Oracle OAM implementation of PeopleSoft SSO Single Sign-On step tutorial, oampeoplesoft

Oracle OAM implementation of PeopleSoft SSO Single Sign-On step tutorial, oampeoplesoft

This article describes how to use OAM to implement eaglesoft single-point logon. The eaglesoft system is short for PS. The steps are as follows:

1. Configure OAM resource protection

Step 1. log on to https://xxx.port/oamconsoleto configure resource protection

Step 2. Add the following protection resources to the preceding Webgate Agent:

/Psc /**

/Cs/ps /**

/Ps /**

/Cgi-bin/printenv /**

/Psp /**

2. OAM header configuration

Log on to the OAM console as an administrator. weblogic is used to open the application domain ==> WebGate ==> Authorization Policy ==> Protected Resource Policy ==> response and create a new response.

Name:

OAM_REMOTE_USER

REMOTE_USER

PS_SSO_UID

Type: Header

Value: $ user. attr. uid

3. OHS Configuration

Find the mod_wl_ohs.conf configuration file on the OHS service and edit it to add a listener for lelesoft resources.

Step 1: cd to the/oracle/ohshome/Middleware/Oracle_WT1/instances/instance1/config/OHS/ohs1 directory

Step 2: run the vim mod_wl_ohs.conf command and add the following configuration in mod_wl_ohs.conf:

SetHandler weblogic-handler

WebLogicHost xx. xx

WebLogicPort 80

SetHandler weblogic-handler

WebLogicHost xx. xx

WebLogicPort 80

SetHandler weblogic-handler

WebLogicHost xx. xx

WebLogicPort 80

SetHandler weblogic-handler

WebLogicHost xx. xx

WebLogicPort 80

Save configuration and restart OHS instance

4. Response Configuration

Step 1: cd/oracle/ohshome/Middleware/Oracle_WT1/instances/instance1/config/OHS/ohs1/htdocs

Step 2: ln-s ../cgi-bin

Step 3: chmod 755 cgi-bin/printenv

Step 4: cd cgi-bin

Step 5. vim printenv: Change the perl path #! /Usr/bin/perl

Step 6. Restart the ohs instance

5. Response Test

Access https: //:/cgi-bin/printenv. You can see that the username exists in the PS_SSO_UID header. The configuration in the previous four steps is successful.

6. Create a user for public access to Peoplesoft

Log on to eaglesoft as an administrator, open the eagletools Security user overview on the main menu, and create a LOGIN user summary with a password of 123456.

None

It is best to assign a role to an employee.

7. Open users' Public Access Permissions

The webprofile used in the development environment is TEST. Open the main menu ==> PeopleTools ==> web overview configuration, select TEST, and edit the production environment as PROD.

On the Security Page, public access is allowed. Fill in the user created in the previous step. This is the user created in TESTLOGIN in Step 6.

8. Modify the login authentication logic of eaglesoft

Use Peoplesoft Application Designer to connect to lelesoft, open FUNCLIB_LDAP Record. Then edit the Peoplesoft code of LDAPAUTH. Find the getWWWAuthConfig function and modify the default logon user as the newly created user. TESTLOGIN is used here.

Add Verification Code

/* ---- Peoplesoft sso -----*/

Function Oracle_Access_Manager_Authentication ()

/* Note: Following file will written to the default path .*/

/* Usually appserv // files */

& Logfile = GetFile ("oamaccess. log", "");

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: Netpoint_Authentication_Profile started ");

& Logfile. Writeline (String (% Datetime ));

& Logfile. Writeline ("authMethod :");

End-If;

If % PSAuthResult = True And

& AuthMethod <> "LDAP" And

& AuthMethod <> "COREID" And

& AuthMethod <> "SSO" Then

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: AuthResult and AuthMethod OK .");

End-If;

GetWWWAuthConfig ();

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: After get wwwauthconfig .");

& Logfile. Writeline (& defaultUserId );

End-If;

If % SignonUserId = & defaultUserId Then

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: % SignonUserId = & defaultUserId ");

End-If;

& UserID = % Request. GetHeader ("PS_SSO_UID ");

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: After getting HTTPheader ");

& Logfile. Writeline (& userID );

End-If;

If & userID <> "Then

If & bConfigRead = False Then

GetLDAPConfig ();

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: After getLDAPConfig ()");

& Logfile. Writeline (& userID );

End-If;

 

& Amp; GlobalUserID = & amp; userID;

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: After DNTold ");

& Logfile. Writeline (& GlobalUserID );

End-If;

If & GlobalUserID <> "Then

SetAuthenticationResult (True, & GlobalUserID, "", False );

& AuthMethod = "WWW ";

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: Userid is valid ");

& Logfile. Writeline (& GlobalUserID );

End-If;

End-If;

End-If;

Else

If & logfile. Isopen Then

& Logfile. Writeline ("Warning: % SignonUserId not = & defaultUserId ");

& Logfile. Writeline (% SignonUserId );

& Logfile. Writeline (& defaultUserId );

End-If;

End-If;

Else

If & logfile. Isopen Then

/* Note: Next line sometimes wraps due to length-fix if necessary */

& Logfile. Writeline ("ERROR: % PSAuthResult = True And ");

& Logfile. Writeline ("& authMethod <>" "LDAP" "And ");

& Logfile. Writeline ("& authMethod <>" "SSO """);

& Logfile. Writeline (% PSAuthResult );

& Logfile. Writeline (& defaultUserId );

& Logfile. Writeline (% Request. GetHeader ("PS_SSO_UID "));

End-If;

End-If;

If & logfile. Isopen Then

& Logfile. Writeline ("INFO: Oracle_Access_Manager_Authentication_Profile exit ");

& Logfile. close ();

End-If;

End-If;

End-Function;

 

/* ---- Peoplesoft sso -----*/

9. Add OAM Token Authentication

Log on to lelesoft as an administrator, and open the main menu ==> PeopleTools ==> Security ==> security object ==> log on to PeopleCode to enable OAMSSO_AUTHENTICATION

10. Weblogic users must disable Basic Authentication.

Go to the directory PIA_HOME> \ webserv \ peoplesoft \ config, modify the config. xml file, and add the following Configuration:

False

For example:

11. Username case

When OAM sends OBSSOcookies to PS, all user names are in size. In the PS system, the user is in lower case, and the user name in the PS system is case sensitive. As a result, the user name in lower case cannot be logged on. The solution is simple:

Delete all upper keywords in eaglecode. Back up the eaglecode file before deleting the upper keyword.

12. Configuration directory

Configure directory connection for OID or AD

Test connectivity

13. cache directory Mode

Configure the cache Mode

14. Authentication ing

Configure identity ing. The employee logon System ID of cn

15. user profile ing

Configure user profile ing

16. PS server restart

Restart the PS server and Process

17. Synchronize users

After completing the preceding configuration and restarting, you also need to synchronize the AD or OID users to the PSOPRDEFN table of PS to map accounts and HR employee numbers.

The following solutions can be used:

1. Develop a scheduled task interface to synchronize data in the personnel table to the PS temporary PS_OPRDEFN_SSO_TMP_TBL every morning.

2. Write PS_OPRDEFN_SSO_TMP_TBL to the psoprdefn Personnel Summary Table, psroleuser permission table, and psopralias personnel type table.

So far, the implementation of eaglesoft single-point logon on OAM is complete, and the original portal can be directly linked to the PS human resources system.