Saviynt4Saviynt REST Enhancements

[adriencosson]

Hey folks,

As part of EIC 2022 Release, the "Configure Saviynt4Saviynt" option in Global Configuration seems to be removed, and a new application has been made available using REST APIs (see Saviynt4Saviynt (REST Integration Guide) in the catalog.

Unfortunately, it does not provide the same level of integration as the previous Database connector as :

• SAV Roles cannot be imported regularly (No API is provided)
• Current "Get Users Details" API call cannot retrieve associated SAV Roles with Identities.

It would be therefore nice for both new integration and current customers migrating to v2022 to make the DB connector still available, or provide enhancement to current APIs.

[rushikeshvartak]

Use getsavroles api

https://documenter.getpostman.com/view/1797923/RWaLwo21?version=latest#f16e995f-032f-4f78-8d94-6f63d...

[adriencosson]

Hello Rushikesh,

I went into the given API call. The problem is that it returns only one identity and its SAV Roles at a time, whereas REST connector needs to have call that gives either all SAV Roles with their attached identities or vice versa.

Is there a way to call this getSavRoles API recursively to get all users, or a similar workaround ?

[rushikeshvartak]

you can call getuser api and pass username to savroles api to get details

https://documenter.getpostman.com/view/1797923/RWaLwo21?version=latest#ef353ccb-a040-4324-bd9f-de90f...

Alternative - create analytics report and use that report in JSON

[adriencosson]

Hello Rushikesh,

Nice idea to use analytics report to be used in JSON, will work with something similar and post a working solution once we are done.

Thanks !

[rushikeshvartak]

@adriencossonDoes Add Access JSON worked for adding sav role to user for you if yes can you share json

[adriencosson]

Sure, I simply used the following api to make it work :

https://documenter.getpostman.com/view/1797923/RWaLwo21?version=latest#8b657767-aebf-4b8d-8c1f-35a9c...

Attached the Add/Remove Access JSONs.

Note : Make sure to replace <EIC_URL> by your tenant.

[rushikeshvartak]

We are using same APi but its just adding entitlement not sav role. From postman it add sav not from saviynt

[adriencosson]

Two questions :

1. Once the request is being submitted and approved, is the pending task getting created and completed by WSRetryJob ?

2. Any chance you can share the logs when Pending task is getting completed in order to investigate further ?

[rushikeshvartak]

Tasks are getting created via rule.
when user have certain fields then assign role manager sav role

[adriencosson]

Ok. During provisioning job, are you able to capture any log in Admin > Admin Functions > Application Logs menu ?

[rushikeshvartak]

As mentioned tasks are completed with entitlement added not sav role

[amit_krishnajit]

What do you see in the logs when the task is getting executed?

For REST connector, add {"showLogs":true} in the config JSON to see additional logs for debugging.