Click HERE to see how Saviynt Intelligence is transforming the industry. |
11/15/2023 07:50 AM
Hi team,
I have integrated sav4sav application.
I performed remove account operation through ARS. Account status changed to manually suspended.
But when I run sav4savaccount import job account status changing from manually suspended to active since user status is active in Saviynt.
how can we remove user account?
Solved! Go to Solution.
11/15/2023 09:28 AM
Arent you changing the status of the user while performing remove account?
Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.
11/15/2023 09:39 AM
No @dgandhi ,I am using below json and removing account through ars
{
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {},
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://xxxx/ECM/api/v5/updateUser",
"httpMethod": "POST",
"httpParams": "{\"username\": \"${user.username}\",\"Email\": \"${user.email}\",\"statuskey\": \"${user.statuskey}\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}
11/15/2023 10:36 PM
{
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {},
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://${connection.hosturl}/ECM/api/v5/updateAccount",
"httpMethod": "POST",
"httpParams": "{\"securitysystem\":\"Saviynt\",\"endpoint\":\"Saviynt\",\"name\":\"${user.username}\",\"status\": \"2\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}
11/15/2023 10:58 PM
@rushikeshvartakI was able to perform remove account operation with both the JSON but Account is getting activated when i run sav4sav account importjob
In Saviynt rest mentioned below point
Integration Scope
Below are the use case of this Integration.
Managing the Saviynt Users performing create user operations.
Updating Saviynt Users attributes with update user operations.
Adding SAV roles to the Saviynt User where he can login to Saviynt.
Terminating the Saviynt User using remove account operations.How can we achieve 1st and 4th use case using remove account operation?
11/17/2023 05:11 AM
@SumathiSomala : I see you are picking user status from user attribute which always gets active until you inactivate the user in Saviynt. You need to hard code that to 0 to make it inactive. An in import JSON configure your logic in such a way to pull only active user or to pull only users which are not terminated based on your use case
{
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {},
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://xxxx/ECM/api/v5/updateUser",
"httpMethod": "POST",
"httpParams": "{\"username\": \"${user.username}\",\"Email\": \"${user.email}\",\"statuskey\": \"0\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}
11/17/2023 05:28 AM - edited 11/17/2023 05:28 AM
@Saathvik Already i have tried above JSON still same result
Just wanted to check will the above scenarios work only when we use different systems(Saviynt)?
As I am using same system(saviynt) to perform create/remove account operation.
11/17/2023 06:13 AM
@SumathiSomala : Can you share more details what is the behaviour? Once you triggered removeAccountJSON and before running the import what is the status of user in Saviynt?
You can use SAV4SAV REST for same system but it depends on use case what you are trying to handle. For example for create what is that you are trying to achieve? from where you will initiate the request? If you are initiate the request from same Saviynt system or triggering through user update rule then what is that you are trying to create when user already exist?
11/19/2023 10:08 PM
Q1.Can you share more details what is the behaviour? Once you triggered removeAccountJSON and before running the import what is the status of user in Saviynt?
*I performed remove account operation through ARS page. account status changed to manually suspended. then I ran the account import job now account status changed to active since user is active in thhe system.
Q2.What you are trying to achieve?
I have to assign savroles to users, so I imported SAV roles as entitlements and assigned.it is working as expected.
Q3.For example for create what is that you are trying to achieve?
To explore my knowledge on SAV4SAV application I am performing Create and remove account operation, unfortunately those are not working.
Q4.from where you will initiate the request? ARS
I need to achieve below usecases
Managing the Saviynt Users performing create user operations.
11/20/2023 07:50 AM
*I performed remove account operation through ARS page. account status changed to manually suspended. then I ran the account import job now account status changed to active since user is active in thhe system.
{
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {},
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://xxxx/ECM/api/v5/updateUser",
"httpMethod": "POST",
"httpParams": "{\"username\": \"${user.username}\",\"Email\": \"${user.email}\",\"statuskey\": \"0\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}
Q3.For example for create what is that you are trying to achieve?
To explore my knowledge on SAV4SAV application I am performing Create and remove account operation, unfortunately those are not working.
Q4.from where you will initiate the request? ARS
I need to achieve below usecases
Managing the Saviynt Users performing create user operations.
11/20/2023 08:08 AM
Thank you @Saathvik .Now it is working as expected.
Tried removeaccount operation with the JSON which you have shared .
User status is changed to Inactive and account status is manually suspended
After running the account import job-User status is Inactive and account status is Inactive