and more in a single search tool across platforms. Read the announcement here. |
07/21/2022 09:50 AM - edited 07/21/2022 10:24 AM
We are not able to submit request in v2021 for particular application
Error :
Error Evaluating in SOD
Note :
we are not using SOD for any application in environment. on Developer logs it shows its passing sodcheck=true
1. No Ruleset in Saviynt
2. externalconfig.properties does not have sod.endpoints entry for particular application
3. all global config related to sod are disabled.
Additional details -
if user dont have any application access then it works accurately but if user have some application it fails
Solved! Go to Solution.
07/22/2022 06:52 AM
Hello,
We are facing similar issue in v2020.x , user with only end user SAV role cannot submit request to any application.
07/24/2022 11:16 PM
Could you please set "sod.endpoints=dummy" in external config and also can disable "SHOW SOD IN Request" from SAV Role and confirm.
07/25/2022 01:49 PM
@Nikitaj Both configuration are already in place & requestor having ROLE_ADMIN sav role.
07/25/2022 10:00 PM
Hi @rushikeshvartak ,
Thanks for confirming!
Could you please run below query and find all the duplicate entitlements if any -
select entitlementtypekey, entitlement_value, count(entitlement_value) as count from entitlement_values group by ENTITLEMENTTYPEKEY,ENTITLEMENT_VALUE having count > 1;
As If there are duplicate entitlements, projects, project roles are also getting duplicated in Saviynt and resulting in "Error while calculating SOD" even though there are no SOD rulesets configured.
Please check and confirm.
07/26/2022 02:08 PM
There are no duplicate entitlement for application
07/27/2022 04:44 AM
Could you please share the logs for this, it might be an issue with the API permissions.
07/28/2022 10:00 PM
Could you please share the logs as well as snip of your web service API from SAV Roles.
07/29/2022 08:48 AM
@Nikitaj Please find attached logs & this is happening for disconnected apps
08/01/2022 03:50 AM
Thanks for sharing the logs and other information!
Could you also please share "arsms" logs, to look for the API call.
09/21/2022 01:55 PM
We have this exact issue with an open support request. v2020.1
What is the resolution?
09/21/2022 07:48 PM
09/22/2022 06:00 AM
If you are referring to ensuring that sod.endpoints only lists the endpoints where SOD should apply, unfortunately removing these did not work for us.
Even setting this to sod.endpoints=dummy does not make the error go away.