“Forgotyourpassword” implementation in PeopleSoft
PIA Page
1) In this implementation in
windows platform my company requirement is “One Webserver and two PIA Sites”
(a) First site already created
i,e “ps” then we have to create second site I,e FGPD in the same Webserver.
(b) To create additional site we have two ways:
(A) We can clone from existing PIA
Site I,e copying from the existing one
(B) OR We can Install Additional PIA
site from D:\PT8.49\setup\PSMpPIAInstall
2) But I have done first step
I,e cloned the PIA Site in the same path.
3) GoTo
D:\PT8.49\webserv\fsprdsb\applications\peoplesoft\PORTAL
In the
above Screen shot copy the “ps” folder and paste it in the same path and rename
it as “FGPD”
4) In the old Site “ps” the
“signon.html” file looks like this:
Path is GOTO:
D:\PT8.49\webserv\fsprdsb\applications\peoplesoft\PORTAL\ps
In that right click on “signon.html” and
open with notepad.
5) In the new site I,e “FGPD”
in this GoTo:
D:\PT8.49\webserv\fsprdsb\applications\peoplesoft\PORTAL\FGPD
(a) Right click on “signonhtml”
file and change the URL
<meta HTTP-EQUIV='Refresh'
CONTENT='1; URL=../psp/ps/?cmd=login'>
Change it to
<meta HTTP-EQUIV='Refresh'
CONTENT='1; URL=../psp/FGPD/?cmd=login'>
6) The new site “FGPD”
signon.html file looks like this:
7) Then goto:
D:\PT8.49\webserv\fsprdsb\applications\peoplesoft\PORTAL\WEB-INF\psftdocs
Copy the
“ps” site and paste it in the same path and renamed to “FGPD” shown in the
below
8) After renaming the “FGPD”
Site: shown below
9) Open “ps” site and in that
configuration.properties file
Goto:
D:\PT8.49\webserv\fsprdsb\applications\peoplesoft\PORTAL\WEB-INF\psftdocs\ps
psserver=INHAFNAPPWEBDR:9005
WebUserId={V1.1}JP9ukEkTssmYrzsK1yvXFg==
WebPassword={V1.1}JP9ukEkTsslIxnAp6nef1Q==
ReportRepositoryPath=c:/psreports
10) Check these should be same in new site “FGPD” configuration.properties
file ie
Goto:
D:\PT8.49\webserv\fsprdsb\applications\peoplesoft\PORTAL\WEB-INF\psftdocs\FGPD
psserver=INHAFNAPPWEBDR:9005
WebUserId={V1.1}JP9ukEkTssmYrzsK1yvXFg==
WebPassword={V1.1}JP9ukEkTsslIxnAp6nef1Q==
ReportRepositoryPath=c:/psreports
WebProfile=FGPWD-à This we created new webprofile in PIA Page
11) We have to edit “signin.html”file in old and new sites.
12) Goto:
D:\PT8.49\webserv\fsprdsb\applications\peoplesoft\PORTAL\WEB-INF\psftdocs\ps
(a) Right click on
“signin.html”and open with notepad
(b) In this file we have to add url(some code
shown below in the selected one) that should be point to new site ie FGPD
The highlighted code is:
<tr>
<td> </td>
<td
align="left" class="PSLOGINTEXT">
<A href="http://10.10.100.191:80/psp/FGPD/EMPLOYEE/ERP/c/MAINTAIN_SECURITY.EMAIL_PSWD.GBL?">Forgotyour
password?</A></td>
</tr>
13) The highlighted code should be paste it in old site “signin.html”file in
the exact place.
14) In the old PIA site in “signin.html” file we don’t add any thing or
code. It should be Asusual
15) This is ending of changes made in physical machine. Then we have to
create permission list,Roles, Forgotpassword userprofile etc.., in PIA Page.
16) Creating Permission Lists:
(a) Create
a permission list called MAILPSWD
Give a permission list name “MAILPSWD” in the above and click on Add button.
Ø On
the pages tab of this new Permission List you will need to authorize the
component called EMAIL_PSWD. This is
done by adding the Menu named MAINTAIN_SECURITY, edit the menu and find the
component called EMAIL_PSWD with the description FORGOT MY PASSWORD. Edit the
pages and select all.
(b) In the General tab it look like this in
permission list:
© GoTo Pages tab of this permission list and add the menu
“MAINTAIN_SECURITY”
(d)Click on “Edit Components” and authorize the component called
“EMAIL_PSWD”
(e) In the above Screen shot select the component “EMAIL_PSWD” and click
on Edit Pages.
In the above screen shot click on Select All button and click on ok
button.
(f) Next goto the Component Interface tab and add the component
interface called “USERMAINT_SELF”
In the above screen click in Edit
In the above screen select Full Access(AII) and press ok button.
