Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Password Synchronization Process

SindhiyaK
New Contributor
New Contributor

e having requirement to configure the password synchronization from Active Directory.We are having below queries

1.We have two AD endpoints - primary and secondary. when password changes for primary AD account it needs to be synced to endpoints A, B and C. whereas when password changes for secondary AD account it needs to be synced to endpoints X, Y and Z. Can we have two sets for configuration for the password filter. is this supported?
2.While using Passwordfilter can we keep SavPwFilter.json file in a network drive/shared drive instead of keeping in domain controller locally for better maintenance and to add more endpoints later.

Referred document: https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter14-Password-Management/Confi...

7 REPLIES 7

rushikeshvartak
All-Star
All-Star

 

  • Local Storage Requirement: Typically, Saviynt’s documentation indicates that the SavPwFilter.json file should reside on the domain controller for the password filter to function properly. This is often due to the way the filter interacts with the Active Directory service.

  •  

 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

what is Saviynt suggestion for adding more endpoints in future? every time we need to modify this file locally in each domain controller? 

Yes


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

OK. any insights on the first question? I am guessing the answer would be NO.. Still wanted to know if anyone came across this requirement. 

We have two AD endpoints - primary and secondary. when password changes for primary AD account it needs to be synced to endpoints A, B and C. whereas when password changes for secondary AD account it needs to be synced to endpoints X, Y and Z. Can we have two sets for configuration for the password filter. is this supported?

  • I don't it will supported either it will sync to all ABCXYZ 
  • Do you have configuration to define endpoints in domain controller ?
  • And both domain controller will be in sync for password isn't it ?

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

shibinvpkvr
Regular Contributor II
Regular Contributor II

within same domain controller can we maintain two sets of configurations? source will be different for both. One is primary endpoint and another is secondary endpoint. I guess we can't maintain two sets of SavPwFilter.json correct?

No it will be single json file


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.