Update AccountType of AD account while provisioning

[ronit]

Hi,

We have a requirement where we have to update the AccountType of the attribute of the users AD account while provisioning.

Our CreateAccountJson excerpt is shown below.

"comment":"${accttype}" where accttype is the dynamic attribute of type String and has a default value "User"

The Account_Attribute json excerpt is shown below:

ACCOUNTTYPE::comment#String

When we try to provision an identity to AD, the comment attribute of the target is successfully updated in the target (AD), But the accountType of the users AD account is still blank inspite of the mapping in the Account_Attribute Json to map comment to accounttype

Is there anything else which needs to be done or am I missing something ?

Thanks,

[DaanishJawed]

Hi @ronit 

Are you saying that the Account Type of User's AD account in AD did not get updated ? If yes, then it will not get updated since Account_Attribute JSON is used only when we run import from AD back to Saviynt.

Account_Attribute JSON is used to pull the data from AD into Saviynt and is not used during provisioning of the AD account.

Document Link on AD Connector -

https://docs.saviyntcloud.com/bundle/AD-v2020x/page/Content/Active-Directory-Integration-Overview.ht...

Thanks.

[Saathvik]

Can you share your Account_Attribute mapping? Also did you try to mapping it to CP value to see if it is coming in other attributes?

[Darshanjain]

Hi @ronit 

Can you check in DA if the you have mentioned the Account Column as accountType if it is there it will be stored. If its not mentioned, After reconciliation the account type value will be populated However in the above case if DA doesn't have column mentioned and if you run only provisioning the value wont be stored. 

Thanks

Darshan