To start using Data Control Tower (DCT), the Delphix Engine(s) must first be connected. Once connected, the engines will periodically connect to DCT to update metadata and look for any commands, such as initiating a virtual database refresh.

Before connecting the Delphix Engines, all of the steps described in the Prerequisites section of the Getting Started with DCT article must be complete.

There are two steps to adding and connecting a Delphix Engine with DCT: 

  1. Enabling the engine to connect to DCT. 
  2. Authenticating the engine via system administrator credentials.

Enabling Data Control Tower Connectivity on the Delphix Engine

The SaaS-based DCT offering requires the Delphix Engines (Masking or Virtualization) to have internet access and the data services component enabled. If direct access to the internet is not available, a web proxy can be used. For more information, visit the Web Proxy Support article. 

Selecting enable on the data services component will prepare the engine for communication with the management service, but will not launch DCT. A tenant must be provisioned by Delphix and the SAML2-based identity provider must be integrated to provide authentication for the enterprise. Once enabled this cannot be disabled. 

To enable DCT connectivity on the Delphix Engine, first enable the DCT Connector using the steps below.

  1. Log into Delphix Setup on the engine connecting to DCT.
  2. Select the Enable button under the Data Control Tower Connector label in the Software Version section. 

  3. In the Enable Data Control Tower Connector window, select a Proxy Settings option using the dropdown menu or continue with the default inherit system web proxy settings option. For more information, visit the Web Proxy Support article. Select Enable to connect the engine, download the latest connector, and ensure that the engine can reach DCT. 

    Proxy Settings Available For and Above

    The Proxy Settings are only available for Delphix Engine version and above. The options available are:

    • Inherit system web proxy settings
    • DCT specific proxy settings
    • No proxy

  4. After enabling the component, a new DCT section will be added to the engine Dashboard with an Unregistered Connection Status.

  5. Once the DCT Connector is enabled, each engine must be authenticated by someone with sysadmin credentials. This process is initiated from the DCT UI.

    The workstation/computer being used with intent of authenticating must be able to access both DCT and the Delphix Engine.

Connecting Engines With Data Control Tower

Once the DCT Connector is enabled, each engine must be connected by a sysadmin user. Before proceeding with registration, ensure that each user on the Delphix Engine has the email address field filled out. The workstation running the web browser must be able to access both DCT and the Delphix Engine being authenticated. Follow the steps in the next three subsections to connect Delphix Engines with DCT.

SSO Enablement Required

Once a Delphix Engine connects with DCT, users of the Delphix Masking and Management services will only be able to authenticate using SSO (through SAML 2.0 IDP). Visit the Configuring Single Sign-On article for SSO authentication steps.

Initiating Delphix Engine Registration within Data Control Tower

  1. Login to Data Control Tower as a DCT Admin User. 
  2. Click the Infrastructure tab.
  3. On the Infrastructure page, click Connect engine.

  4. In the Connect Engine modal, provide the following information:
    1. Engine name: This is a descriptive name that will be displayed in DCT.
    2. Host: The IP address or fully qualified domain name of the engine. 
    3. Is this the
      • Production Network: Select this if the Delphix Engine is deployed in a production network (alongside the production application) 
      • Non-production Network: Select this if the Delphix Engine is deployed in a non-production network (or development network)

  5. Click Next. The final summary tab is shown so configurations for Engine, Hostname, and Engine Type can be reviewed. 
  6. Review the summary.  
  7. Click Submit

Authenticating the Engine within Delphix Connect

  1. Login to the Delphix Engine as a system administrator. The Delphix Connect page is displayed. 

  2. On the Delphix Connect page, click Connect to establish the connection to DCT, the page will refresh as part of the registration process. During the registration process, the Delphix Engine will upload metadata.

  3. The Convert email addresses button is selected to convert all engine email addresses to work with DCT SSO. This is a requirement for IdP integration. If all Engine users are known to use exclusively lower-case email addresses, this step is optional, but it is strongly recommended to use this conversion step regardless to ensure consistency.

Confirmation within Data Control Tower

To verify if the Delphix Engine has been added successfully, do the following:

  1. Login to Data Control Tower.
  2. Navigate to the Engine tab. The Infrastructure page is displayed.
  3. Observe Delphix Engine shows Connected status. This shows the Delphix Engine is connected to DCT.