we want to log into Informatica using Azure as an identity provider issuing a SAML token. Is there examples of how to do this?

Question

we want to log into Informatica using Azure as an identity provider issuing a SAML token. Is there examples of how to do this?

Howatt, Alan 20

We have API access to Infa cloud services for automating tasks that are available through the UI but need to run unattended. This can be done via native login or SAML login. We are wanting to restrict to SAML login only. Infa has an api to allow this. This api requires a "SAML token" from our identity provider. How can we we access azure and retrieve the saml token for use with the infa api? Any examples would be appreciated.

JamesTran-MSFT 36,871 Reputation points Microsoft Employee

2023-09-11T18:33:41.32+00:00

@Howatt, Alan

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Accepted answer

0 additional answers

Your answer

JamesTran-MSFT 36,871 Reputation points Microsoft Employee

2023-09-11T18:33:41.32+00:00

@Howatt, Alan

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

Akshay-MSFT 17,931 Microsoft Employee

@Howatt, Alan

Thank you for posting your query on Microsoft Q&A, from above description I could understand that you are looking for Azure AD/Entra ID SAML integration with Informatica, so that users from Azure AD could signin in to Informatica with Azure AD SAML token.

Please do correct me if this is not the case by responding in the comments section.

You may try following Azure Active Directory SSO integration with Informatica Intelligent Data Management Cloud

Following this you could integrate Informatica Intelligent Data Management Cloud with Azure Active Directory (Azure AD). It is a SAML SSO Auth application to enable Informatica Intelligent Data Management Cloud on Azure Native Services. When you integrate Informatica Intelligent Data Management Cloud with Azure AD, you can:

Control in Azure AD who has access to Informatica Intelligent Data Management Cloud.
Enable your users to be automatically signed-in to Informatica Intelligent Data Management Cloud with their Azure AD accounts.
Manage your accounts in one central location - the Azure portal.

You'll configure and test Azure AD single sign-on for Informatica Intelligent Data Management Cloud in a test environment. Informatica Intelligent Data Management Cloud supports both SP and IDP initiated single sign-on and Just In Time user provisioning.

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.

Howatt, Alan 20 Reputation points

2023-09-05T12:59:44.8366667+00:00

Hi, thanks for the response. However we have Azure / Informatica all set up and we can use a browser to access Infa via SAML. This is used for UI access. We now want to use this to access Infa via the API. Infa offers a "SAML Login" API that requires a SAML Token from the Identify provider. https://docs.informatica.com/integration-cloud/data-integration/current-version/rest-api-reference/platform-rest-api-version-2-resources/loginsaml.html My question is, how do we access Azure programmatically to obtain the SAML token to log into infa? thanks in advance
Akshay-MSFT 17,931 Reputation points Microsoft Employee

2023-09-05T13:41:23.2233333+00:00

@Howatt, Alan ,

Azure AD is does have separate, so you would need to call Microsoft Graph API. However, the Graph API uses the OIDC/OAuth protocols. So you could exchange a SAML request for an OIDC access token.

You may try following Exchange a SAML token issued by AD FS for a Microsoft Graph access token

You'll enable the SAML bearer assertion flow to exchange a SAMLv1 token issued by the federated AD FS instance for an OAuth 2.0 access token for Microsoft Graph. When the user's browser is redirected to Azure Active Directory (Azure AD) to authenticate them, the browser picks up the session from the SAML sign-in instead of asking the user to enter their credentials.

Thanks,

Akshay Kaushik
Howatt, Alan 20 Reputation points

2023-09-05T15:13:48.3033333+00:00

"Get the SAML assertion from AD FS" - this is what I want to do from what I can see from the documentation. (Infa wants "The SAML token is a SAML response generated by your identity provider that contains a SAML assertion.") However there are only png in reference to the call made via postman to try this. Is there an API reference for this so we can retrieve the SAML Assertion?
Akshay-MSFT 17,931 Reputation points Microsoft Employee

2023-09-11T06:26:55.62+00:00

@Howatt, Alan

As informed in comment above, Azure AD is does not have separate endpoint for SAML, so you would need to call Microsoft Graph API. However, the Graph API uses the OIDC/OAuth protocols. So you could exchange a SAML request for an OIDC access token.

There is no way Microsoft Graph would issue a SAML response.

Thanks,

Akshay Kaushik

Hope this comment clarifies the behavior. I request that you would kindly re-take the feedback for your experience on this thread. Please "Accept the answer(Yes)" as this will help us and others in the community as well.
Howatt, Alan 20 Reputation points

2023-09-12T12:24:26.23+00:00

Ok, thanks. Ain't nothin easy :)

Share via

we want to log into Informatica using Azure as an identity provider issuing a SAML token. Is there examples of how to do this?

0 additional answers

Your answer