Enabling SAML authentication with Okta SSO for web applications

Enabling SAML authentication with Okta SSO for web applications

Perform additional domain configuration tasks

Perform additional domain configuration tasks

Use infacmd to update the domain namespace and synchronize security domains.

Enable LDAP connectivity to synchronize Active Directory users

Use the addLDAPConnectivity command to synchronize Active Directory users.
The following example shows the command to synchronize Active Directory users.
infacmd.sh addLDAPConnectivity -dn ISPDomain -un Administrator -pd Administrator -sdn Native -la <domain host>:389 -lp <user ID> -lc "<user name>" -lt MicrosoftActiveDirectory -ms 5000 -lcn LDAP2

Add the namespace for Active Directory users

Use the addNamespace command to add a namespace, creating a security domain in the Informatica domain.
A namespace on the Informatica domain contains a set of users imported from a user repository. When you create a namespace, the Informatica Administrator tool can access all the Active Directory users that you imported. This enables single sign-on for the Administrator tool.
The following example shows the command to add a namespace:
infacmd.sh addNameSpace -dn ISPDomain -un Administrator -pd Administrator -SecurityDomain Native -usb cn=users,dc=platformkrb,dc=com -uf objectclass=user -gsb "cn=users,dc=platformkrb,dc=com" -gf "objectCategory=group" -hp <domain host>:<port> -ns LDAP_NameSpace1 -lcn LDAP2

Synchronize security domains

Use the syncSecurityDomains command to synchronize the domain with the users that you imported from Active Directory.
The following example shows the command to synchronzie security domains:
infacmd.sh SyncSecurityDomains -dn ISPDomain -un Administrator -pd Administrator -sdn Native -sn LDAP_NameSpace1

Assign the administrator role to a user

Use the assignRoleToUser command to assign the administrator role to an existing LDAP user.
The following example shows the command to assign the administrator role:
infacmd.sh assignRoleToUser -dn ISPDomain -un ispadmin <user name> -sdn Native -eu <user id> -esd LDAP <namespace name> -rn Administrator -sn ISPDomain

0 COMMENTS

We’d like to hear from you!