21/09/2016

SettingUpUserProfiles

SettingUpUserProfiles
Thischapterprovidesanoverviewofuserprofilesanddiscusseshowto:
WorkwithUserProfiles.
SpecifyUserProfileattributes.
WorkwithdistributedUserProfiles.
Workwithpasswords.
WorkwiththeMySystemProfilepage.
WorkwithUserProfileoptions.

UnderstandingUserProfiles
UserProfilesdefineindividualPeopleSoftusers.YoudefineUserProfilesandthenlinkthemtooneormoreRoles.
Typically,aUserProfilemustbelinkedtoatleastoneRoleinordertobeavalidprofile.Themajorityofvaluesthat
makeupaUserProfileareinheritedfromthelinkedRoles.
Note.It'spossibletohaveaUserProfilewithnoRoles.Thismightbeauserthatisn'tallowedaccesstothe
PeopleSoftapplication,however,youwantthemtohaveworkflowgeneratedemailsenttothem.
YoudefineUserProfilesbyenteringtheappropriatevaluesintheUserProfilepages.TheUserProfilecontainsvalues
thatarespecifictoausersuchasauserpassword,anemailaddress,anemployeeID,andsoon.

CommonElementsinThisComponent
AtthetopofeachpagethereistheUserIDandtheDescriptiontohelpyourecallwhichUserProfileyouareviewing
ormodifyingasyoumovethroughthepages.

WorkingWithUserProfiles
Inthissection,wediscusshowto:
CreateanewUserProfile.
CopyaUserProfile.
DeleteaUserProfile.

CreatingaNewUserProfile
To create a new user profile:

1. SelectPeopleTools,Security,UserProfiles,UserProfiles.
2. OntheFindExistingValuespage,clickAdd a New Value.
3. OntheAddaNewValuepage,enterthenewUserIDintheUser IDeditbox,andclickAdd.
TheUserIDcancontainupto30characters.Thenameyouusecan'tcontainacomma(,)oraspace.Also,
youcan'tcreateaUserIDnamedPPLSOFTthisIDisareserveduserIDusedwithinPeopleTools.

4. SpecifytheappropriatevaluesfromthepagesintheUserProfilescomponent,andclickSave.

CopyingaUserProfile
To copy a user profile:

1. SelectPeopleTools,Security,UserProfiles,CopyUserProfiles.
http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

1/16

21/09/2016

SettingUpUserProfiles

2. OntheFindanExistingValuesearchpage,selecttheUserIDyouwanttoclone.
3. OntheUserProfileSaveAspage,entertheNewUserID,description,andthepasswordthatthenewuserIDshould
usetosignontothesystem.

DeletingaUserProfile
To delete a user profile:

1. SelectPeopleTools,Security,UserProfiles,DeleteUserProfiles.
2. OntheDeleteUserProfilepage,makesureyouhaveselectedthecorrectuserprofile.
3. ClickDelete User Profile.
TheDeleteUserProfileremovesinformationrelatedtothisparticularuserprofilethatappearsineverysecurity
tableinthesystem,PeopleTools,andapplicationtables.Ifyouwanttopreventanyoftheinformationfrom
beingdeletedyoucanspecifytablesthatthedeleteuserprocessbypasses.
SeeAlso
ProfileDeleteTablestoSkip

SpecifyingUserProfileAttributes
Inthissection,wediscusshowto:
Setgeneraluserprofileattributes.
SetIDTypeandAttributeValue.
Setroles.
Specifyworkflowsettings.
Inquireonroleauditinformation.
Displayadditionallinksadded.
Runqueriesaboutauserprofile.

PagesUsedtoSpecifyUserProfileAttributes
Page Name

Navigation

Usage

General

PeopleTools,Security,UserProfiles,User
Profiles,General

Setgeneraluserprofileattributes.

ID

PeopleTools,Security,UserProfiles,User
Profiles,ID

SetIDTypeandAttributeValue.

Roles

PeopleTools,Security,UserProfiles,User
Profiles,Roles

AddrolestoaUserProfile.Thisdefines
whattheusercanandcan'taccessinthe
PeopleSoftsystem.Throughroles,theuser
inheritsPermissionLists.

Workflow

PeopleTools,Security,UserProfiles,User
Profiles,Workflow

Specifyworkflowsettingsforauser.

Audit

PeopleTools,Security,UserProfiles,User
Profiles,Audit

Inquireonwhenandwholastupdateda
profile.

Links

PeopleTools,Security,UserProfiles,User
Profiles,Links

Displayanyadditionallinksadded.

UserIDQueries

PeopleTools,Security,UserProfiles,User
Profiles,UserIDQueries

Runqueriesaboutauserprofile.

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

2/16

21/09/2016

SettingUpUserProfiles

SettingGeneralUserProfileAttributes
AccesstheUserProfileGeneralpage.

Generalpage

LogonInformation
AccountLockedOut?

TodeactivateaUserProfileforanyreason,clickthischeckbox.Theusercan't
signonuntilyouhaveclearedthisoption.
Note.Thischeckboxisalsoautomaticallyselectedbythesystemiftheuser
exceedsthemaximumnumberoffailedlogonattempts(ifusingpassword
controls).TheadministratorwouldthenneedtomanuallyopentheUserProfileand
clearthecheckboxtoreinstatetheuser.

