Click HERE to see how Saviynt Intelligence is transforming the industry. |
06/11/2023 07:08 PM
Hi Teams,
06/11/2023 10:06 PM
Please check if ""activeStatus": ["true"]," is having any other value in the target.
For more details please refer to following document : https://docs.saviyntcloud.com/bundle/AzureAD-v2022x/page/Content/Configuring-the-Integration-for-Acc...
06/11/2023 10:25 PM
@JPMac
Please check if there is any invalid attribute present if you are using the Account_Import_Fields parameter of Azure AD Connection. Also, make sure that you have included the accountEnabled property in Account_Import_Fields.
I checked the mapping provided above too and found that the below mapping fields seem invalid.
hireDate,signInActivity.lastSignInDateTime,physicalDeliveryOfficeName,telephoneNumber
I will recommend checking this as well.
06/11/2023 11:32 PM
Hi Team, thanks for your response.
Share the contents of the account attribute field.
======
accountEnabled,city,country,department,onPremisesSyncEnabled,displayName,onPremisesLastSyncDateTime,mobilePhone,id,businessPhones,usagelocation,userPrincipalName,userType,givenName,surname,mail,officeLocation,preferredLanguage,onPremisesImmutableId,onPremisesSecurityIdentifier,externalUserState,streetAddress,state,physicalDeliveryOfficeName,postalCode,telephoneNumber,employeeId,signInActivity
======
Something like signInactivity gets the user's last login time and is needed to detective the Dormant Account.
As above, "accountEnabled" is already in.
Regards,
06/12/2023 12:03 AM
The Microsoft Graph API does not support retrieving SignInActivity information in the DeltaToken API which Azure AD connector invokes as a first call while Account import. Hence, It is failing to get the delta token with the below error.
And, Azure AD connector uses this delta token while incremental account import to get changes from the last account import.
Invalid request for delta query: for this entity set, $expand/$select is not supported for the following properties: signInActivity
You need to remove the signInActivity attribute from the Account_Import_Fields for incremental import to work.
06/12/2023 12:35 AM
Hi Team,
This error occurred even before adding SignInActivity to Account Fields. So even if you delete SignInActivity, the issue still occurs.
Regards,
06/12/2023 01:59 AM - edited 06/12/2023 02:04 AM
Hi @JPMac
Please try the below steps.
1. Remove these attributes (hireDate,signInActivity,physicalDeliveryOfficeName,telephoneNumber) from the Account_Attribute Field and mappings as well.
2. Run Full account import.
3. Run Incremental account import.
Share the log if the issue still persists.
06/15/2023 03:23 PM
@khalidakhter @ We have a requirement to bring physicalDeliveryOfficeName,telephoneNumber
How will we bring this in? We are getting error while running full import with these two fields in it. When we checked the job logs, it seems the api being called is delta. (https://graph.microsoft.com/v1.0/users/delta) is this a standard behavior with Saviynt?
06/18/2023 11:45 PM
For this, you can use the REST connector to import the above attributes in Saviynt. The OOTB Azure AD connector won't be able to import any attributes which are not supported in Delta API.
06/19/2023 06:01 AM
@khalidakhter could you please clarify if OOTB connector is using delta API for full import? if yes, what is the difference between full import and incremental import?
06/20/2023 06:06 AM
@shibinvpkvr Azure AD connector gets the latest Delta token while full account import and stores it in the database and uses it while Incremental import to get the changes from the last import job.
06/20/2023 06:36 AM
@khalidakhter ok. so even in full account import, Delta token API being called which does not support physicalDeliveryOfficeName, telephoneNumber attributes. So we cannot include these in import in anyway if we are using OOTB Azure AD connector correct?
06/20/2023 08:08 AM
Yes, @shibinvpkvr . Right now, you will be able to import only those attributes that are supported in the DeltaToken API.
You can use the REST connector for account import if you want to import the above attribute information.