Hi, I'm Ask INFA!
What would you like to know?
ASK INFAPreview
Please to access Ask INFA.

Table of Contents

Search

  1. Preface
  2. Introducing Administrator
  3. Organizations
  4. Licenses
  5. Metering
  6. Source control configuration
  7. Customer-managed encryption keys
  8. Secrets managers
  9. Permissions
  10. Schedules
  11. CLAIRE preferences
  12. Bundle management
  13. Connection Credentials storage location
  14. Service-specific settings
  15. Custom branding
  16. Informatica support access
  17. Event monitoring
  18. Troubleshooting security
  19. Cipher suites used by IDMC

Organization Administration

Organization Administration

Authentication properties

Authentication properties

You can configure authentication properties for your organization
and sub-organizations
. Authentication properties control password restrictions and IP address filtering.
Password restrictions are enforced when users create or change their passwords. If you change the password expiration date from "never" to a number of days, then users with passwords that are older than the number of days will be required to change their passwords the next time that they log in to
IDMC
.
The following table describes the authentication properties:
Property
Description
Minimum Password Length
Minimum password length required for a valid password. Must be a number between 8 and 25 characters.
If the organization uses multi-factor authentication, the minimum password length is 8 characters. Otherwise, the minimum password length is 15 characters.
Minimum Character Mix
Minimum number of character types required for a valid password.
Passwords can contain a mix of the following character sets:
  • Lowercase alphabetic characters
  • Uppercase alphabetic characters
  • Numeric characters
  • Special characters
For example, if you set
Minimum Character Mix
to 1, then passwords must contain at least one of the character sets. If you set
Minimum Character Mix
to 2, then passwords must contain at least two of the character sets.
Password Reuse
Controls whether users can reuse passwords.
Password Expires
Determines how often users must reset their passwords.
Enable Multi-Factor Authentication
Enables multi-factor authentication for native human users.
By default, multi-factor authentication is enabled when organizations are provisioned.
With multi-factor authentication, native human users receive a verification code through email when they log in to the user interface. The email address for each human user must be valid.
Categorize users as human or non-human users on the
Users
page. For more information, see
User Administration
.
Session Idle Timeout
Amount of time before a user's session times out due to inactivity.
IDMC
displays a warning message to the user 60 seconds before the user is logged out.
Default is 30 minutes, which is the recommended value.
Authentication Type
Authentication type used after a user logs in. Default is
Session ID
.
For JWT authentication, select a duration for tokens to expire. Default is 30 minutes.
When you change the authentication type, the new type takes effect at the next login. The change doesn't affect sessions that are in progress.
Before you use the JWT authentication type, modify custom scripts to refresh the tokens before they expire.
For more information, see the JWT Support Knowledge article.
Don't use the JWT authentication type if your organization uses REST V2 Connector to call
IDMC
APIs.
Use Trusted IP Ranges
Enables IP address filtering.
IP address filtering uses trusted IP address ranges in addition to account passwords to prevent unauthorized users from accessing your organization. When you enable IP address filtering, a user with a valid login must also have an IP address within the range of trusted IP addresses, or the user can't log in to your organization.
This option applies to all Informatica clients that connect to IDMC, including human and non-human users, REST API users, Secure Agents, and Secure Agent services.
When you enable this option, you must also enter one or more trusted IP address ranges.
Use the following guidelines:
  • If you create a serverless runtime environment when trusted IP ranges are enabled, you must add the IP addresses of the DMZ NAT gateway to the list of trusted IP addresses. For a list of the DMZ NAT gateway addresses, see
    Runtime Environments
    .
  • If you enable trusted IPs and use
    Cloud Integration Hub
    , ensure that you've also allowed the outbound IP addresses under Core Services for your POD. For more information, see POD Availability and Networking.
Allowed Trusted IP Ranges
The trusted ranges of IP addresses from which users can log in to access the organization.
IDMC
supports IP address formats in IP version 4 (IPv4) and version 6 (IPv6).
Fields for the trusted IP address range appear when you enable IP address filtering. To enter additional address ranges, click
+
.
To ensure seamless communication between resources across both IPv4 and IPv6 networks, enable a dual stack configuration. For example, if your virtual machine uses one network type, IPv4 or IPv6, and the servers that host the connectors use another network type, enable dual stack on your virtual machine to ensure seamless communication regardless of their network type.
If you enter an invalid IP address range, users cannot access your organization. Contact your network administrator for valid IP address ranges.

0 COMMENTS

We’d like to hear from you!