SymbolicID

Associatedwithauser'sencryptedAccessIDandAccessPassword.Thecorrect
SymbolicIDmustbeenteredtoretrievetheappropriateAccessIDandpassword
forsignon.ThisvaluedetermineswhatAccessIDandpasswordisusedtologthe
userontothedatabaseafterthesystemvalidatestheirUserID.
TheAccessIDisonlyrequiredwhenauserneedstoconnectdirectlytothe
database(intwotier).TheAccessIDisnotrequiredwiththeportalorifyouusean
LDAPdirectoryservertomanageuserIDs.
WithPIA,theapplicationservermaintainstheconnectiontothedatabasesothe
applicationservermustsubmitanAccessID.

Password/ConfirmPassword

TheUserPasswordyouenteristhepasswordstringthattheusermustsupplyat
signon.TheConfirmPasswordvaluemustmatchthatofUserPassword.
Note.Thesevaluesarerequiredtosignontothesystem,butyoucansavethe
profilewithoutpopulatingthesefields.

Expirepasswordatnextlogin IfyouareusingPeopleSoftpasswordcontrols,thisoptionenablesyoutoforce
userstochangetheirpasswordsinthefollowingsituations:
FirsttimeausersignsontoPeopleSoft.
Nexttimeausersignson.
Firsttimeausersignsonafterthesystemhasemailedtheuserarandomly
generatedpassword.
UserIDAliases

EnablesyoutouseafullyqualifiedemailID(emailaddress)asauserIDalias.For
example,Tom_Sawyer@peoplesoft.comcouldbetheuserIDusedtosignontothe
system.Thecharacterlimitis70.

EditEmailAddresses

Ifauserispartoftheworkflowsystemoryouhaveothersystemsthatgenerate
emailsforusers,youenteranemailaddressforauserwiththislink.Youcanenter
multipleemailaddressesforauser,butonemustbeselectedastheprimaryemail
address.Thesystemallowsonlyoneemailaddresspertype.Forexample,you
can'tentertwoHomeemailaddresses.

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

3/16

21/09/2016

SettingUpUserProfiles

TheEmailAddressesinterfacehasthefollowingcontrols:
PrimaryEmailAccount.Ifyouentermultipleemailaccounts,onemustbe
selectedastheprimaryaccount.
EmailType.Selectthetypeofemailaccountitis:Blackberry,Business,
Home,Other,Work.TheBlackberryemailtypeisusedwiththe
Workflow/RIMtechnology.
EmailAddress.Entertheemailaddressinthiseditbox.

GeneralAttributes
LanguageCode

TheLanguageCodeontheUserProfilepagehasalimiteduse.Forexample,when
auserrunsabatchjob,thesystemneedstoknowwhatlanguagetogeneratethe
reportsinfortheuserthatsubmittedthejob.
IftheuserisgoingtoaccessPeopleSoftinavarietyoflanguageswithinthesame
session,selectMultiLanguageEnabled.Thisisoftenusedfortranslation
purposes.
InPIA,theuser'slanguagepreferenceisbasedontheselectiontheymakeonthe
signonpage.
ForWindowsworkstations,theuser'slanguagepreferenceisderivedfromthe
DisplaytabinPeopleSoftConfigurationManager.FortheWindowsenvironment,
thevaluespecifiedasLanguageCodeintheUserProfileactsasadefaultincase
thelanguagecodeisn'tspecifiedinPeopleSoftConfigurationManager.

CurrencyCode

Iftheuserdealswithinternationalprices,youwanttosetthecurrencycodeto
reflectthenativeorbasecurrency.Thatwayvaluesappearinthecurrencytheuser
isfamiliarwith.

EnableExpertEntry

Youcanspecifythatsomeusers,yourexpertorpowerusers,havetheoptionof
deferringallprocessingofthedatatheyenterforPeopleSoft.Thisenablesusersto
reducetheamountoftripstotheserverfordataprocessing,regardlessofhowthe
developersetfielddeferredorinteractiveprocessing.Youenablethisoptionona
componentintheApplicationDesigner,andyouspecifywhichusershavethis
optionusingtheEnableExpertEntrycheckbox.
Ifayouwantaparticularusertobeabletospecifydeferredprocessing,thenselect
thecheckbox.Ifnot,leavethecheckboxclear.

PermissionLists
NavigatorHomepage

ThehomepageisassociatedwithPeopleSoftWorkflow.

ProcessProfile

TheProcessProfilecontainsthepermissionsauserrequiresforrunningbatch
processesthroughPeopleSoftProcessScheduler.Forexample,theprocessprofile
iswhereusersareauthorizedtoviewoutput,updaterunlocations,restart
processes,andsoon.
Note.OnlytheProcessProfilecomesfromthispermissionlist,notthelistProcess
Groups.

PrimaryandRowSecurity

PeopleSoftdetermineswhichdatapermissionstograntauserbyexaminingthe
PrimaryPermissionListandRowSecurityPermissionList.Whichoneisused
variesbyapplicationanddataentity(Employee,Customer,Vendor,BusinessUnit,
andsoon).Consultyourapplicationdocumentationformoredetail.
PeopleSoftalsodeterminesMassChange(ifneeded),andDefinitionSecurity
permissionsfromthePrimaryPermissionList.

