and more in a single search tool across platforms. Read the announcement here. |
Would like to know separate SAV_ROLE feature access to manage service account user lifecycle. Right now, we are relying on SAV_ADMINs for managing Service accounts. We would like to create a separate role for managing (creating/deleting/updating) Ser...
ImportAccountEntJSON Hi Experts , The API response i am getting as below (only value no key {"data": [ [ "a.elumalai@company.com", "N", "2746" ], [ "j.ebrole@company.com", ...
Entitlement is updating after meeting the condition (True) and when reversing the condition to be false entitlement is not being removed. This is in Pre-dev environment.a.customproperty16='Active' AND a.statuskey=1 AND a.customproperty49 = 'True' AND...
Hi Team, Hope you're doing good! We've got below requirements from application team, please let me know if these are doable:1. Remove account button should be visible for only few people.2. When we use radio button in ARS, It generates 2 requests and...
Hi, We have a requirement that when a service account reaches it's 90 days period of inactiveness (after being disabled), A remove Account task should trigger and this will delete the service account from the Disabled Users OU in AD.To trigger the re...
Hello Team,We have onboarded Azure AD connector in Saviynt and executed first time Full access import in nonprod env and it went well. But after that when we tried to do incremental access import its not working. To reproduce that we have added some ...
Hi,We have configured ServiceNow to be end user request form using Saviynt App for ServiceNow and requests are approved in Saviynt. When approved, a task is created under ServiceNow request item for manual fulfillment.However when the Saviynt request...
Hi Team We are trying to create account in highradius and users are getting created in HighRadius. However tasks are failing in saviynt and accounts not creating in saviynt. Below is the json- { "accountIdPath": "call1.message.traceId", "ca...
Hi All, We have one application in SIGA which is disconnected application with Azure based Integration. The role will have Azure group as entitlement. The application team needs this to requirements "when a user requested a new role the old role need...
Hi Team,We are integration new REST based application with Saviynt. New account Creation API is generation common 201 response code for both successful and failure cases with different message in response body.For success case: Response code 201 with...
Hi Team,Is there any way to do uncorrelation of accounts in bulk as we have few invalid accounts imported from target and inactivated already those accounts, but still those accounts are correlated with users. Now we want to uncorrelate/remove those ...
Hello, We have an issue where we want to stop the validation condition when we select 'terminate,' but when we select 'terminate,' we are seeing the system checking the condition." ${(ActionTaken != 'Terminate' && ((newenddate == null) || ((newenddat...
Hi Team,We have got a requirement for Active Directory saying the account should be created / cloned in the same OU where peer has the account and also cloning of groups what users peer has.Can you please let me know how can we achieve this? Regards,...
Hello,We have a requirement in which an application needs to create and update user information in Saviynt using the Saviynt API.We are currently utilizing the out-of-the-box (OOTB) user update API for this purpose. However, we would like to impose ...
HiUserCase: User requests an Enterprise role from ARS along with StartDate and EndDate in the request.All the entertainment in the role gets the same StartDate and EndDate in the Target SAP system.Later when a new entitlement is added to the role, th...
Hi,This is with reference to onboarding of application to Saviynt. We have to onboard an application to EIC and we have the requirement to pre-select a value for Entitlement.Navigtation :Admin - Identity Repository - Security System - Insight (endpoi...
Hi Team,Whenever user gets terminated/access is revoked through certification, which ever access that user has for all application accounts there will be a revoke task created for each entitlement that user has and with that there are multiple emails...
Hi Team, We have a requirement where we want to setup MFA for local admin users to login into Saviynt IGA in case SSO is turned off. We can see 'MFA Configurations' option, but we are not able to find it's documentation related to IGA, we can see CPA...
Hello Team , We have a requirement where we need to assign specific password policy to all those users who possess SAV_ADMIN role in saviynt . How to implement that need suggestion.
Issue Description:We have dynamic filters in ARS page for specific application. Out of all filters, there are 3 filters names Role, Belt and Methodology. If user selects "Coach" from Role filter then Belt and Methodology filters should be Shown and i...
Hi Team,We developed a REST connector to integrate a custom ticketing system for the ARS request management of customer applications. With help of ticket status json we can able to get the RITM status into saviynt, but we had requirement to capture t...
Does Saviynt SOAP connector supports NTLM authentication?? If yes, please provide sample connection json
Hello Team,In our current setup we have configured the Saviynt app in ServiceNow platform. We intend to use ServiceNow as a front end system where end user will request access, approvals will take place in ServiceNow as well and post final approvals ...
Hello,Can I know how these default attributes are displayed in the 'Manage Service Account'? If I want to add more dynamic attributes to the form, how can I do that? Also, could you provide the documentation link for creating dynamic attributes, plea...
On the landing page and throughout the UI, the end user is presented with their name and username (depicted in LandingPage.png). Is it possible to change these instances to utilize the display name, or another property with the user's preferred name ...
