and more in a single search tool across platforms. Read the announcement here. |
Scenario : We have a set of endpoints with logical (user friendly) entitlements - they represent application roles.Users can request them via ACR process. We have hundreds of them. To map these user friendly entitlements to "real" entitlements impor...
Hello,I am testing the "Action for Out of Band Access Detection" function on my AD endpoint.Is it possible to activate this function on a specific scope ? (on some AD groups for example)Thanks for your help ! Regards,
We notice that Saviynt users can Modify Access on an AD Endpoint and see the current group membership (entitlements) while other users that are also part of the same AD groups do not see their current group membership when using the Modify Access opt...
Hello!I am experiencing an issue in my CreateAccountJSON where my successResponses are not being recognized.The account still gets provisioned in the target system, but this is the error we get in the Provisioning Comments of the subject user's pendi...
We have a requirement to integrate the MasterControl application with Saviynt, which is REST API based. One point to notice is that the application's API supports passing the parameter in the body of the request. Therefore, we constructed our connect...
There are 1000 groups and i'd like to configure 3 apps using only 180 groups by endpoints filter option.180 groups has the same naming convention like RBAC_AESIR_%A endpoint : - "RBAC_AESIR_TEST1_%"B endpoint :- "RBAC_AESIR_TEST2_%" C endpoint :- Thi...
Hi,Can we use regex in PreProcessor to check the one of the column in the User import?Requirement is to validate if the email following Regular Expression(^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,6}$). If not user should be skipped. Thanks,Haris...
Greetings,I am working on a REST connection - BASIC Authorization.I am not able to import users/accounts and getting error from the recon job."Failed to import one or more object types. Checkthe Job Log Details page for more information."Can't attach...
Hii,In STATUS_THRESHOLD_CONFIG I pass true for the following feild"includeExistingInActiveAccounts": true,After pass true, I see multiple duplicate entry of entitlements in user account.I want to remove those duplicate entry of entitlement.. How I ca...
After the one click disable is selected for the user and the remove account task is getting generated but the task is not getting completed successfully. Getting the below error:{"auditDetails":{"call1":[{"headers":null,"message":"","statusCode":null...
Hello Team,I have a use case where i need to pass entitlement_value selected in the ARS request in the REST call. I got to know from other forum discussions that we cannot access entitlement objects in create account json.Hence, i'm trying to use add...
Hello,Is there a way to configure explicit proxy for outbound connectors ? mainly Azure AD and Workday.I couldn't find any documentation related.Thanks
hi Team, Could you please confirm that the OOTB coupa RemoveAccessJSON works without any modifications? The reason why I am asking is that the logic for Role does not appear correct to me. Thanks in advance. https://docs.saviyntcloud.com/bundle/Coupa...
Hello everyone,I'm looking for a way to extract the string "Active" from the "ObjectStatus" key in the following JSON response and map it to the Saviynt attribute in ImportAccountJson. responseText:[{"Name":"ABCD.Aravind","UserName":"Aravind","Displa...
Hi All,I'm encountering an issue while customizing the AAD Account and Group Import. Below are the API responses:{"@odata.context": "https://graph.microsoft.com/v1.0/$metadata#groups","@odata.nextLink": "https://graph.microsoft.com/v1.0/groups?$filte...
Hi I was wondering if there is any doc that lists out the specific levels of access needed for a servicenow service account for managing servicenow as a managed app? I don't see anything about necessary permissions in this doc https://docs.saviyntclo...
Does anyone happen to have a sample connectionJson for Servicenow using basic auth they could share? There is this in the doc{"authentications": {"acctAuth": {"authType": "Basic","url": "https://<domain name>/api/tbng4/custom_service_catalog_api/cat_...
H All,Do you know what is the best way to be immediately alerted when one of the integration with one the downstream or upstream system is failing.Thanks,H.
We have a requirement where we want to give managers an option to request (provision or de-provision) Active Directory and/or Exchange application access for contingent workforce reporting to them. In some scenarios, Managers will be de-provisioning ...
Hi, Can someone help here we are trying to provision Azure AD accounts but it was failing with call1":{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"}} we are unable to debug the exact issue here. But I was able to...
Hi,We are using SFTP connector to get the userimport file to Saviynt DataFiles location - we are using the relative paths for different user files. But while running the SchemaImport, what should be the filename in SAV file?I have tried the below as ...
Hi Team,We have couple of Dynamic Attribute fields in ARS for for Salesforce of type String where user may or may not provide any information as a string as it not mandatory.If there some value it works fine but if it blank or empty it gives error:"2...
Hello Everyone,We have a requirement to derived some user's attributes from the manager's attributes.We have implemented a UpdateAccountJSON on a SAV4SAV connector that is triggered through a user update rule.The Update Account task on Sav4Sav is wel...
Hi Team,I am using REST connector for an application integration. If I pass the token which I get in postman response, it's working till 5min and then it's failing after the token expires. However, I need to pass the token for every 5 minsHere is my ...
We have a requirement to provision accounts and groups to RedHat LDAP directory. When a request is submitted, the requirement is to do the following:a) Create the LDAP accountb) Create an LDAP group with the same name as the accountc) Assign that new...
Hi All,I have Created a workday SOAP connection and added following SOAP Writeback JSON, it is giving error as Invalid username or password , connection is successful, I tried using '+user.email+' instead of ${user.email} for each of variables , and ...