(g) Next go to the Web Libraries tab of this permission list and add the
“WEBLIB_PORTAL” and “WEBLIB_PT_NAV” web
libraries and click on save button.
In the above screen select edit on both web libraries and select Full
Access(AII) button and press ok button.
Ø Click on Edit on the “WEBLIB_PT_NAV” web library and select Full
Access(AII) and press on ok button.
(17) Creating Role called “FORGOT_PASSWORD” This Role will have only one permission list, the MAILPSWD permission list that we just created in the above.
(17) Creating Role called “FORGOT_PASSWORD” This Role will have only one permission list, the MAILPSWD permission list that we just created in the above.
NOTE: FROM 17b to23 e refer forgotpassword?2 with screen shots
(b) GoTo Permission List tab and select the
permission list called “MAILPSWD” that just we created.
18) Create a new user called “FORPASS” Create a password for this and
remember it.
This user does not need any permission lists on the general tab a
symbolic ID or an email address.
Ø In the above screen click on Edit Email Addresses link: Email Type should be empty
(a) The user ID Type for this
user should be none:
(b) Click on Roles tab and add the Role called
“FORGOT_PASSWORD” as we just created in
the above.
© Click on Workflow tab ,
this would be like this as shown below:
19) Under
PeopleTools->Security->Password Configuration ->Forgotten Password
Hint
(a) Click on “Add a new value
tab” and give password hint id:
(b) Click on Add button.
Give the question: what is your mobile number and click on save
button.
© Like that we have to give questions and click on save button. Then it
will display like this
In this path: PT->Security->Password Configuration->Forgotten
Password Hint.
Pick some questions that will have a fairly short answer like what is
your pets name?, your favourate food?, or what ever you feel is appropriate.
20) Also need to go:
PT->Security->User
Profile->Forgot My Password Email Text. To add what ever comments you want
returned on the email you are sending to users. We must add < > to the
end, some thing like this:
21) Go to My system Profile. Note that, as the name implies, we will be
updating the profile of whatever user you are currently logged in.
(a) Make sure that this will
user has a valid email address. You will want to make sure All other user
profiles that will be using this forgotten password functionality also have
valid emails.
(b) While still in the My System Profile page,
click on the link named Change or set up forgotten password help.Select the
appropriate question to ask the user(this prompt list will list out any
questions that I have added. Then fill in the answer that will correctly answer
the question.
In Main Menu: -My System
Profile click on “Change or set up forgotten
password help” link then the below window will be displayed. And press on ok
button.
Note: This answer gets converted to all UPPERCASE. Make sure that you
save the user profile. All Users will be required to set this question and
answer up Before they can use the Forgot Password link.
Save and goto step ( c )
22) In PeopleTools 8.44 and greater we need to create a new web profile
for the forgotten password process. Prior to PT 8.44 this process is done in
the configuration.properties file.
(a) Create a new webprofile
called “FGPWD” I,E GoTo:PT->webprofile->webprofile configuration
And click on Add new value
tab and give name as “FGPWD” And click on Add button in the below screen.
(b) In the
General tab of the “FGPWD” webprofile looks like this below:
( c ) on the security tab of the
webprofile turn on the checkbox Allow public Access and enter the “FORPASS”
UserID and Password. This is nothing but bypass signon.
( d ) In our second PIA Site make sure you are using the “FGPWD”
webprofile in your configuration.properties file for that site.Save the files
and bounce web server.
NOTE: The URL in the signin.html needs to have a psp in it and not psc
as psc was used in peopletools8.1x and will not work for the portal.
(e) Click on custom properties tab of new webprofile and look like this:
23) Goto: PT->Portal->Structure and content-> and edit the
tools hidden folder
(a) In this click on “Folder
Security” tab that we have to notice that permission list(MAIL_PSWD) is listed there.
If we don’t have means, we have to add.
(b) Folder administration tab looks like this:
( c ) GoTo PT->Portal->Structure and Content-------Click on
Tools Hidden link
In the below window find “Forgot My Password” and click on edit
button.
( d ) In General tab the options look like this:
(e) The Security tab looks like this: In this we have to verify the
“MAILPSWD” Permission list is there or not.
----------------------------------------End of Document------------------------------------------------
Errors
Errors: While implementing or after Implementing this “forgot password”
“PTWEBSERVER” Account is continuously locking. Due to this locking
“forgotpassword” functionality doesn’t work.
> This PTWEBSERVER Account can unlock in two
ways:
(a) In PIA Page I,e
PT->Security->User Profile->User Profile-> In Search box give
“PTWEBSERVER” In this window Uncheck the
Account Lock Out?
