and more in a single search tool across platforms. Read the announcement here. |
Hi Team,We are trying to POST and PATCH a group entitlement in a single creategroup json using an OOTB Azure AD connector, but it fails. We have tried using the jsons separately in create and update group json on the same connection and it works fine...
Hi Team,We would like to import account information from the target application using the REST OOTB connector, which is working fine from Postman and is giving us the response , but when used in ImportAccountEntJSON it gives a 200 response but with a...
Hi,This is with reference to Saviynt EIC environment. In DEV EIC, we have an option to select Request Access for Others - Mutli Users. Selected users that have ISC_AD account but we get the below error screenshot.And, can this feature be used for mo...
Team,I am looking for information around Saviynt REST APIs which can used for creating, updating and maintenance of connections, security systems and endpoints in Saviynt from an external source like SNOW.I am aware of AOB module, but in our case we ...
I am using the below request body to trigger the job, but this is not considering the advquery perameter.Any suggestions?{ "jobgroup": "utility", "triggername": "Provisioning_filter", "jobname": "WSRETRYJOB", "createJobIfDoesNotExist": "f...
Hi,I am trying to update the manager of a user in Azure. I am using the API as explained here - https://learn.microsoft.com/en-us/graph/api/user-post-manager?view=graph-rest-1.0&tabs=httpThe JSON construct is :{"name": "call3","callOrder": 2,"connect...
We are using a JSON similar to below, in the REMOVEACCOUNTACTION in AD and the expected result is that the AD account gets moved to the OU specified and all the groups removed from the AD account apart from the group mentioned in the exclusion list.{...
Hi,We have configured UpdateAccountJSON in ADSI connection. Within the JSON, we are specifying the distinguishedName property as "distinguishedName": "${account.accountID?.replace('\\', '\\\\')?.replace('/', '\\/')}"This is as per the documentation: ...
Hi,We have a requirement to use some of the organization data(customproperties or attributes) during the user's AD account creation.(for example in ACCOUNTNAMERULE or other JSONs in connection)Any suggestions on how to implement this?Thanks!Best rega...
Hello,We have task to provisioning entitlements to the accounts for specific endpoint through analytics query i used different method to do it but unable to find solution. can you guide me on how to solve this.
Hello, I am experiencing an issue with Saviynt AD Connector setting a user's Admin account as the manager of their direct reports instead of their Primary AD Account. We have the AD connector setup to set manager using the below line."manager": "${ma...
Hi Team,We have an HR application called Humanica. Currently, Humanica performs creating/updating users by calling SV APIs. However, Humanica is thinking of moving on to an SFTP server instead, to perform the same. So, we have the following queries r...
Hi All,We have integrated the DB connection with create. modify and disable JOSNS. While executing the Disable account task we are passing the accountID value and task is failing with below error.Error while disabling account - abc\MRM1278 -Exception...
Can a role without entitlements get assigned to user through technical rules in saviynt? if so , how can we achieve this.
We onboard new employees using technical rules. which creates tasks for AD account and exchange mailbox provisioning. Exchange mailbox creation depends on AD account. We use a trigger chain for processing these tasks which has custom query jobs and W...
Hi All,We trying to create an account for admins and facing 3 different issues based on the values passing through JSON.issue 1: If we pass a syntax for UPN, the task is failing with below error.Syntax: \"user?PrincipalName\":\"adm-${user?.systemuser...
Hi Team, We have a requirement where we want to execute task instantaneously upon creation. we have a restriction where we are not able to utilize 'instantaneous provisioning' for particular security system and we are looking at workaround where we w...
Hello everyone,We are trying to fetch entitlements to account mapping via rest connector using oracle SCIM api. I am able to get the correct mappings of entitlements to account in customproperty31 of the account but still there are no roles which are...
We want a solution to submit the ARS request via REST API for an Inactive user. The tasks are failing for a REST connector where we are using Saviynt's OOB REST API to raise request to remove access for applications. The tasks are failing for disable...
Team,We have a requirement to restrict the entitlements a user can select during request submission, requests can be for create account, modify account.Usecase -Assume there are 3 entitlements which are represented in a table. At a time, user can onl...
Hi, We have configured createTicketJSON in the REST connection object and are using this as the ServiceDesk connection for disconnected applications. I am attaching the JSON here for your reference. Request gets submitted in Service Now and a provisi...
When I request an AD account for a user directly, my dynamic attribute will work correctly.But when I request an Enterprise Role for a user which has no account yet, a task to create the missing account is automatically created. But in this situation...
We have created multiple test technical rules and user update rules for provisioning. Now that we have disabled all test rules, they don't look good on the UI. Can we delete the technical rules and user update rules from the database that are not in ...
Hi All, We have a use case to provision an attribute, UPN , as a part of Azure AD provisioning via Saviynt directly to the target. We have implemented the logic on the createAADgroup.gsp and the OOTB Manage AAD form looks fine. The only issue that we...
Hi Team,A generic question: I wanted to understand why two connectors are required for importing and provisioning. Can we import and provision using the same connector?Do we require two AD connectors to work on provisioning? one to import the account...