SettingIDTypeandAttributeValue
AccesstheUserProfileIDpage.

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

4/16

21/09/2016

SettingUpUserProfiles

IDpage

IDTypesandValues
IDTypesandValues

YoucanselecttheIDTypeandAttributeValue.SeparatinguserprofilesbyIDType
enablesyoutohavemultiplecategoriesofuserprofileswithIDnumbersallwithina
rangeof11000,forexample,anditalsoenablesyoutograntdatapermissionby
entity(Customer,Employee,andsoon).Sowhenuserssignontoyourbenefitsor
payrolldeductionsapplication,theyonlyseeinformationthatappliestothem.
Auserprofileisasetofdataaboutanentityauserthatinteractswiththe
system.TheHRsystem,whichkeepstrackofyouremployeedata,isdesignedto
focusmoreonyouremployeeusertypes.Ontheotherhand,yourFinancials
systemisdesignedtokeeptrackofcustomerandsupplierusertypes.IDtypes
enableyoutolinkusertypeswiththerecordsthataremostrelevantwhenauser
interactswiththesystem.
TheAttributeValueiswhereyouselectthevalueassociatedwiththeAttribute
Name.Inthiscase,thevaluereflectstheemployeenumber,butitcouldbea
customernumberorvendornumber.

UserDescription
Description

TheUserDescriptionsectionenablesyoutohelpidentifytheuser.Youcanadda
description,suchasanameofanindividualoranorganization,fortheuserprofile.

SetDescription

Clickthislinktopopulatetheeditboxwithanexistingdescriptioninthedatabase.

Note.Beforeyouassignausertypetoauser,youmustcreateyourusertypes.
SeeAlso
UserProfileTypes

SettingRoles
AccesstheUserProfileRolespage.

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

5/16

21/09/2016

SettingUpUserProfiles

Rolespage

RoleName

Showsthenameoftheroleaddedtotheuserprofile.

Description

Showsadescriptionoftheroleaddedtotheuserprofile.

Dynamic

Selectedifthesystemhasassignedaparticularroledynamically.

RouteControl

Foreachroleassignedtoauser,youcanspecifyaroutecontrolprofile.For
example,supposeyouhavearolenamedEXPENSE_REP.Ifyouwanteda
particularexpenserepresentativetohandlealloftheexpensereportssubmittedby
peoplethathadlastnamesbeginningwithA,youcouldassigntheuseraspecific
routecontrolprofileonesendinghimreportssubmittedbyindividualswithalast
namebeginningwithA.

ViewDefinition

Enablesyoutoviewtheroledefinitionassociatedwiththisuserprofile.

SeeAlso
PeopleToolsPeopleBooks:PeopleSoftWorkflow,"UnderstandingRouteControls"
DynamicRoleRule
UsetheDynamicRoleRuleoptionstotestandmanuallyexecuteyourrulesforassigningrolesdynamically.You
designyourrolerulesusingQueryManager,PeopleCode,oryourLDAPscheme.
ExecuteonServer

SelecttheProcessSchedulerserverthatshouldrunyourrolerule.

TestRule(s)

Toseeifyourrulesaregoingtoproducethedesiredresultsforaparticularuser,
youcantestthembyclickingthisbutton.Noneoftherolesareactuallyassigned,
butthesystemprovidesyouareportastowhatroleswillbeassignedwhenyou
runtherule.

ExecuteRule(s)

Usethisbuttontorunyourrulesandassigntheappropriaterolestoaparticular
user.Thisisthemanualapproach.Typically,youexecuterolerulesthrough
PeopleSoftProcessScheduleronaregularlyscheduledbasis.

ProcessMonitor/Message
Monitor

Enablesyoutoviewthestatusoftheprocessexecutingyourroleruleandthe
applicationmessagestheprocessinvoked.

SpecifyingWorkflowSettings
AccesstheUserProfileWorkflowpage.

Workflowpage

WorkflowAttributes
AlternateUserID

Ifthisroleuseristemporarilyout(onvacation,forinstance),selectanAlternate
RoleUsertoreceiveroutingssenttothisroleuser.
Ifthere'saroleusernameintheeditbox,thesystemautomaticallyforwardsnew
workitemsforwhoeverisassignedasthecurrentroleusertothealternaterole
user.

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

6/16

21/09/2016

SettingUpUserProfiles

Note.ThesystemforwardsnewworkitemstotheAlternateRoleUser.Itdoesn't
reassignitemsalreadyintheuser'sworklist.Toreassigntheexistingworkitems,
gototheRoleUserArchivingcomponent.
FromDateandToDate

ThiseditboxappliestotheAlternateUserID.Hereyouenterthedatethecurrent
roleuserisgoingtobeginandreturnfromatemporaryvacancy.

SupervisingUserID

SelecttheUserIDoftheuser'ssupervisorinthisdropdownlistbox.Thesystem
usesthisvaluewhenitneedstoforwardinformationtotheuser'ssupervisor.
ThesystemusesthePERSONAL_DATArecordtodeterminetheuser'ssupervisor.
Note.Ifyou'reusingPeopleSoftHRMSapplications,thisfieldshouldn'tappear.If
itdoes,thenyouneedtosetyourWorkflowSystemDefaults.

