Orphaned Service Account Not Included in Service Account Campaign

[NikitaPawar_]

Hello Team,

We are trying to create a service account campaign for the XYZ endpoint, but we have encountered an issue where orphaned accounts with the service account type are not being captured. The campaign only includes service accounts mapped to users, and the orphaned service accounts are excluded by default.

Steps Taken:

1. Ensured prerequisites are met: 
    -  Set Service Account Type = Service Account at the endpoint level.                                                         
   -   Each account owner is mapped with the Primary Certifier rank.
2. Tested the following advanced queries, but orphaned accounts are still not included.

• AccountType in ('Service Account')
• AccountType in ('Service Account') and status in ('Manually Provisioned','1','Active')
• name like '%IFTestUser%'    ........Specifying orphan account name as hardcoded
• accountkey not in (select accountkey from user_accounts) and endpointkey=134
  
  

  Issue: Is there support for orphaned accounts with the "Service Account" type in service account campaigns? If so, could you provide guidance on capturing these accounts in the campaign?

  Expected Outcome:
  We would like orphaned service accounts to be included in the campaign along with user-mapped service accounts.

  Thank you for your assistance.

  Regards, 
  Nikita Pawar
  @SPAL @gauravchandok 

[NM]

@NikitaPawar_ 

Try this in advance query 

accounttype in ('Service Account','Service')

[NikitaPawar_]

Tried with this query :  accounttype in ('Service Account','Service')
Still not captured orphaned service account in campaign 

[NM]

@NikitaPawar_ can you share logs?

[rushikeshvartak]

Does account have certifiers?

[NikitaPawar_]

Yes @rushikeshvartak 
Account have owners with primary rank 

@NM Follow logs in attached file 
and can you just clear this doubt 
Is orphaned accounts with the "Service Account" type supported or captured  in service account campaigns or not ?

Because we also checked with this 
https://forums.saviynt.com/t5/identity-governance/orphan-account-not-not-showing-in-service-account-...

@NM 

[rushikeshvartak]

Is orphaned accounts with the "Service Account" type supported or captured  in service account campaigns or not ? 
Its captured 

[NM]

@NikitaPawar_ yes it shows in the camapign

[NikitaPawar_]

Ensured Prerequisites for Certification:

• Set the Service Account Type to "Service Account" at the endpoint level.
• Mapped account owner to the Primary Certifier rank for each account

Are there any additional configurations necessary from a certification perspective that I may have missed? 
With this config certification comes under in-progress status but not capturing orphaned service account

[rushikeshvartak]

• Please share campaign config and sample account config screenshot