Saviynt Azure AD Monitoring

[Hindrance]

I am looking for capability in Saviynt that can monitor Azure AD users and flag ones that were not created by Saviynt. Does anyone know if Saviynt has the capability and if so where it exists. 

[rushikeshvartak]

Use saviynt OOTB Report Out of Band access which can find account created outside saviynt and use baseline feature.

Refer https://docs.saviyntcloud.com/bundle/KBAs/page/Content/Configuring-the-detection-of-out-of-band-acce... 

[Hindrance]

Do you have any insight to the process of

"Bootstrap the existing access at the endpoint. This requires you to update a dummy task key for all the existing account entitlement entries for the endpoint to baseline the current status.

This is an important step to perform before activating the out-of-band action. Otherwise, the out-of-band action will remove all the accesses that do not have a Taskkey mapped to the account_entitlements1 table."

[Manu269]

Hello @Hindrance ,

When you onboard an app in eic at first instance, eic post import runs the baseline job. This job will assign the dummy key to all the account and access reconciled. You can view the same via navigating to endpoint .

Now from next run, and you import accounts and access again and do not run the baseline task manually eic then treats the additional access as our of band.

[rushikeshvartak]

when you click baseline button , it create task and task id is copied to all entitlement in account_entitlements1 table where ever its missing 

[Manu269]

Refer this article : Configuring the detection of out-of-band access for endpoints (saviyntcloud.com)

[Hindrance]

I am not seeing task id in the account_entitlements1 table. I am seeing ARSTASKKEY is that what it is called now?