@GossiTheDog It federates with SAML: https://docs.snowflake.com/en/user-guide/admin-security-fed-auth-overview
So you can setup MFA with your federated identity - one of ours is using PingOne, so first it takes my AD credentials, then it takes my MFA code. Could do the same with a fully MS solution like Azure Directory with MS Authenticator.