Skip Ribbon Commands
Skip to main content
Navigate Up
Sign In

Quick Launch

Average Rating:

facebook Twitter
Email
Print Bookmark Alert me when this article is updated

Feedback

HOW TO: Connect to Salesforce using SSL.
Solution
**Note** 
  • If using default informatica truststore ($INFA_HOME/services/shared/security/infa_truststore.jks) then only intermediate certificate required from Salesforce. 
  • If using custom truststore then both root and intermediate certificate required. 
​This KB describes steps for the latter, i.e. when both root and intermediate certificate are required. 

1.    Ensure the domain is enabled for secure communication. 

 

Salesforce1_11.png

2.    Create Salesforce Connection using following properties;


Connection: Cloud -> Salesforce

Connection Type : Standard

Username : Email address used for the Salesforce Account

Password : this is the password combined with the security token you get from the salesforce account (no spaces between password and token)

Service URL : this is the login URL that you use when connecting to salesforce. The default is ‘https://login.salesforce.com/services/Soap/u/34.0’.


3. Click ‘Ok’ to save the new connection.

 

4.  Click Actions -> Test Connection. The following error should appear ;

Could not execute action...

The requested operation could not be performed due to the following error : Connection failed with error: Please check if you have imported appropriate certificate.

com.informatica.cloud.api.adapter.runtime.exception.FatalRuntimeException: com.sforce.ws.ConnectionException: Failed to send request to https://login.salesforce.com/services/Soap/u/34.0.


salesforce2_2.png

 

5.    Navigate to the Service URL in the browser;

In this example I am using https://login.salesforce.com/services/Soap/u/34.0 so I will navigate to the base of the URL -> https://login.salesforce.com .

 

6.    Once on the login page click on lock icon beside the browser URL and then click ‘Certificate (valid)’ from the screenshot highlighted below.

 

Salesforce3.png 

 

7.    A dialog will open. Click on the ‘Certification Path’ tab -> double-click on the certificate for ‘DigiCert’ as highlighted below.

Salesforce4.png

 

8.      Another pop-up dialog will appear -> navigate to the details tab -> click the button to ‘Copy to file’.


     Salesforce5.png
 

9.      When the next popup appears click ‘Next’, select ‘Base-64 encoded X.509 (.CER)’. Click Next and save file as ‘Salesforce-Root’.

salesforce6.png

10.   Repeat step 7-9 for the second certificate ‘DigiCert  SHA2 Secure Server CA’, export as ‘Base-64 encoded X.509 (.CER)’ and call it ‘Salesforce-Intermediate’.

 

11.   Transfer the two certificates files (‘Salesforce-Root’ and ‘Salesforce-Intermediate’) onto the Informatica Server.

salesforce7.png

 

12.   Once the files are on the server navigate to the location of the infa_truststore and import the certificates similar to below;

[root@emedcjml01 CustomKeystores]# ls -lrt

total 40

-rw-r--r-- 1 root root 1834 Mar  4 17:27 key.key

-rw-r--r-- 1 root root 1163 Mar  4 17:27 csr.csr

-rw-r--r-- 1 root root 1375 Mar  4 17:28 cert.crt

-rw-r--r-- 1 root root 3209 Mar  4 17:28 infa_keystore.pem

-rw-r--r-- 1 root root 1375 Mar  4 17:29 infa_truststore.pem

-rw-r--r-- 1 root root 2714 Mar  4 17:29 infa_keystore.p12

-rw-r--r-- 1 root root 2347 Mar  4 17:31 infa_keystore.jks

-rw-r--r-- 1 root root 3074 Mar 12 16:23 infa_truststore.jks

-rw-r--r-- 1 root root 1360 Mar 12 17:04 Salesforce-Root.cer

-rw-r--r-- 1 root root 1674 Mar 12 17:04 Salesforce-Intermediate.cer

[root@emedcjml01 CustomKeystores]# $JAVA_HOME/bin/keytool -importcert -alias Salesforce-Root -keystore infa_truststore.jks -storepass ******** -trustcacerts -file Salesforce-Root.cer -V

Certificate already exists in system-wide CA keystore under alias <digicertglobalrootca [jdk]>

Do you still want to add it to your own keystore? [no]:  yes

Certificate was added to keystore

[Storing infa_truststore.jks]

[root@emedcjml01 CustomKeystores]# $JAVA_HOME/bin/keytool -importcert -alias Salesforce-Intermediate -keystore infa_truststore.jks -storepass ******** -trustcacerts -file Salesforce-Intermediate.cer -V

Certificate was added to keystore

[Storing infa_truststore.jks]

[root@emedcjml01 CustomKeystores]#

 

13.   Shutdown the services

$INFA_HOME/tomcat/bin/infaservice.sh shutdown

 

14.   Restart the services for changes to take effect

$INFA_HOME/tomcat/bin/infaservice.sh startup

 

15.   Test the connection again -> it should test successfully like below.

 

Salesforce8_2.png
​​

​​​​​
More Information
Reference
Applies To
Product: Enterprise Data Catalog; Data Engineering Quality(Big Data Quality); Data Engineering Integration(Big Data Management); Data Quality; PowerCenter
Problem Type: Installation; Connectivity; Configuration
User Type: Administrator
Project Phase: Configure; Implement
Product Version:
Database:
Operating System:
Other Software:
Attachments
Last Modified Date:3/31/2020 9:24 AMID:619140
People who viewed this also viewed

Feedback

Did this KB document help you?



What can we do to improve this information (2000 or fewer characters)