Click HERE to see how Saviynt Intelligence is transforming the industry. |
07/05/2022 11:48 PM
Hi Team,
I need your help in knowing if we can have multiple endpoint for one single connection where when we do import (recon) based on certain condition like country it should link the user with respective endpoint .
Example:
Endpoint 1 (India)
Endpoint 2 (America)
Endpoint 3 (China)
If in AD Connection I use endpoint filter to differentiate country condition in AD , will it separate the account linking based on that? If yes , Kindly share me syntax on same ?
@ashisht @Neeharika @IAM
07/06/2022 03:47 AM
Endpoint filter in AD connection is used to filter entitlements
07/11/2022 10:24 AM
Hi @rushikeshvartak ,
so is there any option to import account based on different endpoint and same connection ?
07/06/2022 07:58 AM
Ankyt,
I would suggest you to read the AD Connector documentation on Endpoint Filter to get an understanding of it. Document Link :
https://saviynt.freshdesk.com/a/solutions/articles/43000615764
Here's another post on this forum which has information on Endpoint Filters :
Hope it helps,
Regards,
Avinash Chhetri
07/11/2022 10:25 AM
Hi @avinashchhetri ,
I have gone through the links , looks like it is only used for entitlements . Do we have any option we we can differentiate accounts based on multiple endpoint having single AD connection?
Thanks
ankit
07/11/2022 10:33 AM - edited 07/11/2022 10:35 AM
Ankit,
Could you elaborate on what you mean when you say "Do we have any option we we can differentiate accounts based on multiple endpoint having single AD connection? "
Differentiate accounts based on what ? account attributes ? If Yes, then No.
Endpoint Filter only works on AD Groups and there is no other way to segregate multiple endpoints based on some other account related attributes.
07/11/2022 11:59 AM
Hi @avinashchhetri ,
I mean to say if I have to link accounts to user profile based on multiple endpoint , what is the possible option ?
let’s say 3 different endpoint and one connection , and If I have to link the user profile to account based on Endpoint . What option can be checked in connection ? Or any other possibilities.
I think of is 3 different connection with 3 endpoints each .
07/11/2022 12:16 PM
since filter is based on AD Attribute & security system to endpoint to 1: N connection hence 2 possible solutions
07/11/2022 04:02 PM
Using a "workaround" to have the DB connection create multiple endpoints might work from a reconciliation and perhaps certification standpoint but I do not see it work from a request perspective.
07/11/2022 06:39 PM
I don't see any issue for certification
Note : This approach is already implemented in one of the client
07/12/2022 09:26 AM
Reconciliation and Certification, as stated earlier might work, the real chalenge would be from a request perspective.
If this has been implemented at some customer and working fine, then great.