Incremental account import for LDAP connection type

[AG]

Hi All,

I am looking for some suggestion to configure incremental account import for LDAP connection type.

As per Saviynt documentation they support it for AD connection type by using whenChanged attribute.

Do we have similar mapping available for endpoint that do not have whenChnaged attribute instead they have different attribute in target to capture modifyTimeStamp.

Currently this is not working for me.

Thanks, 

[sk]

It supports for LDAP targets as well. what is your LDAP target and what are your configurations for INCREMENTAL_CONFIG

[AG]

LDAP - OUD & LDS. I am not clear regd "INCREMENTAL_CONFIG" from the documentation. What if the target does not have those attributes.

[rushikeshvartak]

It supports Incremental Import

https://saviynt.freshdesk.com/support/solutions/articles/43000462839-ldap-connector-guide#LDAPConnec...

INCREMENTAL_CONFIG

{  "incrementalImportType": "NotUsed",  "changeLogBase": "OU=TestOU,DC=corp,DC=test,DC=com",  "changeNumberFilter": "&(changeNumber>=##MAX_CHANGENUMBER##)(targetDN=*OU=TestOU,DC=corp,DC=test,DC=com*)",  "dnAttributeName": "targetDn",  "dnAttributeNameMappedTo": "username",  "changeNumberAttrName": "uSNChanged",  "changeTypeAttrName": "changeType",  "changedFeildsInScope": "status,CUSTOMPROPERTY1,CUSTOMPROPERTY2, LASTLOGONDATE,DISPLAYNAME,CUSTOMPROPERTY25,CUSTOMPROPERTY3, COMMENTS,CUSTOMPROPERTY4,CUSTOMPROPERTY5,CUSTOMPROPERTY6, CUSTOMPROPERTY7,CUSTOMPROPERTY8,CUSTOMPROPERTY9,DESCRIPTION, CUSTOMPROPERTY14,CUSTOMPROPERTY15,CUSTOMPROPERTY16, CUSTOMPROPERTY17,CUSTOMPROPERTY18,NAME,CUSTOMPROPERTY20, CREATED_ON,ACCOUNTCLASS,customProperty29,dummy",  "changesLogAttrName": "changes",  "searchAttribute": "entrydn",  "searchOn": "rdn" }

https://docs.saviyntcloud.com/bundle/LDAP-v2021x/page/Content/Introduction.htm

INCREMENTAL_CONFIG

Use this parameter for incremental imports that is either performed using INCREMENTAL_CONFIG or MAX_CHANGENUMBER. Each type of LDAP Server has its own attributes that store the time at which the entity was created or updated.  For example, IBM Tivoli uses createtimestamp and modifytimestamp. You can pass the value for the parameter similar to in the format provided in ExampleJSONforConnectionParameters.

[AG]

I am not clear regd "INCREMENTAL_CONFIG" from the documentation. What if the target does not have those attributes. How can we use them if the target is OUD or LDS. 

[rushikeshvartak]

I don't see any configuration

[AG]

Have you used the above configuration. How can I did not find any details regarding for below JSON in FD

{
 "incrementalImportType": "NotUsed",
 "changeLogBase": "OU=TestOU,DC=corp,DC=test,DC=com",
 "changeNumberFilter": "&(changeNumber>=##MAX_CHANGENUMBER##)(targetDN=*OU=TestOU,DC=corp,DC=test,DC=com*)",
 "dnAttributeName": "targetDn",
 "dnAttributeNameMappedTo": "username",
 "changeNumberAttrName": "uSNChanged",
 "changeTypeAttrName": "changeType",
 "changedFeildsInScope": "status,CUSTOMPROPERTY1,CUSTOMPROPERTY2,
LASTLOGONDATE,DISPLAYNAME,CUSTOMPROPERTY25,CUSTOMPROPERTY3,
COMMENTS,CUSTOMPROPERTY4,CUSTOMPROPERTY5,CUSTOMPROPERTY6,
CUSTOMPROPERTY7,CUSTOMPROPERTY8,CUSTOMPROPERTY9,DESCRIPTION,
CUSTOMPROPERTY14,CUSTOMPROPERTY15,CUSTOMPROPERTY16,
CUSTOMPROPERTY17,CUSTOMPROPERTY18,NAME,CUSTOMPROPERTY20,
CREATED_ON,ACCOUNTCLASS,customProperty29,dummy",
 "changesLogAttrName": "changes",
 "searchAttribute": "entrydn",
 "searchOn": "rdn"
}  

[AG]

Can someone from Saviynt comment on how to use MAX_CHANGENUMBER in the connection. FD documentation is not clear.

[rushikeshvartak]

@uthra_rahul 

[uthra_rahul]

@JayashreeL Can you please revert with the inputs required for MAX_CHANGENUMBER? 

[AG · Accepted solution]

Since CHANGELOG implementation is not documented clearly in FD , we have implemented it the old way using the objectfilter in connection .