and more in a single search tool across platforms. Read the announcement here. |
Hi Team, we would like to implement a logic to disable JSON in the active directory, where it checks before proceeding. However, it seems that the logic(below highlighted) is not functioning properly.The highlighted logic mentioned below is working p...
Hello,Is there any way to provision the entitlements coming from HR source to AD? We have usecase where account-entitlement data is getting imported from HR source under account profile and we need to provision the same entitlements into AD.eg.User A...
I am currently using Saviynt version 24.3 and I have encountered a couple of challenges while trying to integrate Saviynt with a Windows Server for mailbox creation via PowerShell scripts.Error Handling Issue: Despite receiving a status code of 500 f...
Hello,I'm using the option to remove access in all applications when some rules are triggered or for out of band access detection.However with Salesforce Application I have this issue when task are created : My configurations :Entitlement Type : Dro...
Hi Team,I am encountering a 400 error unauthorized when attempting to call the API for adding a user to a role. However, I am able to successfully call other APIs. This is the first time I have used a role request. We have a use case where we need to...
Hi Team,We have come across a use case where the customer wants to configure a functionality in Saviynt as to if in case a user is terminated, then all its access should be transferred to the user's manager for that particular endpoint.We thought of ...
Hi,We would like to manage Siebel DB users through Saviynt where we should be able to perform actions like enable, disable, and change password.I could not find any intact documentation which helps with the permissions and queries that can be used fo...
Hello Team,We have a REST basis system which does not manage the status of the account.We implemented dummy APIs and always return success for the disable and enable account request.after disabling an account, the account reconciliation will restore ...
My team is looking to include disconnected applications into our quarterly access certification campaigns. Would it be possible to create a disconnected Security system and have that security system connected to multiple disconnected endpoints or doe...
Hello all,We are seeing that there is a technical rule (birthright and detective) that is not triggered when a new user is created from SAP import. As you can see the user matches the condition and the rule trail shows those attributes populated.Can ...
For Oracle EBS application, under request history and approve request page we are seeing "Third Party Evaluation" tab under access conflict (SOD). This tab is visible since 24.2 version upgrade. Could you please give more information on this tab, is ...
Is there a way to keep the Saviynt accounts active that are associated with disabled AD accounts? I have a use case that requires this.
Hi, This is with reference to the below offboarding SAV roles. ROLE_HR_ADAEQUARE_OFFBOARDING ROLE_HR_CORELOGIC_OFFBOARDING ROLE_HR_COGNIZANT_OFFBOARDING Issue: Once the end user is assigned with any of the above mentioned Offboarding SAV role, th...
Hi Team,We are trying below query to reopent the errored task in ARS through analytics. Please confirm if below query is good to proceed.select taskkey as tasks, STATUS , provisioningtries, 'reopenTasks' as 'Default_Action_For_Analytics' from arstask...
We have a situation where Saviynt sends the request to reenable an AD Account and the tasks complete without any errors. But the accounts are not re-enabled in AD. We had to manually enable them. Any idea why this would happen?
Hi Team, We are getting errors while creating an Account in AD with passing proxyAddresses(SMTP values). Currently, we have achieved to pass proxyAddresses as below and it's working fine. But we want to implement this only for Thailand users. "prox...
Hello, I have the Job below that is failing now i dont't know why. I use this Job to update the status attribut for external worker.The error i get :ImportUserJSON IN Saviynt For Saviynt connexion : Anyone can help please? Regards,Ray
We are connecting Oracle ERP from Saviynt IGA and creating the Oracle ERP account and assigning the responsibilities via request submission.We have done the integration with the help of generic account creation (SAVIGAUSR). We are connecting Oracle E...
Hello Everyone, I am trying to provision security context for oracle users , however I need to know the correct URL or the Add access json for the entitlementtype "Security Context" as I am unable to find the correct one in Saviynt documentaion and O...
Hi TeamI am Facing an issue while deleting accountAccount is removed/deleted from target API but in saviynt task is still in pending state provisioning comment :{"call1":[{"headers":null,"message":"","statusCode":null,"description":null,"status":"Fai...
Hi,We have a requirement, that whenever the Plant (cp20) of a user is updated, the manager of the user should be notified.Hence, via user update rules we can Notify as an email, the new value of cp20 in the email template. Is there a way by which we ...
In Review Page ,we are observing a new field "Approval Confidence". What is the purpose of this field and is it expected in 24.4 Version. Steps to recreate: 1.Click on Request Access for others. 2.Select user and add the application (Appraisal scope ...
remove access Tasks are not picking up by prov job. during investigation we got to know that in existing comments there is something like- [04-15-2024-total task count (35) is greater than defined limit (30)]. [04-15-2024-total task count (35) is gre...
Hi everyone,We're currently working on integrating Active Directory using the ADSI connector, and we have a requirement to populate extensionAttributes in AD. However, we've encountered an issue where the AD account is being created but fails to popu...
Hi there - We are in the process of aligning Saviynt to a role framework at a customer that will has approximately 17K users and will have 1.5K roles based on a job code parameter that is being ingested from the authoritative source. We have a scenar...
