LDAP account creation to include creating LDAP group and assigning group to account

[CredenceIA_11]

We have a requirement to provision accounts and groups to RedHat LDAP directory. When a request is submitted, the requirement is to do the following:
a) Create the LDAP account
b) Create an LDAP group with the same name as the account

c) Assign that newly created LDAP group to the LDAP Account

Please advise if this is possible and how.

[rushikeshvartak]

Yes, it is possible to provision accounts and groups to a RedHat LDAP directory using Saviynt. 

a) Create the LDAP account:

• Configure Saviynt to provision user accounts to the RedHat LDAP directory. This typically involves setting up a connector for the LDAP directory within Saviynt and providing the necessary connection details and credentials.
• Define mappings between attributes in Saviynt and attributes in the LDAP directory to ensure that user account information is properly synchronized.

b) Create an LDAP group with the same name as the account:

• After creating the LDAP account, use Saviynt workflows or custom actions to trigger the creation of an LDAP group with the same name.
• Saviynt allows you to execute custom logic or scripts as part of provisioning workflows. You can use this capability to invoke scripts or API calls that create the LDAP group in the RedHat LDAP directory.

c) Assign the newly created LDAP group to the LDAP Account:

• Once the LDAP group is created, use Saviynt to assign the group to the LDAP account.
• You can accomplish this by configuring membership rules or using custom actions within Saviynt to add the LDAP group to the LDAP account's group membership.

[CredenceIA_11]

Hi, Please provide the link to the documentation that describes how to create provisioning workflows and also how to do step c) using custom actions or membership rules?

Thanks

[rushikeshvartak]

Workflow - https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter12-Workflows/Creating-Workfl... 

Rules - https://docs.saviyntcloud.com/bundle/EIC-External-Scenario-1/page/Content/Creating-User-Update-Rule....

[CredenceIA_11]

Thanks. Those workflows are for approval workflows. The solution mentioned "Provisioning" workflows to allow multiple provisioning tasks to be kicked off;

"b) Create an LDAP group with the same name as the account:

• After creating the LDAP account, use Saviynt workflows or custom actions to trigger the creation of an LDAP group with the same name.
• Saviynt allows you to execute custom logic or scripts as part of provisioning workflows. You can use this capability to invoke scripts or API calls that create the LDAP group in the RedHat LDAP directory."