implementation of a customized peoplesoft directory...

#PSRECONNECT

David Resh

Sr. Technical Analyst

CherryRoad Technologies Inc.

July 19, 2018

Implementation of a Customized PeopleSoft Directory Interface (PDI)

#PSRECONNECT

Introduction • David Resh

– Sr. Technical Analyst –CherryRoad Technologies Inc.

#PSRECONNECT

Introduction • David Pigman

– Technical Architect – SpearMC Consulting

#PSRECONNECT

CherryRoad Overview Oracle Platinum Partner Oracle/PeopleSoft ERP is all we do

25+ years of PeopleSoft services

90% of our business is in the public sector

90% of our people are PeopleSoft/Oracle certified

Supporting Oracle/PeopleSoft Since 1992 500+ PeopleSoft engagements

Specializations in PeopleSoft HCM, Financials, PeopleTools, Oracle DBA, and Public Sector

175+ senior consultants

Average consultant experience 12+ years

Average CherryRoad tenure is 10+ years

World Class Support Center

Network Operations Center located in Morris Plains, NJ

50 support consultants, plus an additional 100 project based PeopleSoft consultants

24x7x365 Support Help Desk

Support and project based services

Oracle Specializations

In the past ten years, CherryRoad as the prime system integrator, has successfully implemented/upgraded more projects in the public sector than any other Oracle partner.

#PSRECONNECT

CherryRoad Solution Offerings

Managed Services – Deliver, support, cost-effective and

flexible solutions

Help Desk – Service call tracking system

Application Support Patches and fixes Support Continuous improvement Consulting on-demand

Application Maintenance – Troubleshooting and Error Correction – Enhancements and Upgrades User – Support Process Improvements – Security Administration

PeopleSoft, Oracle Cloud Fusion, and E-Business

Functional Areas – Human Capital Management,

Financials, Learning Management, Budgeting, Customer Relationship Management, Supply Chain, Portal, Business Intelligence

Vertical Expertise – Public Sector: Cities & Counties, State,

K-12, Higher Education Utilities, Transportation, Not-for-Profit

– Private Sector: Healthcare, Financial Services, Service Industries, Entertainment & Media, Manufacturing

ERP Solutions

Private Cloud – Built specifically for public sector

Tier 3 Data Centers – New Jersey – California

Disaster Recovery Services Back/Restore

Recovery management

Infrastructure Support Operating system management Infrastructure patches and fixes Storage management Network management Database support

Application patching

Hosting Managed Services

Agenda

Implementation of a Customized PeopleSoft Directory Interface (PDI)

#PSRECONNECT

Agenda

• City of Fort Worth PeopleSoft Directory Interface Project

• Review Delivered PeopleSoft Directory Interface

• City of Fort Worth PDI Customizations

• Detail Look at some of the Fort Worth Customizations

• Q & A Session

City of Fort Worth Project by CherryRoad, Technologies

Implementation of a Customized PeopleSoft Directory Interface (PDI)

#PSRECONNECT

City of Fort Worth PDI Project

• Initial Implementation • Customized for multiple AD domains

• EmplID by domain to AD Account

• Daily compare outside of PeopleSoft

• Production Issues • Inconsistent results

• Out of sync data

• New accounts and Transfers were not working

#PSRECONNECT

City of Fort Worth PDI Project

• CRT Fix and Enhancement Project • Identified fixes for over 50 issues

• 40+ issues fixed

• Enhanced Process Tracking

• Batch Sync process

• Results and Benefits of CRT Project • Consistent results

• Tracking and reporting for each PDI process

• Better control over how PDI works, via custom setup

• New accounts, transfers and renames are working

Review Delivered PDI

Implementation of a Customized PeopleSoft Directory Interface (PDI)

#PSRECONNECT

Review Delivered PDI

• What is PDI?

• Business Process Considerations

• Out of the Box Challenges

• Setup Requirements

#PSRECONNECT

What is (PDI)?

