Preventing SOD is not working in request flow

[randhir_kumar]

Hi Team,

We have created 2 functions (RosesEntitlement, RosesEntitlement2 in Function1 and RosesEntitlement4 in Function2), added the function mapping to Risk and Ruleset and tried requesting for all the entitlements in a request but we didn't get any error for SOD violation.

Can you please help me with the required configuration that need to enable for request access.

Thanks.

[armaanzahir]

Hi @randhir_kumar ,

Can you show the screenshot of the request summary page? Is it even evaluating SOD's on that page?

Try configuring the below option (Show SOD on Request) on sav role and see:

Also check the following pre requisites too for preventative SOD

SOD Prerequisites (saviyntcloud.com)

SOD Prerequisites (saviyntcloud.com)

How to display Preventative SODs during access requests (saviyntcloud.com)

Thanks,

Armaan

[randhir_kumar]

Hi,

After enabling the configuration, we able to see the SOD violation as below on Request Approval page.

Could you please help me with the API that we can use to get this SOD related information.

Thanks.

[armaanzahir]

Hi @randhir_kumar ,

Please utilize the API documentation of Saviynt for the same.

Saviynt Security Manager API Reference v5.5-SP3 Segregation of Duties

Saviynt Security Manager API Reference v5.5-SP3 Request to Add Entitlement to User

You can pass the paramter checksod to the createrequest api to make this type of preventative detection.

Thanks,

Armaan

[randhir_kumar]

Hi,

I am using createrequest API with "checksod":"true" and in the request payload we have sent two different Entitlements which has no violation, but Saviynt UI, showing existing SOD violation on requestHistory page.

I just want to see the violations in current request, but the previous violations are also shown on request.

We tried disabling "Show Existing SOD in Request" property in global configuration, but with this even valid SOD violations are not shown on requestHistory page.

Thanks.

[randhir_kumar]

Hi,

Do we have any API that can be used to get list of SOD as below screenshot.

Also, which API we can use to perform action (closed, Risk Accepted, Complete and Assign) on this list.

Thanks.