Your AI agents can use OAuth authentication to access an Informatica MCP server if your IDMC organization uses SAML single sign-on or AI Agent Engineering.
Note:
If your organization doesn't use SAML single sign-on or AI Agent Engineering, your AI agents need to use JWT or session-based authentication.
If you want your AI agents to use OAuth authentication to access an Informatica MCP server, you can use a federated identity provider like Azure AD or Okta. Alternatively, you can register a client directly with Informatica’s internal authorization server.
Use either of the following OAuth authentication methods based on how your organization is configured:
Use federated OAuth.
This method delegates the identity check to an external identity provider (IdP) like Okta or Azure AD. Your AI agents can access the MCP server using a JWT access token that your IdP generates.
You can use this method when your organization uses SAML single sign-on.
Create and register an OAuth client.
You can register a client with an Informatica OAuth server. Informatica provides the following OAuth servers that you can use based on the authentication flow:
- Informatica OAuth Server (Authorization Code grant). Supports the Authorization Code grant type, which requires a human user to explicitly grant permission. Use this flow when an interactive human user is present and needs to authorize an AI agent to act on their behalf.
- Informatica OAuth Server (Client Credentials grant). Supports the Client Credentials grant type, which directly authenticates machine-to-machine communication without human intervention. Use this flow for automated background workers, CI/CD pipelines, or autonomous server-side AI agents that connect directly to the MCP server.
When you register a client with either server, the registration process generates a client ID and, when applicable, a client secret. These credentials are combined with other information to access the MCP server.
You can use this method if you use AI Agent Engineering.