Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Complex Account Name Generation Rules

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 15 2020 at 13:50 UTC

Hello, Can we add custom string while adding account name generation rule using basic config in Endpoint? It does not seem to provide such option. We can do it using advanced config but then logic to find if generated account name is duplicate against the all account names from accounts table and incrementing the value by retrieving the last characters from previous account name need to be custom written. It would have been great if we can simply add the custom string with account name basic config option as it comes with default option to specify rule 2 with auto increment. Any thoughts or any other best way to handle? Thanks, Pallavi
This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.
11 REPLIES 11

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 15 2020 at 16:53 UTC

Hello Pallavi,

Could you please provide the logic what you want to build for accountname rule ? We can manage it multiple ways. Looking for sample accountnames and logic it derives.


This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 15 2020 at 16:58 UTC

Got to know that we can add multiple rules separated by # so if name generated using rule 1 already exists then rule2 will be evaluated however how do I add the auto-increment logic in advanced config.


Consider simple account name generation rule: A + 6 chars of last name + 1 char of first name if its already exists then using Rule 2 -> A + 5 chars of last name + add number 01 and if its still duplicate the auto-increment.

So basically how do we add auto-increment logic in advanced config.


Thanks for the response.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 15 2020 at 17:12 UTC

Any sample to use ###INCREMENTINDEX###


concat(users.firstname,users.lastname)#concat('A',substring(users.lastname,1,6),substring(users.firstname,1,1))###INCREMENTINDEX###


I added it but when name generated using rule 2 is duplicate then next account name is generated as '1'.


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 15 2020 at 17:54 UTC

When we configure the same rule using basic config with auto increment option at that time following condition is added for auto increment : substring('~1',1,1). But it does not seem to be working when configured it along with rules in advanced config,


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 15 2020 at 17:57 UTC

Pallavi,

We understand the CustomString variable is not exposed in accountName rule, however the same is there in global configuration ARS when we form System User Name.

Still your unique accountname rule can be handled multiple ways :


Option1 :

Add your custom string in available customproperty in users object and access that object in accountnamerule and put your logic accordingly.


e.g. say custom string stored in Customproperty30


Then

Rule1 : Customproperty30 + 6 chars of last name + 1 char of the first name

Rule : Customproperty30 + 5 chars of last name + autoincrement function


Note : Auto increment fucntion append '1' not '01'


Option 2:

Leverage # in DB :

Sample (Write your own logic)

#substring(concat(users.lastname , substring(users.firstname,1,1)),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'01'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'02'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'03'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'04'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'05'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'06'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'07'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'08'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'09'),1,32)

# substring(concat(users.lastname , substring(users.firstname,1,1),'10'),1,32)





This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 21 2020 at 10:16 UTC

Hi,


It looks like # seperated rules does not work when used for system user name generation in advanced config. Is it true or am I missing anything?


concat('X',substring(users.lastname,1,6),substring(users.firstname,1,1))#concat('X',substring(users.lastname,1,6),'1')


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 21 2020 at 11:50 UTC

global configuration ARS when we form System User Name - Basic config does not provide way to add condition to generate the usernames based on some rules for set of users identified by user attribute values. Hence exploring advanced config but there # separated rules seems to be not working which worked for endpoint - accountname generation rules.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 22 2020 at 05:34 UTC

HI Pallavi,


If you need to have cpmplex rule for system username, we would suggest to use inline processor.


Thanks

Ajay

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 22 2020 at 09:51 UTC

Hello Ajay,


Do you mean to use import preprocessor?


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 22 2020 at 09:59 UTC

Yes, Plaalvi, I mean to use import pre-processor.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 22 2020 at 10:01 UTC

ok, thank you for response. I will evaluate it.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.