and more in a single search tool across platforms. Read the announcement here. |
Hi Team,Currently i have implemented extending validity of service account for AD using dynamic attribute with below json in update account and it is working fine. I want to add a condition where validity can be extended for 6 months if update accoun...
Hi All, Is there a way to do pagination in Saviynt even if the API response has no details of the current page? The API response body has no details of the current page. Also, the API headers have no page or next URL details. What should we pass i...
Hi Team,We have a requirement where we have 2 type of accounts(Primary, external) for a single endpoint. So the, requirement is whenever an update rule is called like department name is updated and as per the technical rule if condition matches user...
Hi All,We have so many files uploaded for various functionalities.Is there way to delete Files from File Directory -> Data Files ? thanks,suresh
Hi All,We have one use case when User Identity will create in Source of Truth then Source of Truth will send notification To Saviynt based on that notification user import job need to be run automatically after receiving notification . Here the sou...
This does not happen to all users but for many users we get the below error when enabling their AD accounts. SAV-Error while enabling account,[LDAP: error code 53 - 00002077: SvcErr: DSID-031903D2, problem 5003 (WILL_NOT_PERFORM), data 0 ] SAV-Erro...
Hello,I am getting the error during the 2nd call in the below Addaccessjson. Please let me know if there is anything wrong here. I am trying if else in the httpparams based on the response from the first call. {"call": [{"name": "Roles","connection"...
Hi Team, We are using DB connector and user's have special characters in the firstname and lastname . Target do not accept the special characters and while sending from Saviynt special characters has to be removed/replaced and send the data.Ex:'allen...
Is there a reference or guide to ES Tile icon customizations? I am able to locate locate the Dashboard documentation here: Working with Dashboards (saviyntcloud.com)The document covers customizations of Dashboard tiles and provides a list of colors a...
Hello, Requirement: We need to allow users to use their AD's adm account to login to Saviynt via SSO and assign admin permissions to such identities only. If the same user logs in to Saviynt with his/her regular account then it should show up the end...
Binding variable ${userEmail} doesn't work in EIC v23.6.We have analytics where there are records for each user. The mail doesn't go out to the users when we use ${userEmail} binding variable.This was working fine in 5.5 SP 3.8 and stopped working wh...
Hello to all,I am having problems to disable accounts in AD, I have configured DISABLEACCOUNTJSON and the task is created correctly as attached in the screenshots, but when I run the JOB WSRETRYJOB, it seems that it does not take them into account.DI...
We're importing the users from workday as HR source of truth. SAVUPDATEDATE is set to the value when the record was created, however, recently a few users were terminated, however, their SAVUPDATEDATE is not updated, or at least user listing screen/U...
I have a requirement to create a birthright rule for new hires. The conditions should be looking for the employeetype and statues key country and should only trigger 20 days before there hire date. I'm assuming to meet this I have to use an Advance Q...
Hello, When I call REST API to get authorize token. it return HTTP 405 Not Allowed. But I am member of ROLE_ADMIN and it worked before. see screen shot below. I am sure the username and password is correct as I can login to Admin UI.Help please! By ...
Building a form and have a dropdown as the initial group. Looking to hide all other fields, and selectively show them based on choice in the dropdown. I setup the parent-child relationship, and have SHOW/HIDE working once they make a choice in the dr...
Hello,We have a use case where we wish to push a specific value into a custom property to accounts from an analytics query, the attribute is then synced into the target system.Simplified: Users targeted by analytics should push value '1' into custom...
Hi, We have a REST based connection, that uses SSL certificate to make any kind of calls(GET, POST etc). We have used the below mentioned path in Connection Json and we were able to make calls to the server. However, when we use same "KeyFilePath" in...
We are trying to import an AD object of type foreignSecurityPrincipal.These are our attempts to bring this object type as accounts or entitlements :Account Import :Object filter :(|(&(objectCategory=person)(objectClass=user))(&(objectCategory=contain...
Please let me know answer the following questions about the Saviynt build-in account (SaviyntSupportAgent and systemadmin):1. I understand that SaviyntSupportAgent is the account used in the support ticket to log in to the EIC and troubleshoot. Is my...
We are trying to write a preprocessor for user import via csv or via workday.The requirement is if the users's cp40 is xyz company then his cp20 should be @xyz.com else if his cp40 is abc systems then his cp20 should be @abccom.com and so on.Below is...
I have a requirement to trigger update account task for an endpoint only if the naming convention of the account doesn't start with admin.* via update rules. Let's say the user has two accounts in the endpoint A - user1 and admin.user1. When the user...
Hello everyone,I have a question about how to access the data of a dataset in the User Import Preprocessor.Use case: When we import the users from the HR system we have to store in the customproperty20 of the user the code of the continent he belongs...
Hi,our customer upgraded to Saviynt version 23.5 in May 2023. Since then an ArchivalJob has started to archive records from userlogin_access table when the records are more than 90 days old. This is working mostly fine, but it doesn't archive everyth...
