Your AI agents can use OAuth authentication to access an Informatica MCP server if your IDMC organization uses SAML single sign-on or AI Agent Engineering.
Note:
If your organization doesn't use SAML single sign-on or AI Agent Engineering, your AI agents need to use JWT or session-based authentication.
If you want your AI agents to use OAuth authentication to access an Informatica MCP server, you can use a federated identity provider like Azure AD or Okta, or you can register a client directly with Informatica’s internal authorization server.
Use either of the following OAuth authentication methods based on how your organization is configured:
Use federated OAuth.
This method delegates the identity check to an external identity provider (IdP) like Okta or Azure AD. Your AI agents can access the MCP server using a JWT access token that your IdP generates.
You can use this method when your organization uses SAML single sign-on.
Create and register an OAuth client.
You can register a client with the Informatica OAuth 2.0 server or 2.1 server. The 2.0 server directly authenticates machine-to-machine communication without user intervention, while the 2.1 server requires a human user to grant permission. When you register a client with either server, the registration process generates a client ID and, when applicable, a client secret that are combined with other information to access the MCP server.
You can use this method if you use AI Agent Engineering.