and more in a single search tool across platforms. Read the announcement here. |
Hi Team,We have a requirement where we need to populate the lastlogin date coming from the okta application to the last logon date field in Saviynt. Looking through the documentation we can see that the default place for the last login field in custo...
Hi Team,We have Oauth2.0 authentication to generate access_token for EC_NOV application. When we run the job to import account, we are getting 401 error. I have raised a ticket before for the same https://forums.saviynt.com/t5/identity-governance/res...
Hi Team, We want to change the label for attribute while uploading the user via CSV import. Where we can make this changes in the Manage Label I am not getting exact attribute name. Instead of 'Customproperty5' we have to show here 'ActionType'
We have onboarded a new connection, security system, and endpoint for handling logical applications. The management has all worked as expected, with the exception of entitlement metadata. We have mapped the entitlement glossary to description for AD ...
There are users whose Start Date and End Date are same and while importing Users the Job failed to import Users due to same date in start and end date field. Is there a way to ignore the restriction of checking start and end dates
Hi Team,We have a requirement where if User email is present in Saviynt but empty/null in the import HR source data, it should not update the email for the User during import,whereas if email is abc@sav.com in Saviynt and xyz@sav.com in HR source tab...
I have a requirement to pass multiple entries from Saviynt to AD. I need to pass email and first name and last name to the proxy address attribute. How would the code look for multiple entries.
Hi everyone,Is it possible to import AD groups from multiple OUs?Could it be possible by specifying in the groupSearchBaseDN multiple OUs from where Saviynt is going to start importing the AD groups and how should be the syntax to do it?For example:I...
Hi All,I have an AD Connector where we mentioned accountname rule & sAMAccountName to provision as - ${user.username.toLowerCase()+'admin'}And the provision of the account is working fine and the sAMAccountname also displaying like Ex: "cjackadmin". ...
Hi there,We can import all accounts and entitlements in Saviynt from Active Directory but mapping between entitlement and account is not working. ACCOUNT_ATTRIBUTE[NAME::samaccountname#String, ACCOUNTID::objectguid#String, DISPLAYNAME::displayname#St...
Hi,We require to generate a unique 9 digit numeric number prefixed with C_ for users coming in from AD as AUTH source. What is the best practice to do this? I read some posts that mentioned the use of Register user rule and inline pre-processor. I tr...
Hi there - We are in the process of aligning Saviynt to a role framework at a customer that will has approximately 17K users and will have 1.5K roles based on a job code parameter that is being ingested from the authoritative source. We have a scenar...
Hello,in the connection for Active Directory, in groupImportMapping, is it possible to add conditions to the mapping?For example, I would like to import the description from AD into entitlement_glossary in Saviynt, but only write it in Saviynt if the...
Hello!I am attempting to convert the incoming StartDate and EndDate dates (mapped to ValidFrom and ValidThrough, respectfully) in the ImportAccountEntJSON. We are reading in the dates as: I have tried setting the attribute "dateFormat" (inside of "gl...
Hello Team,We have successfully onboarded the Oracle Fusion application and mapped the accounts with the Roles.Currently we are in the process of identifying the logic to map Security Context and Security Context Values to the Roles as a child entitl...
Hi forum,We have a complex username generation logic that we have to use custom JAR as in https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter03-User-Management/User-Import-Preprocessor.htm. It runs well until we have another requ...
we added this for the ENDDATE: "ENDDATE": "EndDate~#~datetime" but Saviynt is not updating the field. So we tested with "CUSTOMPROPERTY57": "EndDate~#~datetime" to know if we can get something and we do receive the value in CP57. Do you have any i...
hi, We have a requirement where we need not to import new users if date(NEWUSERDATA.startdate) < SUBDATE(curdate(), INTERVAL 7 DAY). I have tried below logic in modifyuserdatajson but its still creating the user.We dont want any effect on the updatio...
We have an authoritative employee feed from our HR system into Saviynt. Users get updated via this feed as expected. For example a manager change occurs and the Update History on the user object shows the change occurring when the import runs.We also...
Hi Everyone,We are trying to set enddate of users to a static value such as "31/12/2025" for some users.We tried with the following query "UPDATE USERS SET enddate = DATE_FORMAT(STR_TO_DATE(31/12/2025, '%d/%m/%Y'),'%m/%d/%Y') where enddate is null or...
Hi,We wanted to know what the default behavior of Saviynt is while importing a user who has the exact same startDate and endDate values.PFA the screenshot of one user import job from PeopleSoft HR source, where one user is not imported into Saviynt, ...
Hello, I've created an Rest connector to perform saviynt API call and modify identity data the importUserJson is working fine : i've filtered it first on my test identity : {"connection":"userAuth","url":"https://domain.saviyntcloud.com/ECM/api/v5...
we are starting with workday integration with saviynt and we are unable to fetch the custom attribute value from Workday .we are using the below mapping we dont see any error in the logs also the Workday user import job is successful."CITY": "Worker...
Hi All!We would like to start a user import from 2 different jobs: one for full import, one for incremental.The REST API connecting our HR system allows ur to query all users, or all users that have been modified since a certain date.To be able to do...
