SC2 Alternative
So my customer is not at leaning to a on-prem component i.e. SC2 client server in the customer env. So could anybody provide more info on option 2 and option 3? Any information would be highly appreciated.
Forum Posts
Dynami Attributes action string.
Hi, We have a requirement if entitlement is selected only then show "country" field as required. If ent. is not selected then don't show the country attribute in dynamic attribute. We have 10 entitlements. in ent. selection attribute action string i ...
Query regarding UserNotInFileAction attribute during Import
Hi Team,Could you please confirm which users are considered by Saviynt to terminate/Inactivate when we specify <userNotInFileAction>INACTIVATE</userNotInFileAction> during import in the connection User Import XML.We tried to test this using both Full...
Conditional statements in Email Template <To:> line
Has anyone used a conditional in the To: line of an email template?I am using <%if (user?.custompropertyXX == 'True') print "user@domain.net, DL-Group@domain.com" else print "${manager?.email}, DL-Group@domain.com"%> I keep getting the manager's emai...
Replace Qualifiers/prefix/suffixes from Name during Import
Hi Team,We have a requirement where we need to replace any qualifiers from the names of imported Users like MR. , JR. , Sr. , II, IV, X which mostly appear as prefix or suffix of names.e.g - Robert Viv IV should convert to Rober Viv, Downey J...
Resolved! Dynamic child attributes do not refresh in user update form
I have a problem with child attributes in the user update form that you can set up in the global configurations under Identity Lifecycle. I already had a ticket with Saviynt, but they say this behavior is standard. However, end users would not expect...
ModifyUserDataJson Query not updating value correctly
Hi Team,We have a requirement where if User email is present in Saviynt but empty/null in the import HR source data, it should not update the email for the User during import,whereas if email is abc@sav.com in Saviynt and xyz@sav.com in HR source tab...
Tile font color change in Campaign Dashboard
Hi Team, Can we change font color white to black in Campaign Dashboard?? Let me know if we can change this In-Process Certification text font color to black. Thanks in Advance Regards,Gaurav
Update account attribute to user attribute in EIC
Hi Team,We have requirement to show AD account last login attribute in User manager cert employment verification stage. Since we cannot display account attribute in employment verification stage, we are thinking to update account last login value to ...
SFTP File Upload
Hi,We have a SFTP connector, which downloads userImport file and imports users. We have a requirement to send back few attributes to SFTP location in CSV format.What could be the best practice to implement this? Best regards,Harish
display child entitlement value in entitlement hierarchy
Hi ,We have a requirement for a DB application were the entitlement value should be seen in the current entitlement as a child entitlement or when its being displayed as " No record found" as followswe have an entitlement type called access and two ...
Use Dynamic attribute in Email Template
Hi, I am trying to use a endpoint dynamic attribute in the "To" field of the email template but it is not working. I referred to this article: https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter06-EIC-Configurations/Creating-and...
Database kerberos/windows authentication
Hi I am trying to set up kerberos/windows authentication for a DB connection to a MySql server. I am reading through the documentation and there are a handful of operations and files that look to have to be done on the saviynt server. Is that correct...
uploading entitlements from CSV Under the Other entitlements details Tab
Hi ,We have a CSV file that contains a group name and its associated another group for instance group A is an entitlement and group B is the associated entitlement to group A so that if a task is generated for group A , group B should also be auto as...
Comparison of user.customproperty10 OLD VALUE and NEW VALUE
I have a requirement to run an SOAP query for deleting a dealership from an account , I am able to get it down using below query.<I_DEALER_IDS>${user.customproperty10}</I_DEALER_IDS> Now I have a requirement that i want to compare user.custompropert...
Resolved! Change Label in Upload User Preview
Hi Team, We want to change the label for attribute while uploading the user via CSV import. Where we can make this changes in the Manage Label I am not getting exact attribute name. Instead of 'Customproperty5' we have to show here 'ActionType'
Resolved! Entitlement Campaign Configuration - Entitlement Query
Hi,I was looking under Data analyzer to get the attribute for queries that we specify under 'Advanced Campaign Configuration, but could not find any.Under 'advanced campaign configurations', we need a report that gives us the 'entitlements query', Is...
