LDAP question - Authenticate against ldap but use peoplesoft for authorization

Hi All,

I tried reading through the peoplebook peopletools section on enable ldap and I cannot seem to figure out if above configuration is possible. It seems like I would need to grab AD group attributes and map them to peoplesoft roles.

We would like to use our enterprise LDAP to authenticate a user but then use the roles that this user already has defined in peoplesoft. Is something like this possible or do we need those roles from peoplesoft defined in the ldap?

thanks!