accounts and entitlements correlation is not happening

[Ramana]

Hi,

For one of the application, i am not able to correlate the accounts and entitlements.

Postman Call

{

    "schemas": [

        "urn:ietf:params:scim:schemas:core:2.0:User"

    ],

    "id": "13",

    "userName": "Test User",

    "emails": [

        {

            "value": "rasai@coupang.com",

            "primary": true

        }

    ],

    "addresses": [],

    "groups": [

        {

            "value": "4",

            "$ref": "https://xxxx/api/scim/v2/Groups/4",

            "displayName": "coupangtest 1"

        },

        {

            "value": "6",

            "$ref": "https://xxx/api/scim/v2/Groups/6",

            "displayName": "coupangtest 3"

        },

        {

            "value": "21",

            "$ref": "https://xxxx/api/scim/v2/Groups/21",

            "displayName": "coupangtest 4"

        }

    ],

    "active": true,

    "profileUrl": "https://xxxx/en/users/13",

    "preferredLanguage": "en",

    "meta": {

        "resourceType": "User",

        "created": "2022-08-11T07:09:19.733Z",

        "lastModified": "2022-08-16T07:21:28.926Z",

        "location": "https://xxx/api/scim/v2/Users/13"

    },

    "name": {

        "givenName": "Test",

        "familyName": "User"

    }

}

Saviynt mapping

"acctEntParams": {

    "connection": "acctAuth",

"successResponses": {

                  "statusCode": [

                        200,

                        201,

                        202,

                        203,

                        204,

                        205

                  ]

            },

    "entTypes": {

      "Group": {

        "call": {

          "call1": {

            "connection": "acctAuth",

            "callOrder": 0,

            "stageNumber": 0,

            "processingType": "http",

            "http": {

              "httpHeaders": {

                "Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6MSwiZXhwaXJlc19hdCI6MTY5Mjk0NzY4Miwic2NvcGUiOiJzY2ltIiwidG9rZW5fdHlwZSI6IkJlYXJlciIsImV4cCI6MTY5Mjk0NzY4Miwic2VjcmV0X2tleSI6IiJ9.g7Gv040VTvWeZtP-4ljirxjdkdLjcJAQk7GvelIiGT8"

              },

              "url": "https://xxxxx/api/scim/v2/users",

              "httpContentType": "application/x-www-form-urlencoded",

              "httpMethod": "GET"

            },

            "listField": "Resources",

            "entKeyField": "entitlementID",

                  "entIdPath": "groups.members",

                  "acctIdPath": "id",

                  "acctKeyField": "accountID"

Can any one please help how to achive this issue

Thanks

Ramana Muriki

                  

                   }

                   }

                   }

                   }

                   }

                   }

[SB]

The account to entitlement mapping will work based on the which api call helps you get the information. You can refer to the below REST connector guide to understand the processing types (under 3. Processing Types section) with JSON references.

Also, to know how the list/idpath fields are defined you can check for reference examples in ImportAccountEntJSON under Examples for JSON Construction section.

https://docs.saviyntcloud.com/bundle/REST-v2022x/page/Content/Developers-Handbook.htm

[Ramana]

Hi Sahil,

As your said i followed all steps but now it is assigning all groups which are present in the application with the all accounts

For example Test user has only 2 groups, in the application it has 9 groups after the access job run the user is getting all 9 groups instead of to get the 2 groups

Please let me know where i am making mistake.

Thanks

[SB]

Can you share the current JSON you are using. Also in the postman response you shared before, which is the Account Id field and the entitlements info field.