Error Encountered while submitting update user request form.
We have configured the Register User form in Saviynt. When we fill the user creation form fields and click on submit, the user will be created, and all form fields are updated in the user's details. When we open the update user form, select the user...
Resolved! replace apostrophe and period character in lastname
Hi ,We are getting names from source as for instance ( Fernoldjr. , O'connell etc.) which then creates email as in firstname.fernoldjr..com To escape the special characters (',.) below is the preprocessor I was trying however , I was getting syntax e...
Getting entitlement value in Request form from dataset
Hi ,we have a requirement where we are getting a csv with information of an attribute and its particular group Can we use it as part of a Dataset and call it in the request form for example attached is the file where we have a country and its associ...
saviynt rest access and refresh token expires - any way to refresh indefinitely?
hello we have a saviynt rest used to create saviynt account, and update username etc.. the access/refresh token was platform generated via webauth service and it expires every 1 hour/3600 hours. Is there a way to keep extending it indefinitely? if so...
Resolved! Replace sAMAccountName in USER_ATTRIBUTE - AD Connector
Hi All,I have an AD Connector where we mentioned accountname rule & sAMAccountName to provision as - ${user.username.toLowerCase()+'admin'}And the provision of the account is working fine and the sAMAccountname also displaying like Ex: "cjackadmin". ...
User Import Source System Update/Change
Hi Team,As of today we are using Azure AD as the trusted application for user identity to Saviynt. Going forward we have a new requirement to add another trusted application as Success Factor from this we have about 20% of users will be imported and ...
Resolved! Termination email body sending incorrectly from update user rule
When user update rule fires off for Terminated users, I have notify as email. The email is hitting the mailbox, but the only thing in the body is the word true. Below is the html I am expecting to render. <!doctype html> <html xmlns="http://www.w...
Is there an option to disable emails to be send to users?
All,I am in a process of configuring the staging environment and I was wondering if there's an option of disabling the SMTP configuration. Currently I just changed the information on the SMTP settings to avoid sending emails, however, it is creating ...
Capturing organization updated attributes in email template
Hi,We have an email template to notify the owners about all the organization related attributes update.using ${customerhistory.<attrib_name>}, I am able to retrieve the current value.Now having this solves are concern to display org name and other at...
Resolved! Email generation rule for duplicate email.
Hi, We have requirement that some users have multiple first names or last names (i.e., Lara-Rodriguez, Pyaram-Shashidhar, Cotto-Sediles, etc). In this case, the email generation rule should be as follows- If the first name or last name contains a hyp...
Resolved! SQL in comma separated enum list
Hi,I'm using an Enum dynamic attribute so it stores value in comma separated list like 'AV,EP,DR'I need to check if a value is inside this list like 'AV' is in 'AV,EP,DR' ?I try some sql code in data analyzer but it doesn't work, some functions are n...
mapping enddate from HR to saviynt issue
we added this for the ENDDATE: "ENDDATE": "EndDate~#~datetime" but Saviynt is not updating the field. So we tested with "CUSTOMPROPERTY57": "EndDate~#~datetime" to know if we can get something and we do receive the value in CP57. Do you have any i...
How can I get a copy of the Saviynt Soc 1 Type 2 report
How can I get a copy of the Saviynt Soc 1 Type 2 report?Need it for SOX Compliance audit. thanks
Queries on Analytics file download
Hi, 1. After running an analytics report and downloading the file in CSV format, the file contains an additional character(') before phone numbers. How can we avoid this?Excel format file contains the right values(without any additional characters) 2...
Resolved! dynamic Attribute - manager value.
I have a dynamic attribute which should show user's manager. I am trying to get the value populated using the query. select users.manager from users where username='${users.username}'or ${users.manager}. but i am not able to get the value of manager...
Resolved! Dynamic Attribute type DATE in Create user
Hi,I must to setup default value for dynamic attribute TYPE: DATE in create user request for 90 days after today.In documentation, there are only two examples for current day:${currentdate.format('MM-dd-yyyy')}${new Date().format("MMM dd, yyyy")}Any ...
