Account Recon job deletes Account Entitlement Mapping

[BalajiEpari]

Hi Team,

We have integrated Saviynt with a LDAP application, Once the account import full job runs, it deletes the Account Entitlement mapping. But during the access import, it properly corelates the account entitlement.

Please let me know, is there any configuration needs to perform?

Regards,

Balaji Epari

[pmahalle]

Hi @BalajiEpari ,

Can you add below config in CONNECTION CONFIGURATION field of your Endpoint and check once.

{"conf":[{"ADDMEMBERTOENT":"TRUE"},{"ADDUSERTOENT":"TRUE"}]}

[rushikeshvartak]

Since you are on 23.8 

{"conf":[{"ADDMEMBERTOENT":"TRUE"},{"ADDUSERTOENT":"TRUE"}]}

[BalajiEpari]

Hi @rushikeshvartak / @pmahalle 

We already added connection config as you mentioned. Still same issue.

There is one difference between our LDAP system and AD/other LDAP systems are member/memberOf attribute will be there in Groups entries instead of Accounts. 

PFB Group entry Screenshot.

Regards,

Balaji Epari

[pmahalle]

Hi @BalajiEpari ,

What's your ENTITLEMENT_ATTRIBUTE value in your connection. Can you add member  as a value and check once.

[BalajiEpari]

Hi @pmahalle 

Yes, I have added member for ENTITLEMENT_ATTRIBUTE , so during Access import it properly corelates accounts with entitlement. But once we run the Account import it deletes the existing account-entitlement mappings in Saviynt.

Regards,

Balaji Epari

[rushikeshvartak]

what is config for status threshold

[SumathiSomala]

@BalajiEpari Could you please refer the trouble shooting guide

Troubleshooting (saviyntcloud.com)

Map the ACCOUNTID attribute with distinguishedName of the account in the ACCOUNT_ATTRIBUTE parameter.

If this reply answered your question, please Accept it As Solution to help others who may have a similar problem.

[BalajiEpari]

Hi @SumathiSomala 

We already mapped ACCOUNTID with dn in ACCOUNT_ATTRIBUTE. Checking outer Troubleshootings but didn't find any.

Above document is for corelation issue during Access import. which is working fine us.

But during our account import it deletes all existing account-entitlement mappings.

Regards,

Balaji Epari

[SumathiSomala]

@BalajiEpari please check the reconciliation field for account and access import.