I am working on integrating Saviynt with Azure using the REST Connector. While I have successfully imported Azure roles, I am encountering challenges in importing and managing Azure Eligible Roles.My goal is to not only import these roles into Saviyn...
Hi Team,As per Saviynt documentation, For on-prem cyberArk we need to use SCIM connection and for cloud cyberArk we should use REST. Anyone did cloud integration with SCIM connector?We see AD groups are not reconciled through REST that are added to a...
We have a requirement to sync attributes to a SCIM endpoint using PATCH with replace / add operation for existing users.If one or more existing attributes of a user changes, then UPDATEACCOUNT JSON must only have those attributes to sync with the tar...
HiFacing issue while deleting a Duo account.FYI...Account creation and updation is working fine.Following is the configuration and error message pulled from logs. Please let me know in case you require any further information.DisableAccountJSON{"call...
Hi Team,We have a requirement we are trying to convert account name in base 64 and then pass that string in update and delete account url in one rest connector. How can we convert the account name in base 64 after importing accounts in saviynt and ca...
Hii,I want the implement the use case if request is raise from ARS then bypass the ticketcreation process and if request is raise through birthright rule or user update rule then only ritm will be generate,Kindly suggest the sample json.Currently I u...
Hi Team, Facing a wierd situation while provisioning and deprovisioning a certain entitlement using a REST OOTB where the I can see the values of the httpParams in the logs fine, however, do not see the tasks getting completed in Saviynt. The pendin...
I am using the Box connector in OOTB to bring in three Entitlements: Groups/Folder/Files. However, I cannot import entitlement types other than Groups.CUSTOM_CONFIG_JSON is set to:{"IMPORT_FILES_AND_FOLDERS": "YES","IMPORT_GROUPS": "YES"}I've also tr...
XML Payload sent to Workday for update user must contain the username/password used in the connection. I am able to provide the connection password but it doesn't like the username.Excerpt of payload: <wsse:Username>' + USERNAME + '</wsse:Username> ...
We are seeing behaviour on the Saviynt for Saviynt endpoint where if a users SAVROLE is removed in the UI then when you perform an import using the default Saviynt for Saviynt Account and Access import jobs the account that is correlated to the user ...
The connection JSON which i am using for Azure AD integration the Access Token is expiring very frequently. The connection is taken from the Azure AD integration guide only. The access Token is working for one day and next day when i perform the grou...
Hi, I am getting a 415 response when using an updating SOAP RAAS user import config from the ultipro saviynt docs. The content-type value looks to be correct based on UKG RAAS documentation. Any suggestions would be appreciated: { "CONNECTION1": "L...
We are using REST connector for account and access import. We noticed the deleted entitlements from target is still showing as Active in Saviynt. We have added "disableDeletedEntitlements": "true" but it did not help. We also tried to map a status an...
We're managing Entra ID group memberships from an IGA solution (Saviynt). With non-mail enabled groups we can do it with Graph API. With mail-enabled groups that are synced from on-prem AD we can use PowerShell to manage the memberships. But customer...
Hi Team,We are using an OOTB WINCONNECTOR connection type to connect to a Windows IIS server from Saviynt. We have followed the prerequisite steps to deploy the Saviynt App on the IIS Server using the following documentation site: Understanding the I...
Hi Team,I want to invoke 2 APIS in REST connection json. First API call response will be used in second API to generate token. Kindly share example. NOTE: ITS NOT A REFRESH TOKEN, So cant use refresh JSON Example.NOTE: ITS NOT FOR ACCOUNT IMPORT.
I have a REST connector and I want to treat two different responses to AddAccessJSON as successful:200 status codeOR the specific message in the response example from Postman: { "error": { "code": "openaccess.general.invalidrequestitem", ...
Hello Team,We have a REST connection for user import from successfactor. Need to check few mandatory attributes for NULL and EMPTY string.the MODIFYUSERDATAJSON is not working. in some condition its not importing any record, some condition its import...
Hi , I have same issue posted in https://forums.saviynt.com/t5/identity-governance/adsi-connector-ssl-setup/m-p/82106 , created a self-signed certificate on the ADSI agent and imported it into the Saviynt EIC,Need help on- configuration of SSL betwee...
hi Team,i want to trim the attribute value during account import using a soap connector. Let me know if anyone has tried that. I'm sharing your sample accoumtimportxml file for you to look over. I wanted the location to have values like CA,TX kind. I...
Hello Team,We are onboarding 2 instances of Oracle EBS using the OOTB connection and the DB connection for provisioning. The application team tested on their end and the account set up for the connection is working as expected. However, when we initi...
Hi,I want to implement the bypass the sav4sav rest api call for task which generated through rules.If request raise through ars or task.source = 'REQUEST' for sav4sav connection then correct the rest api call else error throw.please suggest it is pos...
Hi, We are working on REST based application. The application uses MFA for authentication for login. I am not sure how to put that in the JSON to connect to the system. Has anyone worked on the scenario?
Hi,Can we use the entitlement attributes of a user in CreateAccountJSON for a AD connector?for example:User is assigned with an entitlement(costcenter1). While creating AD account for that user, can we get this value user.costcenter1.customproperty1 ...
