Installation Guide

Back Next

Configure domain settings and secure communication

Choose to create a domain and enter port and keystore file information to configure secure configuration between the

CDI-PC domain

and the Administrator tool.

Press
1
to create a domain.

Enter the HTTPS port number for the Administrator tool. Default is 8443.

Enter the absolute path to the custom keystore file to configure secure communication between the Administrator tool and the domain.

Use the keystore that's in .jks format.

Enter the keystore password.

Choose whether to enable SAML authentication to configure Security Assertion Markup Language (SAML)-based single sign-on (SSO) support for web-based Informatica applications in a

CDI-PC domain

Press

to enable and configure SAML authentication. Press

to disable SAML authentication and skip to Configure secure communication in the domain. Default is Yes.

Enter the Identity Provider URL for the domain.

Specify the relying party trust name or the service provider identifier for the domain as defined in the identity provider. If you choose No, the service provider identifier is set to "Informatica" .

Specify whether or not the IdP will sign the SAML assertion.

Enter the identity provider assertion signing certificate alias name.

Enter the directory where you store your custom TLS certificates to enable SAML authentication in the domain.

Specify the directory only, not the full path to the file.

Specify the location and passwords of the keystore and truststore files.

The following table describes the location and password of the truststore and keystore files:

Property	Description
Truststore Directory	The directory containing the custom truststore file. Specify the directory only, not the full path to the file.
Truststore Password	The password for the custom truststore file.
Keystore Directory	The directory containing the custom keystore file.
Keystore Password	The password for the custom keystore file.

To specify the Authentication Context Comparison, specify the strength comparison of the authentication mechanism used by the user with the IdP server.

Supported values are MINIMUM, MAXIMUM, BETTER, or EXACT option. Default is MINIMUM.

To set the Authentication Context Class, specify the expected mechanism of first time authentication of the user with the IdP server.

Supported values are PASSWORD or PASSWORDPROTECTEDTRANSPORT. Default is PASSWORD.

Specify whether or not you want to enable the webapp to sign the SAML authentication request.

Default is disabled.

Specify the alias name of the private key that was imported to the node SAML keystore using which the SAML request should be signed.

Specify the password to access the private key used for signing the SAML request.

Specify the algorithm that the web application uses to sign the SAML request.

Use one of the following values:

RSA_SHA256, DSA_SHA1, DSA_SHA256, RSA_SHA1, RSA_SHA224, RSA_SHA384, RSA_SHA512, ECDSA_SHA1, ECDSA_SHA224, ECDSA_SHA256, ECDSA_SHA384, ECDSA_SHA512, RIPEMD160, or RSA_MD5

Specify whether or not you want IdP to sign the SAML response.

Choose this to enable the webapp to receive the signed SAML response. Default is disabled.

Specify whether or not IdP will encrypt the SAML assertion.

Choose this to enable the webapp to receive an encrypted SAML assertion. Default is enabled.

Specify the alias name of the private key present in the gateway node SAML truststore that Informatica uses to decrypt the SAML assertion.

Provide the password to access the private key to use when decrypting the assertion encryption key.

Press

Enter

The

Domain Security - Secure Connection

section appears.

Run the installer in console mode