Hello, We are trying to provision user mailbox from Saviynt. We deployed agent on Windows server, that part is working fine, we tried to write to a file and some other basic stuff. This is script in our CREATEACCOUNTJSON:{"CREATEACC":["Script=\$usern...
Hi,There is a requirement that we need to retrieve the userdata which got modified with file upload.The below query works to get all the users who got updated(even if there is no change in data). But we need only the users whose data(firstname or las...
Hi Team,Is there any way where we can change the header value in completed tasks to a customized string or name ?For eg - we want to change creation date as AD Start Date Thanks.
Hello, my team wants more clarity as to what these visuals mean. To our understanding the out of band graphic shows 3 accounts deemed privileged or a risk rating of 4. While the other graphic (low risk shows the users and the access that has a lower ...
Hello, my team is looking to capture the information on all the users that have selected the "Does not work for me" action during a user manager campaign in a report and possibly a dashboard view. Is there a way to pull out that information in a repo...
Hello,Hope you're doing good!We're trying to fetch user manager email value using binding variable, we've been trying with few of the below variables but unable to fetch the value. We're trying this in REST based connector. Please let us know if you'...
Hi,We are trying to implement one User Update rule which should look like below-(a.leaveStatus is updated or a.email is updated)AND a.customproperty15='XYZ'As our version is old, it doesn't allow to put parenthesis as we requiredHence we are using Ad...
When utilizing the dashboard, we would like the information from the charts and widgets to take us to table that provides more detail on that specific feature. For example, when clicking on (Summary of User Manager Certification-Approve/Revoke Entitl...
Hi,We have created an Azure Connection and EndPoint. The Azure endpoint brings in the Azure VM's and other resources as entitlements. We are able to see Entitlements Hierarchy in the Accounts which are associated with the connector and we are able to...
Hello Everyone,We have a scenario where customer wants their Service desk to be able to delegate or assign pending approvals that is for instance with a manager and not being approved due to the manager being out of the office and obviously not havin...
Hi,I get the below error while Provisioning access to AD. AD account is created successfully but the entitlement is not getting assigned.Error:Error while ADD operation for account-_____ to Group-___________ in AD - [LDAP: error code 32 - 0000208D: N...
Hi,I am getting the below errors while provisioning the entitlements for AD and Saviynt. Accounts assignment tasks are getting competed but the entitlement tasks are not getting completedAD:Error while ADD operation for account-XXXX to Group-Entitlem...
Hi Team,Our customer has a requirement to pass the comments and justifications from requests to pass through to the ServiceNow ticket.Around 2 years ago ,we had already opened a ticket with Saviynt Support with Saviynt Support and we received a resp...
Hello, I have a question concerning the workflow for a user manager Campaign. Our team understands the logic that in order to see entitlements within the Step 2 Data table a user must action on their user's employment status in Step 1. During testin...
Team, How to get the selected endpoint details in the query which I am using for Dynamic Attributes on Service Account page.Use Case:I need to copy certain CP values which are available at endpoint level to the service account that is being requested...
When configuring a campaign, a campaign admin has the option to select users from Active directory list, however the current search functionalities will not populate a user if both first and last names are entered within the search bar (see image). I...
Hello, Our team is configuring a user manager campaign with both step1 employment verification and step 2 Access approval. In our configurations we only want users to consult in step 2. When a user is consulted, they are able to view step 1 which is ...
Hi all,while trying to export some features from preProd environment to production, we are getting an : "invalid credentials error", but when we log into production with the same user, we are able to log in. Are we missing some piece? Regards,PV @Jus...
Hello,Thanks for your interest in Saviynt Training. Please find the Saviynt Virtual Instructor-Led Training Calendar below for the year 2023.Note: Customers who are interested to register for any of the listed training sessions, please contact your S...
Hello everyone,The current version of Saviynt we're running doesn't support removing entitlement owners in bulk.So, I tried a different approach - a custom query job from the Job control panel -> Utility -> Execute Extension queries (customqueryjob)W...
Team,We noticed that Transfer of Service Account Owner is not happening on termination of actual owner.We have other actions like Transfer Entitlement Ownership, Replace User in Requests in Flight, Replace User in ResourceOwner, Replace User in Campa...
Looking for the best option to automatically upload CSVs to a Savynt instance with which to parse with Schema jobs?Does the API have an upload method to push CSVs into Datafiles?ThanksSB
Hi All, We can be able to create Normal Dynamic Attribute but not able to create a Dynamic Attribute with a hyperlink which should display in the ARS form. Just like the one in the below Screenshot. The hyperlink in Screenshot is created from Backend...
Hi,We are implementing the birthright use case and emergency access role.Is it possible to assign a privilege with an entitlement through technical rules and emergency roles. Regards,Abdul Gaffar
Team,I am looking for information on Import of Password Policies from target apps and the supported functionality in Saviynt. Appreciate your inputs.We are aware of support for AD.Requirement - The IGA platform/service can import password policies (c...
