and more in a single search tool across platforms. Read the announcement here. |
Hi Everyone, I have Entitlement type as Groups and showing below as in ARS form.. How can we store these entitlements associated under this Entitlement type in Account request. Requirement: we want to capture entitlements in new account request(task ...
Hi,1. We opened a request for Account modification in Saviynt and in this request we added an entitlement to the existing set of entitlements and submitted the request. At this point, submitted request's status was In Progress.2. We then logged in a...
Hello , At our client, we have a 3 level workflow already in place (Manager --> Business Owner --> CISO) depending on the criticality of the entitlement.We have now implemented SOD's and mitigation controls and added additional level of approval at t...
Appreciate any help on this;I am trying to filter out the requestable Entitlements based on the selection of account. What is the binding variable to be used in this caseI am usingev.customproperty1=(select customproperty1 from Accounts where name=($...
Is there a way we can customize 'user has access' note/message in select application screen when end users are trying to submit access request? This message is deceptive when user tries to request access to application.
Hi,I know Saviynt functions support API. Can I call Saviynt API such as Access Request API from the Saviynt rules or tasks? If it can, can you show me how?ThanksMark
Hi Team, We have a use case to skip ticket creation if the task source is request. We tried different JSON configurations to fail service ticket creation. Here are the different Create Ticket JSON configurations we have tried Option -1 – Create Ticke...
Hello,We seem to have ran into a bug regarding the "Ask For Start Date End Date While Request" option in the entitlement type while requesting access.We set the "Create Task if Start date less than" option in global configuration to 15 minutes.Exampl...
Hi,We have an application where user can have only one entitlement . We have roles created for the application and added the entitlement. Now when an existing user is rasing the request for a new role (which has entitlements) it is getting provision...
Greetings everyone,Our ongoing effort involves the integration of ServiceNow and Saviynt IGA. Within this integration, we are making use of the Saviynt IGA plugin to facilitate user synchronization. We have some inquiries pertaining to the Saviynt IG...
Hi,I am trying to execute the job type Application Data import and using the following payload.{ "jobgroup": "data", "triggername": "Unisource_User_Accounts_Full_Import", "jobname": "SapImportJob", "system": "ActiveDirectory - Corp – unis...
Hi Team,I need assistance with restricting ownership transfer for service accounts. Currently users can select from (users and usergroups), we want to restrict only to users and Users should not be allowed to select system accounts or admin accounts....
Hi Team, We are currently using 5.5 version of Saviynt and we are getting upgraded to EIC 24.X, we have a requirement in 5.5 was that we have rename the Manager Service Account Tile which was done. The issue is that in EIC 24.x we are unable to renam...
Hi everyone, I currently struggle with a new issue and I'm quite sure at one point it worked. When a new "Create User Request" is created, somebody needs to approve / decline that request, based on the specified workflow. When I click "Approve" or "R...
Hi,I am new in the Saviynt product and have a question. Does Saviynt allow external API script such as postman to request an Access Request?ThanksMark
Hi everyone, I'm working on implementing our ARS. After now being able to have Logical Apps I'm now wondering, if it is possible to automatically display "Existing Accounts".Setup: 1 Security System for Entra ID (1 Endpoint)1 Security System Logical ...
Hi,Is there a way to disallow special characters in Account Name rule at the endpoint level ?Best Regards,Varun
Hi,I am trying to update end date for an entitlement and submit the request. Update Access End Date Task is getting created but it is not getting completed immediately. I have instant provisioning enabled on that endpoint. Add and Remove access are w...
Hi,I have the below requirement on access request1. Provide immediate access to users for a specific period of timeI was thinking about Emergency Roles, I created an emergency role and was able to add and revoke access for a specific period of time.2...
Hi,I followed the below steps to create a dynamic attribute and use it in workflow but i am getting an error while submitting the requestUse-Case: Approve/reject the request based on the entitlements the user has.Navigate to Global Config and enable ...
Hi all,Does Gen 2 / Neo experience enable configuring recommendations of applications ?
Hi,We have a requirement to prevent end user from deleting their AD account before deleting their Exchange account. Since exchange account is dependent on the user's AD account, we do not want the users to delete their AD account first.FYI - End user...
HiEven after having ROLE_ADMIN sav role access, i am not able to see other users when i click on "Request access for others" tile. It only displays my username. This was not the case in last week but today all of my colleagues facing same issue. Plea...
Hi Team,We are using the Saviynt app for ServiceNow to raise the requests. The process is as follows:1- The user raises the request in ServiceNow. The request is assigned to the manager.2- In the SNOW request detail, we see the request is generated i...
Hello All,We have configured Parent Child Entitlement for AD using Endpoint Filter. We have SOD rules to detect the violation and when we remediate the violation 2 task are created of type remove access for Parent and Child entitlement. This is worki...
Hi Team,I have set the Maximum Time Frame as 2 for Emergency Access Role and raising request using createrequest API and sending startDate(date and time) and endDate(date and time) and the difference between startdata and enddate not more than 2 hour...
