REST Connector: How to hide sensitive information from logs and provisioning comments

[yogesh2]

I'm using REST connector to generate TAP via Azure Graph API but the tap gets printed in logs and in provisioning comments, this is a sensitive string (equivalent to password) so I want it not to do so.

Is there a way to mask/hide this string or even the entire API response in the logs?

I have tried setting showlogs to false in the ConfigJSON but even with that the TAP is visible in logs and task comments (see screenshots at the bottom)

// ConfigJSON
{
	"showLogs": false,
	"connectionTimeoutConfig": {
		"connectionTimeout": 10,
		"readTimeout": 3,
		"retryWait": 6,
		"retryCount": 5
	}
}

Logs (temporaryAccessPass is visible in plain text😞

Task's provisioning comments (temporaryAccessPass and entire API response is visible😞

[rushikeshvartak]

Provisioning comments section is not configurable you need to raise idea ticket.

You can try below things

• configJSON - showlogs false 
• in JSON - showResponse false
• Global Configuration - Sensitive Data Variables To Be Masked 

All configuration have no relation with provisioning comments but you can try.

[yogesh2]

Thanks for suggestions, I already have showlogs false in configJSON, and when I addded "showResponse": false to the create account JSON then I am getting this error:

It does hide the response in provisioning comments, and it seems that the response is not just from me but is hidden from Saviynt itself; i.e. I'm not able to pass variables from one call to next. I did not check whether the response is hidden in the logs or not as this configuration breaks entire use case anyways.

The global config setting seems to be working only on connectionJSON not on createaccountjson and it only hides variables not something from response. So no luck there either.

I guess, I'll have to create an idea.

[yogesh2]

created https://ideas.saviynt.com/ideas/EIC-I-6082

[rushikeshvartak]

Try removing showResponse line

[yogesh2]

I did not have this line initially when I made the post

[rushikeshvartak]

It will be enhancement 

[NM]

Hi @yogesh2 , a limitation only .. you can hide the prov comment if it is coming in postman response.

[yogesh2]

I don't understand

[stalluri]

@yogesh2 

Can you share your Json here.