Usecase: Tasks are being generated for the deleted enterprise role. After deleting the role, the role status changes to inactive. We went back to the technical rule and updated the deleted role in the object. Saviynt should automatically validate the...
Hi,I'm using a disconnected application with an Helpdesk connection. So we create tickets and retrieve their status.I was wondering if there is a period after tasks in pending are automatically set as discontinue ? Like if after 30 days I don't get a...
Hi,I have a case for one of the application. When we raise an Add Access request for the endpoint, this created an add access task. upon the add access task completion it is triggering an update task. Attached the screenshot.
Child and Parent group assignment is not happening while creating the Entra ID Group from Saviynt.The task type "Add Access Entitlement" is getting created for Child and parent Group assignment. These tasks are not processing at all.We are not gettin...
I need a way to differentiate a task based on whether it is a request or a Birthright. I tried to enter in below code for a REST connector but it is giving me below error\"DataSecurityGroupId\":\"${if(task.source.equals('ZERODAY')) {'EA_CC_TEAM'} els...
Hi,I try to retrieve the taskIds values of an ARS in HelpDesk Connection (CreateTicket JSON). I juste use this to try : "httpParams":"{\"Ids\":\"${taskIds}\"}",This variable works with my other endpoints so I don't really understand the problem. The...
Hi everyone, I currently face the issue, that the ExecuteOn feature is not applied as expected. SetupI created a test UUR as seen im image a1.png. A rule that should create different tasks with different start dates.IssueWhen I trigger the UUR (via D...
Hi,I am trying to do instant provisioning on "A" application. It is working when i use "Request New Access" option. But when i use "Request Access", access is not provisioned immediately. Do we have to have any configuration setup for classic UI?I do...
Hi, coming to the community for advice to ask if they've seen this before.Issue: New Account tasks created where an Inactive Account already exists on the EndpointWe have an 'AD' type Connection to our OpenLDAP directory. We have Disabled/made Inacti...
Hi Team,We have a requirement from client to stop generating disable account task for a specific application. Please let us know how this can be achieved?As per our current leaver update rule, we have selected to disable all applications accounts and...
Use case:We need that when a manager, which, is a manager of internal employee and external users goes to request access for Others, it only shows him the applications available for that specific user, for example, if the user is an internal employee...
I am trying to set the value of HomeDirectory in AD in the create account JSON, if I map like this, value is able to get set "HomeDirectory":"\\\\cntr\\workstationsdfs\\RedirectedFolders\\${user.username}however after RedirectedFolders, there is a bu...
I have a situation where, when a user is given birthright access via enterprise roles to a disconnected application, I need a query to trigger email notification to admin or admin groups to execute tasks. Endpoint level email template only triggers w...
Hello,We have a use case where we 7-8 technical rules with combination of 10-15 job codes attributes, and we want to assign dynamic value in Active directory extension attribute for these different technical rules.For example:-If SQL criteria in tech...
I am trying to change the user association or assign a user for a large number of accounts associated with an endpoint via CSV. What is the proper attribute in the Upload Preview to select and which user attribute does it look for? I have uploaded th...
We are trying to populate the managers attribute in AD via the create account JSON below.Also, The users have two accounts for the same AD endpoint. Do we need to specify the specific account on the endpoint to populate the manager attribute in AD du...
Hello,I am importing SAP users from a FM and when they are loaded into Saviynt I get this error:2024-03-19T13:50:39+01:00-ecm-worker-services.ImportSAvDataUserService-quartzScheduler_Worker-10-5kvhg-DEBUG-Proceed to Import for records - > [00020482, ...
Hi,i’ve created an analytics report with default action “Disable Account”.When I run the AnalyticsV2 Job with this defAult action option Checked, it generates the “Disable Account” Tasks -> Normal behaviorWhen I select a security system in Analytics ...
Hello all,I have workday source of truth. i am only reading from workday (it is a one way connection). I imported all the users with the attriutes required.i noticed an issue while testing, my client declared an offboarding for a user he set terminat...
Hello Team,We have a requirement to know the Identity Roles information when provisioning accounts.How can we access the identity role information when constructing createaccountjson?Saviynt REST API can return roles info for a user. Can we call the ...
We have a requirement to assign an enterprise role to users which contains entitlements of both connected and disconnected applications. This will create two pending tasks to provision access to the user in both the Applications.The connected applica...
Saviynt Version: v24.2Hi Team,For all users, we are storing their DN value on their AD account customproperty4.While provisioning AD account for new user, requirement is to store his/her manager's DN value on 'manager' attribute in AD.Tried using bel...
Hi Saviynt forum,As part of the access request process, I need to configure AddAccessJSON and configure a Provisioning Job (WSRETRYJOB) with that target application. The job seems to run successfully (checking from log seems no error) but the task st...
Greetings,I am working on a REST Connection and having troubles with the authentication.So it is a Basic Authorization with a username and password. In postman I add username and password under authorization tab and pass the payloads in body and it w...
Unable to Enable or Disable the Azure AD account using the user update rule.I created the user update rules for Disabling the Azure AD account when the user status has changed from 1 to 0 or 0 to 1. I could see the rule is triggering fine. I have ver...
