and more in a single search tool across platforms. Read the announcement here. |
Saviynt provided connectionJSON for SAP Successfactors connector uses https://test.successfactors.com/oauth/idp for generating SAML assertion.SAP Successfactors is discontinuing /oauth/idp API to generate SAML assertions. Is there a new recommended ...
Hi,I am trying to convert the accented characters from the lastname attribute of users to English characters using Saviynt OOTB functionality, i.e., FN_EIC_REPLACE(STRING_TO_BE_REPLACED,null), but it keeps throwing an error: "Illegal mix of collation...
Hi Team, we would like to implement a logic to disable JSON in the active directory, where it checks before proceeding. However, it seems that the logic(below highlighted) is not functioning properly.The highlighted logic mentioned below is working p...
My team is looking to include disconnected applications into our quarterly access certification campaigns. Would it be possible to create a disconnected Security system and have that security system connected to multiple disconnected endpoints or doe...
I am currently using Saviynt version 24.3 and I have encountered a couple of challenges while trying to integrate Saviynt with a Windows Server for mailbox creation via PowerShell scripts.Error Handling Issue: Despite receiving a status code of 500 f...
Hi All,Below is the JSON we are using for connection JSON for Rest Connector. We are using basic authentication. We checked in postman it works fine. Please let me know what the issue in below JSON is. In logs getting 400 . In pending task error for ...
Hi I am wondering if its possible to use the OOTB Box Connector. Alot of the connection configurations look to be obsfucated by Saviynt and handled on the backend. I don't see any config fields for most operations. Specifically, I am wondering if the...
We have configured the REST connector for the Coconut application and configured a security system, an endpoint, and an application data import job to import accounts from the application.We used the following JSON:connection Json:{ "authenticatio...
Hello all,We are seeing that there is a technical rule (birthright and detective) that is not triggered when a new user is created from SAP import. As you can see the user matches the condition and the rule trail shows those attributes populated.Can ...
Hi, I need the email generation Logic for the follow use case with the help of advance query. Email Address creation logic: - a. Firstname + ‘. ‘+ lastname@domain.com Example: Firstname= John, Lastname= Doe, Email= john.doe@domain.c...
Hi Team,We would like to provision multiple group owners to AD while creating or updating the group from Saviynt.We were able to find the below code snippet from docs but looks like it didn't work properly."otherManagedBy":"${ownerAccountListMap.get(...
During an import, I am getting a datetime value in format '2024-04-30T07:00:00Z' which needs to be converted to '%m/%d/%Y' format.Is there a function we can use in Preprocessor queries (in ModifyUserJSON) for this ?
Hii,We run the access import job for service now as a account management, this job is taking to much time, why it is taking too much time,I use the following threshould_config {"statusAndThresholdConfig": {"accountThresholdValue": 12000,"correlateIna...
Hi Team,We have entitlement owner attribute in AD import{"entitlementOwnerAttribute": "managedBy",}, but owners are not getting tagged, the managedBy attribute in AD holding DN value for the owners, that is getting stored in CP15 for ents, we are us...
We have requirement to integrate RACF with EIC. I could see multiple documentations around this in documentation portal (given below). Could you please help to understand which is the recommended method in 23.11 and higher versions?https://docs.saviy...
Hi All,Can you advise if Azure AD connector alone(without rest connector) support both provisioning and reconciliation. Version: EIC v24.2 if yes, can you point me the doc URL as I see every where provisioning is with rest connector and recon through...
We are integrating crowdstrike with REST Connector For Accounts we have 2 APIs First API provides all account ids Second API provide all account information ( providing all account ids in body) For Entitlements - 2 APIs First API provides all Entitl...
Hi All,Rest Access import is failing with below error. But Account Import and Entitlement association is working fine and no issues with it. processAccountEntitlementsByAccToEntMappings try3: ""2024-04-17T19:24:08.208+00:00","ecm-worker","","null-k5z...
Hi team could you provide some example on how to add Entitlments in "Entitlement Map" during imports.I want to add entitlements in Entitlement Map below.
Hey folks,for one of our REST based application, we get getting this error "Username is not associated with AccountName" message in tasks and all the tasks are getting discontinued,This was working fine before in v5.5, we had an upgrade to 24.1 recen...
Hello,We've encountered an issue with our REST connection—it begins to fail after a few hours. Our analysis suggests that the root cause may be the connection's inability to retrieve an updated status token once the initial token expires. We also sus...
Hello, I have the Job below that is failing now i dont't know why. I use this Job to update the status attribut for external worker.The error i get :ImportUserJSON IN Saviynt For Saviynt connexion : Anyone can help please? Regards,Ray
We are connecting Oracle ERP from Saviynt IGA and creating the Oracle ERP account and assigning the responsibilities via request submission.We have done the integration with the help of generic account creation (SAVIGAUSR). We are connecting Oracle E...
I have a requirement to pass multiple entries from Saviynt to AD. I need to pass email and first name and last name to the proxy address attribute. How would the code look for multiple entries.
Hi team,We have a requirement that Saviynt should provision tasks related to personal accounts.So we set up the below logic to restrict the provision for the admin account, which is working fine.As we are expecting, Saviynt is only completing tasks f...
