Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in the Oracle Identity Manager Connector for PeopleSoft Campus?

• Software Updates
  • Software Updates in Release 11.1.1.5.0
• Documentation-Specific Updates
  • Documentation-Specific Updates in Release 11.1.1.5.0

1 About the Connector

• 1.1 Certified Components
• 1.2 Connector Architecture
• 1.3 Medium of Data Interchange
  • 1.3.1 Full Reconciliation
  • 1.3.2 Incremental Reconciliation
• 1.4 Features of the Connector
  • 1.4.1 Dedicated Support for Trusted Source Reconciliation
  • 1.4.2 Seeding Roles into Oracle Identity Manager
  • 1.4.3 Full and Incremental Reconciliation
  • 1.4.4 Reconciliation of Effective-Dated Lifecycle Events
  • 1.4.5 Support for Standard PeopleSoft Messages
  • 1.4.6 Support for Resending Messages That Are Not Processed
  • 1.4.7 Validation and Transformation of Person Data
  • 1.4.8 Target Authentication
  • 1.4.9 Support for Specifying Persons to Be Excluded from Reconciliation Operation
• 1.5 Connector Objects Used During Reconciliation
  • 1.5.1 Reconciliation Rules
    • 1.5.1.1 Overview of the Reconciliation Rule
    • 1.5.1.2 Viewing the Reconciliation Rule in the Design Console
  • 1.5.2 Reconciliation Action Rules
    • 1.5.2.1 Overview of the Reconciliation Action Rules
    • 1.5.2.2 Viewing the Reconciliation Action Rules in the Design Console
  • 1.5.3 Predefined Lookup Definitions
    • 1.5.3.1 Lookup.PSFT.Campus.Configuration
    • 1.5.3.2 Lookup Definitions Used to Process SCC_CONSTITUENT_FULLSYNC Messages
      • 1.5.3.2.1 Lookup.PSFT.Message.SccConstituentFullSync.Configuration
      • 1.5.3.2.2 Lookup.PSFT.Campus.SccConstituentFullSync.AttributeMapping
    • 1.5.3.3 Lookup Definitions Used to Process SCC_CONSTITUENT_SYNC Messages
      • 1.5.3.3.1 Lookup.PSFT.Message.SccConstituentSync.Configuration
      • 1.5.3.3.2 Lookup.PSFT.Campus.SccConstituentSync.AttributeMapping
      • 1.5.3.3.3 Lookup.PSFT.Campus.SccConstituentSync.Recon
    • 1.5.3.4 Lookup.PSFT.Campus.CustomQuery
    • 1.5.3.5 Lookup.PSFT.Campus.ExclusionList
• 1.6 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Determining the Version of PeopleTools and the Target System
  • 2.1.2 Files and Directories on the Installation Media
  • 2.1.3 Preinstallation on the Target System
    • 2.1.3.1 Creating a Target System User Account for Connector Operations
      • 2.1.3.1.1 Creating a Permission List
      • 2.1.3.1.2 Creating a Role for a Limited Rights User
      • 2.1.3.1.3 Assigning the Required Privileges to the Target System Account
• 2.2 Installation
  • 2.2.1 Installation on Oracle Identity Manager
    • 2.2.1.1 Running the Connector Installer
    • 2.2.1.2 Copying the Connector Files and External Code Files
    • 2.2.1.3 Configuring the IT Resource
    • 2.2.1.4 IT Resource Parameters
    • 2.2.1.5 Deploying the PeopleSoft Listener
      • 2.2.1.5.1 Setting the Prerequisites of Deploying the PeopleSoft Listener
      • 2.2.1.5.2 Deploying the PeopleSoft Listener on Oracle Identity Manager
      • 2.2.1.5.3 Setting the Prerequisites of Deploying the PeopleSoft Listener on WebSphere Application Server
      • 2.2.1.5.4 Deploying the PeopleSoft Listener on WebSphere Application Server
      • 2.2.1.5.5 Importing Oracle Identity Manager CA Root Certificate into PeopleSoft WebServer
    • 2.2.1.6 Removing the PeopleSoft Listener
      • 2.2.1.6.1 Removing the PeopleSoft Listener for IBM WebSphere Application Server
      • 2.2.1.6.2 Removing the PeopleSoft Listener for Oracle WebLogic Server
  • 2.2.2 Installation on the Target System
    • 2.2.2.1 Configuring the Target System for Full Reconciliation
      • 2.2.2.1.1 Configuring the PeopleSoft Integration Broker
      • 2.2.2.1.2 Configuring the SCC_CONSTITUENT_FULLSYNC Service Operation
    • 2.2.2.2 Enabling Content-based Filtering for Full Reconciliation in SCC_CONSTITUENT_FULLSYNC Message
      • 2.2.2.2.1 Setting Affiliation Routing Rules
      • 2.2.2.2.2 Setting the Routing Transformation Parameters for the SCC_CONSTITUENT_FULLSYNC message
      • 2.2.2.2.3 Activating the Full Data Publish Rule with Content-based Filtering
    • 2.2.2.3 Configuring the Target System for Incremental Reconciliation
      • 2.2.2.3.1 Configuring PeopleSoft Integration Broker
      • 2.2.2.3.2 Configuring the SCC_CONSTITUENT_SYNC Service Operation
      • 2.2.2.3.3 Preventing Transmission of Unwanted Fields During Incremental Reconciliation
    • 2.2.2.4 Enabling Content-based Routing for Incremental Reconciliation in SCC_CONSTITUENT_SYNC Message
      • 2.2.2.4.1 About Content-based Routing with Affiliations
      • 2.2.2.4.2 Enabling Content-Based Routing With Affiliations
  • 2.2.3 Installation with Other PeopleSoft Connectors
• 2.3 Postinstallation
  • 2.3.1 Configuring Oracle Identity Manager
    • 2.3.1.1 Enabling Logging
      • 2.3.1.1.1 Log Levels and ODL Message Types
      • 2.3.1.1.2 Enabling Logging on Oracle WebLogic Server
    • 2.3.1.2 Setting Up the Lookup.PSFT.Campus.Configuration Lookup Definition
    • 2.3.1.3 Setting Up the Lookup.PSFT.Campus.ExclusionList Lookup Definition
    • 2.3.1.4 Configuring SSL
      • 2.3.1.4.1 Configuring SSL on IBM WebSphere Application Server
      • 2.3.1.4.2 Configuring SSL on Oracle WebLogic Server
    • 2.3.1.5 Creating an Authorization Policy for Campus ID
    • 2.3.1.6 Displaying UDFs in Oracle Identity Manager 11.1.2 or Later
    • 2.3.1.7 Localizing Field Labels in UI Forms
  • 2.3.2 Configuring the Target System
• 2.4 Postcloning Steps

