Creating API Service User while SSO is enabled

[Murmur]

Hi everyone, 

How can I create a User usable as an API service user, when SSO is enabled?

What have I tested? 

• Create new user + assign appropriate SAV Role
• Reset password vioa Admin panel 
• CUSTOMQUERY to unexpire password and enable localauth 
  • update users set passwordexpired=0, localauthenabled=1 where username='username'
• Now I'm at least able to acquire the the Bearer Token, but it still requires me to set the security questions for this account. Can this be bypassed / fixed without being able to sign in?

Cheers 🙂

[JohnLawson · Accepted solution]

Depends on if you are trying to have a service account access the GUI or if it will be using the API.

This is how we setup API service accounts after creating them in Saviynt:

It may be that you have to disable the security question requirement in the global config under preferences

[rushikeshvartak]

If application is enabled then why Security question are mandatory?

Disable the security question requirement in the global config under preferences

Alternatively you can upload security questions ans using import sheet

. You can disable the feature

[Murmur]

@rushikeshvartak great question.

I'd actually expect that to be done automatically from Saviynts's side, when SSO is enabled, as the security questions do not serve any purpose anymore after that.

I'll disable it now, thanks.