and more in a single search tool across platforms. Read the announcement here. |
We have a requirement to show rejected entitlement in the email template in case of partial approvals.For instance, when a user submits a request for 5 entitlements, and out of those, 2 are approved while 3 are rejected, only one email about the appr...
Hi, I have a requirement where the Start date and end date for the roles on the application request forms needs to populated on the account attributes: 'valid from' and 'valid through'. I have referred the documentation and configured the start date ...
I am trying to have the email template use the Endpoint Display Name in the subject and body of the email that goes out to the approvers rather than the endpoint name.The email template currently uses ${endpoint} - this works and it pulls the endpoin...
Hi Team, In 23 version, we are observing an issue that, whenever enterprise role request is submitted for to remove the role, Upon completion of the remove access tasks for the entitlements associated to the role ,Role is not getting removed from the...
We have a scenario where in user customproperties (46 and 47) we store comma-separated country codes (eg: DZ,AO,AI) and region (EMEA,AP). We mapped the entitlements in the same way, added country codes and region values in the entitlement customprope...
Hi All,We have a disconnected application with multiple dynamic attributes (Time Zone, Default Language etc.). A user can modify their values in the application's access request form. When a user modify one of these dynamic attributes values and subm...
Hi, We have a requirement where the first level approval need to be skipped if the requestor is member of certain user group. Is it possible to check query in If ELSE condition?Appreciate any pointers/insights to achieve this use case. Thanks
Requirement - Only call center agents must be allowed to request PingSSO desktop entitlement without a business justification. All other "non-call center agents" users must provide a business justification while requesting this entitlement.While requ...
Hii,We have integrate saviynt app in service now application.1. From Service Now we raise a create account request for the saviynt application. We select the workflow engine as a saviynt in the service now connection.2. For commercial center applicat...
Hello - We've run into the following degraded user experience while testing 24.1 upgrade. I submitted this as a bug, but received push back. Is this behavior "expected" in the new 24.1 UI? The request role for self flow includes an unnecessary sele...
Hi all,Is there any way we can enable users to search beneficiaries by their Job ID while requesting for others in the ARS page? If yes, please let me know the method.
Hi Team,I need a solution on removing the entitlement type from couple of entitlements and map them to a different entitlement type from the same endpoint.Currently on v23.10, we do not have ADHOC job to manually update the entitlement type from the ...
Hi All,We have a multi-level workflow (manager + usergroup1 + usergroup2). I recall that when an approver approves the request at a level, and the request is assigned to them again at another level, then the request is auto-approved for them (if we d...
Hi,Working on Create Account. I have created an account for a user based on the request where user is having access to an application. But the account status is coming as manually provisioned, not as an active. The user is having different account wh...
Hi,I have configured an Emergency Role, I was able to request access for the emergency role. Now I am trying to extend the end date for the request but when i go to Manage My Access and try to Modify, I do not have the ability to update end date. but...
Hello, I am trying to add a test for checking if an entitlement owner exists.That is not the owner of the entitlement selected in the ARS but the owner of a specific entitlement which is the combinaison of a site (dynamic attribute) and a profileI a...
Hi,I have a use case where I am onboarding a new user in Saviynt with a future dated start date.I am provisioning the user to Active Directory with some birthright access using a technical rule. The account and access is provisioned upon user creatio...
Here is the usecase -During New Account creation we have few DA in parent - child combination. Based on Parent attribute selection Child attributes will get pre-fill. Both Parent and Child are of type SQL ENUM.There is a requirement that if Parent at...
Hello Team,I am seeking guidance on the recommended approach for restricting user selection to just two owners when creating or modifying Service Accounts using the ARS(Manage Service Accounts) form in Saviynt 23.6. Specifically, I am looking to des...
I created an endpoint using the endpoint filter option in Azure AD connection. When I submit a request to have the Azure AD group added via the endpoint, it does not provision the access. However, when I request for the same azure ad group via the Az...
Team,We are integrating few applications using disconnected approach where we are expecting the Application fulfillment team to come to saviynt and complete the tasks manually. To do so we added the respective application fulfillment team members to ...
Hi Saviynt support team,Is it feasible to configure different ServiceNow approval workflow for each Saviynt application? When going through the Saviynt Integration with ServiceNow guide, https://docs.saviyntcloud.com/bundle/SNOW-Saviynt-Integration-v...
Hi All, There is a workflow where it will go for 3 level of approval (Manager and Group Owner and Entitlement Owner approvals) and we we using 3 if else conditions wheather it should go for these approvals or not. Level 1 : Manager approval (We menti...
Hi team,The Workflow is stuck in Manager level Approval for Role requests even if the manager approves it.Below is the configuration and its parallel Workflow.Please let me know what I'm missing.Regards,Gopi.
Hi All,We have two dynamic attributes: DA1, DA2.DA2 can have value either '1' or '0'. We want that if the value in DA2 is '1' then HIDE DA1 else show DA1.I have configured it as below:- Type of DA2 is ENUM with possible values 0,1- Made DA2 as the pa...
