and more in a single search tool across platforms. Read the announcement here. |
Hi,I'm trying to upload accounts to our system through Schema FileBased uploads (.SAV file in to .CSV file). This is due to I'm trying to implement disconnected applications and there is no possibility to connect directly through API. Is there any do...
In the "Config for Available Entitlement in Service Account" field, the current value is...{"Service ID":"ev.status=1 and ev.customproperty31=1","CS Shared":"ev.status=1 and ev.customproperty31=1","DC Shared":"ev.status=1 and ev.customproperty31=1","...
I am trying to allow for statuskey updates in user update form.I have a termination parent attribute. When the termination is chosen, it updates enddate with today's date, and should set statuskey to 0 to complete the term.If I choose another User Co...
hello, there is an issue with Identity Term Date. When a user is disabled using one click disable, this Term date feature populates and termination comments are added. Now, when the same user is rehired and activated, saviynt disables the user the fo...
Hello, I've created an Rest connector to perform saviynt API call and modify identity data the importUserJson is working fine : i've filtered it first on my test identity : {"connection":"userAuth","url":"https://domain.saviyntcloud.com/ECM/api/v5...
Hello,I am trying to send an email containing the comment added by the manager when requesting access to an application.Here:How can I access the comment in the email template?Kind regards,Ivan
Hi Team,When we enable the option of "update access end date" and then submit a request by extending the date, does it follow a workflow for approval and if yes do we need to define a separate one or follow the security system one?Thanks
Hi, coming to the community for advice to ask if they've seen this before.Issue: New Account tasks created where an Inactive Account already exists on the EndpointWe have an 'AD' type Connection to our OpenLDAP directory. We have Disabled/made Inacti...
HiWe have noticed a scenario where when after running access import for database connector entitlement owners are getting removed. What could be the possible solution for this?Entitlement owners are added via CSV import..Thanks
Hi,We have an existing dataset with 16k rows and being used for computing data for dynamic attributes in application access request form.We have request update this existing dataset with new mappings, so tried using csv upload with column names, howe...
Hi Team,We have a use case where we want to show the entitlement when checkbox DA has been ticked by the end user. I tried 1,true, yes as the values in "config for requestable entitlement" but nothing works.has anyone dealt with same sort of scenario...
Use case:We need that when a manager, which, is a manager of internal employee and external users goes to request access for Others, it only shows him the applications available for that specific user, for example, if the user is an internal employee...
Hi TeamWe have the requirement from client to onboard 2000+ apps. We want to understand how should we add the applications in prod so that there is no impact on performance.Currently client is having 300 applications in production. Can you please sha...
Does Saviynt allow role mining support with AI functionalities?
Hi,Does Saviynt provide a capability to manage techincal users and accounts from SAP applications? For ex : users that are used to communicate within SAP applications. If yes , what is the way and is there any documentation around that?
Hi.Custom attribute on entitlement value is running out since we are too many attribute we need to store.Is there any way to store multi-values in one customproperty? I'm thinking below ways to achieve this requirement for now. Downstream items that ...
hiPlease share the Saviynt database table structure, how the tables are sharing the keys
I am trying to change the user association or assign a user for a large number of accounts associated with an endpoint via CSV. What is the proper attribute in the Upload Preview to select and which user attribute does it look for? I have uploaded th...
Hi Team,We need to offboard users based on different timezones.We are getting end date with offset value as 2024-02-15T 00:00:00 -4:00 from source but it's not consumed correctly by saviynt.In Saviynt End date atribute is reflecting as 2024-02-15 00:...
How and where do we mention or deal with termination of users in various time zones?Ex. One of the user is on IST timezone and other is on EST timezone, how can write all this and where can we mention this?
Hello Team,Can someone let me know how can we set Owner on terminate atrribute from Auth Source or Schema Import in Saviynt?We are in stage where users and associated managers are already onboarded from an HR source.We are looking for an option via a...
Is anyone using any forms of AD group self-service management for business users? We'd like to provide some business users the ability to manage their own AD groups, but we are finding the workflow planning to be quite complicated.We are considering ...
Hello,I am importing SAP users from a FM and when they are loaded into Saviynt I get this error:2024-03-19T13:50:39+01:00-ecm-worker-services.ImportSAvDataUserService-quartzScheduler_Worker-10-5kvhg-DEBUG-Proceed to Import for records - > [00020482, ...
Hello all,I have workday source of truth. i am only reading from workday (it is a one way connection). I imported all the users with the attriutes required.i noticed an issue while testing, my client declared an offboarding for a user he set terminat...
Hi Team,one query, as per my understanding for each task for an application Saviynt will be generating a separate access token for all the task as we don't store access token. (Making connection with application to get the token)eg - if we have 5 tas...