Hi,In the following ImportAccountEntJson, I want to conditionally determine the URL. The flag for the condition is stored in the endpoint customproperty16. However, the job always fails when the 'endpoints' binding variable is used in the URL field. ...
We have configured SFTP connector to transfer file from analytics generated to customer SFTP location.We see SFTP connector sending zip formated file to SFTP location from Saviynt analytics location after job execution successfully.But customer is ex...
We have a requirement where we need to terminate users at a specific local time(let's say 5pm) on their enddate.We got few approach in this forum based on Sav4Sav route.We had one alternate approach to this. Just wanted it checked with a wider forum....
Hi Team,We have a requirement to use two columns together as the reconciliation field while importing Users to Saviynt from MS SQL DB view. The unique field is a composite key at the DB side, could you please confirm on how to achieve the same.Here i...
Hi All,We have a requirement where for an application we want to monitor those users who got access to entitlements outside of Saviynt i.e they did not raise a request in Saviynt but got the entitlement assigned directly in target application. Is the...
There is a requirement to import office365 China Tenant. We started off by using the Office365 connection type but Saviynt recommended that this isn't feasible for OOTB so we need to use REST connection type. We are facing issues with import JSON whi...
Hi Everyone,We are trying to import user from graph API, where we first want to get groups based on filter and then in second call the members associated to that group and create users.it will require multiple call and iteration on each group. Attach...
Hello, We've a use case to create endpoints and associated entitlements using SAV file based approach. Does Saviynt support it? We know endpoints can be created using CSV file using upload endpoint option. But we're looking for SAV file based, so tha...
Hello everyone,We need to import all users with a startdate greater than the current date using the SAP SuccessFactors Connector (REST). Is there a way to put the current date in the URL Path ?We have tried with the following paths but none of them a...
Hello all,I have workday source of truth. i am only reading from workday (it is a one way connection). I imported all the users with the attriutes required.i noticed an issue while testing, my client declared an offboarding for a user he set terminat...
Hi,is there a way to omit changes made to specific attributes in the User Update History?We have a an userimport configured to import data to users that are updated every day which we require for an integration. This causes the update history to be f...
I am setting up an Email Generation Rule and and I have it setup as yes to generate on our import job. However I noticed for brand new users emails are not being generated. I verified that the rule I created works but doesn't seem like its getting tr...
Hi Team,We are using below query to get the metrics of Accounts imported in Saviynt. But we have requirement that to list out the complete report which are part of that Job reconciliation.select JOBID,PARENTJOBID,LOGDATAASXML from importlog where JOB...
Team,We are trying to import access from Workday using Workday hybrid connector. As part of this we defined the ACCESS_IMPORT_LIST to Organizational Role and executed the import. The access import has been failing with below error,"java.lang.NullPoin...
How can I remove or merge a duplicate account as shown below?The object Guid is already the recon attribute as described in this post: https://forums.saviynt.com/t5/identity-governance/duplicate-accounts-imported-for-same-user-same-endpoint/td-p/2440...
Hi,If we are having first column as empty value in the import file, it is failing to import the record. Is it normal behaviour ? or is it a bug??Attached the import file for referenceBest regards,Harish
Hi Team, I have two different call for import account from Target. in the 1st call we are importing id, email and in the next call will get all information. How we can achieve this ? ImportAccountEntJSON : { "accountParams": { "connection": "ac...
Hello, We are integrating Oracle EPM as Target System. Last month, we encountered an issue with OracleEPM reconciliation (in version 24.1). The recon job was erroring, and we got confirmation this was a known issue that will be fixed in 24.3 version....
Hi I am using a REST connector for Reltio application to import accounts and roles. I have successfully imported the accounts using unique key as cp1 for email. Now, I am trying to import the roles and map them to accounts however I can see there is ...
Hi Team,Can we refer multiple dataset for user profile attribute transformations ?"DATASET_VALUES": "SELECT ATTRIBUTE1 FROM DATASET_VALUES"DATASET_VALUES_OTHER": "SELECT ATTRIBUTE1 FROM DATASET_VALUES Thanks,
Hi Is it possible to delete users (identity) data in Saviynt's non-prod environment to start fresh?RegardsGaurav
Scenario : We have a set of endpoints with logical (user friendly) entitlements - they represent application roles.Users can request them via ACR process. We have hundreds of them. To map these user friendly entitlements to "real" entitlements impor...
We notice that Saviynt users can Modify Access on an AD Endpoint and see the current group membership (entitlements) while other users that are also part of the same AD groups do not see their current group membership when using the Modify Access opt...
We have onboarded Oracle Fusion application successfully using REST API without any issues. We have imported accounts and entitlemets (Roles) successfully into Saviynt Dev environment. However, we are observed that mapping of entitlement to account i...
There are 1000 groups and i'd like to configure 3 apps using only 180 groups by endpoints filter option.180 groups has the same naming convention like RBAC_AESIR_%A endpoint : - "RBAC_AESIR_TEST1_%"B endpoint :- "RBAC_AESIR_TEST2_%" C endpoint :- Thi...
Hi,Can we use regex in PreProcessor to check the one of the column in the User import?Requirement is to validate if the email following Regular Expression(^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,6}$). If not user should be skipped. Thanks,Haris...