Hi All,Is there any way to populate the 'Account Name' in a dynamic attribute while raising a request?.We are integrating GitHub with Saviynt. Here, creating an account through Saviynt implies adding the GitHub user account to the organization.Now, s...
Hi,I am trying to do a postman call for Adding Emergency role to user and I am getting 405 -Method not allowed error.I am not sure what is wrong with the json. I even tried with requesttype as '1'. It did not work. Please let me know if there is some...
Hello Team,We would like to add a placeholder in the request form, but despite adding a description field with the attribute type set to "string", the placeholder is not showing up in the form. Could you please assist in resolving this issue?
Hello All,We have a use case of below- 1. From GUI we created new account request for an endpoint EDP1 with entitlement as E1. Requested was successfully created with two pending tasks New Account and Add Access for E1 and user account was provision...
We have a requirement in our environment to use different approval workflows depending on the Endpoints for AD connected applications.For example, some will use manager and resource owner approval while others require to have access approval on the e...
Use case: Create a user using Saviynt's 'Create User' request form and save dates like Start date and end date with attribute type as Date (Date Picker) along with other required user attributes. Once created, update user attributes from 'Update User...
Hello everyone, After updating our tenant to 24.1 we are seeing two options in the ARS page; Application and Role.This option 'Role' is visibile even though we don't have any roles to request access. Is it normal or a bug? thanks,Nazli
Hi, We have a requirement where we want to use consult request feature which can be seen ARS (Home) --> Pending Approvals --> View Request --> Three Dots --> ConsultWe tried looking for config/setup of the same on Documentation portal and here as wel...
Team,We are integrating few applications using disconnected approach where we are expecting the Application fulfillment team to come to saviynt and complete the tasks manually. To do so we added the respective application fulfillment team members to ...
Scenario: A user enters an ARS request for an Enterprise Role. When selecting the start date, there is also the option to choose the end date. Once the end date for the requested role is reached, a system task is not generated for the deprovisioning ...
The change password for service accounts tile in ARS : this will reset the passwords for service accounts in AD connectors , but by default it will force the password to be changed again at AD end. The password change forced option can be controlled ...
Hi All ,I have a requirement to provision a default, hardcoded value to the attribute 'printer' in SAP during the SAP account creation process. Can you please help me understand the exact SAP attribute to configure in the CreateAccountJSON ?
Hi Team,Can you suggest approach to send notification after completion of tasks, not from global configuration and end-point level. Is there any option to send from report then please share the sample query and how to trigger notification and have to...
So, I have a usecase where when a user requests entitlements through ARS which is also an SOD violation an email should be sent to the SOD owner to remediate any entitlements so that there would be no violation of SOD. My issue is I created an email ...
Hi Forum,I am referring to the below link for AAD Group Creation, it mentioned I can create group via Saviynt on below path: Navigate to > Home and select > Manage Groups > Create AAD Group.https://docs.saviyntcloud.com/bundle/EIC-User-v24x/page/Con...
Once I submit a request from the ARS page, It's not allowing me to discontinue the request. Shows don't you have the required permissions. I'm having OOTB ROLE_ADMIN sav role don't know which permission Should I enable to get the permission. Can an...
Hello Team,We have a requirement where we need to hide this enterprise role from ARS but it should be visible in selection of access page. Is there any possible way to doThis should be visible while the user is selecting the access as it is mandatory...
We have created 8 entitlements and have assigned under an endpoint.All the provisioning and recon jobs have runs successfully and the entitlements are also visible under "Entitlements" tab in endpoint details, even the request option is configured as...
We just upgraded to 23.12 and low and medium risk items are requiring business justification. Before this version, this was not the case. Has anyone else experienced this? Is there a new config option or is this a bug?
Hello,UsecaseEnd-user requests an access/role/entitlement for an application and submitsThe manager approves the request and can add additional attachment or provide extra inputs (like form field) that will be included in the provisioning tasks (Crea...
Hi,Having assigned the below features to a Manager SAV Role, users can create a delegation accordingly.However, I would like them to be able to edit any upcoming or active delegation, as per need.Let's say that :A delegation is active and ends on 1st...
Hi Team,Can you please get the two links within below updated with correct links. Clicking on the two links results in error as below.Managing Access Using Neo (saviyntcloud.com) Thanks,Mohit Arora
Hi Everyone,When we navigate to Request Home page in the Create New Role tile when we click on "Create New Role" .In that UI form displayed we are working on a requirement where we want to display Role Type Field as text field when we set Custom prop...
Hi Team,Could you please advice how the account correlation rule will be designed if i have the following parameters:Accountname: JOSEFINA, 96786,NY57196 are types of accountname and cannot be modified.Username is like: PR12345, NY12345, IL12345, CR...
In our solution, we have different processes for approval. Some of these processes have multiple levels of approval for access requests and enterprise roles.Since some approvers can be either groups or individuals, we need to use the provided variabl...
