Peoplesoft 9.1 Saml [REPACK]

How to Configure Peoplesoft 9.1 with SAML for Single Sign-On

Single sign-on (SSO) is a feature that allows users to access multiple applications with one login and password. SSO can improve user experience, security, and productivity. One of the protocols that enables SSO is SAML (Security Assertion Markup Language), which is an XML-based standard for exchanging authentication and authorization data between different parties.

In this article, we will show you how to configure Peoplesoft 9.1 with SAML for SSO. We will assume that you have already installed and configured Peoplesoft 9.1 and that you have a SAML identity provider (IdP) that supports SAML 2.0.

Step 1: Enable SAML Authentication in Peoplesoft

The first step is to enable SAML authentication in Peoplesoft 9.1. To do this, follow these steps:

Login to Peoplesoft as an administrator and navigate to PeopleTools > Security > Security Objects > Authentication Domains.

Create a new authentication domain or edit an existing one.

Under the Authentication Type drop-down menu, select SAML.

Under the SAML Configuration section, enter the following information:

IdP Metadata URL: The URL of the IdP metadata file that contains the IdP's public key certificate and other information.

SP Entity ID: The unique identifier of the Peoplesoft service provider (SP).

SP ACS URL: The URL of the Peoplesoft assertion consumer service (ACS) endpoint that receives and validates the SAML response from the IdP.

SP Logout URL: The URL of the Peoplesoft logout service endpoint that initiates the single logout process.

Save the changes and activate the authentication domain.

Step 2: Configure SAML Attributes Mapping in Peoplesoft

The next step is to configure the mapping of SAML attributes to Peoplesoft user attributes. This is necessary to create or update the user profile in Peoplesoft based on the information received from the IdP. To do this, follow these steps:

Login to Peoplesoft as an administrator and navigate to PeopleTools > Security > Security Objects > User Profile Attributes.

Create a new user profile attribute or edit an existing one.

Under the Attribute Source drop-down menu, select SAML.

Under the Attribute Name field, enter the name of the SAML attribute that contains the value for the user profile attribute.

Save the changes and repeat this process for all user profile attributes that you want to map from SAML attributes.

Step 3: Test SAML Authentication in Peoplesoft

The final step is to test the SAML authentication in Peoplesoft 9.1. To do this, follow these steps:

Open a new browser window and navigate to the Peoplesoft login page.

You should be redirected to the IdP login page. Enter your credentials and click on Login.

You should be redirected back to Peoplesoft with a successful login message. You should also see your user profile information populated from the SAML attributes.

To test single logout, click on Sign Out in Peoplesoft. You should be logged out of both Peoplesoft and the IdP.

Congratulations! You have successfully configured Peoplesoft 9.1 with SAML for single sign-on. If you encounter any issues or need further assistance, please contact our support team at support@peoplesoft.com. ec8f644aee