Salesforce connector import custom field on User Object as entitlements

[Anu]

Hi ,

For an salesforce application we have custom field on "user" Object (column name XXX_role__c). It contains multivalued attribute separated by an semicolon (XXX_role__c : C1;C2;C3;C4,etc) . When a user submits request and based on selection he makes C1,C2 or C1,C2,C3 he gets additional privileges in Target system.

Is it possible if we can reconcile these user column values as entitlements in Saviynt else is there an alternate solution on how we can manage the values on this columns for users reconciliation and provisioning purpose? 

[sahil]

When you run the import, do you see the multiple values getting imported in Saviynt or is it giving you an error?

[Anu]

@sahilThanks for the response. During import we had mapped it to accountscustomproperty31:XXX_role__c but it failed with error 'data too long to insert' . Later Just to test we mapped it to accountsdescription column (description:XXX_role__c) for testing which  successfully imported the values as C1;C1;C3,etc in accounts descriptions field. However the ask here is,

1) Which accounts CP allows more than 600 characters to be inserted?

2)Can we import these values as individual entitlements so that it can be used during access provisioning. Does Salesforce connector allow?

[sahil]

You can use Customproperty 41 onwards in accounts table. You can navigate to Admin>Admin Functions>Data Analyzer from UI to view the datatype of each column.

As for the importing these values as individual entitlements, OOB salesforce connector may not support it.

[Anu]

@sahil Thanks for the response. We want these values to be available for the end-users to be requestable during access and provisioned. Hence if OOB salesforce connector doesn't support this , is there an alternate approach you could suggest. REST Api's are also not exposed.

[sahil]

The additional Privileges that the user gets in Salesforce, are these also present/imported in Saviynt as Entitlements or are they only present in the target.

[Anu]

@sahil These additional privileges are present in Salesforce under column name "XXX_role__c" which is an user objects ,stored as a multivalued attribute hence if possible we want to import them as entitlements in Saviynt.

[rushikeshvartak]

You can make standalone Entitlement type in Saviynt. It won't be possible to create entitlement based on comma separated 

[Anu]

@rushikeshvartak Thanks for the response. Incase we create these standalone entitlements, but for provisioning would Salesforce connector be able to provision these access/entitlements ?

These access/entitlements are mapped to a user object("XXX_role__c") column in salesforce and when any users submits request for this entitlement the value should get provisioned to "XXX_role__c" column