Overview

Collibra Data Quality & Observability offers multiple methods of user authentication, including a local user store and Active Directory or generic LDAP integration.

Security can be configured to meet your needs. Advanced options to segment groups and roles are available. Additionally, options for SAML and SSO are available.

You can control configurations at the Web (UI), PostgreSQL, and application layers depending on your security requirements.

Encryption

Encryption is available for data in transit and at rest. When enabled, encryption of data in Collibra Data Quality & Observability is forward-looking.

We support the following encryption protocols for data in transit:

TLS

  • TLS 1.2
  • TLS 1.3

AES

  • TLS_AES_256_GCM_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

ChaCha20

  • TLS_CHACHA20_POLY1305_SHA256
  • TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
  • TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

We support the following encryption protocol for data at rest:

AES secret key

  • PBEWithHMACSHA512AndAES_256 algorithm