Click HERE to see how Saviynt Intelligence is transforming the industry. |
04/12/2022 12:56 PM
Is there any way to stop suspending accounts if the size of accounts object returned from the REST API call is 0 or null?
The API which we are consuming returns response code as 200 as API authentication and call is successfull but returns in the response some other information. For example - you have reached maximum API call for today.
ImportAccountEntJSON:
"accountParams": {
"connection": "acctAuth",
"processingType": "SequentialAndIterative",
"statusAndThresholdConfig": {
"accountsNotInImportAction": "Suspend",
"accountThresholdValue": 100
}
In SSM Logs:
2020-05-14 13:22:43,614 [quartzScheduler_Worker-1] DEBUG rest.RestProvisioningService - pullObjectsByRest - responseStatusCode ::200
2020-05-14 13:22:43,654 [quartzScheduler_Worker-1] DEBUG rest.RestProvisioningService - pullObjectsByRest - responseMap.size : 1
2020-05-14 13:22:43,662 [quartzScheduler_Worker-1] DEBUG rest.RestProvisioningService - pullObjectsByRest - objectList.size : null
2020-05-14 13:22:44,991 [quartzScheduler_Worker-1] DEBUG services.ImportUtilityService - totalAccountsToBeDeleted: 54
Solved! Go to Solution.
04/12/2022 01:55 PM
Thank you very much Jim.
I'm looking for a way to check the size of accounts list within unsuccessResponses configuration.
I'm going to play with unsuccessResponses configuration now. It would be good to have a detailed description in the documentation of what's possible in unsuccessResponses.
04/12/2022 01:55 PM
I agree, an example in the docs on what we can do in that unsuccessResponses section would be useful.
It looks like they may just be using a node.js http.serverResponse object there? If that's true, then you might be able to get this to show something useful. Also, you might be able to use that in a conditional test, if its <100 for instance, then have it return unsuccess.
response.getHeader('Content-Length');
04/12/2022 01:55 PM
Hi Ramanpreet,
Please modify the accountThrsholdValue to 30 that should be more than the average count that could be deleted and less than the total count of active accounts in SSM.
Thanks
04/12/2022 01:55 PM
In what version is the Status_Threshold_Config available for the REST connector?
--Jim
04/12/2022 01:55 PM
Looks like successResponses and unsuccessResponses is only for Provisioning and not for imports
04/12/2022 01:55 PM
Thanks Khalid - setting accountThrsholdValue(30) as less than total number of accounts(54) works, as when Threshold is exceeded there is no action performed on the existing accounts in SSM. So this solves the problem for now.
The only thing is if in the future we are only left with 20 accounts with gradual deletion of accounts in the application for example, then total number of accounts to be deleted(20) will be less than threshold 30 and all SSM accounts will be suspended in this case.