and more in a single search tool across platforms. Read the announcement here. |
Requirement:Implement Saviynt app for servicenow.Achievements:Installation of saviynt app for servicenow is done properly. All identities, accounts, entitlements and applications imported to saviynt app for servicenow.Challenge:I tried updating user ...
Hi Team,Trying to provision the Access through rest call for SAP IDM target system. It says accountID is null in debug statement and no errors. I have added all the required details in the attached pdf document. can you please help on this? When I...
Hi,We need to re-baseline only one account as this account belongs to active directory endpoint. and we do not want to re-baseline the ad endpoint itself.
Usecase: Tasks are being generated for the deleted enterprise role. After deleting the role, the role status changes to inactive. We went back to the technical rule and updated the deleted role in the object. Saviynt should automatically validate the...
Our organization has a Technical Rule that assigns the role ${user.jobDescription} whenever the user's Job Description is updated, and uses the condition advanced query a.jobDescription IS NOT NULL. This is triggered by a User Update rule that monito...
Hello Team,We have created a SAV role ROLE_MANAGER_VENDOR.I am enclosing the features assocaited with this role.This SAV role needs to be assigned to all the person who are marked as Manager for Vendor. Say for a case Manish if this person is manager...
Hello,I have run a create update account task on the AD connector, however when the provisioning job executes I get this error:Error while update account in AD : { "status": "Failure", "failedObjects": [ { "id": "CN=upgrade\\", "status": "Failure", "...
Below is my connection Json:{"authentications": {"acctAuth": {"authType": "oauth2","url": "https://login.microsoftonline.com/********590103f3/oauth2/v2.0/token","httpMethod": "GET","httpHeaders": {},"httpParams": {"grant_type": "client_credentials","...
I want to insert multiple rows in account owners table via enhanced query. But it is taking only 1.Anyone have any idea of Inserting multiple rows.
we added this for the ENDDATE: "ENDDATE": "EndDate~#~datetime" but Saviynt is not updating the field. So we tested with "CUSTOMPROPERTY57": "EndDate~#~datetime" to know if we can get something and we do receive the value in CP57. Do you have any i...
Hello Team , We are using Sav4sav rest connector and using logical child endpoint. example:Parent endpoint SAV4SAV REST : SAVIYNTAChild endpoint based on filter criteria : SAVIYNTB,SAVIYNTCNow we are facing one strange issue , say one user has left t...
Hi,We have an issue to remove or clear the proxyAddresses attribute in AD from Saviynt. This is what we are trying to do: Removal: Have a user in AD with the following proxyAddresses as multi valued attributes: X500License smtp:UAT-User@domain.mail...
Hi, 1. After running an analytics report and downloading the file in CSV format, the file contains an additional character(') before phone numbers. How can we avoid this?Excel format file contains the right values(without any additional characters) 2...
Hi everyone, I'm trying to create a SAV Role, that allows users to send Update User Requests for a specific set of Users. To be exact, they should fith the following HQL Query: select a from Users a where a.customproperty1 = 'Saviynt' and (a.owner = ...
Hello Team, We have an issue post upgrade to v24.3 , where in create user form all the html tags are appearing For ex: location<small title= please mention the location><i class="icon -info-sign"></i></small>How to resolve this
We have duplicate entry issues for one logical AD Endpoint from 30 logical endpoints. When import job running every endpoint mapping reference to active parent AD account but for one logical AD endpoint it is referencing to deleted AD account. Please...
From an earlier forum thread I found some fields for the externalConnection table, but I see that the externalConnection table is not exposed in the Data Analyzer.Ref: https://forums.saviynt.com/t5/identity-governance/fetching-connection-details-from...
Hi Team,We have a requirement that whenever role is modified with the access part i.e. Access is added to roles or removed from roles in that case the approval should go to the Endpoint owner of the endpoint where access (Entitlement_value resides).A...
Hi, this topic is related to this closed thread: Limit One click disable user tab results The use case is the following: A certain group should be allowed to use the functionality for one click disable. To achieve this setup an advanced filter at "wh...
Hi Team,We are using sav4savrest connector to update the displayname attribute and we have preprocessor query and updateuserjsonwe created the updateuser task and those tasks are completed but updates are not pushed to user.We are using below updateu...
Hi everyone, I currently face the issue, that the ExecuteOn feature is not applied as expected. SetupI created a test UUR as seen im image a1.png. A rule that should create different tasks with different start dates.IssueWhen I trigger the UUR (via D...
Hi,We have the custom SAV Role in our Saviynt instance.We have the "Whom to request" query as - select a from Users a where a.customer in (select customerkey from Organization_Owners where userkey = '${users.id}' and policy='3' and rank='1') On logg...
Hello Team, I have a requirement to execute role owner campaign for enterprise role which is part of 4 different endpoints. I created role owner campaign but when we launch the campaign, it is not showing any role to certify. Is there any way ...
hello, there is an issue with Identity Term Date. When a user is disabled using one click disable, this Term date feature populates and termination comments are added. Now, when the same user is rehired and activated, saviynt disables the user the fo...
I am trying to get the list of updates shown in update history in analytic report by querying on userrulerundata_archive table for a specific user where userkey in 9180 using below query (Attaching the resultset) select USERRULERUNDATA_ARCHIVEKEY,BIR...
