Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Create ADSI Group - Application Name

GauravJain
Regular Contributor III
Regular Contributor III

Hi

To set-up ADSI Group Management i have done all required configurations as per Saviynt documentation. While verifying the UI for "Create ADSI Groups" i don't see any value populating in dropdown for "Application Name" which is a mandatory field. But the rest of the fields on UI have correct values as configured.

Am i missing anything here?

Please let me know if you require further inputs on my query.

Regards

Gaurav

 

14 REPLIES 14

SumathiSomala
All-Star
All-Star

@GauravJain Did you select the workflow in entitlement Type details page?

Ensure that there is a workflow selected for the groups created. Go to Admin > Security Systems > Endpoints > Entitlement Type > View Details icon. In the Entitlement Type Show page, select the workflow under Add Workflow

 

Regards,
Sumathi Somala

If this reply answered your question, please Accept As Solution and give Kudos.

GauravJain
Regular Contributor III
Regular Contributor III

Yes, i have selected AutoApprovalWorkflow.

GauravJain
Regular Contributor III
Regular Contributor III

Also, when i am using "Manage Role" tiles to update an existing group, that time too "Application Name" is not populating. From where Saviynt pulls this information? as per tooltip its a container information under selected domain name so if domain names are populating correctly, why container information is not populating.

What all configs done mentioned all in 1 liner 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Did you added Entitlement Type under sav role - create home option ?

rushikeshvartak_0-1720629016999.png

 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

GauravJain
Regular Contributor III
Regular Contributor III

Yes, i have selected "ADSI Groups" there. 

The problem i am facing is on the "Create ADSI Groups" screen which a user can access only when he/she is part of a sav role with these required features - Manage Roles : Create Role & Manage Roles : Update Role.

"Application Name" on Create ADSI Group screen gets pre-populated values already stored in Saviynt repository OR it makes an API call at runtime to pull this information? probably i could find something in logs if Saviynt triggers an API call at runtime.

Connection Configuration added under Endpoint ?


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

GauravJain
Regular Contributor III
Regular Contributor III

Yes.

{"conf":[{"ADDMEMBERTOENT":"TRUE"},{"ADDUSERTOENT":"TRUE"}]}

@GauravJain ,

Make sure to select respective ADSI connection in AD Group Management Connection under Global Configurations--> Roles --> Management. 

 

pmahalle_1-1721030905356.png

Add this if not and try once.

 


Pandharinath Mahalle(Paddy)
If this reply helps your question, please consider selecting Accept As Solution and hit Kudos 🙂

GauravJain
Regular Contributor III
Regular Contributor III

Hi @pmahalle - thanks for revert. i have made this configuration as well and retried but still facing issue with "Application Name" field on "Create ADSI Groups" screen.

From the below description, i am not sure when do we need this configuration? what is Enabler role? Secondly, is it also applicable for ADSI groups management?

GauravJain_0-1721032643265.png

Regards

Gaurav

 

 

ReshamDas
Regular Contributor
Regular Contributor

Hi @GauravJain ,

Did you get any solution for this issue? Even we are facing the same.

GauravJain
Regular Contributor III
Regular Contributor III

You need to update "create.gsp" file for ADSI from "Settings->File Directory".

Add all the baseDN's for your groups in that file inside this function "populateAppName" for your respective domains. currently it displays data only for this domain "DC=saviyntlabs,DC=org".

ReshamDas
Regular Contributor
Regular Contributor

Thank you @GauravJain, that worked successfully in our case too.