(b) Second way we have to update in backend I,e
in DataBase
SELECT * FROM PSOPRDEFN WHERE OPRID=’PTWEBSERVER’
If the Account lock is
locked then it shows “1” we have to unlock by giving the query
UPDATE PSOPRDEFN SET
ACCTLOCK=’0’ WHERE OPRID=’PTWEBSERVER’
2) Some times when we update or save the “PTWEBSERVER” Account it will
not update.
For this issue Oracle referred
me to add some peoplecode on “FUNCLIB_PWDCNTL record.
ODM Action Plan
------------------------------------
To make a particular system peoplesoft userid password to be exempted
from password controls like password expire date and account lock out both ,
then follow the below custom peoplecode changes :
1) In Application Designer open the record called FUNCLIB_PWDCNTL and
view the PeopleCode.
2) Open the FieldChange PeopleCode and add the following right under the
line called:
------------------------------------------
Function PASSWORD_CONTROLS ( );
/* START CUSTOMIZATION - this is a customization to exclude users from
password controls */
If %SignonUserId = "PSAPPS" Or
%SignonUserID = "GUEST" Or
%SignonUserId = "PTWEBSERVER" Then
Exit;
End-If;
/* END
CUSTOMIZATION */
Ex: Open Application Designer. Open the record called FUNCLIB_PWDCNTL
and view the people code. Add the selected code as shown below:
After that click on save button. After that “PTWEBSERVER” Account should
not be locked.
=========================*************====================================
After
Implementation we got error
HI Team,
When I give the url it Is displaying like this:
After clicking “Forgotyourpassword” I am getting the below screenshot.
In the above screen after giving “forgotpassword” Userid and
password then it is displaying the below screen.
Requirement:
1. If we click on Forgot password on the first page , then it has to be
displayed the third page I,e forgotpassword page.
2. Could you suggest me where we missed the configuration.
Sol) Problem with configuration.properties files in both old site and
new site
First we don’t get error msg in PIA Page like” Check Appserver logs bea
jolt exception error” and webuserid and webpassword is same in both
configuration.properties file.After doing this when we click on forgotpassword
we got direct page of “forgotyourpassword”
=======================*******************================================
FORGOT PASSWORD BY ORACLE
Before following the steps in the following
solution we need to make a few things clear. Please read the entire solution
before proceeding.
PeopleSoft suggests that you follow the procedures outlined in PeopleBooks to get this process setup. You can find this information in the following location:
Home > PeopleBooks > PeopleTools PeopleBook: Security Administration > Setting Up User Profiles > Setting Up the Site for Forgotten Passwords.
PeopleSoft recommends setting up a new PIA site specifically designed for users who have forgotten their passwords. This PIA site would require no password to enter, but would use the Public Access option on the web profile (Bypass signon) which provides access only to the forgotten password pages.
To set up a separate forgotten password site:
1. Set up a NEW PIA site on your web server. Please see Note 613093.1 - How to install an additional PeopleSoft site. Applying this solution would allow you to have two sites pointing to the same database. One with bypass signon enabled for the forgotten password site and the other, your production system, with bypass signon disabled. The only difference would be the URL where you would be specifying the site you want to access.
http://myserver/site1.....
http://myserver/site2.....
2. Set up a direct connection to the site, as in a link that leads right to it.
3. In the web profile, enable public access and specify a public user ID and password for automatic authentication. In PeopleTools 8.44 and above this is found under PeopleTools > Web Profile > Web Profile Configuration.
4. The Public Access user will be the FORGOTPASSWORD user you will be creating in the steps below. This user will have limited access (i.e. only to the Email New Password component) so as users can request a new password.
5. Place a link to the forgotten password site, within the public portion of the PeopleSoft portal, or on another public website, or on the logon page as discussed in step 9 below.
6. Notify your user community of the link.
The following steps below will help you in the actual setup of the permission list, role, and user that is used in this forgotten password process.
NOTE: Passwords that are generated by the Forgot Password function are always in UPPER CASE.
WARNING: If you use a "super user" account for your database (such as PS or VP1) be sure that you have another account that can access the security area before setting this process up because you may end up changing the password for that super user account by accident. This could not only lock yourself out of your database while experimenting with this setup but everyone else too if that user is used to start your application server.
Additional Precautions: If you choose not follow the suggestion in PeopleBooks and use a second PeopleSoft site, for the Forgot Password link, but want to use the same site as your logon site, there are a couple things to keep in mind.
FIRST: The forgotten password setup will affect Workflow Notification emails. If you are using bypass signon and only one PIA installation you will have an issue when it comes to workflow notification emails. These notifications will use the FORGOTPASSWORD userid to bypass the logon and try to access the page in the email. This FORGOTPASSWORD user has no access to anything other pages except the one request page so you will get an error when attempting this.
