Auto-provision an entitlement on one endpoint when user is provisioned to an entitlement on a differ

[krecpond]

Hi,

I have a requirement where a user's access to Box is authenticated by an AD group from one domain  (domain1) and authorized via AD groups on another domain (domain2).

When a user's access request to one or more AD groups in domain2 is approved and provisioned, the user must also get automatically provisioned to a given AD group (Group1) in domain1.

Any suggestions on how this can be done in Saviynt SaaS?

[rushikeshvartak]

You can use entitlement map concept under entitlement

You can also use "Entitlements With New Account" but if request is rejected still it will assign group that is issue.

[krecpond]

I tried the entitlement map as a POC and it worked as expected. However, I have a question - Does this mean that the entitlement from Domain1 must be mapped to all the relevant entitlements in Domain2 that require the Domain1 entitlement?

For example - If Domain1 has dom1-ent1 entitlement and Domain2 has entitlements - dom2-ent1, dom2-ent2, dom2-ent3 and so on for Box, does every single entitlement of Domain2 need the mapping configured to dom1-ent1 of Domain1 endpoint?

Thanks,

Vijay Narayanan.

[rushikeshvartak]

Yes You need to map all entitlements

[krecpond]

Is there an automated way of being able to bootstrapping this mapping?

[rushikeshvartak]

You can use import sheet as this is one time activity

[krecpond]

Is there a format of the csv because I am unable to find one on FreshDesk?

[rushikeshvartak]

[krecpond]

This is just the format of the mapped CSV. I cannot manully upload this for 600 entitlements on domain2. I am looking for a way to map the 600 entitlements on domain2 to the required entitlement on domain1. How will this CSV service the purpose?

[rushikeshvartak]

Thats missing feature you need to go into individual entitlement and upload.

Freshdesk ticket #817622

otherwise use customquery which is not suggsted