Monday 11 January 2016

Setting up PeopleSoft for Single Sign-On with Oracle Access Manager

1. Create a user profile  OAMPSFT  with id type None  and assign PeopleSoft user role in roles tab.








2.  Configure PeopleSoft to allow public access.

Go to the configuration.properties file.I have the following path

/u01/psconfig/PT8.52/webserv/peoplesoft/applications/peoplesoft/PORTAL.war/WEB-INF/psftdocs/ps/configuration.properties

2.1  Check the web profile value  , in my case 


WebProfile = PROD


2.2  Go to this Navigation

Main Menu  > PeopleTools  > Web Profiles > Web Profile Configuration

Search the WebProfile = PROD as the public access user ID.







3. From the PeopleTools Application Designer, open the FUNCLIB_LDAP record.   Right-click the LDAPAUTH field and select View People Code. Find the getWWWAuthConfig() function and replace the value that is assigned to the &defaultUserId with OAMPSFT.save the record.






3.2 replace the highlighted code 

Function getWWWAuthConfig()

   &defaultUserId = "OAMPSFT";


End-Function;

-----------------------------------------------

Function OAMSSO_AUTHENTICATION()
   If %PSAuthResult = True And
         &authMethod <> "LDAP" And
         &authMethod <> "WWW" And
         &authMethod <> "OSSO" And
         &authMethod <> "SSO" Then
      getWWWAuthConfig();
      If %SignonUserId = &defaultUserId Then

         &userID = %Request.GetHeader("PS_SSO_UID");

         If &userID <> "" Then
            If &bConfigRead = False Then
               getLDAPConfig();
            End-If;

            SetAuthenticationResult( True, &userID, "", False);

            &authMethod = "OAMSSO";
         End-If;
      End-If;
   End-If;
End-Function;


4. Access the SignonPeopleCode page
PeopleTools > Security > Security Objects >SignonPeopleCode
Only  enable the OAMSSO_AUTHENTICATION function in the SignonPeopleCode for Oracle Access Manager single signon. and save the page.








5. Configuring Single Signoff

 5.1   Write this code in a notepad file and save it as signout.html

  Place the singout.html file to this directory 

PS_HOME\webserv\YOUR_DOMAIN\applications\peoplesoft\PORTAL\WEB-INF\psftdocs\YOUR_SITE\signout.html
   
   
    <HTML>
    <HEAD>
    <title>  Logout    </title>
<meta HTTP-EQUIV='Refresh' CONTENT='1; URL=http://ssooam.up.edu.ph:14100/oam/server/logout'>
</HEAD>
</HTML>

On clicking the singout link , my page will redirect to this URL http://ssooam.up.edu.ph:14100/oam/server/logout

5.2   For this redirect to work, we need to change your Web Profile Configuration > Look and Feel (Tab)

5.2.1  Set Signon Result Doc Page to signonresultdocredirect.html
5.2.2  In the Signon/Logout Pages group box, change the value of the Logout Page field to signout.html.



Restart the app server and web server .