Hi All,I am using multiple calls in CreateAccountJson and one of the calls is to get the user's manager & populate it in the target applications' manager field. I am trying to reference the manager's username to achieve this. I am trying the below ca...
Hi,In ADSI connector when we try to provision the access with wsretryjob it is failing. The account provisioning job is successful. In the connection level we added ADD ACCESS JSON as per the documentation. Below is the error message. Do we need to c...
Hi,We have a requirement to design a two level work flow, once user requests for account and entitlement access to an application both the request (account and entitlement) should go to manager and once approved only the entitlement (access) request ...
Hello, We are trying to provision user mailbox from Saviynt. We deployed agent on Windows server, that part is working fine, we tried to write to a file and some other basic stuff. This is script in our CREATEACCOUNTJSON:{"CREATEACC":["Script=\$usern...
Hi All, To create accounts in target system, we have Configured the REST connector. The API response code for both success and failure is 200. How can we configure success and unsuccess responses within CreateAccountJSON? Below is the response body w...
Hi Team,We are facing issue in re-generating the token in connection json. We need to manually update the access token from postman.Attaching the jsons. Tried with refresh token also but unable to refresh the token as there is no error path, where we...
Hello,The usecase is that there should be no change in certain attribute if customproperty is 'noupdate'/ blankThese are the code lines that work:"department": "${if(task?.accountKey.customproperty10 == '') {user?.departmentname} else {user.departmen...
Hello,I want to send email to account owner for new password communication when a new account is created (via JarConnector). I have configured the password policy for the target application/endpoint.However, I cannot get the new password from either ...
Hello,I want to create a password policy that can only allow using alphanumeric characters except character a or A.How should I configure regex to let it check no a or A typed?I tried this but does not work: [b-z,B-Z,0-9]Could you please help?
Hi,We are trying to implement one User Update rule which should look like below-(a.leaveStatus is updated or a.email is updated)AND a.customproperty15='XYZ'As our version is old, it doesn't allow to put parenthesis as we requiredHence we are using Ad...
Hi,Has anyone built a solution with Saviynt for the creation of Azure Guest users?I'm looking to create a portal through which colleagues can request guest account creation, providing a minimum of information (e.g. given, last, company, email), poten...
Hi All,So we understand from Saviynt that the way to how enable and disable via PS script works is that the mailbox will be created for an AD user as they request a certain group membership.Having been an exchange admin for some years I have never ca...
Hello,I have a birthright technical rule to assign an enterprise role to a user based on user attribute values during new user import.After rule executed, the user have enterprise role assigned and corresponding entitlements provisioned.So far so goo...
Hello team,When I click request access for others, select the user, then select an target account to modify.when it load the account data on update account form, it throw "error" on UI without detail information,Then I go to debug log and found this ...
Hello Team,I have defined over 50 dynamic attributes on an endpoint. How can I easily export these definitions into a CSV file that can be easily migrated to next environment?if no export/import available, What about Database insert/update statement ...
Hi,We have a requirement to make cn value as lastname,firstname for ADSI connection. In create account json this cn value when passed like user.lastname+','+user.firstname it is not provisioning but works with user.lastname+user.first name.Appreciate...
Question on AD connector provisioning for AD group assignment : 1) Will a technical rule generate an add access task (for adding an AD group) for a user which does not have an AD account yet ? 2) will this add access task get provisioned successful...
Hi,we have investigated the following issue. The account naming attributes (cn, dn, name) for service accounts are not updated on update. The assumption was, that this is handled via the ACCOUNTNAMERULE, but seems like it is not the case for service ...
Hello Saviynt Experts,When I review SFTP Connector deployment instructions, it has this step:Step 9: Use the following query in the job triggerupdate EXTERNALCONNECTIONTYPE set IMPORTPARAMSMAP='jobtype:2,importtype:1,importtypeoptions:accounts' where...
The ServiceNow request form will be filled in by the Managers for contractors onboarding and approval should happen in ServiceNow and request should be fulfilled in Saviynt IGA. Here the source of truth for contractors is ServiceNow.The User access p...
Hello Saviynt Expert,I am trying to use JarConnector to implement in house application account provisioning.I wanted to check what arguments will be passed in from Saviynt to my custom class. Here is my configuration which exactly follow the JarConne...
Hi ,We have a requirement to show Dynamic attribute values based entitlements selection, please find below marked UserRole(Dynamic Attribute) one has to go down to the permissionSet(Entitlements) any inputs on this ?
Hello Team,When I request an account for my self. it is not allowed because I already have an account. but my account list is empty, I don't actually have the request application account. What settings block me for the request? How can I configure it...
Good day all,Just wanting to find out if anyone has a solution to mask a random password created in AD from LDAPS via CreateAccountJSON.Problem is if you do not generate a password, then account gets created disabled in AD and customer would need to ...
We have an Office365 connection configured to POST to Win-PS and execute PowerShell to change mailbox properties. The powershell payload sent over to Win-PS downloads a PS1 file from our own hosted URL and executes it with our specified parameters. W...
