Restrict Endpoint Access Query - Classic Experience

[adriencosson]

Hello folks !

Context : In order to leverage multiple applications based on Active Directory, we have created : 

1. An endpoint called "Active Directory" that contains all accounts from AD
2. An application based on Active Directory groups (named Futurmaster BLOOM)
3. The condition to access Endpoint2 is to have an account on Active Directory.
4. As per customer prerequisite, the Futurmaster BLOOM is configured as 'Classic Experience'

I came up with the following Access Query :

WHERE users.userkey in (select userkey from user_accounts where accountkey in (select accountkey from accounts where endpointkey in (select endpointkey from endpoints where endpointname='Active Directory')))

Expected behaviour : After launching the DefaultEndpointDeltaSyncTrigger (MicroServiceJob) successfully, my expectation is to have the endpoint hidden when requesting an access to someone that does not have an Active Directory account.

Current behaviour : Futurmaster BLOOM is still available in the main access request page (KO),

but when I click on it to be redirected on the Classic Experience, it displays an empty page, and filter is correctly applied (OK)

Thanks for your help !

[sudeshjaiswal]

Hello @adriencosson,

Your query looks correct, can you try with the below query, I slightly amended the query,

where users.userkey in (select userkey from user_accounts where accountkey in (select accountkey from accounts where endpointkey in (select endpointkey from endpoints where endpointname = 'Active Directory')))

Thanks,

[adriencosson]

Hello @sudeshjaiswal,

I pasted your suggestion on the Access Query, unfortunately I am seeing the same behaviour :

• Endpoint is still available on New experience.
• Endpoint is not available on Classic UI.

Any chance you can get different suggestions ?

[sudeshjaiswal]

Hello @adriencosson,

Can you confirm whether a similar issue persists if you remove the access query?
Additionally, could you please validate if the "Enable enhanced application catalog-based searches?" is enabled under the global configuration?

For Ref :- https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter13-Access-Requests/Understan... 

Thanks,

[adriencosson]

Hello @sudeshjaiswal ,

If I remove the Access Query I can see the endpoint available for request of course.

Yes I do confirm the below config is enabled on our tenant :

[rushikeshvartak]

Make it blank 

[adriencosson]

Thanks @rushikeshvartak  I'm going to check the same and revert back once tested.