See Note 778902.1 E-WF:Workflow Email doesn't work with Bypass Signon, not authorized error occurs
Note 619942.1 E-WF:links in WF email messages supposed to take you directly no longer working
Note 622190.1 E-PIA: PT 8.4x How to Setup (Public) Bypass Signon
SECOND: If you are using nVision drill downs and not using a different web profile for bypass signon, then you will also have issues where it will try to drill down as the bypass signon user, which again is your forgotten password user, and you will not have access. Therefore it is important that you setup a second PIA site specifically for the forgotten password setup AND use a different web profile for that site.
Steps to setting up the forgotten password link:
1a. Create a permission list called MAILPSWD.
1b. On the Pages tab of this new Permission List you will need to authorize the component called EMAIL_PSWD. This is done by adding the Menu named MAINTAIN_SECURITY, edit the menu and find the component called EMAIL_PSWD with the description Forgot My Password. Edit the pages and select all.
1c. Next go to the Component Interface tab of this same Permission List, add and give full access to the USERMAINT_SELF component.
1d. Next go to the Web Libraries tab of this same Permission List and add the WEBLIB_PORTAL and WEBLIB_PT_NAV web libraries edit and give FULL access to ALL iscripts. Save and go to step 2.
2. Create a Role called Forgot Password. This role will have only 1 permission list, the MAILPSWD permission list you just created. Add this Permission List and save and go to step 3.
3a. Create a new User called FORGOTPASSWORD. Create a password for this user and remember it, as it is case sensitive, and you will be using it again in step 9. The User ID Type for this user should be none and on the roles tab you will want to add the role you just created called Forgot Password. This user DOES NOT need any permission lists on the general tab a symbolic ID or an email address. Save and go to step 4.
4. Open a Permission List that ALL your users have in common and that is assigned to them through a common role. On the General tab, of this permission list, turn on the check box that says Allow Password to be Emailed? and save. Go to step 5.
5a. Under PeopleTools > Security > User Profile > Forgot Password Hint. Add a new password hint (note the ID doesn't matter - just use 01, 02, etc.). Pick some question that will have a fairly short answer like What is your pet's name?, Mothers maiden name or whatever you feel is appropriate.
5b. You also need to go under PeopleTools > Security > User Profile > Forgot My Password Email Text to add whatever comments you want returned on the email you are sending to users. You MUST also add <> to the end, so something like this:
Please reset your password! This process will also NOT unlock your account if it has been locked out. If your account is locked you need to contact the security administrator <>
Save and go to step 6.
6. Go to My System Profile. Note that, as the name implies, you will be updating the profile of whatever user you are currently logged in as. Go to step 7.
7. Make sure that this user has a valid email address. You will want to make sure ALL other user profiles that will be using this forgotten password functionality also have valid emails. Go to step 8.
8. While still in the My System Profile page, click on the link named Change or set up forgotten password help. Select the appropriate question to ask the user (this prompt list will list out any questions that you added in step 5. Then fill in the answer that will correctly answer the question.
NOTE: This answer gets converted to all UPPERCASE. Make sure that you save the user profile. ALL Users will be required to set this question and answer up BEFORE they can use the Forgot Password link. Save and go to step 9.
9. This step will add the Forgot your password link to the logon page.
Using Notepad (or whatever editor you prefer) edit the signin.html file in your web server directory that you installed PeopleSoft into. The file will most likely be found somewhere like c:\bea\wlserver6.1\config\peoplesoft\applications\portal\web-inf\psftdocs\ps\signin.html or
c:\websphere\appserver\installedapps\peoplesoft\portal\web-inf\psftdocs\ps\signin.html
Once you have opened the signin.html file in edit mode, search for the two lines that look like the following (hint: search for the string "pwd")
<input TYPE="password" id="pwd" name="pwd" class="PSEDITBOX">
</td>
and the following in tools 8.49 and above :
<INPUT class=pslogineditbox id=pwd type=password size=15 name=pwd>
Insert a new line after the first one, so that you have something that looks like this:
<BR><A HREF="http://localhost/psc/PTSYS/EMPLOYEE/EMPL/c/MAINTAIN_SECURITY.EMAIL_PSWD.GBL">Forgot your password?</A></td>
<tr>
If you don't know the values on your URL that you need to add before MAINTAIN_SECURITY, navigate to PeopleTools-->Security-->User Profiles, and open any content reference in this menu. All the components referenced are in the MAINTAIN_SECURITY menu and therefore they have same URL than EMAIL_PSWD.GBL. So copy/paste the URL before MAINTAIN_SECURITY to your link.
