> For the complete documentation index, see [llms.txt](https://docs.snowddl.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.snowddl.com/basic/yaml-configs/authentication-policy.md).

# AUTHENTICATION POLICY

Config path: `/<database>/<schema>/authentication_policy/<name>.yaml`

Example:

```yaml
authentication_methods: [SAML, KEYPAIR]
mfa_authentication_methods: [SAML]
mfa_enrollment: REQUIRED
client_types: [SNOWFLAKE_UI, DRIVERS]
security_integrations: [ALL]
comment: "my custom policy"

```

## Schema

* **authentication\_methods** (list)
  * *{items}* (str)
* **mfa\_authentication\_methods** (list)
  * *{items}* (str)
* **mfa\_enrollment** (str)
* **mfa\_policy** (dict)
  * *{key}* (str) - parameter name
  * *{value}* (array, bool, float, int, str) - parameter value
* **client\_types** (list)
  * *{items}* (str)
* **client\_policy** (dict)
  * {key} (str) - client name
  * {value} (dict)
    * {key} (str) - parameter name
    * *{value}* (array, bool, float, int, str) - parameter value
* **security\_integrations** (list)
  * *{items}* (str)
* **pat\_policy** (dict)
  * *{key}* (str) - parameter name
  * *{value}* (array, bool, float, int, str) - parameter value
* **workload\_identity\_policy** (dict)
  * *{key}* (str) - parameter name
  * *{value}* (array, bool, float, int, str) - parameter value
* **comment** (str)

## Usage notes

1. Snowflake makes dramatic and frequent changes to `AUTHENTICATION_POLICY` object type. Backwards compatibility is not guaranteed. The current implementation should work with Snowflake changes bundle up to `2025_06`. If you encounter issues with future bundles, please raise an issue on GitHub.

## Links

* [CREATE AUTHENTICATION POLICY](https://docs.snowflake.com/en/sql-reference/sql/create-authentication-policy)
* [ALTER AUTHENTICATION POLICY](https://docs.snowflake.com/en/sql-reference/sql/alter-authentication-policy)
* [DESC AUTHENTICATION POLICY](https://docs.snowflake.com/en/sql-reference/sql/desc-authentication-policy)
* [Parser & JSON Schema (GitHub)](https://github.com/littleK0i/SnowDDL/blob/master/snowddl/parser/authentication_policy.py)