and more in a single search tool across platforms. Read the announcement here. |
Hello,Currently, after the user manager certification is locked for account verification, we are only seeing the "remove account" task getting created. Based on the scheduled job, tasks are getting closed. However, our business requirement is not to ...
Remove Owner from the Azure AD group is not working at all. Add owner to the Azure AD group is working fine. The JSON which I am using is mentioned below. I have attached the logs for reference.{"name": "AADGroup","connection": "accAuth","url": "http...
We recently upgraded to V 24.2 and the User Update Rule and Technical Rule ran fine on the users and able to see the rule printed in the user history though the task is not being generated for these users. In the User Update Rule (Email_WriteBack) w...
I am trying to update only primary SMTP with the following in Update Account JSON:"proxyaddresses": ["SMTP:${user.email}","${task?.accountKey.customproperty58.replace('SMTP','smtp')}"]However, no change is made and primary SMTP remains the old value....
Hi Team,I am trying to add a list of values as ENUM to a dynamic attribute for an endpoint in order to display them as a part of dropdown field on the ARS form. However, I am getting an error stating that - Operation not allowed as you are entering a...
Hi everyone, I have the issue, that I'm not able to bulk unassign a SAV Role. It was assigned via a Technical Rule to a subset of our users, and now I need to remove it. I was trying to achieve this using a User Update Rule with the following setting...
Hello Everyone.I have a REST application. The thing is here the target application will only accept in XML format. The Accept type and content type I have given is application/xml. But I am not able to create/Provision the user in target application....
Hi Everyone,I am integrating new DB application with Saviynt. Configured few dynamic attributes for this endpoint. There is one DA: Product Group, here client requirement is end user can able to select all the available values in DA drop down. They a...
Hello!I am experiencing an issue in my CreateAccountJSON where my successResponses are not being recognized.The account still gets provisioned in the target system, but this is the error we get in the Provisioning Comments of the subject user's pendi...
Hi everyone,I am finding a method to create account where the account ID will take after user's email. As the examples in JSON construction (Examples for JSON Construction (saviyntcloud.com)), the syntax for accountIdPath is supposed to get from the ...
Hi Team,We have a requirement to update specific entitlements attribute in target. The entitlements are active directory based and they are provisioned into AD from Saviynt. We update in the connection level create-update mapping json and for new AD...
Hi Team,We have couple of Dynamic Attribute fields in ARS for for Salesforce of type String where user may or may not provide any information as a string as it not mandatory.If there some value it works fine but if it blank or empty it gives error:"2...
We have a requirement to sync attributes to a SCIM endpoint using PATCH with replace / add operation for existing users.If one or more existing attributes of a user changes, then UPDATEACCOUNT JSON must only have those attributes to sync with the tar...
Hi Team, Facing a wierd situation while provisioning and deprovisioning a certain entitlement using a REST OOTB where the I can see the values of the httpParams in the logs fine, however, do not see the tasks getting completed in Saviynt. The pendin...
We're managing Entra ID group memberships from an IGA solution (Saviynt). With non-mail enabled groups we can do it with Graph API. With mail-enabled groups that are synced from on-prem AD we can use PowerShell to manage the memberships. But customer...
I am getting an error while trying to create a new service account. Error Message: Error while creating account in AD - Cannot invoke method getAt() on null object. What could be an error?
Hi,Can we use the entitlement attributes of a user in CreateAccountJSON for a AD connector?for example:User is assigned with an entitlement(costcenter1). While creating AD account for that user, can we get this value user.costcenter1.customproperty1 ...
Hello,We've encountered an issue regarding the account status within our Saviynt endpoint, and we're seeking some insights or guidance on resolving it.We're utilizing a REST connector to interface with an on-premises Active Directory Exchange Server....
Hi Team, We have a use case to skip ticket creation if the task source is request. We tried different JSON configurations to fail service ticket creation. Here are the different Create Ticket JSON configurations we have tried Option -1 – Create Ticke...
Hi Team, It's a very trivial issue, but somehow I am not able to find out what the issue is.We have a requirement to create/update a Sav4Sav account only when the source is a request The JSON is working fine if I don't put a condition there, but whe...
Hi,we have a securirtysystem with Create Task Action as EntitlementsOnly. Some users receive the account as a birthright through technical rules but others can also request an account from ARS. The security system uses the REST connector for provisio...
How to generate any new attribute using the existing attribute values?Ex: 1 . I need to generate the "display name" for John Doe as JohnD, how can we do this on saviynt ui?Ex: 2 . Need to generate "full name" using the firstname and lastname which we...
Hi,I have a use case where i need to restrict groups recon where group name starts with AWSSSO only from AAD groups. We are using Azure AD connector to reconcile the groups and using below filter at entitlement type level.But still I can see that the...
Hi Team,Two entitlements have the same name, one is active and the other is inactive. We created a technical rule and only one entitlement appeared at the time of selection. However, when it executes it picks the inactive entitlement. Upon checking t...
Hi,I'm integrating a REST based application and for that the pagination configurations have to be passed via BODY.All the pagination examples available are ONLY related to configurations passed through Query Params.While searching, I found another po...
