Hi,In ADSI connector when we try to provision the access with wsretryjob it is failing. The account provisioning job is successful. In the connection level we added ADD ACCESS JSON as per the documentation. Below is the error message. Do we need to c...
Hi Team, We are using below query in our update account json, update account task are created but not getting completed, "userPrincipalName":"${user.customproperty1.toString().concat(user.customproperty1,'@emea.xxxxxx.test')}", attaching the error f...
This is a common use case for updating proxyaddresses with latest email address as primary and leaving old value as secondary. Did any one implement this case using updateAccountJSON successfully? If yes, please share the json. I am looking to unders...
Hi All, To create accounts in target system, we have Configured the REST connector. The API response code for both success and failure is 200. How can we configure success and unsuccess responses within CreateAccountJSON? Below is the response body w...
Hi, we are having trouble trying to map the accessRule entitlements with the cardReader entitlements. Our API response looks like the following where for each cardReader we have a list of accessRules: { "Rsp": { "Status": "Ok", "Res...
Hi team, I have a requirement to update firstname and lastname of the user in target.To achieve this, we need to fetch the unique identifier of the user - Business Card in first call and pass it as input in second API call. (as we don't have recon fr...
Hi Team,We are facing issue in re-generating the token in connection json. We need to manually update the access token from postman.Attaching the jsons. Tried with refresh token also but unable to refresh the token as there is no error path, where we...
We are integrating Salesforce marketing Cloud application with Saviynt and have configured automated reconciliation through REST based connector. The records (accounts) retrieved from a single page is 2500 and we are getting the entire response in mu...
Hi,I'm using the SOAP connector for one of my integrations with Saviynt. 'ValidFrom' attribute is mapped to saviynt accounts table from 'StartDate' attribute from Response.ACCOUNTS_IMPORT_JSON{"CONNECTION1": "clientnamewebservice","REQUESTXML1": "<so...
I have a rest app where entitlement is actually a combination of 2 attributes in the response (name || resource). I'm able to combine the attribute values and assign it to entitlementID and entitlement_value but the mapping between the account and en...
Hello,Hope you're doing good!We're trying to fetch user manager email value using binding variable, we've been trying with few of the below variables but unable to fetch the value. We're trying this in REST based connector. Please let us know if you'...
Hi @amit_krishnajit @rushikeshvartak We have same issue [as this post] while enabling the account its throwing SAV-Error while enabling account,No account found using disable rules.We don't have two separate OU's for disabled account ,we are using :...
Hello, i am tryng to use CHECKFORUNIQUE json in AD connection but is not getting triggered. In task I saw an error that account with same accountName is existing in AD (I created few user object in AD with the same account name and UPN as testing use...
Hi,We have a requirement to make cn value as lastname,firstname for ADSI connection. In create account json this cn value when passed like user.lastname+','+user.firstname it is not provisioning but works with user.lastname+user.first name.Appreciate...
Hi Team,We are trying to remove the entitlement and it's privilege through the user update rule , the following is the error we are getting {"log":"2023-03-02 05:35:28,298 [quartzScheduler_Worker-10] DEBUG rest.RestProvisioningService - Default Priv...
Hi,I'm trying to import users with the schemauserjob that is well working for basic user import.But, I need to make pre process on these with some json code. From the sample of the freshdesk I see that it's possible:But when I have this line as last ...
Hello,We have a usecase where some properties in ad should only get updated when a certain account cp is null or not equal to 'noupdate'. Hence, I've raised other tickets in forum and saviynt suggested certain syntaxes, which i'v tried, for example, ...
Hi,I get the below error while Provisioning access to AD. AD account is created successfully but the entitlement is not getting assigned.Error:Error while ADD operation for account-_____ to Group-___________ in AD - [LDAP: error code 32 - 0000208D: N...
Hi,I am getting the below errors while provisioning the entitlements for AD and Saviynt. Accounts assignment tasks are getting competed but the entitlement tasks are not getting completedAD:Error while ADD operation for account-XXXX to Group-Entitlem...
Hi, we are trying to import about 50,000 accounts but when we run the job it takes around 2 days to do the full import (we assume this is because we need to make 50,000 api calls, one for each user to get their attributes). We are just wondering if t...
Hi Team,For Azure AD Integration able to import all the Entitlement Types as per Saviynt Documentation.But as per Application Team the requirement to import and assign Azure Roles. Couldn't find anything regarding Azure Roles in documentation.Is Azur...
Hello,I am writing the syntax for HR_IMPORT_JSON for a SOAP connection and I am getting a "Error- Failed to Connect to or Import SOAP Data: JSONOBject["clientnamewebservice"] not found" response from the job. I already have a successful SOAP connecti...
We've configured the REST connector to leverage the MultiCall configuration as defined in the REST Connector Guide. This works well and identity data is populated from both calls. As we added Pagination, the MultiCall no longer works. All data from t...
We are trying to simply import account guid's with the response in the following format:{ "Rsp": { "Status": "Ok", "Result": [ { "Guid": "36165265-7a83-4619-88fa-00003a9f96a9" }, { ...
Hi AllWe are performing reconciliation (Access/Accounts) from ADSI both Accounts and Accesses are importing but the association is not happening.does the Account Status will affect, like INACTIVE status? Please find the screenshot for groupImportMap...
