Need advice a Hybrid Application integration

[ShantanuKumar]

I have a new requirement to onboard DB and LDAP application to Saviynt. The parent end point would be always the JDBC, user provision and recon would be always against JDBC.

The user provision should occur only if user has a LDAP account. When the provision occurs, user need to be created in DB and also entitlement needs to be added as well and also added to a group in LDAP.

I wants to use Enterprise role which can be a entitlement from DB and LDAP together to be used for provisioning process.  

User should request only for JDBC App and Saviynt should internally provision the user to JDBC for create/update/disable account along with entitlement access in DB and add the user to a LDAP group.

Could you please help me with the correct approach I should take to implement this hybrid App integration or any documentation can help for Enterprise role or multiple app provisioning for this use case?

[rushikeshvartak]

• You can make enterprise role requestable for access addition.
• For Enable / Disable /Remove account keep application requestable

[ShantanuKumar]

Hello Rishi,

Can you please share ant documents if possible or any other forum or articles? Also could you please help me with the process for setting up provisioning for multiple Apps?

[rushikeshvartak]

• Create Enterprise role with both entitlement  https://docs.saviyntcloud.com/bundle/EIC-User-v24x/page/Content/03-mang-accs/gen2-ars-req-er.htm 
• This will be the standard connector configuration. 

[ShantanuKumar]

Rishikesh, I am not very experienced with Saviynt so if you can share me some real time configuration for below use cases:

1. Prevision 2 end points. 1 of them would be primary end point which will provision account and grant access to entitlement. The other one would secondary end point which will just grant access. 

2. As both end point will grant access so is it better to use enterprise role and add both entitlements from both end points to same role and provision grant access or is it better to provision as separate entitlement? If any example of json configuration would be helpful.

[rushikeshvartak · Accepted solution]

• 1. Prevision 2 end points. 1 of them would be primary end point which will provision account and grant access to entitlement. The other one would secondary end point which will just grant access. 
  • On Application 1 - Entitlement Navigate to Other entitlements tab and add Entitlement 2 of application 2 as Entitlement Map
  • 
  • Refer https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter02-Identity-Repository/Under...
  •  
  •  
  • 2. As both end point will grant access so is it better to use enterprise role and add both entitlements from both end points to same role and provision grant access or is it better to provision as separate entitlement? If any example of json configuration would be helpful. 
    • It will be better to provision separate entitlement  . JSON will vary as per application API ( refer standard JSONs  https://docs.saviyntcloud.com/bundle/Dev-Handbook-REST-v24x/page/Content/Developers-Handbook.htm)