Password control compliance for passwords stored in PeopleSoft?

We have an initiative to implement a solution for compliance where we need to an automated a solution resetting PS database passwords on a designated frequency.  FSCM authentication is primarily through AD which enforces password controls.  What's  the most common recommendation for managing PeopleSoft database passwords vs AD passwords?  Also is there anyway to tell how a signed user authenticated?

My understanding of the authentication sequence is, on sign in PeopleSoft tries to validate against the PSOPRDFN, if unsuccessful and LDAP setup is configured, the next step is to authenticate against AD.  If that's accurate is there a way or has anyone modified the sign on process to go first to or just to AD?