9.a In PeopleTools 8.44 and greater you will need to create a new web profile for the forgotten password process. Prior to PT 8.44 this process is done in the configuration.properties file . See Note 622190.1 E-PIA: PT 8.4x How to Setup (Public) Bypass Signon
Navigate to PeopleTools > Web Profile > Configure Web Profile:
1. Create a new webprofile called FORGOTPASSWORD
2. On the Security tab of the web profile turn on the checkbox Allow Public Access and enter the FOGOTPASSWORD User ID and password.
3. In your second PIA site make sure you are using the FORGOTPASSWORD web profile in your configuration.properties file for that site. Save the files and bounce your web server.
NOTE: The URL in the signin.html needs to have a psp in it and not psc as psc was used in Peopletools 8.1x and will not work for the portal.
You may get also get a menu with an error message saying, First operand of . is NULL, so cannot access member Count (2,236) At PT_NAV.NavPortal.OnExecutFindFilterName PCPC:8156 Statement 197.
Or and error that says "You are not Authorized to access this page" with the user listed on the page.
This is because you do not have any menu access to the portal. You will not get this error if there are any portal folders marked as public on the security tab of the folders in the portal structure & content however you will also see folders to which you have no access to anything other than see them.
To fix this issue you need to navigate to PeopleTools > Portal > Structure & Content and edit the Tools-Hidden folder. If you click on the security tab you will notice that your Permission list (MAIL_PSWD) is not listed there. You will need to add it to this hidden folder to get the link to work correctly. It can be added by either running the Portal Security Synch process, or by opening the permission list in question, removing the page access, saving the permission list, then adding the page access back and saving. This will update the portal structure with the correct permission list access. Note that there is no left navigation to this page or menu as it is located in a hidden folder in the portal.
10. Go to the signon page. You should now see a hyperlink that says, Forgot your password? Clicking on this link will give you a page that allows you to input your user id. Type in whatever user id that you were logged in as when you did the My Profile stuff.
NOTE: You may have to play around with the signon.html file to make sure the link is in the desired place on the page.
11. Once you click the forgotten Password link you will be presented with the question that you setup for this user. Type in the correct answer and then you will get the password mailed to you.
NOTE: Check to make sure your SMTP setting are correct on the app server. Otherwise you will get an error that an email cannot be sent to this user. Also make sure ALL users have valid email addresses in their user profiles.
12. Use the new password to logon.
Addition Comments: If you get any errors when setting this up please go back and check the following:
Permission List - Forgot My Password - Email_Pswd -> Full Access
Component Interface - USERMAINT_SELF -> Full Access
NOTE: If you are using Password controls be sure to see E-SEC: Can Password Controls be User Specific? (Doc ID 611621.1) as you will want to exclude the forgotten password user from becoming a victim of password controls or becoming locked out by accident.
When using the Enterprise Portal in order to get the forgotten password user to be able to logon without having the left hand menu access you will want to navigate to PeopleTools > Portal > Structure & Content and drill down on the Tools - Hidden folder. Open the Forgot my password Cref and click on the No Template check box half way down on the general tab. This will take the user directly to this page and not allow the portal navigation.
NOTE: There is no windows client option for the forgotten password functionality. This is web based only. The forgotten password functionality is setup using the web server and bypass signon. The client does not use the web server. For client users, the user should logon through the web first, change their password then logon to the client.
PeopleSoft suggests that you follow the procedures outlined in PeopleBooks to get this process setup. You can find this information in the following location:
Home > PeopleBooks > PeopleTools PeopleBook: Security Administration > Setting Up User Profiles > Setting Up the Site for Forgotten Passwords.
PeopleSoft recommends setting up a new PIA site specifically designed for users who have forgotten their passwords. This PIA site would require no password to enter, but would use the Public Access option on the web profile (Bypass signon) which provides access only to the forgotten password pages.
To set up a separate forgotten password site:
1. Set up a NEW PIA site on your web server. Please see Note 613093.1 - How to install an additional PeopleSoft site. Applying this solution would allow you to have two sites pointing to the same database. One with bypass signon enabled for the forgotten password site and the other, your production system, with bypass signon disabled. The only difference would be the URL where you would be specifying the site you want to access.
http://myserver/site1.....
http://myserver/site2.....
2. Set up a direct connection to the site, as in a link that leads right to it.
3. In the web profile, enable public access and specify a public user ID and password for automatic authentication. In PeopleTools 8.44 and above this is found under PeopleTools > Web Profile > Web Profile Configuration.
4. The Public Access user will be the FORGOTPASSWORD user you will be creating in the steps below. This user will have limited access (i.e. only to the Email New Password component) so as users can request a new password.
5. Place a link to the forgotten password site, within the public portion of the PeopleSoft portal, or on another public website, or on the logon page as discussed in step 9 below.
