Endpoints_Filter on Customproperty

[rushikeshvartak]

Referring below Knowledge Articale

https://forums.saviynt.com/t5/community-knowledge-base/endpoint-filter-for-active-directory-connecti...

Can we use any other customproperty of entitlement while adding filter in Endpoints Filter for Azure AD or On Prem AD

For example :

{
"Sampletest AD Application": [
{
"memberOf": [
"customproperty1="AWS""
]
}
]
}

[SB]

Hi @rushikeshvartak Let me verify if this can be achieved; will update you.

[rushikeshvartak]

@SB  any update , I believed since you created KB its working , can you share working JSON

[SB]

Customproperty attribute cannot be used in filter. This has to be the AADGroup or memberOf value

{
"APPLICATION_QA": [
{
"AADGROUP": [
"group%"
]
}
]
}

{
"Sampletest2 ADSI Application": [
{
"memberOf": [
"CN=ADgroup%,OU=Groups,OU=India,DC=contoso,DC=com"
]
}
]
}

[rushikeshvartak]

So whatever mentioned in KB is wrong ?

[rushikeshvartak]

There is enhancement https://ideas.saviynt.com/ideas/EIC-I-2364 , Please confirm if this is considered for all connectors or not 

[SB]

I believe this is still being planned. You can update the ask/confirm on the idea itself.

[dgandhi]

Looking at the KB screenshot, can you check something like this? Check if you get result in the LDAP browser , if yes then same should work from Saviynt also. I hope this is what @SB meant from the KB article.

{
"Sampletest2 ADSI Application": [
{
"department": [
"(&(objectCategory=person)(objectClass=user)(department=PM))"
]
}
]
}

Thanks

[rushikeshvartak · Accepted solution]

https://ideas.saviynt.com/ideas/EIC-I-4577 Idea has been requested for feature

[SB]

The KB mentions to use the same filter that you can use in LDAP browser for AD. CustomerProperty is a Saviynt attribute and will not work in LDAP browser either.

[SB]

Also This parameter currently supports only creating the logical endpoint based on the memberof filter