RoutingPreferences

Specifywhichtypesofroutingsthisroleusercanreceive.TheRouting
Preferencesboxshowsthetwoplaceswherethesystemcandeliverworkitems:
toaworklist,oranemailmailbox.Ifthisuserdoesn'thaveaccesstooneorbothof
theseplaces,deselectitscheckbox.Forexample,ifthispersonisn'taPeopleSoft
user,deselectWorklistUser.

ReassignWork
ReassignWorkTo

Thisiswhereyoureassignanypendingworkforthisroleuserifpositionschange
orauserisgoingonatemporaryleave,suchasavacation.
Ifthisuserhasworkitemswaitingfortheirattention(asshownbytheTotal
PendingWorklistEntriesinyourWorkflowinterface),selectthischeckboxand
selecttheusertoforwardtheirworkitemstofromthedropdownlistbox.When
yousavethepage,thesystemreassignsexistingworklistentriestothespecified
user.
Note.Ifyoudon'treassignpendingworkitems,theywillremainunprocessed.

TotalPendingWorklistEntries Showsworklistitemsthatrequireauser'sattention.
SeeAlso
PeopleToolsPeopleBooks:PeopleSoftWorkfow,DefiningRolesandUsers

InquiringonUserProfileAuditInformation
TheAuditpageisadisplayonlypagethatenablesyoutodetermine:
Whenaprofilewaslastupdated.
Whoupdatedtheprofile.

DisplayingAdditionalLinksAdded
IfyouhaveaddedanyadditionallinksforuserprofilesintheSecurityLinkscomponenttheyappearontheLinkspage.
SeeAlso
SecurityLinks

RunningUserIDQueries
UserIDqueriesenableyoutorunqueriesthatprovidedetailedinformationregardingauserprofile,suchasthe
permissionlistsandrolesassociatedwithauserprofile.Theavailablequeriesaredocumentedonthepage.
To run a user ID query:

1. Clickthelinkassociatedwiththequeryyouwanttoexecute.
Thisinvokesanewbrowserwindow.

2. Viewtheinformationthequeryreturnstothenewbrowserwindow,orselectadownloadoption.
Fordownloading,youhavethefollowingoptions:
ExcelSpreadsheet.DownloadsthequeryresultsasanExcelspreadsheet(.XLS)file.
CSVTextFile.Thisdownloadsthequeryresultsasacommaseparatedvalues(CSV)fileformat.
http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

7/16

21/09/2016

SettingUpUserProfiles

WorkingWithDistributedUserProfiles
Thissectiondiscussesdistributedusersecurityadministration.ThisfeatureisenabledusingtheRoleGrantpagein
theRolescomponent.
SeeAlso
DecentralizingtheAdministrationofRoles

UnderstandingDistributedUserProfiles
PeopleSoftoffersselfservicesecuritypages,suchasChangeMyPasswordandMySystemProfile.Thisdistributes
thesecurityadministrationthroughouttheorganizationfreeingsystemadministratorstofocusonhigherprioritytasks.
Thedistributeduserprofilefeatureisalsohowyoucandistributesecurityadministration.Withdistributeduserprofiles,
yougrantaparticularroletheabilitytomodifyanotherrole,suchasamanagermodifyingasmallnumberofusers
underhisorhercontrol.Forexample,withdistributeduserprofilestheHRManagercouldmodifythepermissionsof
therole,HRClerk.
ThepagesintheDistributedUserProfilescomponentareexactlythesameasthecorrespondingpagesinthe
"regular"UserProfilescomponent.TheregularUserProfilescomponentisintendedforsystemadministrators.The
DistributedUserProfilescomponentcontainsareducednumberofpages,theonesthatamanagermostlikelywould
needtomodifyfortheirdirectreports.
Tosetupdistributeduserprofilemaintenance,youmusthavethefollowingitemsinplace:
Specifytheappropriatesettingsintheroledefinition,whichisnotdiscussedhere,andoncethatisdone,that
rolecanaccesstheDistributedUserProfilescomponent.
SpecifytheappropriatesearchrecordontheDistributedUserSetUppage.

SettingUpDistributedUserAdministration
Onthispage,thesystemadministratorselectsthesearchrecordtocontrolwhichUserIDscanbeopenedinthe
DistributedUserProfile.
WhenamanageraccessestheDistributedUserProfile,onlythoserolesthatcanbegrantedareavailableinthe
prompt.Changingthedeliveredfunctionalityrequireschangestotheappropriatesearchrecords.
SeeAlso
PeopleToolsPeopleBooks:PeopleSoftApplicationDesigner,CreatingComponentDefinitions,"UnderstandingSearch
Records"

WorkingWithPasswords
Thissectionprovidesanoverviewofpasswordcontrolsanddiscusseshowto:
Changepasswords.
Createforgottenpasswordmailtext.
Createforgottenpasswordhints.
Deleteforgottenpasswordhints.
Setuptheforgottenpasswordsite.
Requestnewpasswords.