Different workflows as per user attribute
Hi Team, We have use case regarding to workflow where we have to check if user attribute cp1 is 'ABC' then user creation approval will go to 1st workflow, If cp1 is 'XYZ' then user creation workflow will go for another approval process. How we can co...
SIEM Integration - Azure Sentinel - unique Identifier from Saviynt
Hi Experts,We have been working on integrating our Azure Sentinel system(SIEM) with Saviynt. We have followed the guide available on the Docs portal (https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter20-EIC-Integrations/Saviynt-...
Resolved! Issue with Term date, saviynt disables the user after activation
hello, there is an issue with Identity Term Date. When a user is disabled using one click disable, this Term date feature populates and termination comments are added. Now, when the same user is rehired and activated, saviynt disables the user the fo...
Resolved! Add to role only if account exist at endpoint
we are creating BR roles using technical rules but we want to add only those users who have a account at endpoint. Any new users who's account is not existing should be omitted even if User matches the tech rule. if his account is created on later d...
Workflow condition
Hi, We have a requirement if users CP3 ='x' or 'a' in that case it should go for approval to a certain usergroup and if not then to a other user group.can i directly use if else here if(users.cp3='a') then assign it to a specific group ?
Resolved! Referencing variables from externalconfig file in email templates
Hello everyone,I'm trying to customize our email template where I want to parameterize some repetitive values. I've defined these variables in an external configuration file and restarted the app. However, I'm not receiving anything afterward. Can yo...
How to restrict task getting generated for a specific application(Disable Account Task)
Hi Team,We have a requirement from client to stop generating disable account task for a specific application. Please let us know how this can be achieved?As per our current leaver update rule, we have selected to disable all applications accounts and...
Email Template variables - Exported Report - not working
When we hit Export with in a Certification, we get a pop asking us to download a report. However the email template variables mentioned in the Saviynt Documentation do not work. same issue as poreviously mentioned in https://forums.saviynt.com/t5/ide...
Resolved! I want to trigger an email notification user/group using analytics/query - disconnected app
I have a situation where, when a user is given birthright access via enterprise roles to a disconnected application, I need a query to trigger email notification to admin or admin groups to execute tasks. Endpoint level email template only triggers w...
Resolved! trigger email notifications for admins/birthright access disconnected application
Is there a mechanism available to prompt email notifications to administrators for processing requests related to birthright access for disconnected applications? The tasks should be initiated automatically, and once the emails are dispatched, the st...
How to manage cutomproperties efficiently
Hi.Custom attribute on entitlement value is running out since we are too many attribute we need to store.Is there any way to store multi-values in one customproperty? I'm thinking below ways to achieve this requirement for now. Downstream items that ...
How to view soap response payload?
Hi I was wondering if there is any way to view the api response when using SOAP connection? We're trying to troubleshoot an issue and we have no way to tell what the response is. All of them just have various response lengths
Resolved! Service account name rule is appearing in the form
Hi ,We have created a Service account rule in Endpoint , It is generating names as per rule for the service account form. But the syntax of the rule is showing in the field for Account name before generate the name. How to hide this ? RegardsSaranya
Trigger certification from user update rule, but after x number of days - how to?
I have a situation with a client, where we are dealing with movers. So, for example if an employee changes his/her job - we want to give new access and trigger a certification, but this certification should only be triggered after x number of days. I...
SOAP response body is showing as CSV values when decoded
Hi we're integrating with UKG/Ultipro via a RaaS Soap connection and trying to import users via the raas. Here is the import config we're using: { "CONNECTION1":"Logon", "REQUESTXML1":"<s:Envelope xmlns:s=\"http://www.w3.org/2003/05/soap-enve...
how to exclude birthright roles and access from certifications?
so, as part of a mover scenario for example, I'd like to provision access to user and launch a certification, but exclude birthright roles and access provisioned to user. How would l go about achieving this. I found this thread to be helpful (https:/...
Assign connected application's entitlement after assigning disconnected application's entitlement
We have a requirement to assign an enterprise role to users which contains entitlements of both connected and disconnected applications. This will create two pending tasks to provision access to the user in both the Applications.The connected applica...