• PDI is designed to keep your enterprise security system in-sync with PeopleSoft’s HCM employee information in real time

• Main benefits • Minimal security manual intervention to create, update and

inactivate accounts

• AD system is maintained in real time providing the most up to date employee information HR can provide

• On-line data changes to Job and Employee Personal Information trigger like change in Active Directory (AD)

• PeopleSoft PDI Mapping Setup tables controls what AD attributes are update with PeopleSoft fields

#PSRECONNECT

PDI Processing

Active

Directory

On-line

Data Entry

to Job or

Employee

data

HRMS

Master

Tables

PDI Setup

Directory

Map PDI

Transaction

History

Business Interlink

Integration

Broker PDI

Message

#PSRECONNECT

Business Process Considerations

• What will be the “System of Record” for Employee AD accounts? • Since PDI creates, updates and inactivates AD accounts based

on PeopleSoft HR Job transactions your PeopleSoft HRMS system is the system of record for all mapped AD attributes

• Manual creation of AD employee accounts will cause PDI to create duplicate AD accounts when the employee is Hired in PeopleSoft

• How will the AD system manage Inactive Accounts?

• How will non-employee accounts be maintained in AD?

• How will out of sync accounts be handled?

#PSRECONNECT

Out of the Box Challenges

• Initial synchronization

• Single vs Multiple AD domains

• Mapping PeopleSoft EMPLID to AD Accounts

• Creating, Transferring and Renaming AD accounts

• Identifying when PDI does not work as desired

• Auditing AD attributes vs PeopleSoft fields

• Ongoing synchronization using delivered process

#PSRECONNECT

Setup Requirements • Directory Interface Configuration

• Cache the Directory Schema

• Installation page Select Directory Interface option

• Setup Directory Mapping Details • Defines AD distinguished name logic • Defines PeopleSoft Data to AD Directory attributes

• Setup Integration Brooker

• Enable the Integration Brooker PDI Service Operation

See Appendix A for Screen Shots of Setup

City of Fort Worth PDI Customizations

Implementation of a Customized PeopleSoft Directory Interface (PDI)

#PSRECONNECT

City of Fort Worth PDI Customizations

• Linking EMPLID to the AD Account

• Custom Setup

• Tracking PDI Processing

• Sync Process

• Daily Audit

#PSRECONNECT

Linking EMPLID to the AD Account

• Delivered PDI does not provide a hard link between the EMPLID and the AD Account (Sam Account)

• Custom table maintains the EMPLID to AD Account

• Rehired employees will use their previous AD account

#PSRECONNECT

Custom Setup

PeopleSoft provides Mapping setup by AD attribute, but no ability to control AD owned attributes

• A new custom setup page was developed to allow some attributes to be “AD Owned”

• PDI will assign an initial value at account creation but no additional updates to AD Owned attributes will be done

• This allows AD to maintain some attributes that are initially provided by PeopleSoft via PDI

#PSRECONNECT

Tracking PDI Processing

PeopleSoft provides minimal output information for each PDI process

• The PID process was customized to provide detail tracking of all the actions taken by the PDI process

• Tracking can be viewed on-line for each PDI process • Technical trace

• PDF report

• AD Attribute before and after values

• Errors and Warnings

#PSRECONNECT

Sync Process

PeopleSoft PDI provides a Sync process that can be used as an initial setup during implementation and ongoing

• This delivered process does not consider many real life factors when executed in a live PDI system

• A custom Sync process was developed to provide additional functionality • Report only mode

• Sync a single Employee / AD Account

• Sync all, one or multiple attributes

• Only sync active, existing AD Accounts with active Employees

#PSRECONNECT

Daily Compare Audit

The delivered sync process can be used to audit the PDI mapped data, but the output is not user friendly

• A custom audit process was created to find and report unexpected differences between the AD accounts and PeopleSoft HR data