UnderstandingPasswordControls
YouusethePasswordControlspagetosetanypasswordrestrictionssuchasdurationorminimumlengthofa
passwordthatyoumightwanttoimposeonyourendusers.Theseoptionsapplywhenyouaremaintainingyouruser
profileswithinPeopleSoft,notwithinadirectoryserver.
Toaccessthispage,selectPeopleTools,Security,UserProfiles,PasswordControls.

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

8/16

21/09/2016

SettingUpUserProfiles

SecurityPolicies(PasswordControls)page

EnableSignonPeopleCode

SelectthischeckboxtoenablethefollowingPeopleSoftpasswordcontrols:Age
andAccountLockout.Theotherpasswordcontrolsarenotenabledbythisbox.
Ifyoudonotwantthesepasswordcontrols,asinyoualreadyhaveathirdparty
utilitythatperformsequivalentfeatures,thenleavethischeckboxclear.
Note.YoucanextendorcustomizethecontrolsbymodifyingthePeopleCode.

Age

Youdefineanumberofdays(between1365)thatapasswordisvalid.Todothis,
selectthePasswordExpriesin'N'Daysoption.Usersloggingonaftera
passwordexpiresmustchangetheirpasswordtologon.Ifyoudon'twantthe
passwordtoexpire,thenselectPasswordNeverExpires.Whenapassword
expirestheusercan'tsignontothesystemandwillbepromptedtochangeit.
Ifyouwanttospecifyadurationinwhichthesystemwarnsusersthattheir
passwordisabouttoexpire,youhavethefollowingoptions.
Ifyouwanttospecifyawarningperiod,selectWarnfor'N'days,andenter
thenumberofdaysintheeditbox.
Ifyoudon'twantanywarningperiod,selectDonotwarnofexpiration.
PeopleSoftdeliversadefaultpermissionlistnamedPSWDEXPR(Password
Expired).Whenapasswordexpiresforauser,thesystemautomaticallyremoves
alloftheuser'srolesandpermissionlistsandtemporarilyassignsthemthe
PSWDEXPRpermissionlistonly.
AuserwhosepasswordhasexpiredcanaccessonlyitemsinthePSWDEXPR
permissionlist,whichtypicallygrantsaccesstotheChangePasswordcomponent
only.Forthedurationofthesession,asinuntiltheuserchangesthepassword,the
userisrestrictedsolelytothePSWDEXPRpermissionlist.
Note.TheactualUserProfilestoredinthedatabaseisnotchangedinanyway
whenthepasswordexpires.Youdon'tneedtoredefinetheprofile.Whenthe
passwordischangedthesystemrestorestheuserprofile'spreviousrolesand
permissionlists.

AccountLockout

Thiscontrolenablesyoutolockanaccountafternnumberoffailedlogonattempts.
Forinstance,ifyousettheMaximumLogonAttemptsvalueto3,andauserfails
threelogons,theyareautomaticallylockedoutofthesystem.Evenifthey
correctlyenterauserIDandpasswordonthefourthattempt,theuserisnot
permittedtologon.Thisfeaturereducestheriskofany"bruteforce"intrudersinto
yoursystem.Italsoprovidesaremindertoyourenduserstorememberthe
passwordtheychoose.
Aftertheaccountislockedout,asystemadministratorneedstoopentheUser
ProfileandunchecktheAccountLockedcheckboxmanually.

Miscellaneous

TheAllowpasswordtomatchUserIDcontrolenablesadministratorstomake
sureusersdon'tusetheirownUserIDasapassword.Thishelpsyoutoprevent
hackersfromguessingpasswordsbasedonalistofemployeenames.

MinimumLength

Administratorscanopttosetaminimumlengthforpasswordsmaintainedbythe
PeopleSoftsystem.Iftheminimumlengthissetto0,thePeopleSoftpassword
controlsdonotenforceaminimumlengthontheuser'spassword.Thisdoesnot,

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

9/16

21/09/2016

SettingUpUserProfiles

however,implythatthepasswordcanbeblank.Whenyoucreateanewuserora
userchangesapassword,thesystemchecksthisvalue.Ifitisnonzero,the
systemteststhepasswordtoensureitmeetslengthrequirements,andifnot,an
errormessageappears.
CharacterRequirements

Administratorscanrequireasetnumberofdigitsorspecialcharacterswithina
password.Specialcharacters,or"specials,"refertosymbolssuchas#and@,
anddigitsrefertonumbers(integers),suchas1or2.
Hereisthelistofcharactersyoucanincludewithinapassword:
!@#$%^&*()_=+\|[]{}:/?.><

PurgeUserProfiles

Thissettingenablesyoutopurgethesystemofuserprofilesthathavenotbeen
usedinaspecifiedamountoftime.Thisaidsingeneralhousekeeping.Inparticular,
ifyoumaintainuserprofilesinadirectoryserver,arowisstilladdedtothe
PSOPRDEFNtableforthesystemtoaccesswhiletheuserinteractswiththe
system.However,ifthatuserisdeletedfromthedirectoryserveryoustillneedto
deletetherowinPSOPRDEFNassociatedwiththedeleteduserprofile.
Note.TheApplicationEngineprogramthatperformsthisoperationisnamed
PURGEOLDUSERS.