This is weird because I've done many REST connections before but this is the first time it didn't auto fill the user information.This is the call "httpParams": "[{\"entityName\": \"${user.systemusername}@mydomaain.net\",\"realm\": \"72a0c4e2-759...
Need information on how we can remove the endpoints list that are being displayed under the "recommended" option during endpoint selection page at access request submission.We have already checked all the recommendation options at global config and t...
Hi all,I'm currently working on a project that involves integrating Infor Lawson HR application with Saviynt. Because of the limited or no documentation available both by the vendor and Saviynt on this integration, I was wondering if anyone here has ...
Hi Team, While trying to provision access to an account, we are facing an issue with the message in the logs: "No ArsRequestKey defined. We need to fetch the tasks using a query and provision using threads." A task was created after running the detec...
Hi team,We have setup a Rest connection for Azure AD provisioning and would like to disable accounts on the target. We are using the below disable account json:{"call": [{"name": "call1","connection": "userAuth","url": "https://microsoftgraph.chinacl...
Hello,I'm trying to create account and push it into serviceNow. I need to compare the start date of the identity to the current date to take an action based on the result.I have tried cases below but seems that when adding this condition, the payload...
Hi Team,We are experiencing an issue while trying to provision access to an account in the Active Directory connector. While using technical rules or user update rules, we are able to work on user objects and target specific users, but we don't have ...
Hello,We created a dynamic attribute "ownerId" for an endpoint, when an account request is sumitted on this endpoint, on the account request form, we want to set the default value of ownerId to be the requestee's username attribute value.How can we d...
Hi Team,We are expereincing an issue while trying to provision access to an account in Active Directory connector. We observed that if a user has two accounts like normal user account (Ram) and admin user account (Ram_Admin), saviynt by default it is...
Hi All,I am trying to use wildcard character % in technical rule.Usecase: Enterprise roles are created with departmentname, jobcode and description where description can be different values which are not stored in user attributes.I am trying to use b...
We have a case, the number of tries for provisioning are default (10) in our environment, one of the tasks gets errored after 10 tries because . However, the task did not wait for approval before retires. Request and Tasks both Creation time: 22 NovR...
This does not happen to all users but for many users we get the below error when enabling their AD accounts. SAV-Error while enabling account,[LDAP: error code 53 - 00002077: SvcErr: DSID-031903D2, problem 5003 (WILL_NOT_PERFORM), data 0 ] SAV-Erro...
Hello,I am getting the error during the 2nd call in the below Addaccessjson. Please let me know if there is anything wrong here. I am trying if else in the httpparams based on the response from the first call. {"call": [{"name": "Roles","connection"...
HelloWe are integrating an application with REST Connector, for account import, we have a mapping like this:{"customproperty1" : "targetAttribute1","customproperty2" : "targetAttribute2","customproperty3" : "targetAttrribute3","customproperty4" : "ta...
Hello Team,One of our target system has the following requirements:1. when the create account ARS request is submitted, the account has to have at least one associated entitlement.2. The last associated entitlement of the account could not be removed...
Hi,The reason of this post is to gain some insights on a problem that is key to our project. We want to implement in our Saviynt tenant a system through which some users will be able to request hardware components (laptop, screen, mouse) for themselv...
Using Saviynt REST connection to provision new users to RSA Archer. The postman calls work fine. In Saviynt, the connection is successful but when running the provisioning job, the task is not completed. I'm not sure if I'm missing something in the c...
Hello,When we use the out of box REST Connector to integrate with managed endpoints. how can we propagate the provisioning result message from endpoint to task provisionningNotes?for Jar Connector based integration, I can use the description property...
Hi,We are looking at implementing attribute sync for Active Directory and would leverage user update rule to trigger the update account based on updates to user attribute values.We would only need to process attribute sync when there are changes to s...
Hi,If we've submitted a New Access Request, and in the ARS request form, we've only made Entitlement selections and submitted the request, then he request which gets created is of the type : New Account Request, but if we open the request, then there...
Hello, Can Enterprise Roles have independent workflows attached to them or do all roles have to use a single "Role Add Workflow" in the global configurations? I am a scenario in which a role request should go to a custom group or user vs. a manager. ...
HiWe want to start to provision GCP groupQuestion- do we use GCP OOTB connector or where do i apply the JSON for group creation? - if its using OOTB connector, then as soon as i define workflow under entitlement type, can we use this feature without ...
Requirement :Eg : A User within Saviynt has an account on an endpoint and that account already has 2 entitlements of a specific entitlement type.User requests one more entitlement of the same entitlement type using ARS. After the approvals are done, ...
1. Last documentation update for Nov 09, 2022. We need v23.x Saviynt Tableau integration documentation. 2. Supported features Documentation portal vs Design module at Saviynt environment v23.6.Please provide the feasible updates on above queries.
Need your help to figure out how to pass the variable value in one of the parameter on the below JSON object. am getiing error from Saviynt that illegal char $ in URL and its works fine if i hardcode the value in place of variable. Could you please h...