Hello Saviynt Expert,I have created a technical rule to assign an application account to a new user. I expect the arstasks table for this request will set assignedFromRule with the rule id /rulekey which triggered this event.However, when I search th...
Hello Saviynt Expert,When my connector receive a provisioning task to execute such as createAccount. I want to know if this task is triggered by a rule or by a role assignment or by a manual application account request.Can I get such information via ...
Hey Team, We have a requirement where the parent-child dynamic attributes are configured and as the documents in doc.saviyntcloud.com specify, these attributes cannot be used in Action String if 'Hide on Create' or 'Hide on Update' checkboxes are sel...
Hello, we have a usecase where we only want the attribute to be updated if there's a null value/ or if it is not populated by a 'noupdate' value in a customproperty10. what should be the syntax for that?So far, I've tried these:"l":"${if(account.cust...
Hi,I'm trying to import users with the schemauserjob that is well working for basic user import.But, I need to make pre process on these with some json code. From the sample of the freshdesk I see that it's possible:But when I have this line as last ...
Hi,I get the below error while Provisioning access to AD. AD account is created successfully but the entitlement is not getting assigned.Error:Error while ADD operation for account-_____ to Group-___________ in AD - [LDAP: error code 32 - 0000208D: N...
Hello Saviynt Experts,When I assign a role to a user. this role should have an application account created but no any application entitlement entitled. I have two questions for this situation:1. How can I put such account to a role? looks role only ...
Hi,I am getting the below errors while provisioning the entitlements for AD and Saviynt. Accounts assignment tasks are getting competed but the entitlement tasks are not getting completedAD:Error while ADD operation for account-XXXX to Group-Entitlem...
We are working to set privileges for azure connector. We are trying to understand a few possible options around the same .1. how to make it mandatory that the user selects a privilege. If we select the mandatory checkbox in the privilege it still doe...
Hi Team,Is it possible to configure the "Enable copy" option to be visible only for modify account only and not for create new account for a particular application?
Hello Saviynt Expert,I want to update an application account when a user is assigned to an enterprise role. the account attribute value is depend on the role name.To achieve this purpose, in my updateAccountJSON, I want to set the attribute value by...
Hello Saviynt Expert,If you click any endpoint, on its endpoint details tab page, there is a field named "connection configuration" with default value:{"conf": [{}]}What is this used for? is it used in any out of box logic? Can I put anything in it? ...
Hi,We have a requirement to create 2 level workflow. 1st approval is by manager and 2nd by the entitlement owner. However, condition is that when manager is the requestor then the approval should go directly to entitlement owner. How to check if req...
Hi All,I have a requirement like all the existing users in saviynt should have X application account has by default through automation.I have created one technical rule like user status key equals 1 then provision X application account to users and a...
Hi,We are trying to create account in AD LDAP:*******************:389But we are getting this error while executing tasks Error is : [LDAP: error code 53 - 0000001F: SvcErr: DSID-0311A126A, problem 5003 (WILL_NOT_PERFORM),we are getting connection fa...
Hi,We have a requirement like-there are two set of entitlement valuess available under ADSI endpoint. One set contains xyz other contains abc in entitlement value.We want to configure account name rule only for the entitlement values contain abc.Any...
Hi,We have an issue with one user, it is not creating pending task even though it is satisfying the condition. In the update history we can see that it is triggering the rule but in the logs following is the error.------2023-03-01T10:27:56+05:30-ecm-...
Hello Saviynt ExpertsWhen I follow the custom connector documentation to create new connection type, I don't see the option of Enhanced Connector Framework: Select True to retrieve the configurations. And I don't see any out of box connection type ha...
Revoking multiple revoke access for an end user is causing the 1st entitlement to not getting revoked from application end while other remaining remove access are getting updated.For eg: If U1 has 5 entitlements and we trigger remove access for all t...
Hi Team,For Azure AD Integration able to import all the Entitlement Types as per Saviynt Documentation.But as per Application Team the requirement to import and assign Azure Roles. Couldn't find anything regarding Azure Roles in documentation.Is Azur...
Hi ,Is it possible to add a privilege with an entitlement in the emergency access role. regards,Vinod Madineni
We have a requirement for leaver scenario like -Removes account from all security distribution groups except for Azure AD licenses along with others like- Disable Saviynt user identity, -Remove all access, groups. We are trying to implement it throug...
Hi, We have a requirement as below Connector Type: REST Need help on passing ARS Comments in JSON. We tried below syntax's but didn't work, --> tasks.comments --> task.comments --> task.requestKey.comments --> arsTasks.requestKey.comments --> r...
Hi,We are integrating Saviynt with ServiceNow using REST connector. Does anyone know, what accesses need to be assigned to the servicenow service account (from the servicenow side) so that Saviynt can call and create APIs / tickets?Thank you!
Hi,We are implementing the birthright use case and emergency access role.Is it possible to assign a privilege with an entitlement through technical rules and emergency roles. Regards,Abdul Gaffar