Important!Aftermodifyingthesecontrols,youneedtoreboottheapplicationserver.

ChangingPasswords
ThePeopleSoftsystemenablesuserstochangetheirpasswordsasneeded.
To change a PeopleSoft password:

1. Fromtheportalnavigationpane,selectChangeMyPassword.
2. OntheChangePasswordpage,enterthecurrentpasswordintheCurrentPasswordeditbox.
3. IntheNewPasswordeditbox,enterthenewpassword.
4. ConfirmthenewpasswordbyenteringitagainintheConfirmPasswordeditbox.
5. ClickChangePassword.

CreatingForgottenPasswordEmailText
Beforethesystememailsanew,randomlygeneratedpasswordforaforgetfuluser,youwanttomakesuretheyare
whotheyclaimtobe.TheForgottenPasswordfeatureenablesyoutoposeastandardquestiontousersrequestinga
newpasswordtoverifytheuser'sauthenticity.Iftheuserenterstheappropriateresponse,thenthesystem
automaticallyemailsanewpassword.
WhenauserhasforgottenaPeopleSoftpassword,thesystemsendstheuseranewpasswordwithinanemail
message.Youcanhavenumerouspasswordhints,buttypically,yousendallnewpasswordsusingthesameemail
messagetemplate.Becauseofthis,PeopleSoftprovidesaseparatepagejustforcomposingthestandardemailtext
youuseforyourtemplate.

ForgotMyPasswordEmailTextpage

AddthefollowingtextstringintheEmailTexteditbox:
<<%PASSWORD>>

Thisiswherethesysteminsertsthenewpassword.The%PASSWORDvariableresolvestothegeneratedvalue.
http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

10/16

21/09/2016

SettingUpUserProfiles

Note.Youmightinstructtheusertochangethepasswordtosomethingeasiertorememberaftertheysignontothe
systemwiththerandomlygeneratedpassword.Note.OnlyusersthathavetheAllowPasswordtobeEmailed(onthe
Generalpage)optionenabledinapermissionlistcanreceiveanewpasswordusingthisfeature.

CreatingForgottenPasswordHints
Withthesehintssetup,users,uponforgettingtheirpassword,navigatetotheForgotMyPasswordpage.Theuser
answersthequestioncorrectlyandgetsanewpasswordsentthroughyouremailsystem.
Usersdon'thavetousethepasswordquestioncreatedbyanadministrator.Iftheywouldliketoaddtheirown
passwordquestion,theycandosointheMySystemProfilecomponent.

ForgotMyPasswordHintpage

Active

Enablesthehint.

Question

Enteraquestionthatverifiesauser'sidentity.

To create a forgotten password hint:

1. SelectPeopleTools,Security,UserProfile,ForgottenPasswordHint.
2. ClickAddaNewValue.
3. OntheAddaNewValuepage,enterathreecharacterIDinthePasswordHintIDeditbox.
4. ClickAdd.
5. SelecttheActivecheckbox.
6. Enteryourquestiontoverifytheuseriswhohe/sheclaimstobe.
7. ClickSave.

DeletingForgottenPasswordHints
To delete a password hint:

1. SelectPeopleTools,Security,UserProfiles,DeleteForgottenPasswordHint.
2. Enterthespecificcodeforthehintorperformasearchforit.
3. OntheDeleteForgotMyPasswordHintpage,selecttheappropriatehint.
4. ClickDelete.

SettingUptheForgottenPasswordSite
PeopleSoftrecommendssettingupasitespecificallydesignedforuserswhohaveforgottentheirpasswords.This
sitewouldrequirenopasswordtoenter,butprovidesaccessonlytotheforgottenpasswordpages.
To setup a forgotten password site:

1. SetupaseparatePIAsiteonyourwebserver.
2. Setupadirectconnectiontothesite,asinalinktheleadsrighttoit.
3. Specifyadefaultuserintheconfiguration.propertiesfileonthewebserverandenablebypasssignonsotheydon't
havetoenteranIDandpassword.
http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

11/16

21/09/2016

SettingUpUserProfiles

This"direct"usershouldhavelimitedaccess,asinonlytotheEmailNewPasswordcomponent.Usersgo
directlytoit,andgetanewpasswordmailed.

4. Placealinktothe"forgottenpassword"site,withinthepublicportionofthePeopleSoftportal,oronanotherpublic
website.
5. Notifyyourusercommunityofthelink.

RequestingNewPasswords
AccesstheForgotMyPasswordpage,whichisa"hidden"component.
Ifauserforgetsapassword,youcanopttohavethesystemrandomlygenerateanewpasswordandemailittothe
forgetfuluser.IftheAllowPasswordtobeemailedsettingisnotincludedinauser'spermissionlists,thentheycan't
haveanewpasswordmailedtothem.
Ifauserisallowedtoreceivenewpasswordsthroughemail,theycandosobycompletingthefollowingprocedure.
Beforethesystemcanemailyouanewpassword,youmusthavethefollowinginplace:
Aforgottenpasswordhint.
Anemailaddressspecifiedintheuserprofile.
Thesecurityadministratormustpermituserstohaveanewpasswordemailed.
To request a new password:

1. Ifyoucan'trememberyourpassword,clickthe"ForgottenPassword"linkonthePeopleSoftsignonpage.
2. OntheForgotMyPasswordpage,enteryourUserID.
3. Click Continue.
4. OntheEmailNewPasswordpage,makesurethesystemissettosendthenewpasswordtotheappropriateemail
address.
Iftheappropriateemailaddressdoesnotappear,contactyoursystemadministrator.Systemadministrators
mustmakesurethattheemailaddressiscorrectlyrepresentedforeachuserwhointendstousethisfeature.

