Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

REST Connector: How to hide sensitive information from logs and provisioning comments

yogesh2
Regular Contributor II
Regular Contributor II

I'm using REST connector to generate TAP via Azure Graph API but the tap gets printed in logs and in provisioning comments, this is a sensitive string (equivalent to password) so I want it not to do so.

Is there a way to mask/hide this string or even the entire API response in the logs?

I have tried setting showlogs to false in the ConfigJSON but even with that the TAP is visible in logs and task comments (see screenshots at the bottom)

// ConfigJSON
{
	"showLogs": false,
	"connectionTimeoutConfig": {
		"connectionTimeout": 10,
		"readTimeout": 3,
		"retryWait": 6,
		"retryCount": 5
	}
}

Logs (temporaryAccessPass is visible in plain text😞

yogesh2_0-1723370309254.png

Task's provisioning comments (temporaryAccessPass and entire API response is visible😞

yogesh2_1-1723370617906.png

 

9 REPLIES 9

rushikeshvartak
All-Star
All-Star

Provisioning comments section is not configurable you need to raise idea ticket.

You can try below things

  • configJSON - showlogs false 
  • in JSON - showResponse false
  • Global Configuration - Sensitive Data Variables To Be Masked 

All configuration have no relation with provisioning comments but you can try.


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

yogesh2
Regular Contributor II
Regular Contributor II

Thanks for suggestions, I already have showlogs false in configJSON, and when I addded "showResponse": false to the create account JSON then I am getting this error:

yogesh2_0-1723391969051.png

It does hide the response in provisioning comments, and it seems that the response is not just from me but is hidden from Saviynt itself; i.e. I'm not able to pass variables from one call to next. I did not check whether the response is hidden in the logs or not as this configuration breaks entire use case anyways.

The global config setting seems to be working only on connectionJSON not on createaccountjson and it only hides variables not something from response. So no luck there either.

yogesh2_1-1723392393798.png

I guess, I'll have to create an idea.

yogesh2
Regular Contributor II
Regular Contributor II

Try removing showResponse line


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

yogesh2
Regular Contributor II
Regular Contributor II

I did not have this line initially when I made the post

It will be enhancement 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NM
Honored Contributor II
Honored Contributor II

Hi @yogesh2 , a limitation only .. you can hide the prov comment if it is coming in postman response.

yogesh2
Regular Contributor II
Regular Contributor II

I don't understand

stalluri
Valued Contributor II
Valued Contributor II

@yogesh2 

Can you share your Json here.


Best Regards,
Sam Talluri
If you find this a helpful response, kindly consider selecting Accept As Solution and clicking on the kudos button.