SNC mapping mechanism will be working out in the Saviynt

[PreethiPandi]

Hi Team,

FF id will be added into FF user's SNC string in user master data, so that  user can see both ids (Own id & requested FF id).

Is that possible to add SNC in FIREFIGHTERID_GRANT_ACCESS_JSON

below is json:

{ "call": [ { "name": "call1",
"connection": "acctAuth",
"url": "https:",
"httpMethod": "POST",
"httpParams": "{\"NewPassword\" : \"${randomPassword.startsWith('?')?randomPassword.replaceFirst('?','0'):randomPassword.startsWith('!')?randomPassword.replaceFirst('!','1'):randomPassword}\"}",
"httpHeaders": { "Authorization": "${access_token}" },
"httpContentType": "application/json",
"successResponses":
{ "statusCode": [ 201, 200, 204 ] } } ] }

We want to add:

"SNC": {
    "PNAME": "p:${accountName}"
  },

Kindly check and help us on this.

Regards,

Preethi

[SB]

Can you elaborate or rephrase the requirement. I am not sure i understood the ask.

[PreethiPandi]

Hi @SB ,

We are using FIREFIGHTERID_GRANT_ACCESS_JSON and we want to Add SNC to the  FIREFIGHTERID_GRANT_ACCESS_JSON

Regards,

Preethi

[SB]

Is SNC a value stored in User's CP or is an account that the user has. 

[PreethiPandi]

Hi @SB 

If we are creating new account for the user it should add in accounts.

Regards,

Preethi

[SB]

I am assuming a task for Create account is getting generated. And once the provisioning is done, the account is not getting visible under the user's profile.

Please confirm if the above is correct. You can also refer to the below REST documentation (Examples for JSON Construction and Developers Handbook) for different JSON formats and JSON construction.

https://docs.saviyntcloud.com/bundle/REST-v23x/page/Content/Examples-for-JSON-Construction.htm 

[Dorota_P]

Hi,

please see below description of what we want to achieve.

FF account is let's say FFS4H_DBDB, user who raises request is 123457 with account name AB1234.

When we created new account for user( so regular dialog account) , saviynt would add in account AB1234 SNC ( object PNAME in SAP) AB1234@defaultdomain 

Currently when we are granting access to Emergency FF account for users, saviynt is sending only the password to FF account. What we want to achieve here is to enable people to use SSO for FF accounts as well. This can be achieved by adding proper SNC of FF account level in SAP.

When user 123457 raises request for FF session, SNC name for FFS4H_DBDB should be updated with user's pname, which is AB1234@defaultdomain . it After the session is completed, it should be wiped out.

[This message has been edited by moderator to remove sensitive info from hyperlinked text]

[PreethiPandi]

Hi Team,

Any update, Can you please help us on this.

Regards,

Preethi

[SB]

Hi @PreethiPandi Are you able to set the SNC value in SAP from postman. Can you share the postman export of this call.

[PreethiPandi]

Hi @SB ,

We don't have any Postman collection for setting the SNC value in SAP .

Regards,
Preethi

[SB]

Can you set one up from postman. We will need to see if the value does get update from postman to ensure it can work from Saviynt too.

[PreethiPandi]

Hi @SB ,

We don't have any collection to set up the values in Postman.

Regards,
Preethi

[PreethiPandi]

Hi Team,

Any update, Can you please help us on this.

Regards,

Preethi

[jitendra_sharma]

Hello Sahil,

Please find below Saviynt documents , it is mentioned under provisioning section to enable SNC  for FF request. FIREFIGHTERID_GRANT_ACCESS_JSON json is given in the document but it does not work.

{
"SNC":
{
"GUIFLAG": "U",
"PNAME": "p:${user?.username?.toLowerCase()}@ABC1.AD.ABC.COM"
}
}
Our observation that it does not matter you keep json in FIREFIGHTERID_GRANT_ACCESS_JSON connection level field or not it always perform reset password on SAP system. 

Granting or Revoking FireFighter ID Access
Configuring the Integration for Provisioning Accounts and Access (saviyntcloud.com)

Can we have short call to show you issue and discuss more about it.

Thanks.

Jitendra 

[PreethiPandi]

Hi Team,

Any update, Can you please help us on this.

Regards,

Preethi