5. Respondtotheuservalidationquestion.
6. ClickEmail New Password.

UsingMySystemProfile
TheMySystemProfileinterfaceenablesuserstomodifytheirownuserpreferences.Usersarenotallowedtoadd
rolestotheiruserprofile,buttheycanaddanewemailaddressorchangetheirpasswordifneeded.Userscomplete
theseselfservicesecuritytaskswiththeGeneralProfileInformationpage.

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

12/16

21/09/2016

SettingUpUserProfiles

GeneralProfileInformationpage

Password

Youhavethefollowingselfserviceoptionsrelatedtopasswords:
Changepassword.
Changeorsetupforgottenpasswordhelp.

Personalizations

Setthelanguageyouprefertoseeemailandreportsin,andspecifyapreferred
currency.
Note.Formorepersonalizationoptions,gototheMyPersonalizationspage.

Email

Addtheemailaddressthatyouwantyourworkflowroutingstobesent,aswellas
otheritems,suchasnewpasswordsandsoon.

AlternateUser

TheAlternateUseroptionsexposetheWorkflowattribute,AlternateUser,toself
service.Ifyouaresettobeonvacationorsomeothertypeoftemporaryleave,you
canaddtheUserIDofacolleaguewhoislookingafteryourtasksinyourabsence.
TheFromDateandToDateeditboxesarewhereyouspecifythedurationofyour
absence.Afterthattimehaspassed,yourroutingsautomaticallygetroutedbackto
you.

WorkflowAttributes

Thesesettingsaffecthowyoureceive"adhoc"workflowroutingsthroughyour
workflowsystem.Anemailuserreceivesnotificationsthroughemailwhilea
worklistusersreceivesnotificationsthroughworklists.Theoptionsyouchooseare
determinedbythewayworkflowissetupatyoursite.

MiscellaneousUserLinks

Ifthereareadditionalsecuritylinksthatusershaveaccessto,theyappearhere.
TheselinksarecontrolledbythelinksthatappearontheMyProfilepageinthe
Setup,SecurityLinkscomponent.

ChangingPasswords
Userscanchangetheirpasswordsbycompletingthefollowingprocedure.
To change a password

1. SelectMy System Profile.

TheactualnavigationmaydifferdependingonyourimplementationorifyouareusingthePeopleSoftportal.

2. ClickChange Password.
http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

13/16

21/09/2016

SettingUpUserProfiles

TheChangepasswordpageappears.

3. IntheCurrentPasswordeditboxenterthecurrentpassword.
4. IntheNewPasswordeditboxenterthenewpassword.
5. IntheConfirm Passwordeditbox,enteryournewpasswordagain.
6. ClickOK.

ChangingandSettingupForgottenPasswordHelp
Ifauserforgetsthesignonpassword,youhavetheoptionofemailingtheuseranew,randomlygeneratedpassword.
Ifyouopttousethisfeature,youcanalsoallowuserstoanswerapredefinedquestion,andiftheyprovidethe
correctanswer,thesystememailsthemanewpassword.
Userscanaddtheirownquestionortheycanselectfromaninventoryofquestionsthatanadministratorcreatedon
theSetup,ForgottenPasswordQuestionspage.
Note.IfyouareusingLDAPauthentication,youcan'ttakeadvantageoftheforgottenpasswordfeaturebecausethis
featurethatyou'reusingPeopleSoftauthentication,wherethepasswordisstoredwithinthePeopleSoftdatabase.
Ausercanchangeorsetuppasswordhelpbycompletingthefollowingprocedure.
To change or setup password help

1. SelectMy System Profile.

2. ClickChange or setup forgotten password help.
3. Eitheraddyourownquestion,orselectaquestionfromapredefinedsetofquestions.
4. Entertheappropriateresponsetothequestionyouselectedorcreated.
5. ClickOK.

WorkingWithUserProfileOptions
Thefollowingtopicsdescribetheoptionsavailableforuserprofiles.

