Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

random password, endDate and description is not working in Disable account JSON

Rohit_Mishra
New Contributor III
New Contributor III

 

Hi Experts,

I need help with updating the JSON for disabling accounts in Saviynt. Specifically, I want to set the endDate, description, and a random password in AD when the account is disabled.

Desired JSON Configuration:

{
"moveUsertoOU": "OU=Saviynt_Disabled_Accounts,OU=W,DC=X,DC=Y",
"deleteAllGroups": "No",
"userAccountControl": "514",
"endDate": "${Date.Format(Date.Format(${user.enddate}, 'MM-dd-yyyy'), 'yyyy-MM-dd')}",
"unicodePwd": "${randomPassword}",
"description": "${'User Disabled via saviynt - Moved: ' + Date.Format(new Date(), 'yyyy/MM/dd') + ' - Delete: ' + Date.Format(Date.AddDays(new Date(), 30), 'yyyy/MM/dd') + ' - Do not enable account - see KBA 2950'}"
}

 

Issues Encountered:

  1. Error in Conversion for endDate:

    • When both endDate and unicodePwd are included, I receive an "will not perform" message.
    • Removing endDate resolves the error, but another message appears stating "Error in conversion attribute" we don't have the logs downloaded
  2. Description Not Updating:

    • When endDate and unicodePwd are removed, the pending task gets cleared, but the description does not update after the import.

Assistance Needed:

  • How can I correctly format and implement endDate to avoid the conversion error?
  • How can I ensure that the description field updates properly after the import?
  • How can I update the password as random after disablement

Thank you in advance for your assistance.

Best regards,
Rohit A Mishra

10 REPLIES 10

Raghu
All-Star
All-Star

@Rohit_Mishra  try below:

"endDate": "${user.enddate.format('MM-dd-yyyy',TimeZone.getTimeZone('Etc/UTC'))}",

"description": "User Disabled via saviynt - Moved: ${new java.text.SimpleDateFormat('yyyy-MM-dd').format(new Date())} - Delete: ${Date.Format(Date.AddDays(new Date(), 30), 'yyyy/MM/dd')} - Do not enable account - see KBA 2950}"


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

Rohit_Mishra
New Contributor III
New Contributor III

Hi Raghu,

Thanks.... Description worked 🙂

How ever will you help me with setting random password as well we are setting unicodePwd with custom pass in create account and we want it to be random once disabled what we can use here

Regards 

Rohit A Mishra

Thanks for update. @Rohit_Mishra 

As mentioned Rushi "password": "${randomPassword}", it not working earlier other user got faced same issue

https://forums.saviynt.com/t5/identity-governance/randompassword-causes-date-variable-not-to-resolve...

 


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

Rohit_Mishra
New Contributor III
New Contributor III

Hi Raghu,

 I am using this to update password

"password": "${'rAnD' + (Math.abs(new Random().nextInt() % 999) + 1) + 'temporary'}"

However the description is then not getting set and without this description is working. any idea what is going on here

@Rohit_Mishra  try like below

"password": "'rAnD' ${(Math.abs(new Random().nextInt() % 999) + 1)} 'temporary'"


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

rushikeshvartak
All-Star
All-Star

Its seems issue https://forums.saviynt.com/t5/identity-governance/randompassword-causes-date-variable-not-to-resolve... 


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.

Hi Rushi,

Thanks for the reply, could you please help me in setting password as random in disable account JSON

Regards

Rohit A Mishra

NM
Valued Contributor II
Valued Contributor II

Hi @Rohit_Mishra , attach a password policy in SS and then use ${password} variable in json

Rohit_Mishra
New Contributor III
New Contributor III

Hi Experts, 

Thanks for the help the custom one worked, one last question if possible please answer, can we pass description in Enable account JSON as we have passed and its not updating

 

{

  "USEDNFROMACCOUNT": "YES",

  "DISABLEACCOUNTCHECKRULE": [

    "CN=${task.accountName},OU=Saviynt_Disabled_Accounts,OU=EHC_Test,DC=X,DC=Y"

  ],

  "ATTRIBUTESTOCHECK": {

    "sAMAccountName": "${task.accountName}",

    "sn": "${user.lastname}",

    "givenName": "${user.firstname}"

  },

  "MOVEDN": "YES",

  "ENABLEACCOUNTOU": "OU=Saviynt_Test,OU=EHC_Test,DC=X,DC=Y",

  "AFTERMOVEACTIONS": {

    "userAccountControl": "512",

"description": "Enabled by Saviynt"

  },

  "REMOVEGROUPS": "NO",

  "RESETPASSWORD": "NO"

}

You can pass.


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.