hi there,Kindly guide us to convert the startdate, enddate, imdlCreationDate, imdlDeletionDate values to be sent create account script. Tried multiple options as below:1. ${if(user.enddate!=null){new java.text.SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ss'...
Hi,We are trying to pull data via rest connector for increment user import. However, the lastupdatedate format which we have in the target is in UTC format and we aren't able to resolve the new Date function in Saviynt.Below is the url, which we have...
Hello Team , We are facing one strange issue related to technical Rules . When we upload it making DETECTIVE=FALSE and upload then it is not provisioning newly created users in short the rule is not executing .But when we make DETECTIVE=TRUE and uplo...
ImportUserJSON:{"connection": "acctAuth","url": "https://{URL}/{page}/{page}","httpMethod": "GET","httpHeaders": {"Accept": "*/*","Authorization" : "${access_token}"},"colsToPropsMap": {"username": "eMailMetDomein~#~char","displayname": "achternaam~#...
Hi,We have written a pre processor code under ModifyUserJSON. We are importing users via REST API.Use Case:Employee Type on target is 'User ID with External Email' . When a new user is imported in Saviynt, the value 'User ID with External mail' shoul...
Hi Team,We have requirement to create dashboards based on country the client's IT professionals should be able to see the reports like Onboarded today, terminated today etc.Has anyone done this before. If yes please do share how did you filter it?PS...
Hello,I'm trying to implement Azure AD Group deletion from Saviynt. I have added these feature accesses to the SAV Role Create AAD GroupAllows users to request Azure Active Directory groups creation Manage AAD GroupGives ability to create, manage...
hello!we have a problem: How can i put endpoint owner group in an if-else condition in a workflow? the logic is like this:IF (XYZ endpoint owner usergroup) creates a new account from ARS for externals approve ELSE reject. I'm stuck in the usergroup p...
Hi all,We have a requirement to auto provision the AD ADMIN accounts whenever the ServiceNow ADM Catalog items are imported as accounts to Saviynt.We are making use of the Saviynt CreateAccountRequest REST API to submit the new account request. We ha...
Hello everybody, we are implementing user manager campaign but sadly, the campaign does not send expiry e-mail templates nor reminders. Email templates are all the same and they don't have any dynamic values which can block the mail. Do you have any ...
Hi,We have a following set-up in place:1. SQL analytics saved to elastic search and saved to file (with path: /saviynt_shared/reports/admin directory) with name 'Me_Managers'. We are saving only 1 version at a time.2. SFTP connector in place with fol...
Hi all,We have configured an ImportAccntEntJson where we are calling the Saviynt CreateRequestAPI whenever a ServiceNow catalog item is being imported from SNOW table as an account.W are able to generate the tasks using Postman but when we try the sa...
I'm facing this error SAV-Error while enabling account,No account found using disable rules when I'm provisioning the enable account task enable account json is : { "ENABLEACCOUNTOU": "${if(user.departmentname.equals('xyz')) {'OU=xyc,DC=b,DC=c,DC=u'}...
HelloWe have an actionable analytics report which can be used to create update account tasks for service accounts. However, when creating a task via that analytic for a service account, the task is discontinued with message 'USERNAME admin is not ass...
Hello - reaching out regarding the User Manager - Step 1 Employment Verification certification. We currently do not have any Revoke Actions set (as Workday is the source system for user status so we don't want it managed in Saviynt) but the default p...
Hi Team,I have created a SAV role for certification 'ROLE_CERTIFICATION', now we need to add this sav role to the entitlement owners for the next step through actionable analytics. I tried but could not achieve it. Can we get the reference on this or...
Hello - interested to see if we can change the label names in a User Manager Certification for Employment Verification - the default Employment Status Option labels are: 'Works for Me', 'Doesn't Work for Me', 'Terminated' and 'Extend End Date' - are ...
Example 8: End users have manually run an elasticsearch based @analytics control and it is taking longer than expected to complete. Once the execution is completed, end users should be notified that their report is ready.To:${USER.email}Body:TestI ha...
Hello,We have a use case where we need to edit the redirect URL for the forgotpassword.gsp based on a user attribute.When user.customproperty5 equals 'nl', the user has to be redirected to https://URL/nlWhen user.customproperty5 equals 'en', the user...
We have a use case for updating service account owners in Saviynt. We have already reconciled the owner's DN in one of the customproperty of the service account. How do we update the owner from the account customproperty?I was reading the other forum...
Hi, I was wondering is there is any information as to if this limitation has been fix in V23 refer to screenshot:
Hello,We have an integration with REST based application. The application has only users API where the resultset has userdetails and within userdetails there is entitlements object. 1. Is there a way to retrieve the entitlements. If so, what will be...
Hi All,Below is the account import json that we are using-{"acctLabels": {"customproperty1": "FirstName","customproperty2": "LastName","customproperty3": "OfficePhone","customproperty4": "Email","customproperty5": "MailNickName","customproperty10": "...
I think I've got one that I definitely can't figure out myself. Error Screenshot from Import Job (URL is out, but below I removed string values that were sensitive and added "blah" and left anything else the same, but I can guarantee its not formatte...
