Integrating SailPoint with Oracle PeopleSoft HCM Database

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of an Oracle PeopleSoft HCM source in SailPoint.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The PeopleSoft HCM Database source supports the following features:

Account Management

Provisioning
Load PeopleSoft HCM Database accounts

For more information on features, refer to Source Features.

SailPoint supports the following additional PeopleSoft HCM Database connector provisioning features:

Ability to define Global Provisioning Rule

Supported Managed Systems

The SailPoint PeopleSoft HCM connector supports the following:

Supported PeopleSoft Versions

PeopleSoft HCM versions 9.2 and 9.1
PeopleTools versions 8.62, 8.61.05, 8.60.05, 8.59, 8.58, 8.57, 8.56, 8.55, 8.54 and 8.53

Supported Backend Servers

Oracle
Microsoft SQL Server
DB2

Note

Provisioning is supported for the PeopleSoft version running on the DB2 Database only for the user that has high level privileges.

Prerequisites

Complete the following prerequisites:

Configure at least one virtual appliance cluster and successfully test the connection. For instructions, refer to the Virtual Appliance Reference Guide.
Using the PeopleSoft Application Designer, verify if the following Component Interfaces related to person's personal data and job data are present:
- CI_PERSONAL_DATA
- CI_JOB_DATA
- BADGE (This Component Interface is optional; it is required when you want to provision badge details. For more information, refer to Creating the Badge Component Interface.)

The following jar files must be uploaded on the configured source:

psjoa.jar (found on the PeopleSoft server at %PS_HOME%\classes where %PS_HOME% is the location of the PeopleSoft installation server directory, referred to as PS_HOME)
PeopleSoftHRMS.jar (For more information, refer to Creating the PeopleSoft HRMS Jar File)

Required Permissions

This section describes the database and component interface related permissions:

The PeopleSoft Application Server uses the database user context to support the aggregation operations. The database user mentioned in the application configuration should have appropriate rights to fetch data related to the entities and attributes mentioned in the SQL query related to the Person.

Creating an Administrator Account in Oracle Database for PeopleSoft HCM

Log in to the Oracle database as database administrator. Create the new administrator user account using SQL*Plus as follows:
```
create user ${new user} identified by password;
grant create session to ${new user};
grant create synonym to ${new user};
```

Grant permissions to the new administrator user (${new user}):

grant select on ${Administrator}.PS_PERSONAL_DATA to ${new user}
grant select on ${Administrator}.PS_PERSONAL_PHONE to ${new user}
grant select on ${Administrator}.PS_EMAIL_ADDRESSES to ${new user}
grant select on ${Administrator}.PS_JOB to ${new user}
grant select on ${Administrator}.PS_PERSON_IMCHAT to ${new user} *This permission is required for aggregation of the NetworkId.

Sign in with the new user name (${new user}) and create the following synonym:

create synonym PS_PERSONAL_DATA for ${Administrator}.PS_PERSONAL_DATA;
create synonym PS_PERSONAL_PHONE for ${Administrator}.PS_PERSONAL_PHONE;
create synonym PS_EMAIL_ADDRESSES for ${Administrator}.PS_EMAIL_ADDRESSES;
create synonym PS_JOB for ${Administrator}.PS_JOB;
create synonym PS_PERSON_IMCHAT for ${Administrator}.PS_PERSON_IMCHAT; *This permission is required for aggregation of the NetworkId.

Creating Administrator Account in Microsoft SQL Server Database for PeopleSoft HCM

Sign in to the Microsoft SQL Server for creating the administrator user account, and use the following:
```
CREATE LOGIN <LOGINUSER> WITH PASSWORD = '<PASSWORD>'
use [master]
grant Connect SQL to [user]
```

Create a corresponding database user and grant permissions to the newly created user (${new user}):

use [HCM92]
create user [dbusername] for login [LOGINUSER]
grant select on PS_PERSONAL_PHONE to [dbusername];
grant select on PS_EMAIL_ADDRESSES to [dbusername];
grant select on PS_PERSONAL_DATA to [dbusername];
grant select on PS_JOB to [dbusername];
grant select on PS_PERSON_IMCHAT to [dbusername]; *This permission is required for aggregation of the NetworkId.

Creating Administrator Account in DB2 Server Database for PeopleSoft HCM

The driver class is com.ibm.db2.jcc.DB2Driver.

Upload the db2jcc.jar file for the DB2 database.

Create a new OS (Operating System) user and add it to the db2admns OS group. Sign in to the DB2 database as database administrator. Create the new administrator user account using:
```
GRANT CONNECT ON DATABASE TO USER ${new user}
```

Grant permissions to the newly created user (${new user}):

grant select on ${Administrator}.PS_PERSONAL_DATA to ${new user}
grant select on ${Administrator}.PS_PERSONAL_PHONE to ${new user}
grant select on ${Administrator}.PS_EMAIL_ADDRESSES to ${new user}
grant select on ${Administrator}.PS_JOB to ${new user}
grant select on ${Administrator}.PS_PERSON_IMCHAT to ${new user} *This permission is required for aggregation of the NetworkId.