• This audit will provide a report, via email, to the responsible users and AD Administrators as action items

Detail Look at some of the Customizations

Implementation of a Customized PeopleSoft Directory Interface (PDI)

#PSRECONNECT

Details of some Customizations

• Customized PDI Message Processing

• Custom Setup Options

• Detail Tracking and Reporting page

• Ability to run PowerShell Scripts

• Batch Report and Sync Process

#PSRECONNECT

Customized PDI Processing

Active

Directory

On-line

Data Entry

to Job or

Employee

data

HRMS

Master

Tables

PDI Setup

Directory

Map PDI

Transaction

History

Business Interlink

PowerShell Scripts

Custom

Options

Custom

Tracking

Tables

Integration

Broker PDI

Message

Report/Sync

#PSRECONNECT

Custom Setup Options

• AD Owned attributes

• Exclude From Sync Process

#PSRECONNECT

Custom PDI Tracking Page

• Maintains link between EMPLID and AD Account

• Shows history of every PDI process • Link to IB monitor page

• Report of processing details

• Errors and Warnings

• Trace log showing all technical details of the process

• Scripts executed, Email Sent, View XML, Detail Transaction list

• Ability to publish a PDI message for the Employee

• View real time comparison between PS and AD based on PDI Mapping

#PSRECONNECT

Custom Tracking Page

#PSRECONNECT

Details Link to Integration Brooker

IB Monitor PeopleTools > Integration Broker > Service Operations Monitor > Monitoring > Asynchronous Services > Asynchronous Details

#PSRECONNECT

Report Link

#PSRECONNECT

Errors / Warnings Link

#PSRECONNECT

Trace Link

#PSRECONNECT

Scripts Link

#PSRECONNECT

Emails Link

#PSRECONNECT

View XML Link

#PSRECONNECT

Transactions Link

#PSRECONNECT

Compare PS to AD from Tracking Page

#PSRECONNECT

PowerShell Scripts

• Script definition page

• Effective Dated for version control

• PDI maintain Counts

• Scripts access parameters from PDI process

#PSRECONNECT

Batch Report and Sync Process

• Report Only Mode

• Run for one or all Empl ID

• Sync one, many or all attributes

• Attribute Delete option

#PSRECONNECT

Report and Sync Process Output

• Report Show details by attribute, Action to be Taken, PeopleSoft and AD values

Q & A

Implementation of a Customized PeopleSoft Directory Interface (PDI)

#PSRECONNECT

Questions and Answer Session

• Please feel free to asks any questions at this time

Thank you for attending this session!

Please complete a session evaluation

Session ID: 101680

Contact Info:

dresh@cherryroad.com

Tel: 973.402.7802

Appendix A

Implementation of a Customized PeopleSoft Directory Interface (PDI)

#PSRECONNECT

PDI Setup Directory Configuration Active Directory Configuration is required

Enterprise Components > Directory Interface > Definitions > Directory Configurations

#PSRECONNECT

PDI Setup Schema Cache The Directory Schema must be Cached

Enterprise Components > Directory Interface > Definitions > Schema Cache

#PSRECONNECT

PDI Setup Requirements Installation Table “Directory Interface” selected

Set Up HCM > Install > Installation Table

#PSRECONNECT

PDI Mapping Setup

PDI Mapping assigns HR fields to Directory attributes Enterprise Components > Directory Interface > Mapping > Directory maps

#PSRECONNECT

PDI Setup Integration Broker

Integration Broker setup and Service Operations Messages PeopleTools > Integration Broker > Integration Setup > Service Operations

#PSRECONNECT

A 55,000+ member user community for Oracle

Cloud, JD Edwards and PeopleSoft customers.

What the Quest PeopleSoft Community offers:

Customized digital content

Official PeopleSoft newsletter

Customer success stories

Virtual and face-to-face events

PeopleSoft networking groups

Visit www.QuestDirect.org for more information!

Who is the Quest Community?