3 Using the Connector

• 3.1 Summary of Steps to Use the Connector
• 3.2 Seeding Roles into Oracle Identity Manager
  • 3.2.1 Generating CSV File
  • 3.2.2 Importing CSV File into Oracle Identity Manager to Create Roles
• 3.3 Verifying the Affiliation Status Code
  • 3.3.1 About Affiliation Status
  • 3.3.2 Verifying the Affiliation Status Code on PeopleSoft Campus
• 3.4 Verifying the Entries in Attribute Mapping Lookup Definitions
• 3.5 Performing Full Reconciliation
  • 3.5.1 Generating XML Files
  • 3.5.2 Importing XML Files into Oracle Identity Manager
    • 3.5.2.1 Configuring the Scheduled Task for Person Data Reconciliation
    • 3.5.2.2 Configuring the Scheduled Task for Processing Affiliation Effective Date
• 3.6 Performing Incremental Reconciliation
• 3.7 Limited Reconciliation
  • 3.7.1 About Limited Reconciliation
  • 3.7.2 Configuring Limited Reconciliation
• 3.8 Resending Messages That Are Not Received by the PeopleSoft Listener
  • 3.8.1 Sending Messages Manually
  • 3.8.2 Resending Messages Manually in Error or TimeOut Status
• 3.9 Configuring Scheduled Jobs
  • 3.9.1 Configurable Scheduled Tasks
  • 3.9.2 Configuring a Scheduled Task

4 Extending the Functionality of the Connector

• 4.1 Adding New User Attributes for Reconciliation
  • 4.1.1 Adding a New User Attribute for Reconciliation
  • 4.1.2 Creating a User-Defined Field
• 4.2 Adding New Affiliation Attributes for Reconciliation
  • 4.2.1 About Affiliation Attributes
  • 4.2.2 Adding the New Field to the List of Reconciliation Fields
  • 4.2.3 Creating a New Version of the Process Form
  • 4.2.4 Adding a New Field on the Process Form
  • 4.2.5 Creating a Reconciliation Field Mapping for the New Field
  • 4.2.6 Creating an Entry for the Field in the Lookup Definition for Attribute Mapping
  • 4.2.7 Creating an Entry for the Field in the Lookup Definition for Reconciliation
  • 4.2.8 Creating an Entry for the Field in the Configuration Lookup Definition
  • 4.2.9 Verifying the Affiliation Rank Attribute
• 4.3 Adding Support for Primary Affiliations
• 4.4 Modifying Field Lengths on the OIM User Form
• 4.5 Configuring Validation of Data During Reconciliation
  • 4.5.1 Implementing the Validation Logic in a Java Class
  • 4.5.2 Uploading the JAR File to Oracle Identity Manager
  • 4.5.3 Updating the Message-Specific Configuration Lookup Definition
  • 4.5.4 Redeploying the PeopleSoftOIMListener.ear File on the Application Server
• 4.6 Configuring Transformation of Data During Reconciliation
  • 4.6.1 Implementing the Transformation Logic in a Java Class
  • 4.6.2 Uploading the JAR File to Oracle Identity Manager
  • 4.6.3 Updating the Message-Specific Configuration Lookup Definition
  • 4.6.4 Redeploying the PeopleSoftOIMListener.ear File on the Application Server
• 4.7 Setting Up the Lookup.PSFT.Campus.CustomQuery Lookup Definition
• 4.8 Configuring the Connector for Multiple Installations of the Target System
  • 4.8.1 About Configuring the Connector for Multiple Installations of the Target System
  • 4.8.2 Creating Copies of the Connector Objects

5 Testing and Troubleshooting

• 5.1 Testing Reconciliation
• 5.2 Troubleshooting

A Determining the Root Audit Action Details

• A.1 The PSCAMA Subnode
• A.2 Root Audit Action

B Setting Up SSL on Oracle WebLogic Server

• B.1 Generating Signed Public Encryption Key and CSR
• B.2 Submitting CSRs to CAs for Signing
• B.3 Downloading the Root Certificate
• B.4 Importing a Server-Side Public Key into a Keystore
• B.5 Generating and Importing Public Keys
• B.6 Configuring Oracle WebLogic Server to Use the Keystore
• B.7 Adding the Root Certificate
• B.8 Configuring the PeopleSoft Certificates

C Message Structure

D Authorization Policy