Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

SAP Connector Reconciliation - STATUS_THRESHOLD_CONFIG - Deleted Account

Connoru23
New Contributor II
New Contributor II

Hi team - We have an SAP S4 instance that we are integrating with using the SAP connector. They had an instance where they accidently created accounts in the system manaually. These were reconciled to Saviynt and then they purged the accounts directly in the target. Saviynt is reconcoling the data and keeping the status as Inactive and not marking them deleted/Suspended from import service. Below is our STATUS_THRESHOLD_CONFIG 

{
"statusAndThresholdConfig": {
"statusColumn": "userlock",
"activeStatus": [
0,
128
],
"accountThresholdValue": 10000,
"correlateInactiveAccounts": true,
"inactivateAccountsNotInFile": true,
"deleteAccEntForActiveAccounts": false,
"lockedStatusColumn": "userlock",
"lockedStatusMapping": {
"Locked": [
32,
64
],
"Unlocked": [
0
]
}
}
}

Based on the documentation (https://docs.saviyntcloud.com/bundle/SAP-v24x/page/Content/Configuring-the-Integration-for-Importing...). It mentions the "inactivateAccountsNotInFile" set to true would suspend from import but it is not. Can you help with this? It is impacting the flow for provisioning accurately. 

7 REPLIES 7

rushikeshvartak
All-Star
All-Star

If account user lock is 0/128 then account will be considered as active else inactive and if account is not exists in target then SFIS


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

So the accounts don't exist in the target but are not being marked suspended from import service. Any thoughts on how to address that? Around 9.1K were purged but are staying as 'Inactive' in Saviynt. 

Do you see status threshold warning message on job details page?


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

We did but we expanded the threshhold to 10K. 

Connoru23
New Contributor II
New Contributor II

Any recommendation on how to get these accounts removed or updated to SFIS?

NM
Honored Contributor II
Honored Contributor II

Hi @Connoru23 ,

Make this false and then run import job again

"inactivateAccountsNotInFile": false.

  • How many total accounts exists in application ?
  • how many got deleted ?
  • what is message on job details ?

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.