I wanted some clarification on what happens when the Add Certifier (consult associated Account/Entitlements) is checked on during a consultation to another user .To my understanding if a user consults and checks off this box it will also consult o...
Good Afternoon,We are attempting to make use of the #CONST# syntax within the rest connector to populate the account type value based on the value of an attribute returned by the API Call.Our colsToPropsMap within the ImportAccountEntJSON associated ...
Hi,A few questions around the Service Accounts :1. When we open the Accounts from Identity Repository and go to any account object, then within the that account, there is a separate tab named Owner which shows the owner of that Account.But when we op...
Hi Team,Is there any alternative of sending Password to the user other than plain text? Best regardsHarish
Hi ,we are mapping target attributes from the postman call as specified below.we want to parse to attributes from the below API call as an entitlement value.please specify the mapping functionality for the below API call , the entitlement value shoul...
Hello,Any leads on what are the advantages of using ServiceNow as an audit system vs as a ticketing system?The FD doc, is not much helpful on it. Looking forward for some real time experience on same.Regards,Priyank
Hi All,We are trying to importuser in through User Import XML file content.<dataMapping><sql-query description="This is the Source DB Query" uniquecolumnsascommaseparated="username"><
Hello,I have a question if the host firewall on the SC2.0 client box needs to be disabled. Per our security policy we cannot have the host firewall disabled. In view of this what are the alternatives available to get past this issue.Thank you.Regards...
Hi,We are implementing the use case of importing non-human identities from target application(Azure).The target application consists of service principals, foreign principals associated with the access.we tried to inculcate the api call from which we...
What constraint does the grails.plugin.springsecurity.saml.maxAuthenticationAge have relative to the IdP "session logout value"?When consulting the documentation, there is conflicting statements- one stating is needs "more than or equal to" and the o...
Hi Team,We want to restrict, the user's end date should not be extended more than 90 days from the user's last end date by using the update form.Validation Condition : ${UUR_UdynEndDateRW - users.ENDDATE <= 90}UUR_UdynEndDateRW :-Dynamic attributeBut...
Hi,We have a requirement to create OU from Saviynt in AD. It seems this is not currently supported via the AD connector. It was however suggested that it can be done using Windows PS connector. I did not find any documentation that explains how to cr...
Busy reviewing some Dashboards and came a cross a note in the "Understanding Dashboards" documentation: "When you run the DashboardRefreshJob, the chart property is replaced accordingly based on dashboard type."Is it required to schedule the "Dashboa...
I have a question as to who this email will be sent out to/ triggered by. Will the Certifier that revokes an entitlement receive the revoke task email or will the user that has their entitlement selected to be revoked receive the email that their acc...
Hi Team , We have below condtion in email template - CC <% if(null!=user?.secondaryManager.email && user?.secondaryManager.email!='') print "${user?.secondaryManager.email}" else print "${manager.email}" %>if block works and prints secondary email bu...
Hi, Could you validate if this is still valid information and/or if there is any plans for changing this: According to saviynt support, If a user has two sav roles with the same accesses but different permission levels (ex: read only access to conne...
hi Team,1. we created a Custom SAV role , Trying to add advanced query with logged in user as dynamic variable"select a from Users a where a.title='Manager' and a.manager=${users.id}" but its retruning results as "select a from Users a where a.title=...
Hi, We have a requirement, as to when the company of the user is updated, their email should be updated. This has been achieved via User Update Rules. However, with the new email, their Exchange Account SMTP should be updated and the old SMTP should ...
Hello,While testing the out of band detection feature 'Deprovision Access and Re-create Access request', we noticed that the new Add Access request created was auto approved.We don't want it to be auto approved. The Add Access workflow is set in secu...
Hi all,We are trying to extract the ARS requests data submitted for last 7 days . We earlier were using ar.REQUESTDATE to pull the records. When we tried to modify the ar.COMPLETEDATE ,we do not get the data.Basically our customer would like to view ...
Hi,The Notify Certifier email isn't working and we get the following error:No such property: attestations for class.Although if we see freshdesk, we have exactly used the same binding variables as mentioned in the doc below:Link for reference : https...
Team,Is there a way to get list of users who qualify for BR technical rules based on the basic or advanced conditions that are configured in rules.For example -User attributes - state = test, country = abc, location = test1BR Tech Rule - a.state=test...
Team,I am looking for information on upload limit for technical rules via json file format. When uploading say 100 tech rules via file, saviynt not able to process them and throws error in logs.Where can we change the configuration to accept more vol...
If I want to filter out users that did not record a response for their certification and launch a new campaign with those selected users under which query field, would I need to use. Under the Select certifier there is an option to place a manual que...
Hi Team,Could you please let me know if there is a way to restrict specific characters from the temporary passwords that get generated and sent to the users once they are onboarded.When we look into the AD Connector, I see there are password related ...
