Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

REST API reconciliation adding duplicate entries after account disable.

arushi2403
New Contributor
New Contributor

Hi,

We are integrating with an application using REST APIs.

We are disabling the account at target and post that when we perform a data reconciliation, the initial entry gets suspended from import service and a new inactive entry is created. This happens only when we perform a disable operation on the target.

Following is the response payload from REST API for 1 user and the import account JSON we are using:

Response Payload:

{

    "FirtstName": "Dianne",

    "LastName": "Seib",

    "MiddleName": "",

    "JobTitleInd": 0,

    "LoginCd": "DSEIB"

  }

Account Import JSON:

{
"accountParams": {
"connection": "acctAuth",
"processingType": "SequentialAndIterative",
"statusAndThresholdConfig": {
"statusColumn": "customproperty5",
"activeStatus": [
1
],
"accountThresholdValue": 500,
"correlateInactiveAccounts": true,
"inactivateAccountsNotInFile": false,
"deleteAccEntForActiveAccounts": true,
"doNotChangeIfFailed": true
},
"includeExistingInActiveAccounts": true,
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"http": {
"url": "*********************",
"httpHeaders": {
"token": "${access_token}",
"Content-Type": "application/json"
},
"httpContentType": "application/json",
"httpMethod": "GET"
},
"listField": "",
"keyField": "accountID",
"statusConfig":{
"active":1,
"inactive":0
},
"colsToPropsMap": {
"accountID": "LoginCd~#~char",
"name": "LoginCd~#~char",
"customproperty1": "FirtstName~#~char",
"customproperty2": "LastName~#~char",
"customproperty3": "MiddleName~#~char",
"customproperty4": "JobTitleInd~#~char",
"customproperty5": "Active~#~char"
}
}
}
}
}

Does anyone have any suggestions why duplicate entries like the below get created.

arushi2403_0-1701284261340.png

 

 

5 REPLIES 5

rushikeshvartak
All-Star
All-Star

change 

"inactivateAccountsNotInFile": true,

 

  • Specify inactivateAccountsNotInFile as true to change the status of accounts in IGA to inactive if the accounts are not in the list when the import job is triggered.


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

arushi2403
New Contributor
New Contributor

I do not want the accounts that are no longer in file to become inactive. I want them to be 'Suspended from Import Service'.

Also my question was more regarding accounts which are disabled(not deleted) from Saviynt. But when recon runs, we see 2 entries for that, one is inactive and the other 'Suspended from import Service'

What is account id for both accounts  & try "correlateInactiveAccounts": true,


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

arushi2403
New Contributor
New Contributor

AccountID is mapped to LoginCd which never changes in the system and correlateInactiveAccounts": true is already set in the import JSON.

Can you share data analyzer screenshot of account id of any 1 sample account


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.