> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sync.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Certinia

You can use the Certinia connector from the CData Sync application to capture data
from Certinia and move it to any supported destination. To do so, you need to add
the connector, authenticate to the connector, and complete your connection.

## Add the Certinia Connector

To enable Sync to use data from Certinia, you first must add the
connector, as follows:

<ol>
  <li>Open the **Connections** page of the Sync dashboard.</li>
  <li>Click **Add Connection** to open the **Select Connectors** page.</li>
  <li>Click the **Sources** tab and locate
  the **Certinia** row.</li>

  <li>
    Click the **Configure Connection** icon at the end of that row to open
    the **New Connection** page. This action opens the
    **Add Connection** dialog.

    **Note:** If the **Configure Connection** icon is not
    available, click the **Download Connector** icon to install
    the Certinia connector.
  </li>

  <li>Enter a name for your connection in the **Add Connection** dialog.</li>
  <li>Click **Add** to open the **Settings** tab for your connector.</li>
</ol>

For more information about installing new connectors, see
[Connections](https://docs.sync.cdata.com/26.4/en/connections/connections.md).

## Authenticate to Certinia

After you add the connector, you need to set the required properties.

CData Sync supports authenticating to Certinia in several ways. Select your authentication method below to proceed to the relevant section that contains the authentication details.

* [**Basic**](#basic)
* [**OAuth**](#oauth) (default)
* [**OAuth Client**](#oauth-client)
* [**OAuth Password**](#oauth-password)
* [**OAuth JWT**](#oauth-jwt)
* [**OAuth PKCE**](#oauth-pkce)
* [**OneLogin**](#onelogin)
* [**PingFederate**](#pingfederate)
* [**OKTA**](#okta)
* [**Active Directory Federation Services**](#active-directory-federation-services)
* [**Azure Active Directory**](#azure-active-directory)

### Basic

To connect with user credentials and a security token, specify the following settings:

* **Auth Scheme:** Select **Basic**.
* **User:** Enter the username that you use to authenticate to your Certinia account.
* **Password:** Enter the password that you use to authenticate to your Certinia account.
* (Optional) **Security Token:** Enter the security token for your Certinia account. If you do not know your security token, you can reset it as follows:
  1. Open your personal information page on the [https://www.salesforce.com/](https://www.salesforce.com/) website.
  2. Click the link to reset your security token. The token will be emailed to you.

### OAuth

CData Sync provides an embedded OAuth application with which to connect. To use the application, select **OAuth** for **Auth Scheme**. No additional properties are required.

### OAuth Client

To connect with an OAuth client, specify these settings:

* **Auth Scheme:** Select **OAuthClient**.
* **OAuth Client Id:** Enter the client Id that you were assigned when you registered your application with an OAuth authorization server.
* **OAuth Client Secret:** Enter the client secret that you were assigned when you registered your application with an OAuth authorization server.

### OAuth Password

To connect with OAuth credentials, specify the following settings:

* **Auth Scheme:** Select **OAuthPassword**.
* **User:** Enter the username that you use to authenticate to your Certinia account.
* **Password:** Enter the password that you use to authenticate to your Certinia account.
* **Security Token:** Enter the security token for your Certinia account. If you do not know your security token, you can reset it as follows:
  1. Open your personal information page on the [https://certinia.com/](https://certinia.com/) website.
  2. Click the link to reset your security token. The token will be emailed to you.

### OAuth JWT

To connect with a Certinia account, specify the following properties:

<ul><li>**Auth Scheme:** Select **OAuthJWT**.</li>
<li>**OAuth Client Id:** Enter the client Id that you were assigned when you registered your application with an OAuth authorization server.</li>
<li>**OAuth Client Secret:** Enter the client secret that you were assigned when you registered your application with an OAuth authorization server.</li>
<li>**Scope:** Enter the scope of your access to the application.</li>
<li>**OAuth JWT Cert:** Enter your Java web tokens (JWT) certificate store.</li>
<li>**OAuth JWT Cert Type:** Enter the type of key store that contains your JWT certificate. The default type is **PEMKEY\_BLOB**.</li>
<li>**OAuth JWT Issuer:** Enter the issuer of your Java web token. Typically, the issuer is either the client Id or the email address of the OAuth application.</li>
<li>(Optional) **OAuth JWT Cert Subject:** Enter the subject of your OAuth JWT certificate.</li>
<li>(Optional) **OAuth JWT Subject:** Enter the user subject for which the application is requesting delegated access.</li>
<li>(Optional) **OAuth JWT Subject Type:** Select the subject type (**enterprise** or **user**) for the JWT authentication. The default type is **enterprise**.</li>
<li>(Optional) **OAuth JWT Public Key Id:** Enter the Id of the public key for JWT.</li></ul>

### OAuth PKCE

CData Sync provides an embedded OAuth application with which to connect. To connect with the OAuth PKCE extension, select **OAuthPKCE** for **Auth Scheme**. No additional properties are required.

