Peoplesoft App-Designer login in 2 levels using LDAP authentication
I have a database with LDAP enabled. It works great when logging in through the PIA or when logging into the designer app through the application server.
I need to force the app-designer to allow me to log in with two-tier mode using LDAP authentication. Is this possible without customization?
a source to share
I do not think that's possible. 2-tier logs directly to the database and more importantly, does not run the signon user code that makes the calls for LDAP authentication. Actually, 2-tier is really just a Win32 app that doesn't run user code - it's not a peopleoft app. There is a user callout dll shipped with peopleoft, and some meager docs on what you need to do to use it - but again, most likely not going to satisfy your needs. You may need to use the ldap synch online app engine to bring your ldap users to the security tables if you want to use these ids for two-level access.
a source to share
The only way to use LDAP Authentication for App Designer is to use a 3-tier connection through the application server. Only with a Layer 3 connection will Signon PeopleCode be executed. Does not connect with 2-tier LDAP server.
You can take a look at using Gray Sparling Desktop Single Signon which integrates with App Designer and uses Windows and NTLM to hijack Active Directory authentication. This will give you some degree of LDAP authentication if you've authenticated Windows with a domain. But this is an additional product that you will need to buy.
Otherwise, as Epictetus mentioned, you can use an LDAP username as long as it syncs with your PeopleSoft database and uses the local password stored in PSOPRDEFN.
a source to share
One problem I have seen is that when using LDAP and Layer 2, when logging into LDAP, it decrypts the password in PSOPRDEFN somehow. The next level 2 login from the same account throws the error cannot login, please encrypt the password using movoer encrypt password * data. If you encrypt this users password, then the same results occur after users log into the next LDAP.
a source to share