Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

REST Connector - Accounts Import - How to stop suspension/deletion of existing accounts in SSM if the API returns no accounts

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 18 2020 at 10:36 UTC

Is there any way to stop suspending accounts if the size of accounts object returned from the REST API call is 0 or null?


The API which we are consuming returns response code as 200 as API authentication and call is successfull but returns in the response some other information. For example - you have reached maximum API call for today.


ImportAccountEntJSON:


"accountParams": {

"connection": "acctAuth",

"processingType": "SequentialAndIterative",

"statusAndThresholdConfig": {

"accountsNotInImportAction": "Suspend",

"accountThresholdValue": 100

}


In SSM Logs:


2020-05-14 13:22:43,614 [quartzScheduler_Worker-1] DEBUG rest.RestProvisioningService - pullObjectsByRest - responseStatusCode ::200

2020-05-14 13:22:43,654 [quartzScheduler_Worker-1] DEBUG rest.RestProvisioningService - pullObjectsByRest - responseMap.size : 1

2020-05-14 13:22:43,662 [quartzScheduler_Worker-1] DEBUG rest.RestProvisioningService - pullObjectsByRest - objectList.size : null

2020-05-14 13:22:44,991 [quartzScheduler_Worker-1] DEBUG services.ImportUtilityService - totalAccountsToBeDeleted: 54

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.
6 REPLIES 6

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 19 2020 at 12:44 UTC

Thank you very much Jim.


I'm looking for a way to check the size of accounts list within unsuccessResponses configuration.


I'm going to play with unsuccessResponses configuration now. It would be good to have a detailed description in the documentation of what's possible in unsuccessResponses.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 19 2020 at 13:27 UTC

I agree, an example in the docs on what we can do in that unsuccessResponses section would be useful.

It looks like they may just be using a node.js http.serverResponse object there? If that's true, then you might be able to get this to show something useful. Also, you might be able to use that in a conditional test, if its <100 for instance, then have it return unsuccess.

response.getHeader('Content-Length'); 
This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 19 2020 at 13:39 UTC

Hi Ramanpreet,


Please modify the accountThrsholdValue to 30 that should be more than the average count that could be deleted and less than the total count of active accounts in SSM.

Thanks

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 19 2020 at 13:53 UTC

In what version is the Status_Threshold_Config available for the REST connector?


--Jim

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 19 2020 at 16:21 UTC

Looks like successResponses and unsuccessResponses is only for Provisioning and not for imports

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 20 2020 at 09:36 UTC

Thanks Khalid - setting accountThrsholdValue(30) as less than total number of accounts(54) works, as when Threshold is exceeded there is no action performed on the existing accounts in SSM. So this solves the problem for now.


The only thing is if in the future we are only left with 20 accounts with gradual deletion of accounts in the application for example, then total number of accounts to be deleted(20) will be less than threshold 30 and all SSM accounts will be suspended in this case.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.