UP16DF0401_AttachmentA -UMass HR Application Access_Authentication_Auditing.pptx

56 KB Posted

Attached to
Multi-Factor Identity Authentication
Solicitation number
BD-16-1109-UMCEN-SHREW-00000007828
Issued by
Worcester County, Massachusetts

About this file

Written by GovTribe AI ·

This document is a PowerPoint presentation that outlines the current and future state of the University of Massachusetts' (UMass) PeopleSoft HR application authentication, access control, and auditing processes. The presentation details the PeopleSoft WebGate and IDM WebGate authentication process using Oracle Access Manager (OAM) and the UMass campus LDAP directories. It also describes the planned end-state architecture, which will incorporate multi-factor authentication (MFA) and Oracle's Identity Federation to provide single sign-on access to the PeopleSoft HR application.

The related state and local contract opportunity is for a "Multi-Factor Identity Authentication" solution to be built upon the University's existing Oracle IAM 11gR2 Suite. The awardee will be responsible for designing, developing, and deploying this MFA solution to strengthen the protection of UMass IT resources. Detailed requirements and submission instructions are provided in the attached documents.

View the file

Other files

File Type Posted
UP16DF0401_AppendixA.pdf PDF
UP16DF0401_MultiFactorIdentityAuthentication_RFP.doc DOC document

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file
Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

PeopleSoft WebGate

IDM

WebGate (SAL Page) Oracle Access Manager

PeopleSoft Environment

IDM Environment PeopleSoft Web Server

(PIA)

Authentication (Y, N) Decision Campus Environment PS-HCM App & DB Servers Authentication Roles Store (Authorization) Authorization Logs Today’s PeopleSoft HR Application (AAA- Authentication, Access Control and Auditing) Campus User

UMASS Boston

LDAP

Oracle Virtual Directory UMASS Dartmouth

LDAP

UMASS Lowell

LDAP

UMASS Worcester

LDAP

UMASS

PO

LDAP

UMASS Amherst

LDAP

Step 1: Campus user requests access Step 2: PS WebGate sends request to IDM WebGate Step 3: IDM WebGate requests AuthN via OAM Step 4: OAM / OVD checks Campus Directory for AuthN Step 5: PS WebGate passes connection to PS Web Server Step 6: PS Web Server passes connection to PS App Server Step 7: AuthZ provided via OID Oracle Internet Directory

(LDAP)

EMPLID

GUID

PeopleSoft WebGate

IDM

WebGate (SAL Page) Oracle Access Manager

PeopleSoft Environment

IDM Environment PeopleSoft Web Server

(PIA)

Authentication (Y, N) Decision Campus Environment PS-HCM App & DB Servers Authentication Roles Store (Authorization) Authorization Logs Oracle 11g End State PeopleSoft HR Application via SSO/MFA

Campus SSOUser

UMASS Boston

LDAP

Oracle Virtual Directory UMASS Dartmouth

LDAP

UMASS Lowell

LDAP

UMASS Worcester

LDAP

UMASS

PO

LDAP

Step 1: Campus user requests access Step 2: PS WebGate sends request to IDM WebGate Step 3: IDM WebGate requests AuthN via OAM Step 4: OAM / OVD checks Campus Directory for AuthN Step 5: MFA prompts user for additional factor Step 6: PS WebGate proxies traffic to PS Web Server Step 7: PS Web Server passes connection to PS App Server Step 8: AuthZ provided via OID Oracle Internet Directory

(LDAP)

EMPLID

GUID

11g AccessGate Oracle Access Manager SSO/Federation

PeopleSoft Environment

IDM Environment PeopleSoft Web Server

(PIA)

PS-HCM App & DB Servers Roles Store (Authorization) Authorization Logs Oracle 11g End State PeopleSoft HR Application via Federation

Amherst User

Step 1: Campus user requests access via Amh Page Step 2: Shib authenticates and prompts for MFA Step 3: Shib passes SAML assertion to AG/OAM SP service Step 4: OAM validates SAML and returns user to AccessGate Step 5/6: AccessGate proxies traffic to PS Web Server Step 7: PS Web Server passes traffic to PS App Server Step 8: AuthZ provided via OID Oracle Internet Directory

(LDAP)

Amherst Shibboleth Authentication image1.png

File details come from the government source that posted it. Updated .