Sav4Sav RemoveAccountJSON not working

[SumathiSomala]

Hi team, 

I have integrated sav4sav application.

I performed remove account operation through ARS. Account status changed to manually suspended.

But when I run sav4savaccount import job account status changing from manually suspended to active since user status is active in Saviynt.

how can we remove user account?

[dgandhi]

Arent you changing the status of the user while performing remove account?

[SumathiSomala]

No @dgandhi ,I am using below json and removing account through ars

{
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {},
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://xxxx/ECM/api/v5/updateUser",
"httpMethod": "POST",
"httpParams": "{\"username\": \"${user.username}\",\"Email\": \"${user.email}\",\"statuskey\": \"${user.statuskey}\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}

[rushikeshvartak]

{
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {},
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://${connection.hosturl}/ECM/api/v5/updateAccount",
"httpMethod": "POST",
"httpParams": "{\"securitysystem\":\"Saviynt\",\"endpoint\":\"Saviynt\",\"name\":\"${user.username}\",\"status\": \"2\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}

[SumathiSomala]

@rushikeshvartakI was able to perform remove account operation with both the JSON but Account is getting activated when i run sav4sav account importjob

 In Saviynt rest mentioned below point

Integration Scope

Below are the use case of this Integration.

1. Managing the Saviynt Users performing create user operations.

2. Updating Saviynt Users attributes with update user operations.

3. Adding SAV roles to the Saviynt User where he can login to Saviynt.

4. Terminating the Saviynt User using remove account operations.How can we achieve 1st and 4th use case using remove account operation?

[Saathvik]

@SumathiSomala : I see you are picking user status from user attribute which always gets active until you inactivate the user in Saviynt. You need to hard code that to 0 to make it inactive. An in import JSON configure your logic in such a way to pull only active user or to pull only users which are not terminated based on your use case

{
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {},
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://xxxx/ECM/api/v5/updateUser",
"httpMethod": "POST",
"httpParams": "{\"username\": \"${user.username}\",\"Email\": \"${user.email}\",\"statuskey\": \"0\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}

[SumathiSomala]

@Saathvik Already i have tried above JSON still same result

Just wanted to check will the above scenarios work only when we use different systems(Saviynt)?

As I am using same system(saviynt) to perform create/remove account operation.

[Saathvik]

@SumathiSomala : Can you share more details what is the behaviour? Once you triggered removeAccountJSON and before running the import what is the status of user in Saviynt?

You can use SAV4SAV REST for same system but it depends on use case what you are trying to handle. For example for create what is that you are trying to achieve? from where you will initiate the request? If you are initiate the request from same Saviynt system or triggering through user update rule then what is that you are trying to create when user already exist?

[SumathiSomala]

@Saathvik 

Q1.Can you share more details what is the behaviour? Once you triggered removeAccountJSON and before running the import what is the status of user in Saviynt?

*I performed remove account operation through ARS page. account status changed to manually suspended. then I ran the account import job now account status changed to active since user is active in thhe system.

Q2.What  you are trying to achieve? 

I have to assign savroles to users, so I imported SAV roles as entitlements and assigned.it is working as expected.

Q3.For example for create what is that you are trying to achieve?

To explore my knowledge on SAV4SAV application I am performing Create and remove account operation, unfortunately those are not working. 

Q4.from where you will initiate the request? ARS

I need to achieve below usecases

1. Managing the Saviynt Users performing create user operations.

2. Terminating the Saviynt User using remove account operations.Could you please help me out.

[Saathvik · Accepted solution]

@SumathiSomala : 

*I performed remove account operation through ARS page. account status changed to manually suspended. then I ran the account import job now account status changed to active since user is active in thhe system.

• I am asking the status of user not the account status under Saviynt endpoint. with below JSON

{
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {},
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://xxxx/ECM/api/v5/updateUser",
"httpMethod": "POST",
"httpParams": "{\"username\": \"${user.username}\",\"Email\": \"${user.email}\",\"statuskey\": \"0\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}

Q3.For example for create what is that you are trying to achieve?

To explore my knowledge on SAV4SAV application I am performing Create and remove account operation, unfortunately those are not working. 

• You are applying the use case incorrectly. What I am seeing is you are initiating the create account request in same saviynt system which will try to create user in saviynt for which user already exists

Q4.from where you will initiate the request? ARS

I need to achieve below usecases

1. Managing the Saviynt Users performing create user operations.

2. Terminating the Saviynt User using remove account operations.Could you please help me out.
   • I still don't understand the purpose of SAV4SAV for create scenario whereas remove can still be achieved(you can only disable user but not entirely delete the user) with above shared JSON

[SumathiSomala]

Thank you @Saathvik .Now it is working as expected.

Tried removeaccount operation with the JSON which you have shared .

User status is  changed to Inactive and account status is manually suspended

After running the account import job-User status is Inactive and account status is Inactive