Hi Team,We are trying to create a form for guest management. When I click on submit it shows the following: Though in the global configuration, it has auto approval.PS: I created 2 users a day ago. Today when I try to do it,I had few changes in attr...
Hello All,I am building a custom form to understand if we can update email in respective target application using custom UI . I was able to create the form but I need to understand below details if can be achieved : 1) Valid updated email fields : I ...
Hi Team, We are trying to fetch the Tcode information from the request(request type: Emergency Session request) but we are not able fetch or figure out in which table it stores this value.We are using query like below :SELECT DISTINCTSUBSTRING_INDEX(...
Hello,Can I know the purpose of the folder and secret in the Thycotic connector for adding access? We have onboarded the application, but now the requirement is to provide access by raising AD groups for the users. If someone has an idea, could you p...
Hi,We have a requirement:During the access requests, when the user is requesting for additional New account, it displays the Existing account information(Name,Status) as in the screenshot.Is it possible to show the account DisplayName instead of Name...
Hello everyone , I want to hide a Dynamic attribute based on request type i.e for new account request it should be visible but for modify account it should be hidden on the form. The only challenge is that we are using the dynamic attribute in the wo...
Hi,For a Disconnected Application, can we use a dynamic attribute in AccountName rule in endpoint?Based on the value selected in the Dynamic attribute, the account name should be set.Any ideas? ThanksHarish
Our Database team has enabled SHA256 encryption on all the databases as part of the SOX requirement, Connection to Applications which are enabled with SHA256 authentication required Jdbc 5.6 or aboveWhen we updated the SQLJDBC driver from 5.1 to 8.0,...
Hi Team,We need help on Provisioning mailbox from saviynt for users. We have created the exchange and Win connectors. And when we see the document for Win connector we see only account creation and not for email. Can someone help us with the json for...
Hi We are trying to pull user data from the Source of truth into Saviynt, for which the connection json shows successful. However, user import throws an error. We are using url and subscription key to fetch the data.If we hardcode the subscription ke...
Hi,We have a use case that whenever any property of a user is updated via the Update user form for any user, we need to notify the manager as well as the requestor.Though we can notify the manager, how ever is it feasible to update the requestor as w...
Hi,We need to map Service Account Owners of Service accounts in AD under the manager attribute of Active Directory. However, we need to fetch the service account owners DN from their account properties.Can someone help what to write in the create ac...
Hi,As part of deploying the Saviynt Agent, it is mentioned to install the certificateNo further information is given on the same. What certificate is required and how to generate? Any documentation regarding the same?https://docs.saviyntcloud.com/bun...
Hi Team,Does Saviynt support auto cancelation of tasks?Suppose, Access request of the user is pending with the manager approval or Multiple level of Approvals and we want that user's access request to be auto canceled/discontinued ,if the manager did...
Hi we have a requirement that we need to generate the unique CN when the user is created or user name change is updated , am trying to use the preprocessor handler in this , but am not sure abt incrementing the cn if duplicate found and remove all t...
Hi,We are trying to pull data via rest connector for increment user import. However, the lastupdatedate format which we have in the target is in UTC format and we aren't able to resolve the new Date function in Saviynt.Below is the url, which we have...
Hi,I need to change the Account Name Validation/Regex Message when the Regex condition fails.At the moment it shows Account Name Validation failed. However, we wish to change this message to the requestor. Can someone direct how can this be achieved?
Hi,We have a requirement for pre processor, that whenever the companyname and grade of the user is updated, customproperty10 of the user should become blank, else it should remain as it is.Companyname and Grade are the attributes that come from our s...
Hi, We have a use case that whenever a Service Account is created, All users having the SAV ROLE as 'CompanyHR' and having the same company name as the Service Account should be added as a Rank 2 owner, so that they can modify/enable and disable the ...
Hi,We are looking at options to trigger creation/update/deletion of Azure SharePoint sites and fileshares from Saviynt. The AAD group management capability support the equivalent for Teams channel.Ideally, user requests AAD group creation in Saviynt ...
Hi,We have a requirement while we raise a request for a Service Account via the Manage Service Account tile in ARS.We have two account types: Service Account and Common Account. Whenever we select Service Accounts the Requestable Group entitlement ty...
Hi,We are trying to filter Azure AD Groups via the ENTITLEMENT_FILTER_JSON in Azure AD OOTB connector.We checked the following url in postman and it returns 14000 enteries:https://graph.microsoft.com/v1.0/groups?$filter=onPremisesSyncEnabled ne true&...
Hi,We have two requirements for Validation Condition for two attribute sin our Create User Form.1. Mobile Number : It is of String Type and the validation should be it should contain only numbersWe used the following and it isn't working${Mobile.len...
Hello everyone, I am trying to find grant access json for provisioning roles in external MS SQL server database but there seems to be no sample for it : The only sample I see is but this seems to be for internal Saviynt database : {"ENTITLEMENT_TYPE...
Hi,We have reconciled Account Owners via Active Directory and since we cannot recon Owners, we tried uploading the owner via csv file.However, this is not working.Below is the csv snapshot:And we get the following error:
