1. Oracle Virtual Directory
Today’s PeopleSoft HR Application
(AAA- Authentication, Access Control and Auditing)
PeopleSoft Environment
Step 1: Campus user requests access
Step 2: PS WebGate sends request to IDM WebGate
Step 3: IDM WebGate requests AuthN via OAM
Step 4: OAM / OVD checks Campus Directory for AuthN
Step 5: PS WebGate passes connection to PS Web Server
Step 6: PS Web Server passes connection to PS App Server
Step 7: AuthZ provided via OID
PeopleSoft WebGate
PeopleSoft
Web Server
(PIA)
PS-HCM App & DB Servers 1 5 6
Campus User
Authorization Logs 2 7
IDM Environment
Authentication
IDM
WebGate
(SAL Page)
Oracle Access Manager
Oracle Virtual Directory
Oracle Internet
Directory 3
Roles Store
(Authorization)
(LDAP) 4
EMPLID
GUID
Campus Environment
UMASS Amherst
LDAP
UMASS Boston
LDAP
UMASS Dartmouth
LDAP
UMASS Lowell
LDAP
UMASS Worcester
LDAP
UMASS PO
LDAP
Authentication
(Y, N) Decision

2. Oracle Virtual Directory
Oracle 11g End State PeopleSoft HR Application via SSO/MFA
(AAA- Authentication, Access Control and Auditing)
PeopleSoft Environment
Step 1: Campus user requests access
Step 2: PS WebGate sends request to IDM WebGate
Step 3: IDM WebGate requests AuthN via OAM
Step 4: OAM / OVD checks Campus Directory for AuthN
Step 5: MFA prompts user for additional factor
Step 6: PS WebGate proxies traffic to PS Web Server
Step 7: PS Web Server passes connection to PS App Server
Step 8: AuthZ provided via OID
PeopleSoft WebGate
PeopleSoft
Web Server
(PIA)
PS-HCM App & DB Servers 1 6 7
Campus SSOUser
Authorization Logs 2 8
IDM Environment
Authentication
IDM
WebGate
(SAL Page)
Oracle Access Manager
Oracle Virtual Directory
Oracle Internet
Directory 3
Roles Store
(Authorization)
(LDAP) 5 4
EMPLID
GUID
Campus Environment
UMASS Boston
LDAP
UMASS Dartmouth
LDAP
UMASS Lowell
LDAP
UMASS Worcester
LDAP
UMASS PO
LDAP
Authentication
(Y, N) Decision

3. Oracle 11g End State PeopleSoft HR Application via Federation
(AAA- Authentication, Access Control and Auditing)
Amherst
PeopleSoft Environment
Step 1: Campus user requests access via Amh Page
Step 2: Shib authenticates and prompts for MFA
Step 3: Shib passes SAML assertion to AG/OAM SP service
Step 4: OAM validates SAML and returns user to AccessGate
Step 5/6: AccessGate proxies traffic to PS Web Server
Step 7: PS Web Server passes traffic to PS App Server
Step 8: AuthZ provided via OID
Amherst User
PeopleSoft
Web Server
(PIA)
PS-HCM App & DB Servers 1
Shibboleth 7 2
Authorization Logs
Authentication 5 6 3 8
IDM Environment
11g AccessGate
Oracle Access Manager
SSO/Federation
Oracle Internet
Directory 4
Roles Store
(Authorization)
(LDAP)