Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Logical AD Application Entitlement Glossary updates not happening

aalvarez_mk
New Contributor III
New Contributor III

We have onboarded a new connection, security system, and endpoint for handling logical applications. The management has all worked as expected, with the exception of entitlement metadata. We have mapped the entitlement glossary to description for AD groups. However, the groups are not being updated when the description has been updated.

Here is the groupImportMapping:

{
"performGroupAccountLinking": "true",
"groupObjectClass":"(objectclass=group)",
"mapping":"entitlement_value:distinguishedName_char,entitlement_glossary:description_char,lastscandate:whenCreated_date,displayName:displaylegalname_char,RECONCILATION_FIELD:customproperty18,customproperty18:objectGUID_Binary",
"activeGroupPossibleValues":["active","a","l","TRUE"]
}

13 REPLIES 13

rushikeshvartak
All-Star
All-Star

Does Primary endpoint glossary field is updated ? It may not update in logical applications

 

Any error in logs ?

As per documentation it should work https://docs.saviyntcloud.com/bundle/AD-v24x/page/Content/Configuring-the-Integration-for-Importing-...


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi Rushikesh. We see no errors in the logs.

Some entitlements are being updated in both endpoints. So it does not seem to be across the entire catalog.

Share sample glossary for entitlement where its not updated 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Attaching simple view. Displays glossary, security system, endpoint.

MIPS entitlement shows Request # instead of updated value

Is this same added in AD 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Not sure what you mean by added. They are imported from the main AD connection. Which displays the glossary properly.

Currently glossary does not get populated to logical application. Use enhanced query after every import job to update glossary of logical apps


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Is there some kind of sample query you could provide as a template for us to modify? And this will be executed as a job, correct?

Yes

Sample :

select entitlement_Valuekey as entitlement_values__primarykey,'IT' as entitlement_values__ENTITLEMENT_GLOSSARY
from entitlement_values
where entitlement_Valuekey=1


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

aalvarez_mk
New Contributor III
New Contributor III

Thanks! We have this on the backlog to complete.

Please click the 'Accept As Solution' button on the reply (or replies) that best answered your original question.


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Rushikesh,

There is still an outstanding question on how to do this on a large scale. We have hundreds of parent and child entitlements which need to be updated. In your sample, it works for a single entitlement which has a hard-coded glossary value. Do you know how we could have only 1 enhanced query job run to manage the entire set of child entitlements?

select entitlement_Valuekey as entitlement_values__primarykey,'IT' as entitlement_values__ENTITLEMENT_GLOSSARY
from entitlement_values
where entitlementtypekey=1111


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.