{"action":"created","issue":{"url":"https://api.github.com/repos/snowflakedb/snowflake-connector-python/issues/140","repository_url":"https://api.github.com/repos/snowflakedb/snowflake-connector-python","labels_url":"https://api.github.com/repos/snowflakedb/snowflake-connector-python/issues/140/labels{/name}","comments_url":"https://api.github.com/repos/snowflakedb/snowflake-connector-python/issues/140/comments","events_url":"https://api.github.com/repos/snowflakedb/snowflake-connector-python/issues/140/events","html_url":"https://github.com/snowflakedb/snowflake-connector-python/issues/140","id":390476262,"node_id":"MDU6SXNzdWUzOTA0NzYyNjI=","number":140,"title":"Okta Authenticator does not support Okta MFA","user":{"login":"adriank-convoy","id":40185566,"node_id":"MDQ6VXNlcjQwMTg1NTY2","avatar_url":"https://avatars3.githubusercontent.com/u/40185566?v=4","gravatar_id":"","url":"https://api.github.com/users/adriank-convoy","html_url":"https://github.com/adriank-convoy","followers_url":"https://api.github.com/users/adriank-convoy/followers","following_url":"https://api.github.com/users/adriank-convoy/following{/other_user}","gists_url":"https://api.github.com/users/adriank-convoy/gists{/gist_id}","starred_url":"https://api.github.com/users/adriank-convoy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adriank-convoy/subscriptions","organizations_url":"https://api.github.com/users/adriank-convoy/orgs","repos_url":"https://api.github.com/users/adriank-convoy/repos","events_url":"https://api.github.com/users/adriank-convoy/events{/privacy}","received_events_url":"https://api.github.com/users/adriank-convoy/received_events","type":"User","site_admin":false},"labels":[{"id":400590203,"node_id":"MDU6TGFiZWw0MDA1OTAyMDM=","url":"https://api.github.com/repos/snowflakedb/snowflake-connector-python/labels/question","name":"question","color":"cc317c","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-12-13T01:11:49Z","updated_at":"2018-12-13T07:50:03Z","closed_at":null,"author_association":"NONE","body":"I'm unable to use the snowflake python connector when using the Okta url authenticator because my organization has MFA turned on for Okta. Stepping through the auth_okta.py code, when grabbing the one time token in method _step3, the code fails to check the return's status, which is set to 'MFA_REQUIRED'. Judging from https://developer.okta.com/docs/sdk/core/python_api_sdk/api/clients/AuthClient there's an addition flow that needs to be completed when MFA is turned on."},"comment":{"url":"https://api.github.com/repos/snowflakedb/snowflake-connector-python/issues/comments/446873592","html_url":"https://github.com/snowflakedb/snowflake-connector-python/issues/140#issuecomment-446873592","issue_url":"https://api.github.com/repos/snowflakedb/snowflake-connector-python/issues/140","id":446873592,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0Njg3MzU5Mg==","user":{"login":"adriank-convoy","id":40185566,"node_id":"MDQ6VXNlcjQwMTg1NTY2","avatar_url":"https://avatars3.githubusercontent.com/u/40185566?v=4","gravatar_id":"","url":"https://api.github.com/users/adriank-convoy","html_url":"https://github.com/adriank-convoy","followers_url":"https://api.github.com/users/adriank-convoy/followers","following_url":"https://api.github.com/users/adriank-convoy/following{/other_user}","gists_url":"https://api.github.com/users/adriank-convoy/gists{/gist_id}","starred_url":"https://api.github.com/users/adriank-convoy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adriank-convoy/subscriptions","organizations_url":"https://api.github.com/users/adriank-convoy/orgs","repos_url":"https://api.github.com/users/adriank-convoy/repos","events_url":"https://api.github.com/users/adriank-convoy/events{/privacy}","received_events_url":"https://api.github.com/users/adriank-convoy/received_events","type":"User","site_admin":false},"created_at":"2018-12-13T07:50:03Z","updated_at":"2018-12-13T07:50:03Z","author_association":"NONE","body":"Thanks for the quick response! I'm trying to add snowflake SSO support to a tool I use, but the problem is that the tool creates a new Snowflake connector for each model it runs which isn't something I can easily change. This means when I run it, I end up with 10-20 browser windows opened... I was doing a little more reading, and noticed the PARAMETER_CLIENT_STORE_TEMPORARY_CREDENTIAL parameter is set to True when using external browser, but when I authenticate through the browser the 'idToken' of the response is null so nothing gets stored in the temp credentials file. I'm a bit out of my element here - is the temporary credential storage supported for external browser authentication through Okta? I followed the setup instructions for Okta at https://docs.snowflake.net/manuals/user-guide/admin-security-fed-auth-configure-idp.html#okta-setup, but I might have something misconfigured on the Okta side of things? Thanks for your help!"}}
{"actor":{"display_login":"adriank-convoy"}}