and more in a single search tool across platforms. Read the announcement here. |
06/30/2023 03:38 AM
Hi Experts,
Can someone please explain the purpose of appAccountThresholdValue (New field in Azure AD Connector STATUS_THRESHOLD_CONFIG).
We could see below explanation from release notes and Azure AD Connector, but it still not giving 100 percent clarity on the expectation.
Release Notes 5.5 SP5
Enables you to define the threshold for application accounts via a new attribute, appAccountThresholdValue, in the STATUS_THRESHOLD_CONFIG connection parameter.
https://docs.saviyntcloud.com/bundle/Release-Notes/page/Content/v5.5.x/Release-Notes-v5-5-SP5.htm
Azure AD Connector Guide V2021.x
appAccountThresholdValue: Specify the threshold value that you want the connector to use for inactivating or deleting application accounts missing from import.
Thanks for your help in advance.
07/03/2023 01:18 PM
This is the threshold value for each application that is created as an EP under the Security system. If the number of accounts missing for any application breach the threshold defined, no action will be taken.
07/03/2023 07:46 PM
appAccountThresholdValue is used when you use ENDPOINTS_FILTERS option. where account threshold of logical application is maintained within threshold
07/04/2023 09:12 PM
When a logical application group from an account is removed directly in source, after the reconciliation logical application account status is showing as Inactive instead of SUSPENDED FROM IMPORT SERVICE.
Is there any additional options/settings/JSON we need to enable to get the status corrected ?
STATUS_THRESHOLD_JSON mapping we are using is given below
{
"statusAndThresholdConfig": {
"statusColumn": "customproperty10",
"deleteLinks": false,
"activeStatus": ["true"],
"correlateInactiveAccounts": true,
"accountThresholdValue" : 1000000
}
}
07/04/2023 09:16 PM
{
"statusAndThresholdConfig": {
"statusColumn": "customproperty10",
"activeStatus": [
"true"
],
"deleteLinks": false,
"accountThresholdValue": 10000,
"appAccountThresholdValue": 10000,
"correlateInactiveAccounts": true,
"inactivateAccountsNotInFile": false,
"deleteAccEntForActiveAccounts": true
}
}