Using a JWT access token is similar to using a SAML assertion. However, unlike using SAML assertions, users fetch JWT access tokens from the identity provider and include the tokens in login requests.

Before users can use JWT access tokens, complete the following tasks:

Configure the organization to use SAML and set up users as SAML users.
Set up an OAuth identity provider. You can use identity providers such as Azure Active Directory and Okta.
Set up a method to retrieve JWT access tokens from the identity provider.
Register the identity provider using the
Informatica Intelligent Cloud Services
REST API.

To log in, users obtain a JWT access token from the identity provider and include the token in a loginOAuth POST request. The token can be used for one REST API session. If the login request is successful, the response includes a session ID to use in subsequent API calls.

For information about OAuth setup using Azure Active Directory, see the following article: Set up OAuth with Azure AD

For more information about identity provider configuration, see the identity provider's documentation.

For more information about registering identity providers and logging in using JWT access tokens, see

REST API Reference

.