Saviynt4Saviynt REST Enhancements

adriencosson
New Contributor III
New Contributor III

Hey folks,

As part of EIC 2022 Release, the "Configure Saviynt4Saviynt" option in Global Configuration seems to be removed, and a new application has been made available using REST APIs (see Saviynt4Saviynt (REST Integration Guide) in the catalog.

Unfortunately, it does not provide the same level of integration as the previous Database connector as :

  • SAV Roles cannot be imported regularly (No API is provided)
  • Current "Get Users Details" API call cannot retrieve associated SAV Roles with Identities.

It would be therefore nice for both new integration and current customers migrating to v2022 to make the DB connector still available, or provide enhancement to current APIs.

Regards,
Adrien COSSON
12 REPLIES 12

adriencosson
New Contributor III
New Contributor III

Hello Rushikesh,

I went into the given API call. The problem is that it returns only one identity and its SAV Roles at a time, whereas REST connector needs to have call that gives either all SAV Roles with their attached identities or vice versa.

Is there a way to call this getSavRoles API recursively to get all users, or a similar workaround ?

Regards,
Adrien COSSON

you can call getuser api and pass username to savroles api to get details

https://documenter.getpostman.com/view/1797923/RWaLwo21?version=latest#ef353ccb-a040-4324-bd9f-de90f...

Alternative - create analytics report and use that report in JSON

adriencosson
New Contributor III
New Contributor III

Hello Rushikesh,

Nice idea to use analytics report to be used in JSON, will work with something similar and post a working solution once we are done.

Thanks !

Regards,
Adrien COSSON

@adriencossonDoes Add Access JSON worked for adding sav role to user for you if yes can you share json

adriencosson
New Contributor III
New Contributor III

Sure, I simply used the following api to make it work :

https://documenter.getpostman.com/view/1797923/RWaLwo21?version=latest#8b657767-aebf-4b8d-8c1f-35a9c...

Attached the Add/Remove Access JSONs.

Note : Make sure to replace <EIC_URL> by your tenant.

Regards,
Adrien COSSON

We are using same APi but its just adding entitlement not sav role. From postman it add sav not from saviynt

adriencosson
New Contributor III
New Contributor III

Two questions :

  1. Once the request is being submitted and approved, is the pending task getting created and completed by WSRetryJob ?
  2. Any chance you can share the logs when Pending task is getting completed in order to investigate further ?

Regards,
Adrien COSSON

Tasks are getting created via rule.
when user have certain fields then assign role manager sav role

adriencosson
New Contributor III
New Contributor III

Ok. During provisioning job, are you able to capture any log in Admin > Admin Functions > Application Logs menu ?

Regards,
Adrien COSSON

As mentioned tasks are completed with entitlement added not sav role

What do you see in the logs when the task is getting executed?

For REST connector, add {"showLogs":true} in the config JSON to see additional logs for debugging.

Thanks,
Amit