Active directory mapping is not showing user attributes

[Ivan5533]

Hello,

I am trying to understand the mapping of saviynt attributes to Active directory but I don't understand the following:

In the documentation (https://docs.saviyntcloud.com/bundle/AD-v23x/page/Content/Importing-Active-Directory-Accounts-and-Ac...) it says "For example, you can map the givenName attribute of Active Directory to either the first name or the last name attribute of EIC."

But when I try to look for the first name or last name attributes in the mapping, they do not exist.

How can I map for example 'sn' in Active directory to 'last name' in saviynt?

I would appreciate your help, thanks in advance

[SumathiSomala]

Hi @Ivan5533 ,

At account level we don't have first name and last name attributes in Saviynt.

To map those fields, We can use custom properties.

refer the below document

Configuring the Integration for Importing Accounts and Access (saviyntcloud.com)

[SumathiSomala]

@Ivan5533 ,

Is your issue resolved?

[Ivan5533]

understood @SumathiSomala , and once mapped to a custom property, how can I map this custom property to the last name attribute of the user?

Thank you very much

[SumathiSomala]

@Ivan5533 ,

Are you importing users as well?

From account properties select customproperty X and map to active directory givenName attribute.

select customproperty X and map to active directory sn attribute.

and then run the account import job.

[Ivan5533 · Accepted solution]

What I am trying to achieve, is that the attribute stored in Active directory as 'sn' ends up stored in the Saviynt EIC attribute 'last name'.

I understand that the 'sn' attribute of active directory can only be mapped to some limited attributes like 'custompropertyX', once this is done, how can I map that 'custompropertyX' to the 'last name' attribute of Saviynt EIC?

[SumathiSomala · Accepted solution]

@Ivan5533 

What I am trying to achieve, is that the attribute stored in Active directory as 'sn' ends up stored in the Saviynt EIC attribute 'last name'.

Are you importing users into Saviynt from Active Directory? if yes use USER_ATTRIBUTE parameter in connection.

[DISPLAYNAME::displayName#String,

COMPANYNAME::company#String,

LASTNAME::sn#String,

FIRSTNAME::givenName#String,

TITLE::title#String,

PHONENUMBER::telephoneNumber#String,

COUNTRY::c#String,

ENDDATE::accountExpires#millisec,

LOCATION::physicalDeliveryOfficeName#String,

STREET::streetAddress#String,

DEPARTMENTNAME::department#String,

USERNAME::sAMAccountName#String,

owner::manager#String,

CREATEDATE::whenCreated#date,

employeeid::employeeID#String,

email::mail#String,

CUSTOMPROPERTY23::description#String,

CUSTOMPROPERTY24::userPrincipalName#String,

CUSTOMPROPERTY25::ipPhone#String,

CUSTOMPROPERTY27::postalCode#String,

State::st#String,

City::l#String,

systemUserName::sAMAccountName#String,

COMMENTS::distinguishedName#String,

CUSTOMPROPERTY10::objectGUID#Binary,

CUSTOMPROPERTY11::cn#String,

statuskey::userAccountControl#String,

RECONCILATION_FIELD::CUSTOMPROPERTY10]

If you are importing only accounts, it can't be achievable.

You can only map to account CP in Saviynt

[Ivan5533]

Understood @SumathiSomala , this answer has clarified my doubts, thank you very much!