Hello, I've created an Rest connector to perform saviynt API call and modify identity data the importUserJson is working fine : i've filtered it first on my test identity : {"connection":"userAuth","url":"https://domain.saviyntcloud.com/ECM/api/v5...
When i do an export/excel of Completed or Pending Tasks from the UI a message comes up stating that " A background job has been started to generate report." An email will be sent once the report is available for download." I don't get an email. Where...
Hi, coming to the community for advice to ask if they've seen this before.Issue: New Account tasks created where an Inactive Account already exists on the EndpointWe have an 'AD' type Connection to our OpenLDAP directory. We have Disabled/made Inacti...
Hello All, Configured UPN as below in create Account JSON but still UPN is not getting created. "userPrincipalName": "${if(user.email!=null) {user.email} else {user.username + '@domain.com.au'}}", Can you help?If Email is present UPN is creating but ...
Hi team,A particular application requires the following note :Please do not use this form for a shared account; shared accounts require the creation of a service account which is a separate request.Disclaimer - By checking this box, I acknowledge tha...
When we hit Export with in a Certification, we get a pop asking us to download a report. However the email template variables mentioned in the Saviynt Documentation do not work. same issue as poreviously mentioned in https://forums.saviynt.com/t5/ide...
Hi Team,We are facing issue with approvals for request raised from SNOW IGA App.Here SNOW is handling the approval process. We are following below steps.We have submitted an ADD Access request in SNOW and it went for manager approval in SNOW as expec...
We are setting up actionable email approval with Microsoft Azure ouath We have provided SPN access to read mailbox but we are getting access denied error.{"error":{"code":"ErrorAccessDenied","message":"Access is denied. Check credentials and try ag...
Hi everyone, We are using FN_EIC_SEQGEN in our Username Generation Rule :What we experience now is, that during the time we fill out our Request Form, we get displayed e.g. SE-1010, but as soon as we click Submit, the User Request is created with the...
Hi All, We have the below requirement:1). In the User Access Reviews when a certifier is rejecting any access for an account, they get a comment box where they can enter their comments.See below: 2). We want that instead of the certifier manually ty...
Hi.I assign user to enterprise role and add access task is created.But, the task is in "No Action Required" Status when execute provisioning job.In task detail, I see below message.Add Access Task for the same access in the same account with greater ...
Hi everyone, I came around a weird issue. I was trying to evaluate variables in the Create User Request Form, and it actually worked (partially). I'm trying to set a customproperty to the Requesing User ($loggedInUser).During the request it is proper...
Hi everyone, I received a reply from Saviynt support and was wondering if you are seeing the same behavior as it seems very odd to me. I was told, that the User Update Rule action Revoke Selected Access does not work with Entitlements that were assig...
Hi I was wondering if there is any way to view the api response when using SOAP connection? We're trying to troubleshoot an issue and we have no way to tell what the response is. All of them just have various response lengths
Hi, We are facing an issue where Role Ownership Transfer is not working when Advanced query is used in User update rule. When we use simple condition in user update rule like below, it works as expected and replaces role owner on user disablement. bu...
Hi all,I am passing few query parameters in my URL. For one such parameter I need to replace # with the equivalent URL encoder as the url is not taking the # value."url":\"S{ "xxxxxxx&azureAccount=${user?.customproperty20.replace("#","%23")}&employee...
Can we use AD account in-lieu of local account we created for Saviynt REST connector. If yes, that should be converted to AD account as well
Hi ,We have created a Service account rule in Endpoint , It is generating names as per rule for the service account form. But the syntax of the rule is showing in the field for Account name before generate the name. How to hide this ? RegardsSaranya
Hi Team - Currently when we go to "View existing access" page, it shows all the endpoint details such as Dynamic Attributes, Application Role and Entitlements. Can we restrict this to show only those that are relevant? Like in the below example, the ...
Hello, We performed an application restart today however we noticed that some of our scheduled jobs were triggered and ran/are running. The application restart was performed at 10:11:26. Then the following jobs seem to have ran: Create Tasks For Fut...
Hi,We've implemented Single Sign-On (SSO) in our environment, and we're encountering an issue when attempting to access the environment via API calls.The problem arises after successfully logging in to the environment and obtaining the access token. ...
We have a peculiar use case where we have to set up a BR rule in which if employee type =employee and user's customproperty5=12345 then we create a new account in ENDPOINT A with the same access as account B (for all users who are employee and have C...
Hi Team, We have a scenario where remove access should be created for AD entitlement when the condition fails in technical rule.Technical rule :a.employeeType ='Permanent Employee' AND a.customproperty3 ='52' AND a.customproperty11 ='AD Provision' A...
Hello,I am importing SAP users from a FM and when they are loaded into Saviynt I get this error:2024-03-19T13:50:39+01:00-ecm-worker-services.ImportSAvDataUserService-quartzScheduler_Worker-10-5kvhg-DEBUG-Proceed to Import for records - > [00020482, ...
Hi.When I import entitlement from Azure AD to Saviynt, the character "[]" is removed.Below is ENTITLEMENT_ATTRIBUTE jsoin.{"entitlementAttribute": {"AADGroup": {"colsToPropsMap": {"entitlementID": "id~#~char","entitlement_value": "displayName~#~emcha...