UserProfileTypes
WhendeployingyourapplicationstotheInternet,youhavethepotentialtogeneratethousandsofdifferentuser
profiles.Insomesituations,itmaybenecessarytoaggregateyouruserprofilesinacategoricalfashion.Forinstance,
havingIDTypesenablesyoutohaveEmployeeIDnumbersbeginningat1aswellasCustomerIDnumbers
beginningat1.
UserProfileTypesalsoprovideameanstolinkUserProfileswithdatastoredinapplicationspecificrecords.
PeopleSoftapplicationsneedthislinkmostlyforselfservicetransactions.Forexample,youwantanemployeetosee
theirbenefitsonly,oryouwantacustomertoviewandpaytheirownbills.CustomerID,EmployeeID,andsoonare
thekeysfortheapplicationdata.UserProfileTypesenablethesystemtofindthe"right"IDbasedontheuserprofile.
Thesystemneedsthevaluebecausethere'snoguaranteethatPersonalDataandVendorContactdatawon'thave
thesamekeyfield.BecausethePersonalDataandVendorcontactdataresidesindifferentrecords,there'snoedit
thatpreventsthetworecordsfromhavingthesamekey.
PeopleSoftdeliversthefollowingprofiletypes.
ID Type

Description

BID

Bidder

CNT

CustomerContact

CST

Customer

EJA

ExternalJobApplicant

EMP

Employee

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

14/16

21/09/2016

SettingUpUserProfiles

NON

None

ORG

OrganizationID

PER

Person(CRM)

VND

Vendor

SelectPeopleTools,Security,SecurityObjects,UserProfileTypes.

UserProfileTypespage

IDType

TheIDTypeistheabbreviatedformtheprofiletypename.

Description

TheDescriptioneditboxenablesyoutoaddanintuitivenameforaprofiletype.
ThisisthevaluethatappearsontheIDPageintheUserProfilescomponent.You
havea30characterlimit.

Enabled?

Youdisableandenableaprofiletypebyclickingthischeckbox.Onceenabled,you
canassignittouserprofiles.Ifitisdisabledthenitdoesnotappearinthedrop
downlistontheIDpageforuserprofiles.
Note.Don'tenabletheIDtypeuntilthefieldsandtablesintheFieldInformation
sectionhavebeendefinedandbuiltwithApplicationDesigner.

SequenceNumber

ThisoptionisusedbytheSetDescriptionfunction.OntheUserProfiles,IDpage
youcanclickonaSetDescriptionlinktogeneratetheUserDescriptionbasedon
thevaluesintheDescriptionFieldNamefortheusertypesassignedtotheuser.
TheSequenceNumberdetermineswhichusertypetousewhentheuseris
assignedtomultipleusertypes.TheUserDescriptionissettothevalueinthe
DescriptionFieldnameoftheusertypewiththelowestsequencenumberandnon
blankvalue.Forexample,ifauserisassignedtousertypesofEmployee(seqno
1)andCustomerContact(seqno3),theDescriptionwouldbesetto
PERSONAL_DATA.NAME,unlessitisblank.IfPERSONAL_DATA.NAMEis
blank,theDescriptionwouldbesettoCONTACT.NAME1.
Note.Forusertypeswithmultiplefields,thesystemusestheDescription
Fieldnamecorrespondingtothelastfield.Forexample,theCustomerContactuser
typehastwofields:SETIDandCONTACT_ID.TheSetUserDescriptionfunction
usestheDescriptionFieldnameCONTACT.NAME1correspondingtothelastfield,
CONTACT_ID.

Description(Long)

TheDescriptioneditboxprovidesanopportunitytoprovidedetailsaboutagiven
profiletype.Youhavea250characterlimit.

FieldInformation

ThefieldsyouselectenabletheUserProfilecomponenttopromptforanIDvalue
whenyouselectatypeontheIDpage.Let'ssaytheuserpicks"Employee"from
theIDpage.Inthiscase,thesystemneedstoknowthevalidIDvaluestoprompt
theuserwith.TheEditTablecolumnspecifiestherecord,theFieldNamecolumn
specifiesthefield.YoucanspecifymultiplefieldsiftheIDhasmultiplekeys,asin
whenthekeysforCustomerinformationareCustomerIDandSETID.

ProfileDeleteTablestoSkip
http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

15/16

21/09/2016

SettingUpUserProfiles

Therearemanyoccasionswhenyouneedtodeleteauserprofilefromyoursystem.Forinstance,perhapsan
employeeretiresoranemployeeleavestheorganization.Regardlessofthesituation,youdon'twanttokeepthe
unnecessaryuserdatainyoursystem.It'sagoodideatopurgeyoursystemofobsoleteuserdata,suchaspersonal
queries,toreclaimspacefornewuserdata.ThisprocesstargetsalltablesthatarekeyedbyUserID.
However,inthecaseofanemployee,youmaynotwanttokeeptheirpageorsignonaccessinformationinthe
system,butyoumightbeinterestedinkeepinguserdatastoredinanaudittablethattrackschangesmadetovital
companydata.Youmayneedtocheckthatinformationafewmonthslaterasyouyoumightdiscoversome
interestingfinancialallocations,andifso,you'llwanttoknowwho'sresponsible.
Important!Keepinmindthattheautomatedprocessofdeletingauserprofiledeleteseveryrowofdatainyour
systemassociatedwithaparticularuserprofile.Youwanttomakesurethatanyinformationyoumightneedinthe
futureissafe.
Ifthereareanytablesthatstoredataassociatedwithuserprofilesthatyouwanttopreserve,addarowtotheBypass
Tablepage.ThenyouselecteitherPeopleToolssecuritytablesorPeopleSoftapplicationsecuritytablesfromthe
Record(Table)Namedropdownlist.
Security

http://notes02.ntc.edu/servunits/isit/PS8_peoplebooks/eng/psbooks/tsec/book.htm

Copyright19882002PeopleSoft,Inc.AllRightsReserved.

16/16