# Integrating SailPoint with Oracle PeopleSoft ERP

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of an Oracle PeopleSoft source. Oracle PeopleSoft ERP manages the administrative entities of the PeopleSoft server (User Profiles and Roles) and communicates to the PeopleSoft server through component interfaces.

> [!IMPORTANT]
>
> The Oracle PeopleSoft ERP connector has only been certified for on-premises versions of the target system.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

> [!NOTE]
>
> The Oracle PeopleSoft ERP connector has been certified for TLS connection with the target system.

## Supported Features

The PeopleSoft connector supports the following features:

> [!NOTE]
>
> Before you can use any item marked with an asterisk (\*), SailPoint must activate the feature for your site.

- Load and \*Provision the following:

  - PeopleSoft Users
  - Roles
  - Route Control
- \*Access Certifications (certification of entitlements connected to accounts)
- \*Password Management

For more information on features, refer to [Source Features](<https://community.sailpoint.com/knowledge/Identity-Security-Cloud-Source-Features>).

### Password Management

If Password Management is enabled for your organization, you can change the password for a user of the source. After enabling password management on the source, be aware of the following:

- The password policy defined in SailPoint applies to accounts on this source.
- If you change the password for an application connected to this source, the change will automatically be made to the source itself.

For more information on configuring password management, refer to [Password Management Overview](<https://documentation.sailpoint.com/saas/help/pwd/index.html>).

## Privilege Classification

SailPoint Privilege Classification helps organizations systematically categorize and manage the privilege levels of entitlements within their sources. By classifying entitlements as high, medium, or low, administrators can better understand the potential risk and impact associated with specific access rights. This allows automatic assignment of privilege levels based on system recommendations, custom-defined criteria, or a same level across all entitlements.

| Privilege Level | Description |
| --- | --- |
| High | Administrative level access to accounts |
| Medium | Administrative level access for a specific role or function |
| Low | Only basic access of data |

> [!NOTE]
>
> To manage Privilege Classification, users must have administrative roles such as Org Admin, Source Admin or Source Sub-Admin.

For more information, refer to [Managing Privilege Classification](<https://documentation.sailpoint.com/saas/help/loading_entitlements/privilege_classification.html>).

## Supported Managed Systems

The following are the supported versions for managed target systems:

- PeopleTool 8.62, 8.61, 8.60, 8.59, 8.58, 8.57, 8.56, 8.55, 8.54, 8.53
- PeopleSoft Server 9.2, 9.1

The PeopleSoft connector supports the administrative entities of the PeopleSoft server (User Profiles and Roles) for the following modules of managed systems:

- PeopleSoft Financial and Supply Chain Management
- PeopleSoft Human Capital Management
- PeopleSoft Campus Solution

## Prerequisites

Complete the following prerequisites:

> [!NOTE]
>
> You must configure the component interfaces on PeopleSoft.

- [Creating Component Interfaces](<https://documentation.sailpoint.com/connectors/oracle/peoplesoft_erp/va/help/creating_component_interfaces.html>)
- [Creating the Component Interface Jar File](<https://documentation.sailpoint.com/connectors/oracle/peoplesoft_erp/va/help/creating_component_jar_file.html>)
- [Configuring the Component Interface Security](<https://documentation.sailpoint.com/connectors/oracle/peoplesoft_erp/va/help/configure_interface_security.html>)
- Create a service account on the PeopleSoft direct target managed system with the required permissions.
- Configure at least one virtual appliance cluster and successfully test the connection. For instructions, refer to the [Virtual Appliance Reference Guide](<https://documentation.sailpoint.com/saas/help/va/index.html>).

## Required Permissions

- Create a service account on the PeopleSoft system with the required permissions.
- The PeopleSoft user that acts as an administrator for proper functioning of the Integration Module must have access to all the related component interfaces. For more information, refer to [Configuring the Component Interface Security](<https://documentation.sailpoint.com/connectors/oracle/peoplesoft_erp/va/help/configure_interface_security.html>).

## Upgrade Considerations

(Optional) To use the **Route Control** functionality after upgrading IdentityIQ from any previous versions to the latest IdentityIQ version, manually add the following attributes in the Group Schema:

- `RouteControl`
- `RouteControlDescription`

For more information on the above attributes, refer to [Group Attributes](<https://documentation.sailpoint.com/connectors/oracle/peoplesoft_erp/va/help/schema.html#default-group-attributes>).

> [!NOTE]
>
> With this implementation, there is an impact on certification history. Certification history is lost and is not in synchronization with previous data.