Installation Guide

Back Next

Configure domain settings and secure communication

Choose to create a domain and enter port and keystore file information to configure secure configuration between the

CDI-PC domain

and the Administrator tool.

Select

Create a domain

When you create a domain, the node that you create becomes a gateway node in the domain. The gateway node contains a Service Manager that manages all domain operations.

Enter the HTTPS port number for the Administrator tool.

Default is 8443.

Enter the absolute path to the custom keystore file to configure secure communication between the Administrator tool and the domain.

Use the keystore that's in

.jks

format.

Enter the keystore password.

To configure Security Assertion Markup Language (SAML) based single sign-on (SSO) support for web-based Informatica applications in an Informatica domain, select the checkbox to enable SAML authentication.

If you do not want to enable SAML authentication option, skip to Configure secure communication.

Click

If you select the checkbox to enable SAML authentication option, the

SAML Authentication

page appears.

Enter the Identity Provider URL for the domain.

Specify the relying party trust name or the service provider identifier for the domain as defined in the identity provider.

If you choose

, the service provider identifier is set to

Informatica

Specify whether or not the IdP will sign the SAML assertion.

Enter the identity provider assertion signing certificate alias name.

Provide the password to access the private key to use when decrypting the assertion encryption key.

Enter the directory where you store your custom TLS certificates to enable SAML authentication in the domain.

Specify the directory only, not the full path to the file.

Specify the location and passwords of the keystore and truststore files.

The following table describes the location and password of the truststore and keystore files:

Property	Description
Truststore Directory	The directory containing the custom truststore file. Specify the directory only, not the full path to the file.
Truststore Password	The password for the custom truststore file.
Keystore Directory	The directory containing the custom keystore file.
Keystore Password	The password for the custom keystore file.

To specify the

Authentication Context Comparison

, specify the strength comparison of the authentication mechanism used by the user with the IdP server.

Supported values are MINIMUM, MAXIMUM, BETTER, or EXACT option. Default is MINIMUM.

To set the

Authentication Context Class

, specify the expected mechanism of first time authentication of the user with the IdP server.

Supported values are PASSWORD or PASSWORDPROTECTEDTRANSPORT. Default is PASSWORD.

Specify whether or not you want to enable the webapp to sign the SAML authentication request.

Default is disabled.

Specify the alias name of the private key that was imported to the node SAML keystore using which the SAML request should be signed.

Specify the password to access the private key used for signing the SAML request.

Specify the algorithm that the web application uses to sign the SAML request.

Use one of the following values:

RSA_SHA256, DSA_SHA1, DSA_SHA256, RSA_SHA1, RSA_SHA224, RSA_SHA384, RSA_SHA512, ECDSA_SHA1, ECDSA_SHA224, ECDSA_SHA256, ECDSA_SHA384, ECDSA_SHA512, RIPEMD160, or RSA_MD5

Specify whether or not you want IdP to sign the SAML response.

Choose this to enable the webapp to receive the signed SAML response. Default is disabled.

Specify whether or not IdP will encrypt the SAML assertion.

Choose this to enable the webapp to receive an encrypted SAML assertion. Default is enabled.

Specify the alias name of the private key present in the gateway node SAML truststore that Informatica uses to decrypt the SAML assertion.

Provide the password to access the private key to use when decrypting the assertion encryption key.

Click

The

Domain Security - Secure Connection

page appears.

Run the installer in graphical mode

Download Guide