6. Notify your user community of the link.
The following steps below will help you in the actual setup of the permission list, role, and user that is used in this forgotten password process.
NOTE: Passwords that are generated by the Forgot Password function are always in UPPER CASE.
WARNING: If you use a "super user" account for your database (such as PS or VP1) be sure that you have another account that can access the security area before setting this process up because you may end up changing the password for that super user account by accident. This could not only lock yourself out of your database while experimenting with this setup but everyone else too if that user is used to start your application server.
Additional Precautions: If you choose not follow the suggestion in PeopleBooks and use a second PeopleSoft site, for the Forgot Password link, but want to use the same site as your logon site, there are a couple things to keep in mind.
FIRST: The forgotten password setup will affect Workflow Notification emails. If you are using bypass signon and only one PIA installation you will have an issue when it comes to workflow notification emails. These notifications will use the FORGOTPASSWORD userid to bypass the logon and try to access the page in the email. This FORGOTPASSWORD user has no access to anything other pages except the one request page so you will get an error when attempting this.
See Note 778902.1 E-WF:Workflow Email doesn't work with Bypass Signon, not authorized error occurs
Note 619942.1 E-WF:links in WF email messages supposed to take you directly no longer working
Note 622190.1 E-PIA: PT 8.4x How to Setup (Public) Bypass Signon
SECOND: If you are using nVision drill downs and not using a different web profile for bypass signon, then you will also have issues where it will try to drill down as the bypass signon user, which again is your forgotten password user, and you will not have access. Therefore it is important that you setup a second PIA site specifically for the forgotten password setup AND use a different web profile for that site.
Steps to setting up the forgotten password link:
1a. Create a permission list called MAILPSWD.
1b. On the Pages tab of this new Permission List you will need to authorize the component called EMAIL_PSWD. This is done by adding the Menu named MAINTAIN_SECURITY, edit the menu and find the component called EMAIL_PSWD with the description Forgot My Password. Edit the pages and select all.
1c. Next go to the Component Interface tab of this same Permission List, add and give full access to the USERMAINT_SELF component.
1d. Next go to the Web Libraries tab of this same Permission List and add the WEBLIB_PORTAL and WEBLIB_PT_NAV web libraries edit and give FULL access to ALL iscripts. Save and go to step 2.
2. Create a Role called Forgot Password. This role will have only 1 permission list, the MAILPSWD permission list you just created. Add this Permission List and save and go to step 3.
3a. Create a new User called FORGOTPASSWORD. Create a password for this user and remember it, as it is case sensitive, and you will be using it again in step 9. The User ID Type for this user should be none and on the roles tab you will want to add the role you just created called Forgot Password. This user DOES NOT need any permission lists on the general tab a symbolic ID or an email address. Save and go to step 4.
4. Open a Permission List that ALL your users have in common and that is assigned to them through a common role. On the General tab, of this permission list, turn on the check box that says Allow Password to be Emailed? and save. Go to step 5.
5a. Under PeopleTools > Security > User Profile > Forgot Password Hint. Add a new password hint (note the ID doesn't matter - just use 01, 02, etc.). Pick some question that will have a fairly short answer like What is your pet's name?, Mothers maiden name or whatever you feel is appropriate.
5b. You also need to go under PeopleTools > Security > User Profile > Forgot My Password Email Text to add whatever comments you want returned on the email you are sending to users. You MUST also add <> to the end, so something like this:
Please reset your password! This process will also NOT unlock your account if it has been locked out. If your account is locked you need to contact the security administrator <>
Save and go to step 6.
6. Go to My System Profile. Note that, as the name implies, you will be updating the profile of whatever user you are currently logged in as. Go to step 7.
7. Make sure that this user has a valid email address. You will want to make sure ALL other user profiles that will be using this forgotten password functionality also have valid emails. Go to step 8.
8. While still in the My System Profile page, click on the link named Change or set up forgotten password help. Select the appropriate question to ask the user (this prompt list will list out any questions that you added in step 5. Then fill in the answer that will correctly answer the question.
NOTE: This answer gets converted to all UPPERCASE. Make sure that you save the user profile. ALL Users will be required to set this question and answer up BEFORE they can use the Forgot Password link. Save and go to step 9.
