SSL Between PeopleSoft and LDAP

You can use LDAP Business Interlink to establish a secure LDAP connection between the application server and the LDAP server.

To establish the secure connection between the PeopleSoft application server and the LDAP server you will need the following certificates:

• A server certificate for the LDAP server.

• The trusted root certificate from the CA that issues the server certificate.

Installing and Removing Root CA Certificates in PeopleSoft Databases

To install Root CA Certificates into PeopleSoft databases:

1. Select PeopleTools, and then Security, and then Security Objects, and then Manage Digital Certificates.

   The list of installed certificates appears.

2. Click the insert row button (+) in the last row of the displayed certificates.

   A blank row appears.

3. Select Root CA from the Type drop-down list box.

4. Enter a meaningful name as the alias of this certificate in the Alias field.

5. Click the Issuer Alias field prompt button.

   The name of the Alias automatically populates the Issuer Alias field.

6. Click the Add Root link.

   The Add Root Certificate page appears. Minimize the browser window.

7. Open the root CA certificate with a text editor and copy the contents.

8. Maximize the browser and paste the contents into the text box.

9. Click the OK button to see the new digital certificate.

10. Reboot the application server.

To remove root CA certificates from PeopleSoft databases:

1. Select PeopleTools, and then Security, and then Security Objects, and then Manage Digital Certificates.

   The list of installed certificates appears.

2. Click the delete row (–) button in the row of the certificate you want to remove.

   A Delete Confirmation message box appears.

3. Click the OK button to confirm the deletion.

4. Reboot the application server.

Enabling LDAP Authentication Over SSL in PeopleSoft Applications

To enable LDAP authentication over SSL in PeopleSoft applications:

1. Follow the documentation for your directory server to add the server certificate to your directory server.

2. Install the root CA certificate into the PeopleSoft database.

3. Select PeopleTools, and then Security, and then Directory, and then Configure LDAP Directories, and then Directory Setup to access the Directory Setup page.

   The SSL Port field must reflect the correct LDAPS port for the directory server.

4. Click the Test Connectivity tab.

   You must see SUCCESS for the SSL transactions to work. If you see FAILURE here, the LDAP authentication will not succeed over SSL.

5. Select PeopleTools, and then Security, and then Directory, and then LDAP Authentication Maps to access the Authentication Map page, and select the Use Secure Sockets Layer check box.

6. Enable the LDAP_AUTHENTICATION Signon PeopleCode.

   See Enabling Signon PeopleCode.

7. Reboot the application server.