Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Logical AD Application Entitlement Glossary updates not happening

aalvarez_mk
New Contributor II
New Contributor II

We have onboarded a new connection, security system, and endpoint for handling logical applications. The management has all worked as expected, with the exception of entitlement metadata. We have mapped the entitlement glossary to description for AD groups. However, the groups are not being updated when the description has been updated.

Here is the groupImportMapping:

{
"performGroupAccountLinking": "true",
"groupObjectClass":"(objectclass=group)",
"mapping":"entitlement_value:distinguishedName_char,entitlement_glossary:description_char,lastscandate:whenCreated_date,displayName:displaylegalname_char,RECONCILATION_FIELD:customproperty18,customproperty18:objectGUID_Binary",
"activeGroupPossibleValues":["active","a","l","TRUE"]
}

13 REPLIES 13

rushikeshvartak
All-Star
All-Star

Does Primary endpoint glossary field is updated ? It may not update in logical applications

 

Any error in logs ?

As per documentation it should work https://docs.saviyntcloud.com/bundle/AD-v24x/page/Content/Configuring-the-Integration-for-Importing-...


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hi Rushikesh. We see no errors in the logs.

Some entitlements are being updated in both endpoints. So it does not seem to be across the entire catalog.

Share sample glossary for entitlement where its not updated 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Attaching simple view. Displays glossary, security system, endpoint.

MIPS entitlement shows Request # instead of updated value

Is this same added in AD 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Not sure what you mean by added. They are imported from the main AD connection. Which displays the glossary properly.

Currently glossary does not get populated to logical application. Use enhanced query after every import job to update glossary of logical apps


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Is there some kind of sample query you could provide as a template for us to modify? And this will be executed as a job, correct?

Yes

Sample :

select entitlement_Valuekey as entitlement_values__primarykey,'IT' as entitlement_values__ENTITLEMENT_GLOSSARY
from entitlement_values
where entitlement_Valuekey=1


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

aalvarez_mk
New Contributor II
New Contributor II

Thanks! We have this on the backlog to complete.

Please click the 'Accept As Solution' button on the reply (or replies) that best answered your original question.


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Rushikesh,

There is still an outstanding question on how to do this on a large scale. We have hundreds of parent and child entitlements which need to be updated. In your sample, it works for a single entitlement which has a hard-coded glossary value. Do you know how we could have only 1 enhanced query job run to manage the entire set of child entitlements?

select entitlement_Valuekey as entitlement_values__primarykey,'IT' as entitlement_values__ENTITLEMENT_GLOSSARY
from entitlement_values
where entitlementtypekey=1111


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.