Disconnected application

[Community_User]

Originally posted on December 14 2020 at 09:12 UTC

Hi Team,

We are using Saviynt V5.5 SP2 & created a disconnected application.

We have configured email notifications in the endpoint level for Create Account task completion.

Issues:

1) The create account task is not getting completed automatically.

2) Once we manually complete the task, notification is not getting triggered.

Can anyone please guide how to resolve this.

Thanks,

Sitarasmi

[Community_User · Accepted solution]

Originally posted on December 16 2020 at 08:39 UTC

Hello,

If you want Create Account tasks to be completed automatically, you can :

- Set "Automated Provisioning" to true on your Security System

- Set no provisioning connection to the same Security System.

This would let WSRETRYJob take care of the opened tasks. It should also help sending the email after completion.

Regards,

Adrien.

[Community_User]

Originally posted on December 18 2020 at 13:16 UTC

Hi Adrien,

I have selected & automated & instant provisioning. Now task is getting completed & roles are added to the user.

I have also configured the emails at endpoint level for New account & Add Access task completion.

But still notification is not getting triggered.

Could you please guide if I am missing something for notification.

Thanks,
Sitarasmi

[Community_User]

Originally posted on December 18 2020 at 13:21 UTC

Hi Sitarasmi,

Is your SMTP configured and working in other use cases (e.g triggering a notification from a User Update Rule or approval workflow) ?

Another reason would be that your email templat contains wrongly-typed parameters.

In that particular case, please check this link :

https://saviynt.freshdesk.com/support/solutions/articles/43000431557-managing-email-templates

Regards,

Adrien.

[Community_User]

Originally posted on December 18 2020 at 13:25 UTC

Hi Adrien,

Yes, SMTP is configured properly & emails are sent successfully for other use cases.

In fact same email templates I am using for other use cases.

This disconnected application only, I am facing issue.

Thanks,

Sitarasmi

[Community_User]

Originally posted on December 18 2020 at 13:56 UTC

Hi ,

I have tested this capability on my personal instance and was successfully able to receive an email after task completion of "New Account" task for a disconnected application.

Email template is :

Disconnected Security System configurations :

Endpoint email configuration :

I would like to know then if you trigger this task through a technical rule or using an access request ?

Best,

Adrien.

[Community_User]

Originally posted on December 18 2020 at 15:04 UTC

Hi Adrien,

We are triggering task through technical rule. Below is the configuration for template, policy & endpoint.

email template:

[Community_User]

Originally posted on December 19 2020 at 02:16 UTC

Hi Sitarasmi ,

Thank you for updating me, I think I got the point why the email are not being triggered.

Indeed, as documented below, you are using technical rules to create accounts on disconnected application. Therefore, the notifications are not triggered.

Refering to : https://saviynt.freshdesk.com/support/solutions/articles/43000431557-managing-email-templates

However, I don't know the reason of this limitation and I would suggest you to request for enhancement to justify your use case.

Regards,

Adrien.

[Community_User]

Originally posted on December 21 2020 at 06:07 UTC

Thanks Adrien, I will surely try from ARS.

Regards,

Sitarasmi

[Community_User]

Originally posted on January 27 2021 at 19:58 UTC

Hi Sitarasmi

I have few questions regarding Enterprise Roles provisioning,

Looking at the above technical rule screenshot, are you assigning enterprise roles automatically ?

As you're talking about disconnected application, the entitlements will only be assigned in Saviynt and not to the endpoint correct ?

In your screenshot under conditions I see an object called Role and then in the action you are assigning enterprise roles, are these 2 different objects, if yes where can i see them on the identity?

[Community_User]

Originally posted on February 2 2021 at 07:58 UTC

Raj Sannidhi,

Yes, Enterprise role is an saviynt object and is assigned here via technical rule. other "Role" is custom attribute of user.

yes entitlements will be only assigned in saviynt.

[Community_User]

Originally posted on February 2 2021 at 07:58 UTC

Raj Sannidhi,

Yes, Enterprise role is an saviynt object and is assigned here via technical rule. other "Role" is custom attribute of user.

yes entitlements will be only assigned in saviynt.

[Community_User]

Originally posted on February 2 2021 at 08:03 UTC

Raj Sannidhi,

Yes, Enterprise role is an saviynt object and is assigned here via technical rule. other "Role" is custom attribute of user.

yes entitlements will be only assigned in saviynt.

[Community_User]

Originally posted on February 2 2021 at 08:03 UTC

Raj Sannidhi,

Yes, Enterprise role is an saviynt object and is assigned here via technical rule. other "Role" is custom attribute of user.

yes entitlements will be only assigned in saviynt.

[Community_User]

Originally posted on February 2 2021 at 14:51 UTC

Hi Vaibhav,

How did you create "Role" attribute, did you rename a custom property attribute on the user record ?

Thank you.

[Community_User]

Originally posted on February 4 2021 at 05:57 UTC

yes Raj

[Community_User]

Originally posted on February 16 2021 at 18:06 UTC

oh that's great, I didn't know that we can rename custom property's on the user record

Is there documentation on freshdesk portal, can you please share details. Thank you.