Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Need help with the IMPORTACCOUNTJSON

DG1811
New Contributor III
New Contributor III

Hi Team,

We are integrating a rest application. Below is the response from users API

{
"users": [
{
"id": 1,
"email": "test.user@domain.com",
"userName": "testuser",
"firstName": "test",
"lastName": "user",
"inactive": false,
"tenantId": 1,
"eid": "testuserid"
},
{
"id": 1,
"email": "test.user2@domain.com",
"userName": "testuser2",
"firstName": "test",
"lastName": "user2",
"inactive": true,
"tenantId": 1,
"eid": "testuserid2"
}
]
}

 

inactive attribute determines the account is active in target or not.

So we are using the below import account json for importing the users. 

{
"accountParams": {
"connection": "acctAuth",
"processingType": "SequentialAndIterative",
"includeExistingInActiveAccounts": true,
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"http": {
"url": "https://dev.domain.com/api/v1/saviyntIntegration/GetAllUsers",
"httpContentType": "application/json",
"httpMethod": "GET",
"httpHeaders": {
"Authorization": "${access_token}",
"client_id": "",
"Accept": "application/json"
}
},
"listField": "users",
"keyField": "accountID",
"colsToPropsMap": {
"accountID": "id~#~char",
"name": "id~#~char",
"displayName": "userName~#~char",
"customproperty1": "firstName~#~char",
"customproperty2": "lastName~#~char"
"customproperty4": "email~#~char",
"customproperty5": "inactive~#~char",
"customproperty6": "eid~#~char",
"customproperty7": "tenantId~#~char",
"customproperty31": "STORE#ACC#ENT#MAPPINGINFO~#~char"
}
}
}
},
"entitlementParams": {},
"acctEntParams": {}
}

 

And below is the Status_Threshold_Config that we are filling.

{
"statusAndThresholdConfig": {
"accountThresholdValue": 5000,
"accountEntThresholdValue": 2500,
"deleteLinks": true,
"inactivateAccountsNotInFile": false,
"correlateInactiveAccounts": true,
"statusColumn": "customproperty5",
"activeStatus": [
"true"
],
"inactivateEntsNotInFeed": true
}
}

 

With this we are able to pull the accounts in active and inactive status. 

But if we raise an account creation from saviynt its getting created, but upon removal when we are running the import job it is marking the account as inactive rather than marking it as Suspended from Import job. 

Can you please guide us with a process where we want the inactive accounts to be marked as Suspended from Import service rather than marking it as inactive. 

 

Please let me knwo incase you need any other information. 

Thanks

[This post has been edited by a Moderator to remove sensitive information.]

5 REPLIES 5

rushikeshvartak
All-Star
All-Star

Can you share output of CP5


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi @rushikeshvartak ,

For a user which is already present in the target and with a status of inactive=false, when we are running the import the CP5 is populating as true. and marking the status of the account as active

Whereas when we are creating a new user in target from saviynt upon running the import, although the inactive=false, the CP5 is populating as false in saviynt but the account is turning inactive. 

The normal operation should be, the account created from saviynt should move from Manually Provisioned to Active upon running the import job. 

Also note, in target.

Inactive = false  means the account is active

and Inactive =true means the account is inactive. 

 

Thanks

 

Remove "includeExistingInActiveAccounts": true,


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

stalluri
Valued Contributor II
Valued Contributor II

@DG1811 
Use the below flag.

  • Support for importing changes made for inactive accounts in the target application when the includeExistingInActiveAccounts variable in the acctEntParams attribute is set to true.

Best Regards,
Sam Talluri
If you find this a helpful response, kindly consider selecting Accept As Solution and clicking on the kudos button.

NM
Honored Contributor II
Honored Contributor II

Hi @DG1811 are the accounts getting deleted in target end.after deleting the account check if they are present in get user api call.