Add an Oracle PeopleSoft Application

To configure the Access Gateway PeopleSoft application.

1. In the Essentials pane enter:
   

   Field	Value
   Label	The name of the application, as shown in your Okta Tenant. For example:PeopleSoft SSO.
   Public DomainA domain is an attribute of an Okta organization. Okta uses a fully-qualified domain name, meaning it always includes the top-level domain (.com, .eu, etc.), but does not include the protocol (https).	The externally facing URL of the PeopleSoft application. For example: https://ps-external.<gateway.info> Note Note that <gateway.info> must match the PeopleSoft domain, which is in the Protected Web Resource section as domain.tld.
   Protected Web Resource	The URL and port combination of the Oracle PeopleSoft Implementation being protected. For example: http://psft-app.domain.tld:8000
   Post Login URL	Browseable route-through location to pick up the required cookie from Okta Access Gateway and pass along to the Oracle PeopleSoft implementation. For example https://ps-external.<gateway.info>/psp/ps/. Note that the post login URL may contain other elements specific to the implementation.
   Group	The group containing users who can access the PeopleSoft instance.

2. Expand Advanced section and click enable Content Rewrite.

3. Click Next.
   The Attributes pane appears.

   For detailed information on the attribute options, see Application Attributes .

4. In the Attributes pane, using the icon, create the following attribute:

   Data Source	Field	Type	Name
   IDP	login Note The attribute in your Okta tenant that stores the PeopleSoft username. This can be a different attribute or can use Okta username mapping to create the PeopleSoft username dynamically.	Header	PS_USER

   1. Click the (+) icon

   2. From the Data Source drop down select static.

   3. From the Field drop down select login.

   4. From the Type drop down select the appropriate target type, either Header.

   5. In the Name field enter the associated name.
      

   6. Click Okay when the attribute is complete.

   7. Repeat to create any additional attributes.

   Click Done when complete.
   

Peoplesoft deployments typically support a pre-provided Signon Peoplecode.
In this section we update the code to accept header-based authentication from the PS_USER header.

1. Open the PeopleTools Application Designer.

2. Click File > Open > Definition: Record > Name: FUNCLIB_LDAP >

3. Open FUNCLIB_LDAPLightweight Directory Access Protocol (LDAP) is a lightweight client-server protocol for accessing directory services, specifically X.500-based directory services. LDAP runs over TCP/IP or other connection oriented transfer services.

4. Right Click Open > Cancel

5. Right Click LDAPAUTH > View PeopleCode

6. Search for the getWWWAuthConfig() function.
   Change:
   &defaultUserId = "";
   to:
   &defaultUserId = "PUBUSER";

7. Search for the OAMSSO_AUTHENTICATION() function,
   change the header value from OAM_REMOTE_USER to PS_USER

8. Click File > Save.

1. Navigate to the PeopleSoft Web Portal and sign in as the PeopleSoft super user.

2. From the Main Menu select PeopleTools > Security > Security Objects > Signon PeopleCode > [+] button.

3. Select the Signon PeopleCode page.

4. Enable the OAMSSO_AUTHENTICATION function, and click Save.

5. Add a default user profile to PeopleSoft

   1. From the Main Menu navigate to PeopleTools > Security > User Profiles > User Profiles > Add a New Value.

   2. Select the General tab.

      Create user: PS_USER with Password: <password>.
      

   3. Select the ID Tab.

   4. Set ID type to none.
      
      

   5. Click Save.

6. Configure the web profile

   1. From the Main Menu navigate to PeopleTools > Web Profile > Web Profile Configuration > Search > PROD > Security.
      

      

      Note

      If Public Users section is populated note the User ID.

   2. Set the following fields:
      

      Section	Field	Value
      Main	PIA use HTTP Same Server	Unchecked
      Public Users	User ID	PS_USER
      Public Users	Password	Matching previously created user
      Public Users	Allow Public Access	Checked

   3. Click Save.

7. Set default proxy address

   1. From the Main Menu navigate to PeopleTools > Web Profile > Web Profile Configuration > Search > PROD > Virtual Addressing.

   2. Set the following fields:
      

      Section	Field	Value
      Default Addressing	Protocol	https
      Default Addressing	Name	FQDNA fully qualified domain name (FQDN) is the complete domain name for a specific computer, or host, on the internet. of the PeopleSoft instance For example: ps-external.<gateway.info>.
      Default Addressing	Port	443
      Public Users	Allow Public Access	Checked

   3. Click Save.

8. Restart PeopleSoft.

1. Select IDP Initiated from the drop down menu associated with the application.
   

   

   Note

   If you are using an SP initiated test, you will need to test from another browser tab and not from the SPAn acronym for service provider. Generally, an SP is a company, usually providing organizations with communications, storage, processing, and a host of other services. Within Okta, it is any website that accepts SAML responses as a way of signing in users, and has the ability to redirect a user to an IdP (e.g., Okta) to begin the authentication process. Initiated option.
   PeopleSoft requires a landing page for SSOAn acronym for single sign-on. In a SSO system, a user logs in once to the system and can access multiple systems without being prompted to sign in for each one. Okta is a cloud-based SSO platform that allows users to enter one name and password to access multiple applications. Users can access all of their web applications, both behind the firewall and in the cloud, with a single sign in. Okta provides a seamless experience across PCs, laptops, tablets, and smartphones. to function correctly. IDP initiated handles this by sending the Post Login URL, SP Initiated does not.

   

   Note

   Your Okta tenant administrator may need to assign the application to you.
   
   In addition, if you do not already have an active session for Okta open in your browser, you may be prompted to log in to your Okta account and provide credentials.

2. Verify that you are logged into Oracle PeopleSoft correctly.