PeopleTools 8.61 - Implementing Passwordless Authentication (Nafath) Before PS_TOKEN Creation

Hello Everyone,

I am looking for guidance from anyone who has implemented a passwordless authentication mechanism as the primary authentication method in PeopleSoft.

Environment:

• PeopleTools 8.61
• LDAP authentication currently in use
• Requirement is to authenticate users using an external identity provider (Nafath) instead of PeopleSoft/LDAP credentials.
• User enters only National ID. No password is collected.

Authentication Flow Required:

1. User enters National ID on the PeopleSoft sign-in page.
2. REST Call #1 generates an authentication challenge and returns:
   • Transaction ID
   • Challenge Number
3. Challenge Number must be displayed to the user.
4. User approves the request in a mobile application.
5. REST Call #2 checks approval status.