Sav4Sav RemoveAccountJSON Functionality

[BG_IAM]

Hello,

I’ve noticed some discrepancies in the Sav4Sav RemoveAccountJSON. I came across both topics in the forum that partially address my concerns but don’t fully clarify everything.

https://forums.saviynt.com/t5/identity-governance/sav4sav-removeaccountjson-default-values-wrong/m-p...

https://forums.saviynt.com/t5/identity-governance/sav4sav-removeaccountjson-not-working/m-p/61483

I see that the documentation regarding the statuskey has been updated. Previously, it was:

"httpParams": "{\"username\":\"${user.username}\",\"statuskey\":\"1\"}"

Now, it reads:

"httpParams": "{\"username\": \"${user.username}\",\"statuskey\": \"${user.statuskey}\"}"

As a result, all operations using different definitions for statuskey are targeting USER STATUS rather than the Saviynt account status.

Let’s consider a scenario where a USER (Identity) must be ACTIVE, but their account in Saviynt should be INACTIVATED—logging in would not be possible in this case. I understand that by using the suggested RemoveAccountJSON definition and calling the API: /ECM/api/v5/updateUser, the Saviynt user and Saviynt account are associated.

To summarise, is it correct that keeping the USER (Identity) active without a Saviynt account is only feasible when no SAV role is assigned?

Thank you!

[pmahalle]

@BG_IAM ,

Can you elaborate more on your business use case? Do you want user active and account inactive?

[stalluri]

@BG_IAM 

1. \"statuskey\":\"0\"    // If you use this configuration this will disable user, it don't care if the user is active or inactive.
2. \"statuskey\": \"${user.statuskey}\"   //  If you use this configuration it will pick the status from user profile and update the status.

[BG_IAM]

@pmahalle @stalluri  Based on the documentation and forum topics for Sav4Sav RemoveAccountJSON. The Saviynt user status equals the Saviynt account status, as these objects appear to be the same.

Is it accurate to say that a USER (Identity) can remain active without a Saviynt account only if no SAV role is assigned? I hope this clarifies things.

Thank you,

BG