and more in a single search tool across platforms. Read the announcement here. |
Hi,I'm trying to import users with the schemauserjob that is well working for basic user import.But, I need to make pre process on these with some json code. From the sample of the freshdesk I see that it's possible:But when I have this line as last ...
Hello,We have a usecase where some properties in ad should only get updated when a certain account cp is null or not equal to 'noupdate'. Hence, I've raised other tickets in forum and saviynt suggested certain syntaxes, which i'v tried, for example, ...
Hi,I get the below error while Provisioning access to AD. AD account is created successfully but the entitlement is not getting assigned.Error:Error while ADD operation for account-_____ to Group-___________ in AD - [LDAP: error code 32 - 0000208D: N...
Hello,I am writing the syntax for HR_IMPORT_JSON for a SOAP connection and I am getting a "Error- Failed to Connect to or Import SOAP Data: JSONOBject["clientnamewebservice"] not found" response from the job. I already have a successful SOAP connecti...
We've configured the REST connector to leverage the MultiCall configuration as defined in the REST Connector Guide. This works well and identity data is populated from both calls. As we added Pagination, the MultiCall no longer works. All data from t...
We are trying to simply import account guid's with the response in the following format:{ "Rsp": { "Status": "Ok", "Result": [ { "Guid": "36165265-7a83-4619-88fa-00003a9f96a9" }, { ...
Hi AllWe are performing reconciliation (Access/Accounts) from ADSI both Accounts and Accesses are importing but the association is not happening.does the Account Status will affect, like INACTIVE status? Please find the screenshot for groupImportMap...
Hi All,We would like to add logic to the CREATEACCOUNT JSON which set different display name depending on users CP1.We have tried this:"displayName": "${user?.customproperty1.startsWith('RX)? user?.lastname + ', ' + user?.firstname + ' (RX)' : user?....
Hi,We are working on our create account json for AD. We need to map the managers account id, which is working successfully when we use the line '"manager": "{(user.manager!=null?(managerAccount.accountID):'')However, we are trying to also map the use...
Hello,We need to use LDAP connection to import accounts from Unix system.Unix account status (active/inactive) is set by nsaccountlock attribute. The issue is that it's only present for when the account is inactive and it's set to true. When account ...
Team,I am looking for information on Import of Password Policies from target apps and the supported functionality in Saviynt. Appreciate your inputs.We are aware of support for AD.Requirement - The IGA platform/service can import password policies (c...
Hi All,We have a use case where we need to create an Entitlement and map the dependent entitlements in the Other entitlement details tab. This is to generate the tasks for the dependent entitlements when a request was placed for the Main entitlement....
Hey, Did a couple of research for this with not success. IS it possible to get the current account entitlement to pass it to the api method into the EnableAccessJson. The account is currently disabled but want to get the entitlement to enable it on t...
I'm trying to import Azure AD groups with their respective owners into Saviynt.I have Azure AD Connector set up. Connector imports accounts normaly. Groups are also imported as entitlements with this ENTITLEMENT_ATTRIBUTE:"entitlementAttribute": {"AA...
Hi,We are trying to provision mailbox to the user using the directions provided in the Exchange Connector guide and Win PS connector guide. We have configured the connection object, have installed and configured the Saviynt APP and IIS Server on a Wi...
Hello, i am working on REST API Connection, i am getting described error during Save&test (JSON syntax exception found in the following connection parameters)This is ConnectionJSON: { "authentications": { "userAuth": { "authType": "oauth2", ...
Hi ,we are mapping target attributes from the postman call as specified below.we want to parse to attributes from the below API call as an entitlement value.please specify the mapping functionality for the below API call , the entitlement value shoul...
Hi Team,We are calling 3 different calls in CREATEACCOUNTJSON of REST Connection, Syntax is shown below{"call": [{"name":"call1"},{"name":"call2"},{"name":"call3"}]}Here our requirement is to call only Call1 based on condition and other two calls Cal...
Hi, I have been working on the Saviynt Instance for quite a while now. However, I am not able to configure the appropriate JSON for accountimportJSON in the DB connection. Here is the Query that I wrote for AccountImportJSON:<dataMapping><sql-query ...
When trying to use the following JSON in UPDATEUSERJSON of the Workday SOAP getting the JSON validation errorHere is my JSON to update the Phone number[{"REQUESTXML": "${'<env:Envelope xmlns:env=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:xsd...
Hi. Is it possible to add zero left padding for a value received into the importUserJson? Right now the field receive 13 but need to be saved as 013.thanks
Hi Team,We have requirement that the user status is changed to inactive then the user account should be moved to another OU in AD after 30 days of time frequency.DISABLEACCOUNTJSON:{"moveUsertoOU": "OU=test,DC=test,DC=net","deleteAllGroups": "Yes","u...
Hi,I am working on the ADSI account creation json. I am trying to set the attribute 'displayname'. The logic behind it is, if the user has middlename then the displayname should be lastname, firstname, middlename. If the user does not have a middlena...
In my case, I have two auth sources. Source A and Source B. there can be common users in both. I want to restrict a user who got added by Source A to be updated by Source B. so let say for user import on Source A, I have CP3 updated for newly created...
