Outbound Integration Broker Security Processing

This section discusses security processing for outbound integrations from PeopleSoft Integration Broker.

This diagram illustrates security processing for outbound integrations from PeopleSoft Integration Broker. The diagram shows that as an outbound service operation passes onto the application server, it goes through user authentication and nonrepudiation (if implemented) on the integration engine. As processing moves to the web server, the service operation may go through client authentication (if implemented) and WS-security processing (if implemented). The last type of security processing through which a service operation may go is through on the PeopleSoft side is SSL/TLS encryption (if implemented) on the web server.

PeopleSoft Integration Broker applies the following security elements to outbound integrations:

Note:

The elements are discussed in the order in which the system applies them.

Term	Definition
User authentication	If the outbound service operation originates from a PeopleSoft (PIA) node, the user authentication process attaches the PeopleSoft authentication token to the service operation. If the service operation originates from an external (External) node, the model determines the user ID for the service operation and passes the information to the WS-Security framework so it can generate the UsernameToken for the outbound transaction.
Nonrepudiation	Nonrepudiation processing is performed.
Client authentication	Client authentication secures the connection between the PeopleSoft application server and the integration gateway on outbound transactions. You use digital certificates to secure this connection.
WS-Security	Outbound WS-Security processing includes generating the UsernameToken for the WS-Security SOAP header. This process may also involve encrypting and digitally signing the data, if specified in the WS-Security parameters on the node.
SSL/TLS encryption	SSL/TLS encryption on outbound integrations establishes a secure web server connection with an integration partner.