Zscaler ZPA Integration

[BrandonLucas_BF]

Has anyone done a Zscaler ZPA integration with Saviynt? There is a document on Sav Exchange for this - Understanding the Integration between EIC and Zscaler ZPA (saviyntcloud.com)

However, in meeting with the vendor their application seems to be geared more toward provisioning entitlements using an IdP. There is no concept of native entitlements within ZPA (like groups). The groups in the app are populated using their SCIM connector.  With Saviynt, the closest translation to this I think is to have Saviynt entitlements for ZPA be managed through Saviynt and have the connection create those entitlements in ZPA. However,  according to the Sav Exchange connector for ZPA, only create/update user and modify group member is supported, and I don't see a way to create the entitlement using JSON in the REST connector.

Anyone have any experience with this?  Their API supports create group functionality: About SCIM APIs | Zscaler

[sudeshjaiswal · Accepted solution]

Hello @BrandonLucas_BF,

Currently, it is not feasible to create entitlement using REST Connector in Saviynt, though if the API is also exposed, we only can add access and remove access to the account.

[BrandonLucas_BF]

Thank you. Idea submitted: Entitlement Creation in Endpoint with REST | Saviynt Ideas Portal