For an full access recon job, the following error is encountered:entitlementThresholdValue limit exceeded. No changes has been imported from Recon.I cannot find any reference to "entitlementThresholdValue" in product documentation.Any ideas where thi...
Hi there,I am having trouble trying to associate accounts with entitlements (type: userRole) via a single API call and processing type "http". Looking at the logs, the response is recieved successfully and it seems like it is able to get the correct ...
Is offset paging supported in the acctEntParams configuration or is there an issue with the paging config?I have a REST connector configured with the below paging config. During recon task execution the logs show that the "SecurityUserRoles" endpoint...
Hi Team/ @rushikeshvartak / @Sivagami / @Manu269 We have seperate API to pull users membership for Grafana API but when we are trying to use "httpEntToAcct" processing type to pull user membership we are unable to pull the user membership to reconcil...
Do the REST API connectionJSONs support the following use case, and are there any recommendations for implementing it?We are needing to integrate with an API that uses two steps for authentication:1. The service account hits one endpoint to register ...
I found a way to get the hierarchy of entitlement using sav4sav in the document. https://docs.saviyntcloud.com/bundle/DB-v55x/page/Content/Configuring-the-Integration-for-Importing-Entitlements-and-Entitlement-Hierarchy.htm Can I import an entitlemen...
Hi Team,We are trying to request AD entitlements for multi-users we have selected 2-3 entitlements we are getting an error as below. Please select the required Entitlement(s) Close What could be the issue?Please help me with this. Best Regards,Adit...
Hi Team,Our Saviynt is in v23.4. Is there a feasibility of implementing the configurations on Saviynt for adding Azure AD groups to Azure AD application instance from Saviynt. If yes, can you please share the steps to achieve the same? Alternatively,...
HI Team,While provisioning account in AD via ADSI connection, we are receiving the following error:Provisioning Comments:Error while creating account in ADSI : { "status": "Failure", "failedObjects": [ { "id": " OU = xxx", "status": "Failure", "messa...
Hi,We have configured SAP SuccessFactors and are trying to import all the users from the target. There are around 50000 records in the target but only first 1000 records are reconciled whenever we run the job.We have used the below pagination logic:...
Hello,We are using the ENABLEACCOUNTJSON to enable a disabled account through user update rules.The Enable account task is created, but when we try to provision the task fails. There are no errors in the provisioning comments, but we do get this erro...
Hi there,We have a requirement for one of the REST based application integration where during role assignment a id gets generated and while removing the role from user account the same id has to be passed in to request body and not any other field is...
We are trying to set up a Password Policy to avoid passwords that will generate the same character twice in a row. I thought we could easily do this with updating the Regex being used, so I modified it as such; Original Regex: (?=.*\d)(?=.*[a-z])(?=....
Hi,We have a use case where we have to trigger the "UpdateUser task" first in the User Update Rule and then the "re-run selected technical rules" actions should be triggered.I have attached a screenshot of the rule.In our case, the re-run selected te...
Hi Team,Could you please let us know if we can vault SaviyntSupportAgent passwords in our Privileged access management solution. Regards,Megha Urs B R
Hi Team,We are trying to reconcile the Active directory lastLogon attribute into Saviynt the attribute is getting reconciled, but we are unable to see the exact date in Saviynt. please find the below screenshot and sample users for more information. ...
Hi Team, We are reconciling the Accounts and Entitlements of Unix using the Unix OOTB Connector. I see that in the Guide we would require to include the groups, passwd and shadow file to import the entitlements and accounts. I see the groups are bein...
Hi All,Actually we are trying to achieve the device retire usecase through Saviynt.I set Up post for that and from postman device retire is working fine but If I want setup the same into saviynt then I need the Intune Device ID.Can anyone help me out...
Hi All,We have usecase to generate the samaccount from saviynt below is the logic for samaccount-If user lastname containing more than four character or equal to four character then it will take first four character from lastname and then add one and...
Hello,We are trying to provision access for accounts in OpenLDAP. The account provisioning through tasks itself works fine, but the access provisioning through tasks does not work and gives an error.Explanation:We have a user with username 0071511. T...
Hello everybody! While i try to create an account for Office365, in the first step I came across to a problem that I haven't seen before.It says:No Accounts Available , Please Add Dependent ApplicationsEndpoints-Office365 (Azure AD) : Security System...
Hi Team,We want to disable the updated History from Saviynt temporarily. Is there any way to disable that feature and enable it later?
Hello,We have a requirement to populate a dynamic attribute with the user's account status during the emergency access roles using the "SQL ENUM" dynamic attribute. The dynamic attributes are created under the endpoint DA as part the "Role" request t...
Hi Forum,I am referring to the below link for AAD Group Creation, it mentioned I can create group via Saviynt on below path: Navigate to > Home and select > Manage Groups > Create AAD Group.https://docs.saviyntcloud.com/bundle/EIC-User-v23x/page/Con...
Hello Saviynt Expert,When create a new job to invoke ExternalJARJob, It ask for 3 parameters:1. full class name with package name,2. method name3. argument in Json formatI know how to set first two parameters, but don't understand how to set third pa...
Hi,We are working on our termination process and we noticed that when a users status is 'active' and we switch it to 'inactive' to terminate them, the Saviynt Term Date (Term Date (UTC)) attribute is not being set.We are switching the status through ...
