Hello,
we need to implement the following scenario: Saviynt is integrated with two different Directory Services (Windows AD and Oracle OUD, both LDAP-based) and the accounts for the users are provisioned on both systems. The need is to have the same password for the two accounts in the two LDAP systems belonging to the same user/person.
Saviynt cannot push the same password across two different target systems and, in order to sync the two passwords, the only way is to ask the user perform the reset password twice and to input the same password for the two systems.
We are developing a custom WebService (REST API based, configured with a Saviynt REST connector) that intercept the manual input password and propagate it to the LDAP directories but the client don't want custom programs that write to the target systems.
For this reason we are thinking about a slightly different solution: the custom WS will only intercept the user password and then it will trigger a job inside Saviynt via an API call to let Saviynt run the workflow for writing the password on both target systems: is this new solution achievable?
I can provide diagrams to show the overall flow or other details if needed.
Thank you.
