Import Azure AD user from specific AAD Group Member as Saviynt Account using OOT Connection- AzureAD

[alvian]

Currently, I have a target application whose accounts are integrated with AzureAD, but not all Azure AD accounts have access to this target application. In my environment, these target application accounts are grouped in the AzureAD group "X-Team." So, my idea is to import Azure AD users who are member of the X-Team group as accounts in Saviynt later on. For this purpose, is there any way or something that needs to be configured such as Accountfilterjson in AzureAD connection OOTB? Do you have any suggestions for this?

[rushikeshvartak]

use ENTITLEMENT_FILTER_JSON in connection level

Refer https://docs.saviyntcloud.com/bundle/AzureAD-v2022x/page/Content/Customizing-Entitlement-Import.htm

[alvian]

Hi @rushikeshvartak 

I'm not trying to import entitlements with a filter. If that were the case, I've already done it by referring to this thread:
https://forums.saviynt.com/t5/identity-governance/entitlement-filter-json-azuread-ootb-connector/m-p...

The idea is to create a REST API connection to AzureAD so that I can perform custom importacctentjson. Below are the accountParams from that connection:

{
"accountParams": {
"connection": "userAuth",
"processingType": "SequentialAndIterative",
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"http": {
"url": "https://graph.microsoft.com/v1.0/groups/8a614e3b-cbb1-4835-9a67-c7b504a42a16/members",
"httpMethod": "GET",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "*/*"
}
},
"listField": "value",
"keyField": "accountID",
"colsToPropsMap": {
"accountID": "userPrincipalName~#~char",
"name": "userPrincipalName~#~char",
"displayName": "displayName~#~char",
"customproperty40": "id~#~char"
}
}
}
}
}

I can't input the ID into the accountID column because if I do, the import account job will fail due to duplicates. So, I've inputted the ID into CP40, and it works fine until I get confused about performing the accountentitlement mapping.

[rushikeshvartak]

Does apis working on postman