Create ADSI Group - Application Name

[GauravJain]

Hi

To set-up ADSI Group Management i have done all required configurations as per Saviynt documentation. While verifying the UI for "Create ADSI Groups" i don't see any value populating in dropdown for "Application Name" which is a mandatory field. But the rest of the fields on UI have correct values as configured.

Am i missing anything here?

Please let me know if you require further inputs on my query.

Regards

Gaurav

[SumathiSomala]

@GauravJain Did you select the workflow in entitlement Type details page?

Ensure that there is a workflow selected for the groups created. Go to Admin > Security Systems > Endpoints > Entitlement Type > View Details icon. In the Entitlement Type Show page, select the workflow under Add Workflow

[GauravJain]

Yes, i have selected AutoApprovalWorkflow.

[GauravJain]

Also, when i am using "Manage Role" tiles to update an existing group, that time too "Application Name" is not populating. From where Saviynt pulls this information? as per tooltip its a container information under selected domain name so if domain names are populating correctly, why container information is not populating.

[rushikeshvartak]

What all configs done mentioned all in 1 liner 

[GauravJain]

All the configs mentioned on these links are done

Configuring Group Management (saviyntcloud.com)

Managing Active Directory Groups (saviyntcloud.com)

Managing ADSI Groups (saviyntcloud.com)

Regards

Gaurav

[rushikeshvartak]

Did you added Entitlement Type under sav role - create home option ?

[GauravJain]

Yes, i have selected "ADSI Groups" there. 

The problem i am facing is on the "Create ADSI Groups" screen which a user can access only when he/she is part of a sav role with these required features - Manage Roles : Create Role & Manage Roles : Update Role.

"Application Name" on Create ADSI Group screen gets pre-populated values already stored in Saviynt repository OR it makes an API call at runtime to pull this information? probably i could find something in logs if Saviynt triggers an API call at runtime.

[rushikeshvartak]

Connection Configuration added under Endpoint ?

[GauravJain]

Yes.

{"conf":[{"ADDMEMBERTOENT":"TRUE"},{"ADDUSERTOENT":"TRUE"}]}

[pmahalle]

@GauravJain ,

Make sure to select respective ADSI connection in AD Group Management Connection under Global Configurations--> Roles --> Management. 

Add this if not and try once.

[GauravJain]

Hi @pmahalle - thanks for revert. i have made this configuration as well and retried but still facing issue with "Application Name" field on "Create ADSI Groups" screen.

From the below description, i am not sure when do we need this configuration? what is Enabler role? Secondly, is it also applicable for ADSI groups management?

Regards

Gaurav

[ReshamDas]

Hi @GauravJain ,

Did you get any solution for this issue? Even we are facing the same.

[GauravJain · Accepted solution]

You need to update "create.gsp" file for ADSI from "Settings->File Directory".

Add all the baseDN's for your groups in that file inside this function "populateAppName" for your respective domains. currently it displays data only for this domain "DC=saviyntlabs,DC=org".

[ReshamDas]

Thank you @GauravJain, that worked successfully in our case too.