We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Sav role importing under Endpoint

nehakambli
New Contributor
New Contributor

Hi All,

We have a requirement to request Admin sav role within Saviynt using ARS . Our saviynt version is V23.4. I have used a rest connector for provisioning and deprovisioning of sav roles via endpoint. It is working as expected. But when I try to reconcile savroles into an endpoint it does not work. For existing users reconciliation of Savroles and its association to user account is not working.

 

Below json i have used for reconciliation of sav roles:

"entitlementParams": {
"connection": "acctAuth",
"processingType": "SequentialAndIterative",
"entTypes": {
"Group": {
"entTypeOrder": 0,
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"http": {
"url": "https://*********/ECM/api/v5/getSavRoles",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpContentType": "application/json",
"httpMethod": "GET"
},
"listField": "",
"keyField": "entitlementID",
"colsToPropsMap": {
"entitlementID": "savRoles#~char",
"entitlement_value": "savRoles~#~char"
},
"disableDeletedEntitlements": true
}
}
}
}
}

 

Do i need to do one time import for existing uses or it is possible to import sav roles into endpoint under entitlement section via Rest Connector. In current integration, I have uploaded the Savroles via csv file into an endpoint and make it requestable for end user.

 Your help will be appreciable 

11 REPLIES 11

SumathiSomala
All-Star
All-Star

@nehakambli Why can't you try with SAV4SAV connection?

Import savroles as entitlements into Saviynt and assign through ARS

Refer below documentation link for SaviyntforSaviynt

Understanding the Integration between EIC and Saviynt (saviyntcloud.com)

Regards,
Sumathi Somala
If this reply answered your question, please Accept As Solution and give Kudos.

Hi Sumathi,

The same document, i have refered and created sav4sav connection using rest connector. Provisioning and deprovision is working but recon is not working.

If you have worked on same integration then it would be helpful if you could provide me a recon json.

@nehakambli Refer the attached importaccountentJSON  , change as per your requirement

 

Regards,
Sumathi Somala
If this reply answered your question, please Accept As Solution and give Kudos.

Hello Sumathi,

Thank You for sharing the Json. I am able to import the savroles but I am  error for account to entitlement mapping.

populated for oauth authentication..
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.885374785Z stdout F 2023-12-13 10:35:49,885 [quartzScheduler_Worker-3] DEBUG rest.RestProvisioningService - Inside pullObjectsByRest
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.885429185Z stdout F 2023-12-13 10:35:49,885 [quartzScheduler_Worker-3] DEBUG rest.RestUtilService - Got showLogs = true
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.885449285Z stdout F 2023-12-13 10:35:49,885 [quartzScheduler_Worker-3] DEBUG rest.RestProvisioningService - Calling Webservice Url - https://********/ECMv6/api/userms/savroles with httpParams - null
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.885538886Z stdout F 2023-12-13 10:35:49,885 [quartzScheduler_Worker-3] DEBUG services.HttpClientUtilityService - isFipsEnabled = false
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.885545686Z stdout F 2023-12-13 10:35:49,885 [quartzScheduler_Worker-3] DEBUG services.HttpClientUtilityService - getHttpClient - sslParams : null
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.885548986Z stdout F 2023-12-13 10:35:49,885 [quartzScheduler_Worker-3] DEBUG services.HttpClientUtilityService - getHttpClient - proxyParams : null
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.885552086Z stdout F 2023-12-13 10:35:49,885 [quartzScheduler_Worker-3] DEBUG services.HttpClientUtilityService - getHttpClient - sslSocketFactory : null
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.902376652Z stdout F 2023-12-13 10:35:49,902 [quartzScheduler_Worker-3] DEBUG services.HttpClientUtilityService - setting connection timeout to 10 seconds and request timeout to 60 seconds
2023-12-13T11:35:50+01:00-ecm-worker-2023-12-13T10:35:49.902714456Z stdout F 2023-12-13 10:35:49,902 [quartzScheduler_Worker-3] DEBUG services.HttpClientUtilityService - getHttpClient - HttpClientBuilder.create().build() called.

I think it is unable to fetch savrole id dynamically.

"acctEntParams": {
"connection": "acctAuth",
"entTypes": {
"savRoles": {
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"processingType": "httpEntToAcct",
"http": {
"httpHeaders": {
"Authorization": "${access_token}"
},
"url": "https://*******/ECMv6/api/userms/savroles/${id}/users?limit=1000&offset=0",
"httpContentType": "application/json",
"httpMethod": "GET"
},
"listField": "users",
"entKeyField": "entitlementID",
"acctIdPath": "username",
"acctKeyField": "accountID"
}
}
}
}
}

this is the error

nehakambli_0-1702465199153.png

 

@nehakamblican you please share you connectionJSON,AccountentimportJSON?

Also check connection name in both the JSONs

 

Regards,
Sumathi Somala
If this reply answered your question, please Accept As Solution and give Kudos.

Hi Sumathi,

Please find the json in attachment. Also i am able to import sav role as entitlement but failing for account entitlement mapping.

What is entitlement type name & display name on UI


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hello Rushikesh,

Entitlement type name and display are different.  I have attached the screenshot. Is it the naming convention issue.

Entitlement Name : savRoles

Displayname : Roles

Thanks,

Neha

 

nehakambli_0-1703063283330.png

 

Both should be same

Please change to savRoles


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

rushikeshvartak
All-Star
All-Star

what is error in logs?


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.