Entity ID URL: The unique identifier associated with your Identity Provider, required to establish a trusted SSO connection.
SSO Login / Redirect URL: The URL used to redirect users to your Identity Provider for authentication when accessing the Snowflake environment.
Customer Administrator Contact: The name and email address of the administrator who will manage user access and permissions within your organization. This user will be provisioned with administrative access.
VPN Egress IP Addresses: The static public IP addresses or CIDR ranges that users will connect from. These addresses will be allowlisted to ensure access is restricted to authorized network locations and to prevent connectivity issues.
Once these details are shared, Sprinklr will configure SSO and network allowlisting for your Snowflake Reader Account.
Note: While Sprinklr configures SSO on our side, you will also need to set up SSO access and whitelisting within your internal Identity Provider (e.g., Microsoft Entra ID / Azure AD).
Only after this step is completed will users be able to successfully access Snowflake.
Intended Use and Prohibited Uses
DataStream is intended solely to support operational efficiency, service delivery, business intelligence, and process optimisation. The product is not designed or intended for employee monitoring, workplace surveillance, performance evaluation, profiling of individuals, or making decisions that materially affect an individual's employment, rights, opportunities, or access to services.
DataStream does not process biometric data for the purpose of identifying individuals and does not perform emotion recognition, affect detection, or emotion inference in the workplace.
Customers must not use DataStream in a manner inconsistent with these intended purposes and remain responsible for ensuring compliance with applicable legal and regulatory requirements as well as with Sprinklr's Acceptable Use Policy.