Workday Context Diagram with IdMgmt focus

A

1

Workday

Workday creates basic employee bio/demo record with emplid in PeopleSoft

Real-time

To keep a single repository of PEOPLE data for emplids and duplicate avoidance.

2

PeopleSoft

PeopleSoft sends employee emplid and student employees to Workday.

Batch or Real-time

To keep a single repository of PEOPLE data for emplids and duplicate avoidance.

3

Active Directory

IdMgmt system for the entire campus. Authenticates various campus groups giving then appropriate access to campus services and resources.

Batch or Real-time

Active Directory is a non-public directory supporting enterprise applications within the institution. It is very Microsoft specific and is required for some MS applications such as Exchange. It also serves a function referred to as a network operations system (NOS) function. It is designed to manage network objects such as desktops, printers, servers, files.

Undergraduate students, graduate/professional students, and alumni/trustee data is sent to IdMgmt system. The department structure defined within PeopleSoft is currently submitted to the IdMgmt system and HR rules are applied for forming groups. This will be replaced with Workday's organizational model and must be re-designed.

4

SunOne Directory

Batch

SunOne is the public facing directory (i.e. anonymous attributes are available to any individual and application). It is the repository that serves as the backend for the University white pages (People Search). It also supports the authorization function for PeopleSoft. When a user authenticates to PeopleSoft a lookup is performed in the SunOne directory to retrieve the emplid. This emplid is then used to map the session to the data the user is permitted to access according to PS internal tables.

5

NetId Admin

Batch and Real-time

6

NetId Admin

Batch and Real-time

B

1

Active Directory

IdMgmt system for the entire campus. Authenticates various campus groups giving then appropriate access to campus services and resources.

Batch or Real-time

Active Directory is a non-public directory supporting enterprise applications within the institution. It is very Microsoft specific and is required for some MS applications such as Exchange. It also serves a function referred to as a network operations system (NOS) function. It is designed to manage network objects such as desktops, printers, servers, files. 

Employees data must be sent to IdMgmt system. The department structure defined within PeopleSoft must be replaced by the organizational model defined by Workday. A re-definition of the rules for groups will need to be defined by Workday/HR. The "department" model will need to be remediated based on the organizational model with Workday.

4

SunOne Directory

Batch

SunOne is the public facing directory (i.e. anonymous attributes are available to any individual and application). It is the repository that serves as the backend for the University white pages (People Search). It also supports the authorization function for PeopleSoft. When a user authenticates to PeopleSoft a lookup is performed in the SunOne directory to retrieve the emplid. This emplid is then used to map the session to the data the user is permitted to access according to PS internal tables.

5

NetId Admin

Batch and Real-time

6

NetId Admin

Batch and Real-time

C

1

Active Directory

Data is propagated to downstream applications.

Batch

2

NetId Admin

Data is propagated to downstream applications.

Batch