Snorkel AI Authentication

generated: '2026-10-27'
method: searched
source: https://docs.snorkel.ai/docs/26.7/administration/settings-and-administration/user-and-admin-settings
docs: https://docs.snorkel.ai/docs/26.7/administration/settings-and-administration/user-and-admin-settings#generating-and-using-api-keys
x-docs-more:
- https://docs.snorkel.ai/docs/26.7/administration/authentication/platform-authentication-and-user-roles
- https://docs.snorkel.ai/docs/26.7/user-guide/sdk/quick_start/
summary:
  types:
  - apiKey
  api_key_in:
  - sdk-context
schemes:
- name: apiKey
  type: apiKey
  description: 'Per-user API key generated in User settings > API Keys. Docs: "API Keys can act as a replacement for your username and password when using the SDK or API." "Your API Key will only be shown in full once. Currently only a single API key can be active per user." Keys can be revoked from the same page. The SDK passes the key via SnorkelSDKContext.from_endpoint_url(endpoint, api_key, workspace_name) against the customer''s own instance host (https://<your-snorkel-hostname>). The HTTP header carrying the key is not documented.'
  key_count_per_user: 1
  revocable: true
platform_login:
  note: 'Interactive (UI) login supports "Basic authentication" (username/password, the default on a fresh install) and SSO via SAML or OIDC, which the docs call "the recommended authentication method". These are user-login methods for the platform, not API auth schemes.'
  sso:
  - https://docs.snorkel.ai/docs/26.7/administration/authentication/configure-saml-sso
  - https://docs.snorkel.ai/docs/26.7/administration/authentication/configure-oidc-sso
authorization:
  model: workspace-scoped RBAC roles
  roles: [Superadmin/System Admin, Admin/Workspace Admin, Developer, Reviewer, Annotator]
  docs: https://docs.snorkel.ai/docs/26.7/administration/authentication/user-roles-definition