9. This step will add the Forgot your password link to the logon page.
Using Notepad (or whatever editor you prefer) edit the signin.html file in your web server directory that you installed PeopleSoft into. The file will most likely be found somewhere like c:\bea\wlserver6.1\config\peoplesoft\applications\portal\web-inf\psftdocs\ps\signin.html or
c:\websphere\appserver\installedapps\peoplesoft\portal\web-inf\psftdocs\ps\signin.html
Once you have opened the signin.html file in edit mode, search for the two lines that look like the following (hint: search for the string "pwd")
<input TYPE="password" id="pwd" name="pwd" class="PSEDITBOX">
</td>
and the following in tools 8.49 and above :
<INPUT class=pslogineditbox id=pwd type=password size=15 name=pwd>
Insert a new line after the first one, so that you have something that looks like this:
<BR><A HREF="http://localhost/psc/PTSYS/EMPLOYEE/EMPL/c/MAINTAIN_SECURITY.EMAIL_PSWD.GBL">Forgot your password?</A></td>
<tr>
If you don't know the values on your URL that you need to add before MAINTAIN_SECURITY, navigate to PeopleTools-->Security-->User Profiles, and open any content reference in this menu. All the components referenced are in the MAINTAIN_SECURITY menu and therefore they have same URL than EMAIL_PSWD.GBL. So copy/paste the URL before MAINTAIN_SECURITY to your link.
9.a In PeopleTools 8.44 and greater you will need to create a new web profile for the forgotten password process. Prior to PT 8.44 this process is done in the configuration.properties file . See Note 622190.1 E-PIA: PT 8.4x How to Setup (Public) Bypass Signon
Navigate to PeopleTools > Web Profile > Configure Web Profile:
1. Create a new webprofile called FORGOTPASSWORD
2. On the Security tab of the web profile turn on the checkbox Allow Public Access and enter the FOGOTPASSWORD User ID and password.
3. In your second PIA site make sure you are using the FORGOTPASSWORD web profile in your configuration.properties file for that site. Save the files and bounce your web server.
NOTE: The URL in the signin.html needs to have a psp in it and not psc as psc was used in Peopletools 8.1x and will not work for the portal.
You may get also get a menu with an error message saying, First operand of . is NULL, so cannot access member Count (2,236) At PT_NAV.NavPortal.OnExecutFindFilterName PCPC:8156 Statement 197.
Or and error that says "You are not Authorized to access this page" with the user listed on the page.
This is because you do not have any menu access to the portal. You will not get this error if there are any portal folders marked as public on the security tab of the folders in the portal structure & content however you will also see folders to which you have no access to anything other than see them.
To fix this issue you need to navigate to PeopleTools > Portal > Structure & Content and edit the Tools-Hidden folder. If you click on the security tab you will notice that your Permission list (MAIL_PSWD) is not listed there. You will need to add it to this hidden folder to get the link to work correctly. It can be added by either running the Portal Security Synch process, or by opening the permission list in question, removing the page access, saving the permission list, then adding the page access back and saving. This will update the portal structure with the correct permission list access. Note that there is no left navigation to this page or menu as it is located in a hidden folder in the portal.
10. Go to the signon page. You should now see a hyperlink that says, Forgot your password? Clicking on this link will give you a page that allows you to input your user id. Type in whatever user id that you were logged in as when you did the My Profile stuff.
NOTE: You may have to play around with the signon.html file to make sure the link is in the desired place on the page.
11. Once you click the forgotten Password link you will be presented with the question that you setup for this user. Type in the correct answer and then you will get the password mailed to you.
NOTE: Check to make sure your SMTP setting are correct on the app server. Otherwise you will get an error that an email cannot be sent to this user. Also make sure ALL users have valid email addresses in their user profiles.
12. Use the new password to logon.
Addition Comments: If you get any errors when setting this up please go back and check the following:
Permission List - Forgot My Password - Email_Pswd -> Full Access
Component Interface - USERMAINT_SELF -> Full Access
NOTE: If you are using Password controls be sure to see E-SEC: Can Password Controls be User Specific? (Doc ID 611621.1) as you will want to exclude the forgotten password user from becoming a victim of password controls or becoming locked out by accident.
When using the Enterprise Portal in order to get the forgotten password user to be able to logon without having the left hand menu access you will want to navigate to PeopleTools > Portal > Structure & Content and drill down on the Tools - Hidden folder. Open the Forgot my password Cref and click on the No Template check box half way down on the general tab. This will take the user directly to this page and not allow the portal navigation.
NOTE: There is no windows client option for the forgotten password functionality. This is web based only. The forgotten password functionality is setup using the web server and bypass signon. The client does not use the web server. For client users, the user should logon through the web first, change their password then logon to the client.
=========================*****************===========================
INSTALLING ADDITIONAL PIA
 |
E-WL: WebLogic 6.1: How to install an additional
PeopleSoft Site (Same PeopleTools Release) [ID 613093.1]
|
Applies to:
PeopleSoft Enterprise PT PeopleTools - Version: 8.4 to 8.43 - Release:
8.4 to 8.4
Information in this document applies to any platform.
***Checked for relevance on 30-Nov-2011***
Information in this document applies to any platform.
