Table of Contents

Search

  1. About the Security Guide
  2. Introduction to Informatica Security
  3. User Authentication
  4. LDAP Authentication
  5. Kerberos Authentication
  6. SAML Authentication for Informatica Web Applications
  7. Domain Security
  8. Security Management in Informatica Administrator
  9. Users and Groups
  10. Privileges and Roles
  11. Permissions
  12. Audit Reports
  13. Appendix A: Command Line Privileges and Permissions
  14. Appendix B: Custom Roles

Security Guide

Security Guide

SAML Authentication for Informatica Developer

SAML Authentication for Informatica Developer

You can enable SAML authentication in Informatica Developer (the Developer tool).
To enable SAML authentication, enable the following flag in the developerCore.ini file:
-DsamlAuthenticationEnabled=true
You can find the developerCore.ini file in the following directory:
<Informatica installation directory>\clients\DeveloperClient
You must also export the Identity Provider Assertion Signing Certificate from the SAML provider and then import the certificate into the Informatica default truststore file in the Developer tool.

SAML Authentication Modes

You can authenticate a user in a SAML-enabled domain in one of the following modes:
Username and password
Uses the login credentials of the user.
Add the following property to the developerCore.ini file:
-DkerberosLoginType=TYPE_USER_PWD
Keytab
Uses the keytab generated for the user in the SAML provider. Select the SAML configured namespace when you connect the Developer tool to the Model repository.
Add the following properties to the developerCore.ini file:
-DkerberosLoginType=TYPE_KEYTAB -DkerberosAuthSPN=<SPN value generated from the SAML provider for the user> -DkerberosAuthKeytab=<Location of the keytab file generated from the SAML provider for the user>
Logged in user
Uses the user's login credentials to log in to the machine where the Developer tool is installed. Select the SAML configured namespace when you connect the Developer tool to the Model repository.
Add the following property to the developerCore.ini file:
-DkerberosLoginType=TYPE_LOGGED_IN_USER

0 COMMENTS

We’d like to hear from you!