Connect Snowflake Managed MCP to Maverics: Federated Identity for Workforce AI Clients

This post is a runnable technical walkthrough showing how to integrate a Maverics OIDC provider with Snowflake's managed MCP using short-lived, claim-rich JWTs and a Go Service Extension to inject agent identity claims. The lab replaces shared service-account tokens with federated access tokens validated by Snowflake's EXTERNAL_OAUTH_INTEGRATION, demonstrates setup steps (Docker, Keycloak, SQL bootstrap, client config), explains logging/audit reconciliation across Maverics and Snowflake, and includes an optional MCP shim workaround for a managed-MCP tool response bug.