Hi,I'm working on a REST based integration where user provisioning / de-provisioning is working as expected.When it comes to access provisioning / de-provisioning, I'm facing a bit of a challenge, given the nature of the entitlements.Target Roles are...
Hello,I would like to automatically fill the default value of a dynamic attribute according to the value of a previous attribute in ARS (to associate a label with its value) .In my case, I have two dynamic attributes: currency_iso_code_label which co...
I pass the Approval field is approved in createticketjson but error in getting ritm number.."{\"opened_by\":\"${if(task.requestKey!=null){com.saviynt.ecm.identitywarehouse.domain.Users.get(task?.requestedBy).customproperty1}else{'svc_syt01dev'}}\",\"...
When I use the "Managing Email and Templates" Documentation examples to create Certification deep links in the email templates, I am landing on the Operations Not Allowed page. The hyperlink in email matches the page itself when I navigate manually ...
Hi,In the Create/update user request form validation for date field, we need to compare user start date with the current date. But the user's start date is in EST and the current date reference variable 'currentdate' available for validations is in U...
User wanna apply a service account on Google App.On the Access Request page, the account name is default like the user name and it is not allowed to edit. but on request page on Okta, user is allowed to input the account name on the page. How to cha...
Hi everyone, I currentl yhave the issue, that our users can't request any Entitlements for a new Application (Entra ID based).Whenever I request a new entitlement the error message in the screenshot appears. Do you have an idea, where to look what is...
Hello,Is there any documentation that indicates the behavior around self approve not being allowed for owners and groups? Is this a default behavior or is there a setting that enforces it?Thanks!
Hi Team, I just wanted to check if there is any number constraint on the application logo's when displaying endpoint to users for selection and submission of a request.We have more than 30 endpoints for which we need to have application logos differe...
Hi,I have Role Admin SAV role. While performing on access request, I am getting an error message while discontinuing the request. Following is the error message: "Ensure that you have the permission to access this. Otherwise, contact the administrato...
Hello everyone, We want people to ask a role where there are 2 entitlements of endpoint1 and 1 entitlement of endpoint2, with the role Saviynt creates also new accounts for people who don't have an account on these endpoints.But the problem here is t...
Hi everyone, I checked out the other forum posts regarding this, like [1] or [2]. Unfortunately, there is no way to upload additional images under Admin > Settings > User Interface Branding Configuration.Any hint how I can achieve that? Cheers [1] 24...
Team, I just wanted to check if it's possible to add a application logo when displaying endpoint to users for selection and submission of a request.For example, there is an Azure application integrated with Saviynt. Can we add the Azure logo to the e...
Hi,I need to use some user account attributes in the CreateTicketJSON.In the documentation, I seen that AccountsObj are available but I don’t find the syntax to use.I tried : ${account.customproperty1}, ${task?.accountKey?.customproperty1} but it doe...
Hi Team,We are trying to handle a case where we want to route a request approval to Rank 2 owner if rank 1 owner does not approve request in 7 days from placing the request.Did anyone work on similar case like this? can you please let us know how can...
Use case 1:We noticed that when the Request-Option for Entitlement Type is set to None under Endpoint, any entitlement that is assigned as part of Birthright rules via Enterprise Roles is not being assigned (add access/account tasks are not created ...
Hi,We have the below process for assigning sap accesses.1. User is assigned with birthrights(Entitlement1 & Entitlement2). When these 2 entitlements are provisioned to SAP, the end date is set to 999912312. For example, If the same user requests for ...
I have issue with one dynamic attribute in which I us a query like the one below :SELECT CONCAT(LASTNAME,"somecharset, ", FIRSTNAME," (", IF(${customDynamicAttribute1} = 'Somevalue 1' AND ${customDynamicAttribute2} like 'XX%','XX-Some Value 1', ...
Hello All,We have a requirement when a entitlement (Licenses) is requested from Saviynt we have to update one attribute in AD say (extensionattribute as "Guest"). This set of entitlement is belonging to AD and we have created separate endpoint for th...
Hello Team Configured SOD for AzureAD Entitlements in SOD Tab. SOD is evaluating for entitlements/roles for that endpoint if endpoint is in New UI.But SOD is not evaluating for entitlements/roles for that same endpoint if endpoint is in classic UI.An...
Hi Folks,During Deprovisioning/Removal of account, The request history is not holding any existing values of dynamic attributes(Which was passed during new account). The configurations for the UI are Neon Experience is enabled.Please find the attache...
We have a case where we want to send Send a single email notification for multiple role requests only if the owners of different roles are identical.Is it possible to achieve the goal of sending a single email notification for multiple role requests ...
Hello All,We have a requirement to create AD account for the users (which is the privileged account say EA / DA /SA account) apart from their personal account. This EA / DA/ SA will be requested from Access Request page and provisioned in AD once aft...
Hello everyone,Is it possible to customize the ARS Request page? I would like to display a custom property on the user profile during the request process at step 1. I have configured the Global settings to "Show User attribute while request," but the...