Hi All,We would like to add logic to the CREATEACCOUNT JSON which set different display name depending on users CP1.We have tried this:"displayName": "${user?.customproperty1.startsWith('RX)? user?.lastname + ', ' + user?.firstname + ' (RX)' : user?....
Hi,We are working on our create account json for AD. We need to map the managers account id, which is working successfully when we use the line '"manager": "{(user.manager!=null?(managerAccount.accountID):'')However, we are trying to also map the use...
Hello,We need to use LDAP connection to import accounts from Unix system.Unix account status (active/inactive) is set by nsaccountlock attribute. The issue is that it's only present for when the account is inactive and it's set to true. When account ...
Team,I am looking for information on Import of Password Policies from target apps and the supported functionality in Saviynt. Appreciate your inputs.We are aware of support for AD.Requirement - The IGA platform/service can import password policies (c...
Hi All,We have a use case where we need to create an Entitlement and map the dependent entitlements in the Other entitlement details tab. This is to generate the tasks for the dependent entitlements when a request was placed for the Main entitlement....
Hey, Did a couple of research for this with not success. IS it possible to get the current account entitlement to pass it to the api method into the EnableAccessJson. The account is currently disabled but want to get the entitlement to enable it on t...
I'm trying to import Azure AD groups with their respective owners into Saviynt.I have Azure AD Connector set up. Connector imports accounts normaly. Groups are also imported as entitlements with this ENTITLEMENT_ATTRIBUTE:"entitlementAttribute": {"AA...
Hi,We are trying to provision mailbox to the user using the directions provided in the Exchange Connector guide and Win PS connector guide. We have configured the connection object, have installed and configured the Saviynt APP and IIS Server on a Wi...
Hello, i am working on REST API Connection, i am getting described error during Save&test (JSON syntax exception found in the following connection parameters)This is ConnectionJSON: { "authentications": { "userAuth": { "authType": "oauth2", ...
Hi ,we are mapping target attributes from the postman call as specified below.we want to parse to attributes from the below API call as an entitlement value.please specify the mapping functionality for the below API call , the entitlement value shoul...
Hi Team,We are calling 3 different calls in CREATEACCOUNTJSON of REST Connection, Syntax is shown below{"call": [{"name":"call1"},{"name":"call2"},{"name":"call3"}]}Here our requirement is to call only Call1 based on condition and other two calls Cal...
Hi, I have been working on the Saviynt Instance for quite a while now. However, I am not able to configure the appropriate JSON for accountimportJSON in the DB connection. Here is the Query that I wrote for AccountImportJSON:<dataMapping><sql-query ...
Hello,I am trying to provision account to AD with minimum required attributes. The issue is the new account task fails with error "LDAP: error code 53 - 0000052D: SvcErr: DSID-031A124C, problem 5003 (WILL_NOT_PERFORM)". The same task then gets comple...
When trying to use the following JSON in UPDATEUSERJSON of the Workday SOAP getting the JSON validation errorHere is my JSON to update the Phone number[{"REQUESTXML": "${'<env:Envelope xmlns:env=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:xsd...
Hi. Is it possible to add zero left padding for a value received into the importUserJson? Right now the field receive 13 but need to be saved as 013.thanks
Hi Team,We have requirement that the user status is changed to inactive then the user account should be moved to another OU in AD after 30 days of time frequency.DISABLEACCOUNTJSON:{"moveUsertoOU": "OU=test,DC=test,DC=net","deleteAllGroups": "Yes","u...
Hi,I am working on the ADSI account creation json. I am trying to set the attribute 'displayname'. The logic behind it is, if the user has middlename then the displayname should be lastname, firstname, middlename. If the user does not have a middlena...
In my case, I have two auth sources. Source A and Source B. there can be common users in both. I want to restrict a user who got added by Source A to be updated by Source B. so let say for user import on Source A, I have CP3 updated for newly created...
Hi, Can someone let me know hoe to use Datasets in SAV4SAV Rest connection? We can use sql queries in SAV4SAV DB Connection in user import. However, since SAV4SAV DB is deprecated, we need to replicate the same in SAV4SAVREST connector in JSON format...
Hi All,I need help in mapping nested & multivalued attribute in ImportUserJson's colsToPropsMapThis is the query which I have taken from SAP SuccessFactor Connector Guide - https://saviynt.freshdesk.com/support/solutions/articles/43000478793-sap-succ...
Can we use string function in ImportAccountEntJSON in colsToProp configuration ? Requirement :We have entitlement which name is combination of 2 values from API- user + readonly- user + no access Can we use string functions such as concat, replace? ...
Hi Team,We have created a connection to implement REST API app integration, SV Dev. We tested the API and it's working fine(import, enable & disable). But when we inactive the testUser the disable account task gets 400 ERROR on the DisableAccount tas...
Hello Saviynt Expert,When create a new job to invoke ExternalJARJob, It ask for 3 parameters:1. full class name with package name,2. method name3. argument in Json formatI know how to set first two parameters, but don't understand how to set third pa...
I'm importing users from Azure AD with REST connector. All users in Azure AD have their manager assigned.On the import of users with REST connector, url https://graph.microsoft.com/v1.0/users?$select=attributes.... returns all attributes selected, bu...
Hi,We are implementing the use case of importing non-human identities from target application(Azure).The target application consists of service principals, foreign principals associated with the access.we tried to inculcate the api call from which we...
