Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Azure AD Entitlement Threshold Configuration is not working

Jagadish
New Contributor II
New Contributor II

Have configured STATUS_THRESHOLD_CONFIG in Azure AD Import connection.


As per documentation , Entitlement which are not coming through import should not be marked as inactive if entThresholdValuet is exceeding .

Entitlement Type : AADGroup.

1. Update Connection Entitlement_Filter_JSON  as attached

2. We are removing groups which are starting from "Test-Group" as display name, same can be checked from data analyze

3.Status Threshold config is set as attached


4. As per configuration, It should not inactivate the status of entitlement if exceeded by 2 , here make sure out of 11 2+ entitlements are active in state.

5. Run Import Job.

6. Irrespective of import job status config. it makes entitlement inactive for all.

[This message has been edited by moderator to merge reply comment]

5 REPLIES 5

armaanzahir
Valued Contributor
Valued Contributor

Hi @Jagadish 

Are you using the Azure AD OOTB connector or the REST integration for import?

As per documentation, the Azure AD OOTB connector's STATUS_THRESHOLD_CONFIG did not have this entThresholdValue configurable. Will have to check if it's supported for the connector or not.

Configuring the Integration for Account and Group Import (saviyntcloud.com)

As far as step 2 is concerned, did you remove the entitlement from Saviynt or from Azure? The entThresholdValue parameter checks whether the number of missing entitlements on the target is more than the number specified, if yes, no action is taken and if no, the missing entitlements are inactivated.

 

 

Regards,
Md Armaan Zahir

we are using Azure AD OOTB connector.

We are not deleting entitlements from Azure. Instead, Import  job shouldn't bring few entitlements whose count is more than threshold value set. In this case job shouldn't Inactivate entitlements in saviynt.

rushikeshvartak
All-Star
All-Star

https://saviyntsupport.saviynt.com/support/tickets/1655617

Saviynt Team confirm if this is feature supported or not.

 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

sudeshjaiswal
Saviynt Employee
Saviynt Employee

Hello @Jagadish,

Currently , The entThresholdValue is not supported in Azure Ad.

Thanks

If you find the above response useful, Kindly Mark it as "Accept As Solution".

Idea ticket has been created for same https://ideas.saviynt.com/ideas/EIC-I-5093 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.