Hello,We are facing an issue while creating the username using the username generation rule. Below is the advanced configuration we are usingCONCAT(LOWER(LEFT(users.firstname, 1)),LOWER(LEFT(users.middlename, 1)),LOWER(LEFT(users.lastname, 1)),LPAD(F...
Hello Everyone We have a requirement to implement SOD which is calculated simply based on entitlements requestedFor example Entitlement 1 AND Entitlement 2 will cause conflict #1 (Risk name). Similarly there are more Conflicts which may contain two ...
I have utilised all the User Custom Property attributes (until CP65) for various integrations. I would like to extend it more since we have a lot of transformed values coming up for various provisioning. What's the process to do it?How should we defi...
I am creating generation emal rule.I put all the old addresses and usernames in the dataset(follow picture), and prepend 'old' to emailaddress if the user's username is in attribute2 (username) of the dataset.Otherwise, just username@domain. For exam...
I want to create an emailgeneration rule along the following requirements.1. Connect user.lastname and user.firstname with concat.concat(user.lastname, user.localname, @domain)2. If looking at dataset (name=oldemail), set displayname if there is a du...
Hello, I am currently implementing the username generation rule with the following use case:- The username is the concatenation between the 7 first lastname's characters and the first firstname character. If the lastname contains less than 7 characte...
Hi, We have a new application service that we would like to integrate with Saviynt. For our customer, we have private VPC in place to access on-prem applications. In the connector Json, we do not want to use FQDN, but instead, use DNS of the server. ...
I am looking for capability in Saviynt that can monitor Azure AD users and flag ones that were not created by Saviynt. Does anyone know if Saviynt has the capability and if so where it exists.
Hello Team,We have integrated ServiceNow with Saviynt as a managed application, Configured the ImportAccountEntJSON to import roles, groups, and accounts; however, Saviynt failed to import few Account-Groups and Account-Role Associations.Please see ...
Hi,I have created one connected app with (Connection/SS/endpoint) and disconnected app with only connection. I have added connected and disconnected app connections one security system as below.Once the any user request to this endpoint it has to cre...
I need one help related to a dynamic attribute created under endpoint level. The data type is selected as SQL ENUM but when the user is trying to raise the access request through ARS his account name "e_tnitime" is not populating in the dynamic attri...
Hello Experts,When account gets deleted and account status changes to Suspended from the import service, Saviynt updates the accountname to <accountName> - Deleted On - YYYY-mm-DD HH:MM (asdfss-Deleted On - 2023-11-0 23:22)Is there any configuration ...
Hi We are having an issue with access token in connection JSON, when we have hardcoded the token values the importaccountentJSON works fine. However we are not able to get the token in connection JSON.1. the API doesn't have any authentication type m...
Hi,We have a requirement to customize the Role Users page where we only need to show the list of users part of the role and hide the "Add User" button. This is required in our project so that role owners are not allowed to add users to roles directly...
Hello,we are decommissioning (removing) many of our SAP endpoints. They have 1000's of accounts. Before we disable the endpoints, security systems and connectors we need to remove all active accounts.The usual method of running a V2 Analytic to Depro...
Hi, We have a requirement that when a service account reaches it's 90 days period of inactiveness (after being disabled), A remove Account task should trigger and this will delete the service account from the Disabled Users OU in AD.To trigger the re...
We have a requirement to do cleanup of accounts. Could you please help with the ways how saviynt performs cleanup of accounts from Backend. Is it done via query of file upload? Also, can the risks involved with cleanup be mentioned?
We are configuring our environments for SSO using the Single Sign - On option in the UI as we were instructed by our TAM.Everything is configured in Azure as the IdP along with the federated certificate XML being downloaded and added to Saviynt for t...
Hi Team,Use Case : Update the user profile label and validate the rule will trigger or not.Below steps is performed :1. Updated customproperty2 label with name 'NetSuite_Client'2. Tried to triggered the rule but rule is not triggered.Note : Rule was...
Hi All,We have usecase to generate the samaccount from saviynt below is the logic for samaccount-If user lastname containing more than four character or equal to four character then it will take first four character from lastname and then add one and...
Hello,We were looking into the Block any request due to existing request/task in-flight button that can be enabled at the endpoint level. Based on the observations, once enabled, it prevents end user from submitting additional requests from the same ...
Hi, We are using SNOW based ticketing system. Below is the flow and requirement:1. User request required access and account in ARS Tab, Once request approved SNOW create a ticket to the target application team.2. Application team act on the ticket an...
Dear community,Our project is not going to use the property "Comment" located in User Details tab. This is a built-in field with string format.We would like to release this property to be reused in a new requirement. Is there any way to change its LA...
Hi,Is it possible make user visibility in user list based on user source. It is required for the support team. For example: Scenario is -SAPHR support team should be able to see only those users which are from that source. Can it be done in Sav role...
Dear community, We have created an user in Saviynt with the aim to be used with API to change user passwords. This user has been set the password by an admin account through API and we have set the localauthenabled and passwordexpired properties with...
We are trying to use Update User Request to do name changes on users. Currently only Email, System Username, and Secondary Email are able to be changed. When we try to use it to change just the Username field, it doesn't do anything. We raised a supp...
