and more in a single search tool across platforms. Read the announcement here. |
Hello,We are intergating Azure AD with Saviynt. By following Azure AD Saviynt documentation Azure AD team has given required permissions to service user, yet Remove Access (AADGroups) is not happening.AADGroup":{"headers":null,"message":{"error":{"co...
Is there any difference in application provisioning if Request Option under Entitlement Type is selected as Drop Down( single ), Radio or Table.Steps to Navigate:Admin - Identity Repository - Security system - Endpoints - Select any endpoint - click...
Hello Everyone,As per our project requirement, we are integrating the Azure Ad application to Saviynt via Azure AD connector. At the moment we are performing only the "assign access & remove access" operation here.I have used the below JSONS to assig...
:"Failure","errors":[{"status":"BES-7013","message":"Application Record Not Found With Name : ${endpoints.endpointname}" Saviynt fails bind the variables in add access json when new account and add access is raised a single request.New account tasks ...
Hello, i want to prevent a technical rule to work for potential duplicate, below my use case :i have a technical rule that creates AD Account for new created users (from the create user form) based on the worker type.When i create a potential duplic...
Hello,While trying to import users from the REST App and using MODIFYUSERDATAJSON, I want to join the accounts table like:"ADDITIONALTABLES": {"USERS": "SELECT username, customproperty31, manager FROM USERS","ACCOUNTS": "SELECT name, customproperty14...
Hi Team,I have requested a SAV role through ARS in Saviynt using SAV4SAV connector. The tasks were generated but when I run WS retry job, I am getting error like below.{"auditDetails":{"call1":[{"headers":null,"statusCode":404,"description":null,"sta...
Hi Team,We have one application where we have different entitlement types. On the ARS page we have two entitlement types - job role and security context. The requirement is entitlements of security context should only be visible after the selection ...
Hello,We have a batch process to assign entitlement to account via Saviynt REST API {{url}}/ECM/{{path}}/assignAccountToEntitlementAfter API execution done, the entitlement is assigned to the account and can be validated via Saviynt Admin console > e...
Hi Everyone,I need to fetch using API entitlement data that has been added to a particular role but I'm unable to find anything like that. Can someone help me with this?Note: I can fetch entitlelment data from any endpoint using {{url}}/ECM/api/getEn...
Hello,My team is currently working to integrate with a Microsoft m365 instance. We are looking into how to connect and are looking for out of the box connectors. Is there a connector built into Saviynt for m365?Thanks in advance!
Hi team,Have mysql application backed with one table accounts, for accounts created (same in saviynt documentation)1.created new user in EIC (user name= pghotika_2Nov)2.raised request with this application3.running provisioning JOBcreateAccount JSON...
Hi @saviynt Team, Request you to look into this on priority. Attaching the connection JSON : Connection JSON for application . { "authentications": { "acctAuth": { "authType": "BasicWithAccessToken", "url": "https:///ws/rest/service/v1/login", "httpM...
Hi Team,created one mysql app based on Tutorial for Creating a Custom Connector using the Saviynt Connector Framework (saviyntcloud.com)using below JSON for provisioning{"query": ["insert into mysql_saviynt_dev_db.accounts(name, firstname, lastname )...
Hello Team,I want to use two different workflows for a single application based on entitlement type.I have added them in entitlement types and tried to submit the request.Workflow 1:Workflow 2:It is only calculating the securitysystem workflow for al...
Hi,Do you know if it is possible to assign PD Profiles to users using an SAP connector?PD Profiles are structural authorizations that are not visible in SU01. They define authorizations in the organizational structure like org units. You can view the...
Hi,We have a requirement where any end-user will be able to submit the Modify/Enable/Disable/Password Reset Request for Service Accounts. Currently only service account owner can raise these request for his/her own service account.If the above mentio...
Hello Team we have some min values in the SOD ruleset whose values are dynamically picked as they have * in them but that does not seem to be working in Saviynt as expected For example --> There are field values such as BUKRS and for this field we c...
Hi,I'm trying to wrap my head around the usage of end dates for entitlements in context of SAP and SAP roles.We enabled "Ask For Start Date End Date While Request" for sap role entitlement type. If we request some SAP role, it gets correctly provisio...
I am trying to create SAP account from saviynt. I am trying to update Valid To field in SAP with value "31.12.9999". I am using below JSON but its getting failed. How can I add? {"ADDRESS": {"LASTNAME": "${user.lastname}","FIRSTNAME": "${user.firstna...
SYSTEMNAME column in ecmimportjob table limited to 255 characters but we can include more than 255 characters in the job trigger in the system list.Can you please let us if System supports/works if we have more than 255 characters in the job trigger?...
Hi,We are onboarding an integration between Saviynt and SuccessFactors to manage group access in SuccessFactors.During testing we have noticed that when an entitlement is removed through ARS request and the provisioning job is run, that the account s...
Hello I am working on configuring Zoom connector but have few doubts before proceeding further that I would like to clear:1. In the guide it is stated that for Reconciliation and Managing Access the objects in scope are (Group, Roles), I want to unde...
Hello Team,I need to discontinue a task using provisioning(WSretry) can we do that?If yes, Can you suggest me the steps._____________________________________________________________________________________________I have use case where I need to use d...
Hi, I need to assign an AD group to users as per the value of a customproperty in user's profile.I know this can be achieved easily with a technical rule but there is a combination of over 40 different AD groups available and I feel that it would cre...
Hello,We have a requirement where we want to create an account through Provisioning Task along with one Ticket (in SNOW or Jira) so that application team do additional activity on account to fulfil the creation process.If we have such requirement, ca...
Hello, We are facing the following error when trying to provision account in AD. Error while creating account in AD - No signature of method: com.saviynt.ecm.services.SaviyntCommonUtilityService.generatePswd() is applicable for argument types: (null,...
I am trying to create a custom sav role that will allow users to request on behalf of any user in the organization but only for a particular endpoint. (Role1)For other endpoints users can raise access requests only for their immediate team members.(R...
Hi,we are trying to provision mobile phone number to SAP via SAP connector. For that purpose we added the following bit to CREATEACCOUNTJSON:"ADDTEL": {"TELEPHONE": "${user.secondaryPhone}","R_3_USER": "3"},according to docs of BAPI_USER_CREATE1, thi...
I am unable to see accounts for REST connector..this is my importAccountEntJSON{"accountParams": {"connection": "acctAuth","processingType": "SequentialAndIterative","statusAndThresholdConfig": {"statusColumn": "customproperty26","activeStatus": ["tr...
Hi,in SAP we have an UPDATEACCOUNTJSON like this:{"ADDRESS": {"LASTNAME": "${user.lastname}","FIRSTNAME": "${user.firstname}","BUILDING_P": "${user.customproperty10}","TEL1_NUMBR": "${user.phonenumber}","DEPARTMENT": "${user.departmentname}","E_MAIL"...
For the D365 F&O connector the connector guide does not have any details regarding additional configuration that seems to be required for the ootb "Adding an organization for a Security role" feature.The AddAccessJSON config for the "Organizations" (...
A customer is managing device feature access such as USB port access via policies based on AAD Group membership. The AAD Group members are Device objects instead of typical user accounts. The user account and device registration/association are manag...
