6.0 Securing Communication

If the remote Web service you are accessing allows HTTPS connections, you can configure the driver to take advantage of this increased security.

IMPORTANT:Only certificates from Java keystore are accepted. So, make sure that the keystore of the certificates is a Java keystore.

The Subscriber channel sends information from the Identity Vault to Salesforce.com. To establish a secure connection for the Subscriber channel, you need a trust store containing a certificate issued by the certificate authority that signed the server’s certificate.

Import this certificate into a trust store using Java’s keytool. For more information on keytool, see Keytool - Key and Certificate Management Tool.

  1. Import the certificate into your trust store or create a new trust store by entering the following command at the command prompt:

    keytool -import -file name_of_cert_file -trustcacerts -noprompt -keystore filename -storepass password

    For example: 

    keytool -import -file tree_ca_root.b64 -trustcacerts -noprompt -keystore dirxml.keystore -storepass novell

  2. Configure the Subscriber channel to use the trust store you created in Step 1:

    1. In iManager, in the Roles and Tasks view, click Identity Manager > Identity Manager Overview.

    2. Locate the driver set containing the Salesforce.com driver, then click the driver’s icon to display the Identity Manager Driver Overview page.

    3. On the Identity Manager Driver Overview page, click the driver’s icon again, then scroll to Subscriber Settings.

    4. In the Keystore File setting, specify the path to the trust store you created in Step 1.

  3. Click Apply, then click OK.