Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Need Details of appAccountThresholdValue field - Azure AD

ssudhakar
New Contributor III
New Contributor III

Hi Experts,

Can someone please explain the purpose of appAccountThresholdValue (New field in Azure AD  Connector STATUS_THRESHOLD_CONFIG).

We could see below explanation from release notes and Azure AD Connector, but it still not giving 100 percent clarity on the expectation.

Release Notes 5.5 SP5 
Enables you to define the threshold for application accounts via a new attribute, appAccountThresholdValue, in the STATUS_THRESHOLD_CONFIG connection parameter.


https://docs.saviyntcloud.com/bundle/Release-Notes/page/Content/v5.5.x/Release-Notes-v5-5-SP5.htm

Azure AD Connector Guide V2021.x

appAccountThresholdValue: Specify the threshold value that you want the connector to use for inactivating or deleting application accounts missing from import.

https://docs.saviyntcloud.com/bundle/AzureAD-v2021x/page/Content/Configuring-the-Integration-for-Acc...

Thanks for your help in advance.

 

4 REPLIES 4

SB
Saviynt Employee
Saviynt Employee

This is the threshold value for each application that is created as an EP under the Security system. If the number of accounts missing for any application breach the threshold defined, no action will be taken.


Regards,
Sahil

rushikeshvartak
All-Star
All-Star

appAccountThresholdValue is used when you use ENDPOINTS_FILTERS option. where account threshold of logical application is maintained within threshold


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

ssudhakar
New Contributor III
New Contributor III

When a logical application group from an account is removed directly in source, after the reconciliation logical application account status is showing as Inactive instead of SUSPENDED FROM IMPORT SERVICE.
Is there any additional options/settings/JSON we need to enable to get the status corrected ?

STATUS_THRESHOLD_JSON mapping we are using is given below

{
"statusAndThresholdConfig": {
"statusColumn": "customproperty10",
"deleteLinks": false,
"activeStatus": ["true"],
"correlateInactiveAccounts": true,
"accountThresholdValue" : 1000000
}
}

{
"statusAndThresholdConfig": {
"statusColumn": "customproperty10",
"activeStatus": [
"true"
],
"deleteLinks": false,
"accountThresholdValue": 10000,
"appAccountThresholdValue": 10000,
"correlateInactiveAccounts": true,
"inactivateAccountsNotInFile": false,
"deleteAccEntForActiveAccounts": true
}
}


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.