Enhancement Proposal: SAML and OpenID Connect Integration for IIDR Access Server

This proposal suggests an enhancement to the IBM InfoSphere Data Replication (IIDR) Access Server to support modern authentication and authorization mechanisms using SAML 2.0 and OpenID Connect (OIDC).
Currently, authentication mechanisms may rely on more traditional approaches, which can limit integration with enterprise identity platforms. Introducing native support for SAML and OpenID Connect would align the product with modern security standards and improve interoperability with widely adopted identity providers.
With this enhancement, IIDR Access Server would enable seamless integration with enterprise Identity Providers (IdPs).
By implementing this capability, the Access Server would support Single Sign-On (SSO), allowing users to authenticate through centralized identity services and securely access the platform without managing separate credentials. This improves both security and user experience.
From an authorization standpoint, access control could be driven by user attributes and claims provided by the identity provider. This enables consistent enforcement of role-based access control (RBAC) policies aligned with enterprise governance and compliance requirements.
Key benefits of this proposed enhancement include:
 •  Native integration with enterprise identity providers
 •  Support for SAML 2.0 assertions and OpenID Connect tokens
 •  Enablement of Single Sign-On (SSO)
 •  Centralized authentication and improved security posture
 •  Simplified user management and reduced operational overhead
 •  Compatibility with Multi-Factor Authentication (MFA) enforced at the identity provider level

In summary, adding SAML and OpenID Connect support to IIDR Access Server represents a strategic improvement that enhances security, aligns with modern identity standards, and delivers a more seamless and scalable user experience.