Leveraging Intelligent Recommendations for Operational Transformation. AMS Partners click HERE | EMEA/APJ Partners click HERE |
12/09/2022 12:48 AM - edited 12/09/2022 01:34 AM
We are facing problem for users who are having different samaccountname and username. When these users are trying to change the password from AD or Okta their password is not getting sync back.
We have observed this is because of correlation field which is set as username in password filter Json which is present in password sync agent in AD.
Our concern is can we use AD attribute like employee id or extension attribute 15 for password sync agent instead of samAccount Name.
Please find the below json :
{
"saviynt": {
"baseUrl": "hostname",
"userName": "admin",
"password": "XXXXXX",
"notificationUrl": "hostname",
"getUserUrl": "hostname",
"correlation": "employeeid",
"endpoints": "abc,def",
"sourceEndpoint": "def"
},
"filter": {
"enabled": false,
"policy": {
"enforce": "local",
"local": {
"minChars": 10,
"maxChars": 20,
"lowerCases": 1,
"upperCases": 1,
"numbers": 1,
"specials": 1
}
}
},
"notification": {
"enabled": true
}
}
Solved! Go to Solution.
12/09/2022 04:21 AM
It should be user attribute
12/12/2022 07:40 PM
If it should be user attribute, then can we use custom properties of users too and how to do mapping of user attribute with AD attribute in Password agent?
12/12/2022 07:47 PM
"correlation": "customproperty1",
12/12/2022 08:50 PM
Where do we define AD attribute to be mapped?
For Eg. i have to mapp extensionattribute12 with customproperty1
12/12/2022 09:36 PM
That will be mapped in ad connection isn’t it