Click HERE to see how Saviynt Intelligence is transforming the industry. |
12/08/2022 06:44 AM
Hi Team,
We have a use-case where we need to import SPN (Application) from Azure AD and Database into Saviynt as Service Accounts.
The reason for importing data from the Database is to get the SPN's friendly name (user friendly) and set it as an account name for the SPNs which are imported from Azure as in Azure we don't have this friendly name for the SPNs.
So we are trying to understand how we can achieve this use case without creating any duplicate records in Saviynt.
We thought of importing the data from the Database first and importing only the membership details of these SPNs but we are unable to build an API call for picking the account data from Saviynt and using it to call the Azure AD.
We also thought of importing the data from Azure first by keeping the account name Null and updating it with Database data. But this will fail when the next recon from Azure runs and suspends the existing accounts and create new ones as the existing ones are not in File.
So kindly help us understand whether this use case of importing Account data from 2 different sources can be achieved. If yes kindly suggest the details of how to achieve this.
Thanks & Regards,
Mohit Srinath Sanka.
12/08/2022 06:45 AM
Database in saviynt ?
12/08/2022 06:51 AM
No, its a External Database from where we need to the data.
12/08/2022 06:53 AM
Account name is primary key so you may not be able to achieve this
12/08/2022 06:57 AM
Can we keep the account name from Database as Display name of the account and show it in the Service Account Request tile?
Currently we can only show Account name, Account Status & Action. So is there a way that we can show the display name of the account in the request window along with these only for a particular endpoint.
12/08/2022 06:59 AM
That can be possible
12/08/2022 07:00 AM
Can you help me with steps that needs to be followed and what all changes we need to make.
12/08/2022 11:15 PM
Hii Rushikesh, please let us know the steps that need to be followed and what changes we need to make.
12/09/2022 04:39 AM
Its similar like saviynt 4 saviynt import where you can map other account name attribute
12/09/2022 06:17 AM
Using Sav 4 Sav will only update the account attributes in the Endpoint.
But how will we be able to show the Account displayname on the Request Page of Service Account Tile for the particular endpoint? Because the account name and displayname are different for the Accounts.
12/09/2022 06:23 AM
12/09/2022 09:58 AM - edited 12/09/2022 09:59 AM
Hi Rushikesh,
But Dynamic Attribute won't be showing up in the Request window. Below is the image attached of the Request window I am referring to. Can you check and let us know how the Dynamic attribute can be shown here in the request window. Because we are not able to find any configuration for this.
Thanks & Regards,
Mohit.
12/09/2022 10:38 AM
Once account clicked on Modify that can be shown
12/12/2022 02:18 AM
Okay, you are mentioning the request Form.
But we want it to be shown on the Request pop-up window, and not in the Request form.
For example in the Place of Application 1 in the above image we want to show the display name of the account like 'SPN-Testing-App'.
So, can we do anything to show the display name of the account in the popup window?
12/12/2022 04:10 AM
That’s not feasible.
- You can edit gsp but which is not recommended Please raise idea on ideas portal