Hi All,I need help in mapping nested & multivalued attribute in ImportUserJson's colsToPropsMapThis is the query which I have taken from SAP SuccessFactor Connector Guide - https://saviynt.freshdesk.com/support/solutions/articles/43000478793-sap-succ...
Can we use string function in ImportAccountEntJSON in colsToProp configuration ? Requirement :We have entitlement which name is combination of 2 values from API- user + readonly- user + no access Can we use string functions such as concat, replace? ...
Hi Team,We have created a connection to implement REST API app integration, SV Dev. We tested the API and it's working fine(import, enable & disable). But when we inactive the testUser the disable account task gets 400 ERROR on the DisableAccount tas...
I'm importing users from Azure AD with REST connector. All users in Azure AD have their manager assigned.On the import of users with REST connector, url https://graph.microsoft.com/v1.0/users?$select=attributes.... returns all attributes selected, bu...
Hi,We are implementing the use case of importing non-human identities from target application(Azure).The target application consists of service principals, foreign principals associated with the access.we tried to inculcate the api call from which we...
I'm trying to implement REST connector to import users from Azure AD into Saviynt.REST connector is configured, and this is ImportUserJSON field:{"connection": "userAuth","url": "https://graph.microsoft.com/v1.0/users?$select=Id,userPrincipalName,acc...
Hi,I would like to know what exactly the output when we use the following configuration in createAccountJSON.1.pwdlastset = 02.pwdlastset = -13. no pwdlastset attribute mention in JSON.Please help me in understanding the above config.Thanks,Mani
i am trying to integrate the new app using REST connector.I got 1 issue for importing account from app.there are 2 arrays in the response.here is the response sample for importaccountjson. {"users": [[{"firstName": "James","lastName": "O","displayNam...
Hello everybody!We are configuring Jira connector per reconciliation ImportAccountEntJson, but we are lost. We know the logic of users-groups but we cannot understand the part of projects-users-roles as we want to connect also users and projects. if ...
Hello,We need to perform incremental import of Users from trusted source as Database (using DB connector) but there is no Update_date / time_stamp column present in the Database. Is it possible for Saviynt to perform the incremental import without th...
Hi ,We are currently implementing emergency access IDs with Azure as target resource and we are aligning "$(randompassword)down ADDFFIDAccess JSON for generating a new password for every new session being involved. We get the following error ["The sp...
I have an strange issue with the rest connector. After running the account and access recon jobs for the first time, for a newly created endpoint, the mapped account attributes and entitlement details are loading correctly.The mapped account attribut...
Hi,we need to create account update json for SAP Ariba and user update rule that would change supervisor of the user, when manager is changed in HR. We've already created both and the solution is working. The issue is that in case user manager does n...
Use Case:If user customproperty25 is updated through import then customproperty60 of that user should be updated as "transferred" , so I am using the User Pre-processor Config JSON during csv import as shown below and the preprocessor json I am usin...
Team,I am looking for information on upload limit for technical rules via json file format. When uploading say 100 tech rules via file, saviynt not able to process them and throws error in logs.Where can we change the configuration to accept more vol...
Hello all!I have configured ImportAccountEntJson of Jira, it brings users, groups and roles but I can't make it bring projects from Jira, even though it recognizes it since it can be seen from 'Entitlement Type'. I am putting also the related Json pa...
Hi everyone,We are developing a REST connector in order to integrate a custom ticketing system for the ARS application management. For the development we are following the documentation REST Connector Guide and Developers Handbook to complete all nec...
Hi Team,We have a requirement where we have a SQL DB and AD in the same domain, and we need to connect to the SQL DB using a Service Account (Username and Password) present in Active Directory instead of an account created within the Database. Could ...
Hi AllAppreciate any help for the queries below.Can we define OBJECTFILTER for accounts, where we can filter 100 accounts like accounts with different sAMaccountName (ABCD, XGFGH, agkah, 12hja.....)similart to 'IN' function in mySQL For groups can we...
I tried to simple user creation under the AD folder "OU=Users,OU=Saviynt,DC=iehp,DC=local". I have random password set to TRU. USER password policy updated according to AD policy. I am not seeing any specific errors but username is not appearing in t...
Hi,So we have a different type of user (Customer/Supplier) whose email needs to be generated in a particular way, however when we include it in the email generation query under global configuration it throws the following exception:Query : case when ...
Hi,We are trying to update the json where requirements was firstname,lastname,enddate & departmentnumber should get update only for contractors.For employees only secondary branch code attribute should get update.We tried with this JSON, having error...
Hi,We have a requirement on updating user email on their change of company and need a logic or a workaround for the same.We have around 82 companies at the moment of which 77 companies have the same email domain, except the leftover 5 companies which...
Hi Team,We want to pull user account locked or unlocked status from AD using "lockOutTime" AD attribute. There is no fixed set of values for lockOutTime attribute, unlocked means "0" and locked means it will generate the date and time in large intege...
Hi,We have recently seen a weird behavior with update user form. The update user form which was originally generating the request number on submission is no more generating the same. Also, we cannot see it in the Pending approvals queue.Could there b...
Hi Team,We have created a connection to implement REST API app integration SV Dev. We tested the API and it's working fine(import, enable & disable). But when we inactive the test user, it creates the disable account task. After running the provision...