Hi, I'm working on a REST integration and have the following Import Account JSON. Previously I was able to run both account and access imports successfully. However, during the account import, I wasn't able to map the corresponding entitlements to t...
Hi,I have a specific requirement where I'd like to generate 1 ISM ticket (createTicket JSON) per requested entitlement through a single access request entitlement. Is this possible with the product? Or is it possible to have a dynamic call through a ...
Hi,We have a requirement to prevent end user from deleting their AD account before deleting their Exchange account. Since exchange account is dependent on the user's AD account, we do not want the users to delete their AD account first.FYI - End user...
Our customer has this scenario:two different instances of Saviynt IGA (on prem), one is for the internal users and the other one is for external B2B users. Their requirement is to have the two instances to communicate, but the internal one is respons...
We were told to use user update rules going forward instead of running detective jobs. We used user update rules, and it's working fine for joiners and movers. In Movers, we have one particular use case where if we click on preview for the condition ...
Hi Team,We have 17 active accounts and 1 7 active entitlements in an endpoint, we are getting the data of accounts having access from account_entitlement1 table using the below query after provisioning using technical rules:select * from users u, use...
Hello All,We have configured Parent Child Entitlement for AD using Endpoint Filter. We have SOD rules to detect the violation and when we remediate the violation 2 task are created of type remove access for Parent and Child entitlement. This is worki...
Hi I am trying to find any documentation around integrating with a system using flat files/csvs. I see we could potentially use schema based file import job to import flat files, unless there is a better option? On the flip side, is there any documen...
Hi,I'm working on a REST based integration where user provisioning / de-provisioning is working as expected.When it comes to access provisioning / de-provisioning, I'm facing a bit of a challenge, given the nature of the entitlements.Target Roles are...
Hi folks,We want to enable creation / update of identities in Saviynt for externals.As part of their attributes, there are a few attributes for which data is extracted from datasets (e.g for Country with Labels and Codes) :Display Value : FranceCount...
Upon disabling an account in Saviynt, the account status changes to "Manually Suspended." Subsequently, when attempting to raise an access for the same user, We have disabled the option to enable the account, and the system triggers a "New Account" o...
I want to trigger one call based on the conditional check. i tried few options but stuck with error. However what i observed is connection name is mandatory. { "accountIdPath": "accountName", "responseColsToPropsMap": { "displayName":...
Hi All,We have create a child endpoint in Active directory through endpoint filter and trying to provision/deprovision entitlements of that child endpoint for the users who have active directory accounts and also account in that child endpoint. The 1...
Hi All,Getting 40103 error while creating accounts in Duo using REST connector. Following is the configuration for connectionJSON{"authentications": {"acctAuth": {"authType": "BasicWithHmac","url": "https://.duosecurity.com/admin/v1/admins","httpMeth...
Hi,I need to use some user account attributes in the CreateTicketJSON.In the documentation, I seen that AccountsObj are available but I don’t find the syntax to use.I tried : ${account.customproperty1}, ${task?.accountKey?.customproperty1} but it doe...
In Saviynt Stage environment, we have an EndPoint and Security System associated with a Connection having only Add & Remove access json. Instant provisioning is enabled. Provisioning Job also exists for that Security System.When we raise request, bot...
Hello everyone,We have run into an issue after recently updating to v24.1 where user update rule does not seem to run after updating a user through the UI.The hanarule is set to trigger when user is updated through UI with the following advanced quer...
Trying to pass the following attributes in a PS script but Saviynt WinPS connector is treating them as plain text:{"CREATEACC": ["Script=add-pssnapin Microsoft.exchange.management.powershell.e2010; $password=ConvertTo-SecureString 'XXXXXX' -AsPlainTe...
Use case 1:We noticed that when the Request-Option for Entitlement Type is set to None under Endpoint, any entitlement that is assigned as part of Birthright rules via Enterprise Roles is not being assigned (add access/account tasks are not created ...
Hi,We have the below process for assigning sap accesses.1. User is assigned with birthrights(Entitlement1 & Entitlement2). When these 2 entitlements are provisioned to SAP, the end date is set to 999912312. For example, If the same user requests for ...
We are using the user attributes table to perform addition uniqueness check on creating new user emails. The email generation rule has a basic config:Rule1 -firstname.lastnamecustomstring Rule2 - firstname.lastnameAutoIncrement - 1customstring I can ...
Hi Team,I am working on new joiners and provisioning their accounts into the Active Directory. I am using 23.12.We referred to the following forum post (https://forums.saviynt.com/t5/identity-governance/map-inactive-manager-in-active-directory/m-p/36...
Hello All,We have a requirement when a entitlement (Licenses) is requested from Saviynt we have to update one attribute in AD say (extensionattribute as "Guest"). This set of entitlement is belonging to AD and we have created separate endpoint for th...
Hi All,Do you have the correct date function for below use case. I need to use this condition in CreateAccJSON - REST connectionIf create date is within 2 days of the current date it should print "false" or else it should print "true". I tried adding...
Hi Team, We have use case where we have to connect M365 and assign E3 and F3 license there without assigning via Azure AD group based. Currently they are doing the same process once users is created in Azure AD it will sync with M365 once is the sync...
