---
schema_version: "1"
id: 6d1ba7427fe4b137cbc6562d929e46e81edbbe96fd560cee4ec5861138fd0ec9
title: Add an IP Networking Policy
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_add_ip_networking_policy.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_add_ip_networking_policy.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 4226d7c3a6dee96a2f43ee2d39c39f061555e8c73ea2d20a1d29f7508b25fad5
description: If you encounter an authentication error when setting up a Snowflake data share target, make sure to include Data Cloud IP addresses in Snowflake. Create an IP networking policy in Snowflake that lists the allowed Data Cloud IP addresses.
products:
  - Data 360
release: "264"
---
# Add an IP Networking Policy

If you encounter an authentication error when setting up a Snowflake data share target, make sure to include Data Cloud IP addresses in Snowflake. Create an IP networking policy in Snowflake that lists the allowed Data Cloud IP addresses.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All Editions</strong> supported by Data 360. See <a href="https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&amp;release=264.0.0&amp;type=5" title="Data 360 is available in several supported Salesforce editions. Some Data 360 features also require additional licenses.">Data 360 edition availability</a>.</td></tr></tbody></table>

1. In Data Cloud, click **Setup**, and select **Data Cloud Setup**.
2. Locate your instance. For example, CDP2-AWS-PROD1-USEAST1.
3. Based on your region, identify your VPCE ID and source IP addresses in the [IP Addresses Used by Data Cloud Services](https://help.salesforce.com/s/articleView?id=data.c360_a_data_cloud_ip_address_allowlist.htm&type=5&language=en_US) table. For example, for CDP2-AWS-PROD1-USEAST1, the cloud is AWS, the region is US-EAST-1, and the VPCE ID is CDP2.
4. In Snowflake, create a network policy that includes the IP addresses.
    
    ```
    CREATE OR REPLACE NETWORK POLICY <name> -- Example: SFDC_NW_POLICY
        ALLOWED_IP_LIST = ('ip1 from step 3', 'ipN from step 3')
        COMMENT = 'Policy for SFDC Auth';
    ```
5. Attach the network policy to your security integration.
    
    ```
    CREATE OR REPLACE SECURITY INTEGRATION oauth_kp_int
        TYPE = oauth
        ENABLED = true
        OAUTH_CLIENT = custom
        OAUTH_CLIENT_TYPE = 'CONFIDENTIAL'
        OAUTH_REDIRECT_URI = '<SFDC_Callback_URL>'
        NETWORK_POLICY = SFDC_NW_POLICY;
    ```

#### See Also

- [_Salesforce Help_: Get User Credentials from Snowflake](https://help.salesforce.com/s/articleView?id=data.c360_a_get_user_details_snowflake.htm&type=5&language=en_US)