Administrator > SAML single sign-on
  

SAML single sign-on

You can enable single sign-on (SSO) capability so that users can access their organization without the need to enter login information.
Single sign-on to Informatica Intelligent Cloud Services is based on the Security Assertion Markup Language (SAML) 2.0 web browser single sign-on profile. The SAML web browser single sign-on profile consists of the following entities:
Identity provider
An entity that manages authentication information and provides authentication services through the use of security tokens.
Service provider
An entity that provides web services to principals, for example, an entity that hosts web applications. Informatica Intelligent Cloud Services is a service provider.
Principal
An end user who interacts through an HTTP user agent.
SAML 2.0 is an XML-based protocol that uses security tokens that contain assertions to pass information about a principal between an identity provider and a service provider. An assertion is a package of information that supplies statements made by a SAML authority.
When a user enters the Informatica Intelligent Cloud Services single sign-on URL in a browser, the following process occurs:
  1. 1Informatica Intelligent Cloud Services sends a SAML authentication request to the organization's identity provider.
  2. 2The identity provider confirms the user's identity and sends a SAML authentication response to Informatica Intelligent Cloud Services.
  3. 3When Informatica Intelligent Cloud Services receives the SAML authentication response from the identity provider, Informatica Intelligent Cloud Services establishes the user session and logs the user into Informatica Intelligent Cloud Services.
  4. 4When a user logs out of Informatica Intelligent Cloud Services or the session times out, Informatica Intelligent Cloud Services sends a SAML logout request to the identity provider.
  5. 5The identity provider terminates the user session on the identity provider side.
You can find more information about SAML on the Oasis web site: https://www.oasis-open.org