Announcing the SAVIYNT KNOWLEDGE EXCHANGE unifying the Saviynt forums, documentation, training, and more in a single search tool across platforms. Click HERE to read the Announcement.

Importing Account Data from 2 different sources (Azure & Database)

Mohit_Sanka
New Contributor II
New Contributor II

Hi Team,

We have a use-case where we need to import SPN (Application) from Azure AD and Database into Saviynt as Service Accounts.

The reason for importing data from the Database is to get the SPN's friendly name (user friendly) and set it as an account name for the SPNs which are imported from Azure as in Azure we don't have this friendly name for the SPNs.

So we are trying to understand how we can achieve this use case without creating any duplicate records in Saviynt.

We thought of importing the data from the Database first and importing only the membership details of these SPNs but we are unable to build an API call for picking the account data from Saviynt and using it to call the Azure AD.

We also thought of importing the data from Azure first by keeping the account name Null and updating it with Database data. But this will fail when the next recon from Azure runs and suspends the existing accounts and create new ones as the existing ones are not in File.

So kindly help us understand whether this use case of importing Account data from 2 different sources can be achieved. If yes kindly suggest the details of how to achieve this.

Thanks & Regards,

Mohit Srinath Sanka.

14 REPLIES 14

rushikeshvartak
All-Star
All-Star

Database in saviynt ?


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

No, its a External Database from where we need to the data.

Account name is primary key so you may not be able to achieve this


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Can we keep the account name from Database as Display name of the account and show it in the Service Account Request tile?

Currently we can only show Account name, Account Status & Action. So is there a way that we can show the display name of the account in the request window along with these only for a particular endpoint.

That can be possible 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Can you help me with steps that needs to be followed and what all changes we need to make.

Hii Rushikesh, please let us know the  steps that need to be followed and what changes we need to make.

Its similar like saviynt 4 saviynt import where you can map other account name attribute 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Using Sav 4 Sav will only update the account attributes in the Endpoint.

But how will we be able to show the Account displayname on the Request Page of Service Account Tile for the particular endpoint? Because the account name and displayname are different for the Accounts.

  • You can create dynamic attribute to show

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hi Rushikesh,

But Dynamic Attribute won't be showing up in the Request window. Below is the image attached of the Request window I am referring to. Can you check and let us know how the Dynamic attribute can be shown here in the request window. Because we are not able to find any configuration for this.

Service Account request tileService Account request tile

 Thanks & Regards,

Mohit.

Once account clicked on Modify that can be shown

 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Okay, you are mentioning the request Form.

But we want it to be shown on the Request pop-up window, and not in the Request form.

For example in the Place of Application 1 in the above image we want to show the display name of the account like 'SPN-Testing-App'.

So, can we do anything to show the display name of the account in the popup window?

That’s not feasible. 

- You can edit gsp but which is not recommended Please raise idea on ideas portal


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.