Air Transat Presentation

1
PeopleSoft Integration and Security in Release
8 Russell Grabowski Technical Product
Consultant
2
7.5 Architecture Overview
Tuxedo Message
JOLT
SQL
3
PeopleSoft Internet Architecture (PIA)
SQL
JOLT
HTTP/HTML
HTTP/XML
HTTP/WML
4
Database Server

• DB2, SQL Server, Oracle, Sybase, and Informix
• Normalized application data
• Utilizes all standard RDBMS features
• Portable

5
Object Repository - Metadata

• Definition of application objects as rows in
  database
• Objects are maintained using PeopleTools

6
Open Integration
Other Applications
Other Applications
Other Applications
Other Applications
40 of implementation effort is typically
associated with interfaces!
7
PeopleSoft 7.5 Application Integration
From PSFT Outbound
To PSFT Inbound
Component Based Real-time
OLE Automation Runtime DLL Calls
Message Agent Open Query API
Message Based Near real-time
Interface Tables
Interface Tables
File Based Deferred
EDI Manager SQR / COBOL Import Manager
EDI Manager SQR / COBOL
8
PeopleSoft 8.0 Application Integration
From PSFT Outbound
To PSFT Inbound
Component Based Real-time
Business Interlinks
Component Interfaces
Encapsulation of bite sized chunks of PS
functionality to be used by another system
PeopleSoft applications invoking business logic
in third-party applications
Message Based Near real-time
Application Messaging
Application Messaging
Publishing subscribing to application data
using a industry standard language, XML, over the
Internet
Publishing subscribing to application data
using an industry standard language, XML, over
the Internet
File Based Deferred
App Engine File Interface
App Engine File Interface
High volume, file based interfacing using
PeopleSoft Business Rules
High volume, file based interfacing using
PeopleSoft Business Rules
9
Component Interface

• What Do Component Interfaces Do
• Provide synchronous access
• Provide non-graphical wrapper for a Component
• Provide access from popular programming packages
• Insulates third party from the Component
• Uses Industry terms rather than PeopleSoft
  specific terms

• Component Interfaces Uses
• When a third party requires real time synchronous
  integration
• App. Messaging subscription processes that need
  to validate the data before writing it to the
  production tables
• Web applications that need real time synchronous
  integration

10
Business Interlink

• What Do Business Interlinks Do
• Provide synchronous access from PeopleSoft
  applications to external programs

• Business Interlink Uses
• Allow you to access or update data in an external
  system from PeopleSoft in a real time synchronous
  environment
• Invoke a function or procedure in an external
  system from PeopleCode in a realtime synchronous
  environment
• Call C routines to perform specific functions
  or calculations that can not be effectively
  written in PeopleCode
• Allow Internet integration to merchants

11
Application Messaging

• What Does Application Messaging Do
• Provide asynchronous access
• Provides message-bases, loosely coupled, near
  real time integration
• Provides XML/HTTP based messaging

• Application Messaging Uses
• Application-to-application integration. Refers
  to integration within a PeopleSoft product line
  (AP to GL)
• System-to-system integration. This refers to
  integration across PeopleSoft product lines.
  (HRMS to FDM)
• Cross-release integration. (PeopleSoft 8 to
  PeopleSoft 9)
• Business-to-business integration. Using
  Application Messaging, businesses can share
  certain data over the Internet.

12
Flat File Processing

• What Does File Object Do
• File Object is a PeopleCode object.
• Asynchronous batch file load, update and download

• Application Engine Program with the File Object
  Uses
• Batch load of tables from a legacy system
• Batch updates from flat files
• Asynchronous batch load and update

• File Support
• Flat Sequential, Comma Delimited, XML, Plain Text

13
PeopleSoft 8 Terminology

• Nomenclature differences

PS 8 User User
Profile Definition Permission List
User ID

PS 7.X Operator Operator Definition
Operator Class Operator ID
14
PeopleSoft 8 Terminology

• Introduces Roles
• The role information will be maintained in one
  place and become part of the user information.
  Provides the following benefits
• No need for two lists of users (Login and Role
  Users)
• More flexibility in implementing complex designs
  with many users
• Easier Administration - predefined access rights
  and grant ability bring new or altered users
  online quickly.
• Introduces the ability to dynamically assign
  roles programmatically - like WorkFlow roleuser

15
PeopleSoft 8 Security

• Unifies previously separate interfaces
• Query Security, Transaction (components), Object
  Security
• New objects
• Component Interface
• Application Messaging Channels
• Part of PeopleTools
• May be integrated via Component Interface or
  Business Interlinks
• Provides the ability to completely unify security
  admin. Across the enterprise
• LDAP compliant
• LDAP V3. - Novell/Sun, Netscape Microsoft

16
PeopleSoft 8 Security Definitions
Permission List Signon Time
Permission List Pages
Role EMPLOYEE
User Profile
Access Profile
RDBMS
Permission List PeopleTools
17
Permission Lists
Permission Lists
Sign-on
Pages
Query
Process Profile
Process Groups
Application Designer
Component Interface
18
Roles
Roles
Roles are an intermediate object that exists
between Permission Lists and User Profile. They
are used to aggregate Permission Lists so that
they are arranged in to meaningful collections.
Permission Lists
Sign-on
Pages
Query
Process Groups
Process Profile
Tools
Static Role Users
Dynamic Role Users
19
User Profiles
User Profile
User Profiles define individual PeopleSoft
users. A User Profiles must be linked to at least
one Role in order to be a valid profile.
Data Permissions
Primary Permissions
Navigation Perm.
Process Profiles
Roles
20
Security Authentication Authorization
End User
Database Server
Application Server

• LDAP
• NDS, MS Directory Services, Netscape
• Bi-directional Synchronization

LDAP Server Authentication
21
Security Profile Coverage
Database
Rows
Initiate ScheduledReports
22
Single Sign-on

• Users have the ability to jump between PeopleSoft
  systems, depending on their daily tasks
• Users need only to remember a single user ID and
  password
• The directory server helps address the multiple
  user ID and password issues.
• PIA leverages Web browser cookies to store a
  unique access token for each user when they are
  initially authenticated. When connected to
  another PeopleSoft system, the token in the
  browser is used to re-authenticate the user.
• The browser cook is an in-memory cookies and is
  never written to disk. The cookie is also
  encrypted.