Hi,We have a SFTP connector, which downloads userImport file and imports users. We have a requirement to send back few attributes to SFTP location in CSV format.What could be the best practice to implement this? Best regards,Harish
Hi Team,We have a requirement where we need to populate the lastlogin date coming from the okta application to the last logon date field in Saviynt. Looking through the documentation we can see that the default place for the last login field in custo...
Hi I am trying to set up kerberos/windows authentication for a DB connection to a MySql server. I am reading through the documentation and there are a handful of operations and files that look to have to be done on the saviynt server. Is that correct...
Hello Everyone, I am trying to provision security context for oracle users , however I need to know the correct URL or the Add access json for the entitlementtype "Security Context" as I am unable to find the correct one in Saviynt documentaion and O...
We are getting following error while we establish Okta connection type. We have given import url and Authtoken.We have not selected any certificate. Let me know if any prefix has to be present while pasting authtoken 2024-04-15T17:21:23+05:30-ecm-se...
Hi everyone, I'm having a hard time understanding why we need to set up an on-prem server to manage a cloud feature (SharePoint Online) via Savinyt (SaaS). Connector Architecture (saviyntcloud.com)We would like to be able to manage access to SharePoi...
We have onboarded a new connection, security system, and endpoint for handling logical applications. The management has all worked as expected, with the exception of entitlement metadata. We have mapped the entitlement glossary to description for AD ...
Hello, We have two AD connections; one for regular user accounts and one for admin accounts. We are wanting to map the accountID of an owner on the regular AD connection to be the owner of the entitlement on the Admin AD connection. Is there a way to...
Hi,I am facing an issue mapping the authentication token in the ConnectionJSON for REST connector.The token is generated from a basic logon API using username and password.Below is the Postman response to the logon request. The token is shared in the...
Hi everyone,Is it possible to import AD groups from multiple OUs?Could it be possible by specifying in the groupSearchBaseDN multiple OUs from where Saviynt is going to start importing the AD groups and how should be the syntax to do it?For example:I...
Hi Team,Connector Type: RestVersion: v24.3JSON attached for referenceCurrent Scenario:1. In Saviynt, I submit a Request for an Application-A by adding 4 Entitlements.2. Then Saviynt creates 4 Add-Access Tasks.3. Then, after running WSRERTY job, Savi...
Hi, I want to prepend cn,name, dn with 'double underscore' and moveObjectToOU' ,with dn,moveobjecttoOU value I'm able to update the attributes for example:{"objects": [{"objectClasses": ["user"],"distinguishedName": "${account.accountID?.replace('\\'...
Hi ,We are getting names from source as for instance ( Fernoldjr. , O'connell etc.) which then creates email as in firstname.fernoldjr..com To escape the special characters (',.) below is the preprocessor I was trying however , I was getting syntax e...
Hi Team,We are currently using managedBy to retrieve owners from AD. We have two different types of IDs in AD and have two different endpoints to manage those lets call endpoint A & endpoint B. All the group owners set in AD are IDs which beloing to ...
We have a requirement wherein we want to update an attribute of the connected endpoint with pre-"@" symbol of the email ID.I tried with below syntaxes, nothing worked. Can you please suggest a right way to use substringBefore function in connection J...
Hi All,I have an AD Connector where we mentioned accountname rule & sAMAccountName to provision as - ${user.username.toLowerCase()+'admin'}And the provision of the account is working fine and the sAMAccountname also displaying like Ex: "cjackadmin". ...
Hi Team,We update the endpoint filter of AD connector with proper format. The entitlement is created prior. Then when we run the account and access import job (Single threaded) the endpoint is not created under the parent security system.Are we missi...
Hi there,We can import all accounts and entitlements in Saviynt from Active Directory but mapping between entitlement and account is not working. ACCOUNT_ATTRIBUTE[NAME::samaccountname#String, ACCOUNTID::objectguid#String, DISPLAYNAME::displayname#St...
Hi,I have requirement to pass multiple Business Units based on a single values selection using the dynamic attribute in SOAP create account JSONLike if user select Apple from the dynamic attribute then User select Role 1 should be part of Business...
Hi,We require to generate a unique 9 digit numeric number prefixed with C_ for users coming in from AD as AUTH source. What is the best practice to do this? I read some posts that mentioned the use of Register user rule and inline pre-processor. I tr...
Hi everyone,We're currently working on integrating Active Directory using the ADSI connector, and we have a requirement to populate extensionAttributes in AD. However, we've encountered an issue where the AD account is being created but fails to popu...
Hello,in the connection for Active Directory, in groupImportMapping, is it possible to add conditions to the mapping?For example, I would like to import the description from AD into entitlement_glossary in Saviynt, but only write it in Saviynt if the...
Hi All,We have a scenario where we want to disable the accounts instead of removing it from AD domain when revoke task is created via campaign.I understand that disable task won't be created but what if we use something like below -{"objects": [{"ob...
Hi, I wanted the course information to be stored in single coloumn using comma seperated values . How can I acchieve this in UserImport JSON for REST connector. {"collection": [{"Company Code": 484174,"Company Code Desc": "XYZ LTD","Employee Number...
Saviynt has a plugin for ServiceNow. It comes with few default forms to represent data for ARS requests.However the ask is to manipulate the data in representation of the form.Question 1: Filetring inactive entitlements not visible or not to display ...
