Workday Connector - Entitlements not Mapping to Accounts

[sunilrashinkar]

Hello Saviynt Support team,

We are able to import users and accounts from Workday as Authoritative source and Target application successfully. No issues here.

But when we are running the full access import, it is failing and majority of entitlements are coming back in the full access import, but none of them are reflecting on the accounts.

Here is our account import mapping JSON:

{
"ImportType": "RAAS",
"ResponsePath": "wd:Report_Data.wd:Report_Entry",
"ImportMapping": {
"NAME": "wd:User_Name~#~char",
"ACCOUNTID": "wd:Worker_group.wd:SAV_User_Name~#~char",
"DISPLAYNAME": "wd:Worker_group.wd:Full_Name~#~char",
"CUSTOMPROPERTY1": "wd:Worker_group.wd:Manager.wd:Descriptor~#~char",
"CUSTOMPROPERTY2": "wd:Worker_group.wd:Cost_Center.wd:Descriptor~#~char",
"CUSTOMPROPERTY3": "wd:Most_Recent_Sign_On.wd:Descriptor~#~char",
"CUSTOMPROPERTY4": "wd:Time_of_Most_Recent_Sign_On~#~char",
"CUSTOMPROPERTY6": "wd:Worker_group.wd:Company.wd:Descriptor~#~char",
"CUSTOMPROPERTY5": "wd:Account_Locked__Disabled_Expired~#~char"
}
}

Here is our Access List on the connection form. We want to import only Security Groups and Organization Roles into Saviynt from Workday

Security Group, Organizational Role

Here is our Status_Threshold_Config JSON:
{
"statusAndThresholdConfig":
{
"statusColumn": "customproperty5",
"activeStatus": ["0"],
"deleteLinks": false,
"accountThresholdValue": 0,
"correlateInactiveAccounts": false,
"inactivateAccountsNotInFile": false
}
}

Any help is greatly appreciated.  Also attached is the debug log for reference. We are seeing the following error in the debug log when the full access import is failing:

"2024-05-23T23:30:58.859+00:00","ecm-worker","provisoning.SoapProvisioningService","quartzScheduler_Worker-10-pnj8d","DEBUG","Storing data in TEMPENTITLEMENT_VALUES_23566 and TEMPACCOUNT_ENTITLEMENTS1_23566"
"2024-05-23T23:30:59.177+00:00","ecm-worker","","null-pnj8d","","23-May-2024 23:30:58.860 WARNING [quartzScheduler_Worker-10] groovy.sql.Sql.handleError Rolling back due to: Cannot get property 'wd:Organization_Role_Data' on null object"
"2024-05-23T23:30:58.861+00:00","ecm-worker","provisoning.SoapProvisioningService","quartzScheduler_Worker-10-pnj8d","ERROR","Unable to execute batch. Error : "
"2024-05-23T23:30:59.177+00:00","ecm-worker","","null-pnj8d","","java.lang.NullPointerException: Cannot get property 'wd:Organization_Role_Data' on null object at com.saviynt.provisoning.workday.WorkdayCustomizationService.getOrgRoleData(WorkdayCustomizationService.groovy:181) at com.saviynt.provisoning.SoapProvisioningService.processImportMapping(SoapProvisioningService.groovy:2070) at com.saviynt.provisoning.SoapProvisioningService$_saveDataToDB_closure22_closure67_closure69.doCall(SoapProvisioningService.groovy:1738) at com.saviynt.provisoning.SoapProvisioningService$_saveDataToDB_closure22_closure67.doCall(SoapProvisioningService.groovy:1675) at com.saviynt.provisoning.SoapProvisioningService$_saveDataToDB_closure22.doCall(SoapProvisioningService.groovy:1519) at com.saviynt.provisoning.SoapProvisioningService.saveDataToDB(SoapProvisioningService.groovy:1518) at com.saviynt.provisoning.SoapProvisioningService.processSingleRequest(SoapProvisioningService.groovy:1391) at

[rushikeshvartak]

Provide RAAS Report screenshot

[sangitaladi]

Which report you are referring to?

[sunilrashinkar]

Hi Rushikesh Vartak

The full access import is failing. When we check Saviynt, we see lot of entitlements are imported for organization roles and security groups. But I dont see any entitlements on the accounts.

Do you want to see any specific report?

We want to import only Security Groups and Organization Roles into Saviynt from Workday and this is our Access Import List value on the connection form

Security Group, Organizational Role

[rushikeshvartak]

Need postman screenshot to validate mapping

[sunilrashinkar]

Hi Rushikesh Vartak

We are using out of the box Workday Connector and the only mapping we have on Saviynt is for user and account import. The access import and its mapping is handled by the connector. Unless and until you tell us which mapping you need, I cannot provide you Postman screenshot 🙂

Anyway, we got a response from Saviynt saying the issue is fixed in v24.4 and we are at v23.10

So hopefully, we will need an upgrade to get this resolved. The ticket opened for this issue is 

INC-2031665 Workday Connector - Full Import for Access is Failing

Tks

Sunil