mail attribute not populating

[asharma]

Hi,

We have 1 admin AD account which is created outside Saviynt in AD and we are just importing it in Saviynt. When we are importing it mail attribute is not getting populating under users accounts tab for AD in other attributes.

Also, this is with only admin users not with normal users as same job and connection is used for both to import.

Moreover, that user is not able to login through SSO (Azure) in Saviynt and getting the error as attached and nothing coming up in logs.

Please advise.

[rushikeshvartak]

1. Is it not populated on account or user object ?
2. As Account mail attribute vs saviynt sso has no relation ?
3. Missing attachment 

[asharma]

1. Is it not populated on account or user object ? Account
2. As Account mail attribute vs saviynt sso has no relation ? understood, having same understanding.
3. Missing attachment Attaching it again

[This post has been edited by a Moderator to remove sensitive information.]

[rushikeshvartak]

• Since its 1 impacted user you can populate using enhanced query. 
• Screenshot error - Try clearing cache

[NM]

@asharma SSO isn't linked to account only to user .. user might be having the different SSO identifier in IDP then in saviynt

[stalluri]

@asharma 
1. This admin AD account should have a user/identity to log into Saviynt. If yes, does the user profile have the email?
2. Are there any duplicate accounts created for this admin account check it.
3.  can you share some images or snippets to understand the problem better.

                    Refer: https://forums.saviynt.com/t5/help/faqpage/title/WhenNotifyAboutPII

❗🚫⚠️❗Do not upload any attachments or data that contain sensitive information, such as PII, IP Addresses, URLs, Company/Employee Names, Email Addresses, etc. ❗⚠️ 🚫❗

[asharma · Accepted solution]

I got the root cause - security question option was checked in global config which should not be when we enable SSO. we turned it off and it worked.