***Checked for relevance on 30-Nov-2011***
Customer would like to install an additional PIA site onto the same
WebLogic server using the same PeopleTools release.
There are two ways you can do this. The first way is by doing a manual copy and then editing the appropriate files. The second way is to run the PIA install process.
Resolution #1 - Manual Copying
Assuming your new PIA site name is pssys8 follow instructions below. Replace pssys8 with the name you want to use.
1. On UNIX run the command below. On NT simply copy the ps folder from the location below and then name the copy to pssys8
cp -rp (Your Weblogic path...bea/wlserver6.1/config/peoplesoft/applications/PORTAL/ps pssys8. This creates the new PIA site.
Make sure to modify signon.html and replace ps with pssys8, or your database name. This is located under ../bea/wlserver6.1/config/peoplesoft/applications/PORTAL/pssys8
2. On UNIX run the command below. On NT simply copy the ps folder from the location below and then name the copy to pssys8
cp -rp (Your Weblogic path...bea/wlserver6.1/config/peoplesoft/applications/PORTAL/WEB-INF/psftdocs/ps pssys8. This creates the new configuration directory.
3. Modify configuration.properties and update your Application Server Name and JSL port, and also your Report Repository path. This file is found under .../bea/wlserver6.1/config/peoplesoft/applications/PORTAL/WEB-INF/psftdocs/pssys8
4. Make sure you create the directory under your psreports location that includes the name of the new PIA site.
For example if your ReportRepositoryPath=/opt/psreports make sure the directory /opt/psreports/pssys8 is created.
5. Restart WebLogic after doing the above instructions as it will not know about the new site until you do.
Resolution #2 - Running the PIA install script
1. Shutdown WebLogic Server
Stopping the PIA server.
NT: The PIA server can be stopped either as the NT service or the via a command file
To stop the PIA server from the command file is 'c:\bea\wlserver6.1\config\peoplesoft\stopPIA.cmd'
The PIA service can be stopped from the NT control panel, or via the command line of "NET STOP peoplesoft-PIA"
UNIX: The PIA server can be stopped by running the script <bea_home>\wlserver6.1\config\peoplesoft\stopPIA.sh
NT and UNIX: The PIA server can be stopped from the WebLogic Server console (http://localhost/console). ;
Upon accessing the WebLogic Server Console, you will be prompted for the WebLogic System ID and password. The delivered default ID and password are 'system' and 'password'. Next expand 'peoplesoft' domain ->'Servers' -> right click on PIA and 'Stop this server'
2. Install PIA
Run the multi-platform PIA install for the build/tools version you want to add. This Tools release will be added as a custom webapp. (The WebLogic domain being updated must be 8.4-V or higher)
For NT/2000
%PS_HOME%\setup\mpinternet\setup.exe
For UNIX:
$PS_HOME/setup/mpinternet/setup.<OS>
or
java -cp setup.jar run -console
3. Update an existing domain.
Select 'Existing' domain type to update an existing domain.
4. Select the existing WebLogic domain to update
Select the domain to update.
5. Choose radio button - custom web application. Specify the new site name. Do not change any other values except site name (entering the database name here is a good idea so it shows in the url).
Specify the name of the new site you want to install (i.e pssys8) and click next.
6. Specify the Application Server address.
Specify the appropriate AppServer name(or IP address) and JSL port of the appserver you would like this site to connect to. Each site on a single webserver must have the same values for 'HTTP Port' and 'HTTPS Port'.
7. Complete the PIA install.
If you are prompted to overwrite any existing files reply "No to All".
8. Start WebLogic Server
Once the PIA install completes start the PIA server either via startPIA.cmd(.sh) or if installed as an NT service, " NET START peoplesoft-PIA"
Starting the PIA server.
NT: The PIA server can be started either as the NT service or the via a command file
To start the PIA server from the command file is 'c:\bea\wlserver6.1\config\peoplesoft\startPIA.cmd'
To install the PIA server as an NT service, run c:\bea\wlserver6.1\config\peoplesoft\installNTservicePIA.cmd. The PIA service can now be started from the NT control panel, or via the command line of "NET START peoplesoft-PIA". If need be, it can be uninstalled via c:\bea\wlserver6.1\config\peoplesoft\UninstallNTservicePIA.cmd
UNIX: The PIA server can be started by running the script <bea_home>\wlserver6.1\config\peoplesoft\startPIA.sh
9. Test
You can now access your new site via the URL of http://localhost:port//<newsite>/signon.html ; For example, if you a new site named 'pssys8', you would access that site via the URL of http://dbrown111400/pssys8/signon.html
*** Note - See the attached Word Document for more detailed instructions on how to do this procedure.
No comments:
Post a Comment