and more in a single search tool across platforms. Read the announcement here. |
07/19/2023 03:24 AM - edited 07/19/2023 03:25 AM
Hello All ,
As we are creating G-suite user, can we block interactive login for this? We can see that user credentials is used to granting consent, if interactive login is required, what is the recommendation from Saviynt to have some control around it.
07/24/2023 06:18 PM
Hi @Diptansu1
I am assuming you are using the OOTB GCP connector to create a G Suite user.
Are you setting a password for the user at the time of GSuit user account creation?
Have you already tried setting "changePasswordAtNextLogin": "false" in createAccountJSON?
07/24/2023 08:09 PM - edited 07/24/2023 08:11 PM
Set below parameter is json
"changePasswordAtNextLogin": false,
{
"dateFormat" : "yyyy-MM-dd'T'HH:mm:ss.SSS'Z'",
"responseColsToPropsMap": {
"customproperty23": "addresses~#~json",
"customproperty3": "name.givenName~#~char",
"name": "primaryEmail~#~char",
"customproperty17":"name.familyName~#~char",
"UPDATEDATE": "creationTime~#~date"},
"primaryEmail": "${user.email}",
"name": {
"givenName": "${user.firstname}",
"familyName": "${user.lastname}"},
"addresses": [{
"type": "work",
"customType": "",
"streetAddress": "${requestAccessAttributes.get('Street')}",
"locality": "${user.customproperty1}",
"region": "CA",
"postalCode": "94043"}],
"organizations":[{
"department":"${(user.departmentname==null)?'':user.departmentname}",
"name":"${(user.companyname==null)?'':user.companyname}" ,
"costCenter":"${(user.costcenter==null)?'':user.costcenter}" ,
"title":"${(user.title==null)?'':user.title}"}],
"suspended": false,
"password": "${password}",
"changePasswordAtNextLogin": false,
"ipWhitelisted": false,
"orgUnitPath":
"${user?.country?.equalsIgnoreCase('india')?'/Finance':user.country?.equalsIgnoreCase('usa')? '/Sales':user.country?.equalsIgnoreCase('uk')?'/Operations':'/'}",
"includeInGlobalAddressList": true
}