Hello All,
UseCase: We are trying to change Saviynt Login password by generating a ChangePassword Task using SAV4SAV Connector.
ChangePassword Task is getting created and provisioned successfully.
There is an email template to see the password, we are using ${task.password} binding variable and that successfully shows the password generated
but using that password and account_name in the email, we are not able to login to Saviynt.
Please find here the ChangePasswordJSON:
{
"call": [
{
"name": "call1",
"connection": "userAuth",
"url": "https://AbcOrg.com/ECM/api/changePassword",
"httpMethod": "POST",
"httpParams": "{\"username\":\"${user.username}\",\"password\":\"${randomPassword}\",\"changePasswordAssociatedAccounts\":\"true\",\"endpoint\":\"Endpoint#1,Endpoint#2,Endpoint#3\",\"validateagainstpolicy\":\"Y\",\"updateUserPassword\":\"true\",\"setarstasksource\":\"true\"}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
201,
200,
204
]
}
}
]
}
We have not set the Policy in Security System and only set it in PasswordPolicy JSON.
The following variables have been used in the ChangePasswordJSON, but still the password is not working for the user.
the email template is being sent out successfully with a password but we are not able to login to Saviynt using the account_name and password.
The following variables have been used in the ChangePasswordJSON for Sav4Sav connection but still we are unable to login using the passwords generated.
${randomPassword}
${task.password}
${user.password}
$(account.password}
For Example, we have a user Kevin.T who has an identity in saviynt and a SAV4SAV account kevin.t for whom we are generating the changepassword task.
Task is getting created and provisioned, email is getting sent out with password and password is visible in email but the same password is not working when we try to login.
We have tried to hard-code the password in the changepasswordJSON e.g. Summer123 and in that case it works perfectly fine. The same accountname and hardcoded password we are able to login.
No Provisioning errors found in the logs nor are we able to see the random password generated by the ChangepasswordJSON.
In Global Config we have also added the Sav4Sav endpoint under "Settings: Endpoints to Synchronize Password for Self"
and "Settings: Endpoints to Synchronize Password for Others".
Please do let us know if anyone has faced this scenario or have any suggestions for it.
