We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Incremental account import for LDAP connection type

AG
Regular Contributor II
Regular Contributor II

Hi All,

I am looking for some suggestion to configure incremental account import for LDAP connection type.

As per Saviynt documentation they support it for AD connection type by using whenChanged attribute.

Do we have similar mapping available for endpoint that do not have whenChnaged attribute instead they have different attribute in target to capture modifyTimeStamp.

Currently this is not working for me.

Thanks, 

10 REPLIES 10

sk
All-Star
All-Star

It supports for LDAP targets as well. what is your LDAP target and what are your configurations for INCREMENTAL_CONFIG


Regards,
Saathvik
If this reply answered your question, please Accept As Solution and give Kudos to help others facing similar issue.

AG
Regular Contributor II
Regular Contributor II

LDAP - OUD & LDS. I am not clear regd "INCREMENTAL_CONFIG" from the documentation. What if the target does not have those attributes.

rushikeshvartak
All-Star
All-Star

It supports Incremental Import

https://saviynt.freshdesk.com/support/solutions/articles/43000462839-ldap-connector-guide#LDAPConnec...

INCREMENTAL_CONFIG

 

{
 "incrementalImportType": "NotUsed",
 "changeLogBase": "OU=TestOU,DC=corp,DC=test,DC=com",
 "changeNumberFilter": "&(changeNumber>=##MAX_CHANGENUMBER##)(targetDN=*OU=TestOU,DC=corp,DC=test,DC=com*)",
 "dnAttributeName": "targetDn",
 "dnAttributeNameMappedTo": "username",
 "changeNumberAttrName": "uSNChanged",
 "changeTypeAttrName": "changeType",
 "changedFeildsInScope": "status,CUSTOMPROPERTY1,CUSTOMPROPERTY2,
LASTLOGONDATE,DISPLAYNAME,CUSTOMPROPERTY25,CUSTOMPROPERTY3,
COMMENTS,CUSTOMPROPERTY4,CUSTOMPROPERTY5,CUSTOMPROPERTY6,
CUSTOMPROPERTY7,CUSTOMPROPERTY8,CUSTOMPROPERTY9,DESCRIPTION,
CUSTOMPROPERTY14,CUSTOMPROPERTY15,CUSTOMPROPERTY16,
CUSTOMPROPERTY17,CUSTOMPROPERTY18,NAME,CUSTOMPROPERTY20,
CREATED_ON,ACCOUNTCLASS,customProperty29,dummy",
 "changesLogAttrName": "changes",
 "searchAttribute": "entrydn",
 "searchOn": "rdn"
}

https://docs.saviyntcloud.com/bundle/LDAP-v2021x/page/Content/Introduction.htm

INCREMENTAL_CONFIG

Use this parameter for incremental imports that is either performed using INCREMENTAL_CONFIG or MAX_CHANGENUMBER. Each type of LDAP Server has its own attributes that store the time at which the entity was created or updated. 

For example, IBM Tivoli uses createtimestamp and modifytimestamp.

You can pass the value for the parameter similar to in the format provided in ExampleJSONforConnectionParameters.

 

 

 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

AG
Regular Contributor II
Regular Contributor II

I am not clear regd "INCREMENTAL_CONFIG" from the documentation. What if the target does not have those attributes. How can we use them if the target is OUD or LDS. 

I don't see any configuration


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

AG
Regular Contributor II
Regular Contributor II

Have you used the above configuration. How can I did not find any details regarding for below JSON in FD

{
 "incrementalImportType": "NotUsed",
 "changeLogBase": "OU=TestOU,DC=corp,DC=test,DC=com",
 "changeNumberFilter": "&(changeNumber>=##MAX_CHANGENUMBER##)(targetDN=*OU=TestOU,DC=corp,DC=test,DC=com*)",
 "dnAttributeName": "targetDn",
 "dnAttributeNameMappedTo": "username",
 "changeNumberAttrName": "uSNChanged",
 "changeTypeAttrName": "changeType",
 "changedFeildsInScope": "status,CUSTOMPROPERTY1,CUSTOMPROPERTY2,
LASTLOGONDATE,DISPLAYNAME,CUSTOMPROPERTY25,CUSTOMPROPERTY3,
COMMENTS,CUSTOMPROPERTY4,CUSTOMPROPERTY5,CUSTOMPROPERTY6,
CUSTOMPROPERTY7,CUSTOMPROPERTY8,CUSTOMPROPERTY9,DESCRIPTION,
CUSTOMPROPERTY14,CUSTOMPROPERTY15,CUSTOMPROPERTY16,
CUSTOMPROPERTY17,CUSTOMPROPERTY18,NAME,CUSTOMPROPERTY20,
CREATED_ON,ACCOUNTCLASS,customProperty29,dummy",
 "changesLogAttrName": "changes",
 "searchAttribute": "entrydn",
 "searchOn": "rdn"
}  

AG
Regular Contributor II
Regular Contributor II

Can someone from Saviynt comment on how to use MAX_CHANGENUMBER in the connection. FD documentation is not clear.

@uthra_rahul 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

uthra_rahul
Saviynt Employee
Saviynt Employee

@JayashreeL Can you please revert with the inputs required for MAX_CHANGENUMBER

AG
Regular Contributor II
Regular Contributor II

Since CHANGELOG implementation is not documented clearly in FD , we have implemented it the old way using the objectfilter in connection .