We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Account Recon job deletes Account Entitlement Mapping

BalajiEpari
New Contributor III
New Contributor III

Hi Team,

 

We have integrated Saviynt with a LDAP application, Once the account import full job runs, it deletes the Account Entitlement mapping. But during the access import, it properly corelates the account entitlement.

Please let me know, is there any configuration needs to perform?

 

Regards,

Balaji Epari

9 REPLIES 9

pmahalle
All-Star
All-Star

Hi @BalajiEpari ,

Can you add below config in CONNECTION CONFIGURATION field of your Endpoint and check once.

{"conf":[{"ADDMEMBERTOENT":"TRUE"},{"ADDUSERTOENT":"TRUE"}]}


Pandharinath Mahalle(Paddy)
If this reply answered your question, please Accept As Solution to help other who may have a same problem. Give Kudos 🙂

rushikeshvartak
All-Star
All-Star

Since you are on 23.8 

{"conf":[{"ADDMEMBERTOENT":"TRUE"},{"ADDUSERTOENT":"TRUE"}]}


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

BalajiEpari
New Contributor III
New Contributor III

Hi @rushikeshvartak / @pmahalle 

We already added connection config as you mentioned. Still same issue.

There is one difference between our LDAP system and AD/other LDAP systems are member/memberOf attribute will be there in Groups entries instead of Accounts. 

PFB Group entry Screenshot.

BalajiEpari_0-1701440722245.png

Regards,

Balaji Epari

 

 

 

Hi @BalajiEpari ,

What's your ENTITLEMENT_ATTRIBUTE value in your connection. Can you add member  as a value and check once.

 

pmahalle_0-1701441458688.png

 


Pandharinath Mahalle(Paddy)
If this reply answered your question, please Accept As Solution to help other who may have a same problem. Give Kudos 🙂

BalajiEpari
New Contributor III
New Contributor III

Hi @pmahalle 

Yes, I have added member for ENTITLEMENT_ATTRIBUTE , so during Access import it properly corelates accounts with entitlement. But once we run the Account import it deletes the existing account-entitlement mappings in Saviynt.

Regards,

Balaji Epari

 

what is config for status threshold


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

SumathiSomala
All-Star
All-Star

@BalajiEpari Could you please refer the trouble shooting guide

Troubleshooting (saviyntcloud.com)

Map the ACCOUNTID attribute with distinguishedName of the account in the ACCOUNT_ATTRIBUTE parameter.

 

If this reply answered your question, please Accept it As Solution to help others who may have a similar problem.

Regards,
Sumathi Somala
If this reply answered your question, please Accept As Solution and give Kudos.

Hi @SumathiSomala 

We already mapped ACCOUNTID with dn in ACCOUNT_ATTRIBUTE. Checking outer Troubleshootings but didn't find any.

Above document is for corelation issue during Access import. which is working fine us.

But during our account import it deletes all existing account-entitlement mappings.

 

Regards,

Balaji Epari

@BalajiEpari please check the reconciliation field for account and access import. 

Regards,
Sumathi Somala
If this reply answered your question, please Accept As Solution and give Kudos.