D When using SSO with client applications that connect to Snowflake, users must enter their login credentials when prompted; however, for security reasons, these credentials are never processed through the client. Instead, the credentials are sent to the IdP for authentication and the IdP sends back a valid SAML response which enables the client to initiate a Snowflake session. https://docs.snowflake.com/en/user-guide/admin-security-fed-auth-use#:~:text=only%20for%20Okta)-,Important,-When%20using%20SSO

It's D : https://docs.snowflake.com/en/user-guide/admin-security-fed-auth-overview "Note For Snowflake-initiated login, the Snowflake login page provides two options for authentication (IdP or Snowflake). To use federated authentication, users must choose the IdP option and then enter their credentials when prompted. Choosing the Snowflake option bypasses federated authentication and logs the user in using Snowflake’s native authentication."

Quote: "With federated authentication enabled for your account, Snowflake still allows maintaining and using Snowflake user credentials (login name and password). In other words: - Account and security administrators can still create users with passwords maintained in Snowflake. - Users can still log into Snowflake using their Snowflake credentials." https://docs.snowflake.com/en/user-guide/admin-security-fed-auth-use#:~:text=With%20federated%20authentication%20enabled%20for,Snowflake%20using%20their%20Snowflake%20credentials.

For Snowflake-initiated login, the Snowflake login page provides two options for authentication (IdP or Snowflake). To use federated authentication, users must choose the IdP option and then enter their credentials when prompted. Choosing the Snowflake option bypasses federated authentication and logs the user in using Snowflake’s native authentication.