### OneLogin

To connect with single sign-on (SSO) via OneLogin, specify the following settings:

* **Auth Scheme:** Select **OneLogin**.
* **User:** Enter the username for your Certinia account.
* **Password:** Enter the password for your Certinia account.
* **SSO Properties:** Enter a semicolon-separated list of the single sign-on (SSO) properties that you want to use (for example, *SSOProperty1*=*Value1*;*SSOProperty2*=*Value2*;...).
* **SSO Exchange URL:** Enter the Certinia OAuth 2.0 token endpoint for the identity provider (for example, https\://*MyOrganization*.*My.CertiniaAcct*.com/services/oauth2/*token*).

### PingFederate

To connect with single sign-on via PingFederate, specify the following properties:

<ul><li>**Auth Scheme:** Select **PingFederate**.</li>
<li>**User:** Enter the username that you use to authenticate to your PingFederate account.</li>
<li>**Password:** Enter the password that you use to authenticate to your PingFederate account.</li>
<li>**SSO Login URL:** Enter the login URL that is used by your SSO provider.</li>
<li>**SSO Properties:** Enter a comma-separated list of the single sign-on (SSO) properties that you want to use (for example, *SSOProperty1*=*Value1*;*SSOProperty2*=*Value2*;...).</li>
<li>**SSO Exchange UrI:** Enter the Partner Service Identifier URI that is configured in your PingFederate server instance. The URI is available under **SP Connections > SP Connection > WS-Trust > Protocol Settings**.</li></ul>

### Okta

To connect with single sign-on (SSO) via Okta, specify the following properties:

<ul><li>**Auth Scheme:** Select **OKTA**.</li>
<li>**User:** Enter the username that you use to authenticate to your Okta account.</li>
<li>**Password:** Enter the password that you use to authenticate to your Okta account.</li>
<li>**SSO Login URL:** Enter the login URL that is used by your SSO provider.</li>
<li>**SSO Properties:** Enter a semicolon-separated list of the single sign-on (SSO) properties that you want to use (for example, *SSOProperty1*=*Value1*;*SSOProperty2*=*Value2*;...).</li></ul>

### Active Directory Federation Services

To connect with single sign-on (SSO) via ADFS, specify the following properties:

<ul><li>**Auth Scheme:** Select **ADFS**.</li>
<li>**User:** Enter the username that you use to authenticate to your ADFS account.</li>
<li>**Password:** Enter the password that you use to authenticate to your ADFS account.</li>
<li>**SSO Login URL:** Enter the login URL that is used by your SSO provider.</li>
<li>**SSO Properties:** Enter a semicolon-separated list of the single sign-on (SSO) properties that you want to use (for example, *SSOProperty1*=*Value1*;*SSOProperty2*=*Value2*;...).</li>
<li>**SSO Exchange UrI:** Enter the Partner Service Identifier URI that is configured in your PingFederate server instance. The URI is available under **SP Connections > SP Connection > WS-Trust > Protocol Settings**.</li></ul>

### Azure Active Directory

To connect with single sign-on via AzureAD, specify the following settings:

* **Auth Scheme:** Select **AzureAD**.
* **SSO Properties:** Enter a semicolon-separated list of the single sign-on (SSO) properties that you want to use (for example, *SSOProperty1*=*Value1*;*SSOProperty2*=*Value2*;...).
* **SSO Exchange URL:** Enter the Certinia OAuth 2.0 token endpoint for the identity provider (for example, https\://*MyOrganization*.*My.CertiniaAcct*.com/services/oauth2/*token*).
* **OAuth Client Id:** Enter the client Id that you were assigned when you registered your application with an OAuth authorization server.
* **OAuth Client Secret:** Enter the client secret that you were assigned when you registered your application with an OAuth authorization server.

> [!NOTE]
>
> This configuration requires two separate Azure Active Directory applications:
>
> <ul>
>   <li>the Certinia application that you use for single sign-on.</li>
>   <li>a custom OAuth application with user\_impersonation permission set on the Certinia application. (For details, see [Creating a Custom OAuth App](https://cdn.cdata.com/help/HFK/synch/default.htm#pg_oauthcustomappcreate).)</li>
> </ul>

## Complete Your Connection

To complete your connection:

1. Specify the following properties:
   * (Optional) **API Version:** Enter your API version. The default version is **62.0**.
   * (Optional) **Login URL:** Enter your login URL for Certinia.
   * **Use Sandbox:** Select whether you want to enable the sandbox. By default, the **Enable** checkbox is not selected.
2. Define advanced connection settings on the **Advanced** tab. (In most cases, though, you should not need these settings.)
3. If you authenticate with OAuth or AzureAD, click **Connect to Certinia** to connect to your Certinia account.
4. Click **Create & Test** to create your connection.

## More Information

For more information about interactions between CData Sync and Certinia, see
[Certinia Connector for CData Sync](https://cdn.cdata.com/help/HFN/synch/default.htm).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.