Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Duplicate Account Status Issue !!

mahammed_raffi
New Contributor II
New Contributor II

Hi Team, 

We have integrated REST application and able to run the import job successfully. When we try to create account through ARS the account is getting provisioned and marked Account Status as 'Manually Provisioned' in Saviynt and account is created at Target side as well. As soon as we run the Account Import job it is creating another duplicate account with 'Active' status under Accounts section in Saviynt.

Could you please find the attached screenshot and do the needful for this issue to fix.

 

Thanks,

Rafi

[This message has been edited by moderator to mask sensitive information from an attached log file]

11 REPLIES 11

rushikeshvartak
All-Star
All-Star

Validate account id for both accounts


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

mahammed_raffi
New Contributor II
New Contributor II

Hi @rushikeshvartak ,

Yes, The account id is different for both account. While creating the account through ARS, as a response(CreateAccount Json response) ARS request is creating one id and which is storing at Target side.  As soon as we run the import job which is creating another account in saviynt with the ID(which is created through ARS createAccount)

Could you please let me is there any way to fix this issue ? If you can provide any sample json would be great.

 

Thanks,

Rafi

NM
Honored Contributor III
Honored Contributor III

Hi @mahammed_raffi , what are you passing as username in create account json?


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

mahammed_raffi
New Contributor II
New Contributor II

Hi @NM  - I am passing login as username in create account json. Please find the attached create account json. 

 

Thanks,

Rafi

NM
Honored Contributor III
Honored Contributor III

Hi @mahammed_raffi , I don't see username field been passed in create json but you are mapping username field to account id 


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

{
"accountIdPath": "response.call1.message.",
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"call": [
{
"name": "call1",
"connection": "acctAuth",
"showResponse": false,
"url": "https://XXXXXXXX/api/3/users",
"httpMethod": "POST",
"httpParams": "{\"authentication\":{ \"id\":\"2\", \"type\":\"normal\" },\"email\":\"${user.email}\", \"enabled\":\"true\", \"login\":\"${user.username}\",\"name\":\"${user.username}\",\"password\":\"${password}\",\"passwordResetOnLogin\":\"true\",\"role\":{ \"allAssetGroups\":\"false\", \"allSites\":\"false\", \"id\":\"View Only\", \"superuser\":\"false\"}}",
"httpHeaders": {
"Authorization": "Basic XXXXXXX"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
201,
200
]
},
"unsuccessResponses": {
"statusCode": [
400,
401,
403,
404
]
}
}
]
}


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

mahammed_raffi
New Contributor II
New Contributor II

We tried with above json and still no luck. 

 

{
"accountIdPath": "response.call1.message.id",
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"call": [
{
"name": "call1",
"connection": "acctAuth",
"showResponse": false,
"url": "https://XXXXXXX3780/api/3/users",
"httpMethod": "POST",
"httpParams": "{\"authentication\":{ \"id\":\"2\", \"type\":\"normal\" },\"email\":\"${user.email}\", \"enabled\":\"true\", \"login\":\"${user.username}\",\"name\":\"${user.username}\",\"password\":\"${password}\",\"passwordResetOnLogin\":\"true\",\"role\":{ \"allAssetGroups\":\"false\", \"allSites\":\"false\", \"id\":\"View Only\", \"superuser\":\"false\"}}",
"httpHeaders": {
"Authorization": "Basic XXXXXXX="
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
201,
200
]
},
"unsuccessResponses": {
"statusCode": [
400,
401,
403,
404
]
}
}
]
}

Provide data analyzer screenshot for both accounts - account id

 

 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

PFA.

 

Account id should be same when you are importing account and creating account.

Can you confirm 311 is ID from import and login is from saviynt user created ?


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NM
Honored Contributor III
Honored Contributor III

Hi @mahammed_raffi , accountid for both the accounts are different.. it should be same to map the data to one account.


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'