Hi Team,Currently as per the use case we have to generate a separate token for update and create operation for each. user.so, what we are doing we are using call 1 to pass the details and get the access/Bearer token which we are passing in header of ...
Hi Team,We are planning to onboard an application and the authentication process a little different for the application.To perform any sort of operation on the application we first need to pass the information in "token" endpoint and then pass the ge...
Hello,We have a compliance use case where we need to provide read only access to Connections, Users, Security Systems, and other functions, but also need the user to be able to execute reports.We have tried the following:Action: Copy Role_Admin and e...
I am getting the above error when trying to request for an account in the target application which is a disconnectedapplication. The status of the account 'PRAJEN2' is 'Manually Suspended' and since we have the account name rule set for unique accoun...
Hi Team,We want audit trail of who had updated the dataset, is there a way to find this. As we are not able to find this in the console
Hello,Currently, after the user manager certification is locked for account verification, we are only seeing the "remove account" task getting created. Based on the scheduled job, tasks are getting closed. However, our business requirement is not to ...
Hi,If we are having first column as empty value in the import file, it is failing to import the record. Is it normal behaviour ? or is it a bug??Attached the import file for referenceBest regards,Harish
Hi Team, I have two different call for import account from Target. in the 1st call we are importing id, email and in the next call will get all information. How we can achieve this ? ImportAccountEntJSON : { "accountParams": { "connection": "ac...
Hi Team, We want below User Upload request pin to home page Some where near to this options, Is it possible ? and How we can change the label ex. I want to change 'Start an Access Request' to 'Start an Access Request for Existing Users'. Let me kn...
Hi Team, We have an requirement where we have to implement two level access certification. 1st End user will review their own access and will take action once he lock the certificate then User Manager should trigger based on end user certification. I...
We have a requirement to include a basic entitlement automatically, every time someone is requesting other entitlement from ARS.Let say application is AP1. AP1 have 150 entitlements. EV1 is the basic entitlement which everyone should have access to.N...
Hi All,1. Is there any way to Add multiple other to Entitlements. Currently Other entailments can be added to only one entitlement.2. Can we bring ADD New Entitlement Map at entitlements page under action, instead of single entitlement.
Hi Team,We are onboarding an application where for each call (get, create, update) we have to get a separate token and pass it in the next call.In importaccountentjson .. i am trying to make two calls .. call1 which will get the access token .. call ...
There are 1000 groups and i'd like to configure 3 apps using only 180 groups by endpoints filter option.180 groups has the same naming convention like RBAC_AESIR_%A endpoint : - "RBAC_AESIR_TEST1_%"B endpoint :- "RBAC_AESIR_TEST2_%" C endpoint :- Thi...
Hi Team, I have attached a screenshot from execution trail, where we can see there are 31,000+ failed rules. So can we have an extract of this report for further analysis via analytics as there is no option in UI to get this extract. [This messa...
Hi,Can we use regex in PreProcessor to check the one of the column in the User import?Requirement is to validate if the email following Regular Expression(^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,6}$). If not user should be skipped. Thanks,Haris...
Hello everyone,I'm looking for a way to extract the string "Active" from the "ObjectStatus" key in the following JSON response and map it to the Saviynt attribute in ImportAccountJson. responseText:[{"Name":"ABCD.Aravind","UserName":"Aravind","Displa...
Hi, we're seeing the following error when using the data analyzer. When investigating the logs I see the following items that appear to be relevant:Can you help us resolve this fix?
Hello,In Saviynt version 23.5, we were able to select attributes required as a condition in a user update rule.In version 24.1, not all attributes (for example the attribute "Department Name") seem to be selectable anymore. Is there a way to get the ...
We have a requirement where we want to give managers an option to request (provision or de-provision) Active Directory and/or Exchange application access for contingent workforce reporting to them. In some scenarios, Managers will be de-provisioning ...
Hi Team,We need to set minimum time frame for time-based entitlement, what variable can we use?for maxtimeframhrs we do I have it. but we require for minimum too. Thanks
Hi,We are using SFTP connector to get the userimport file to Saviynt DataFiles location - we are using the relative paths for different user files. But while running the SchemaImport, what should be the filename in SAV file?I have tried the below as ...
I can see the Rule that was run under User History but I cannot find the tasks under Pending or Completed Task. What could be an issue and how to resolve it?
I am working on integrating Saviynt with Azure using the REST Connector. While I have successfully imported Azure roles, I am encountering challenges in importing and managing Azure Eligible Roles.My goal is to not only import these roles into Saviyn...
Hello , At our client, we have a 3 level workflow already in place (Manager --> Business Owner --> CISO) depending on the criticality of the entitlement.We have now implemented SOD's and mitigation controls and added additional level of approval at t...
