We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

How to trigger email alert when the PAM enabled account's password is expiring ?

suresh_ravuri
New Contributor III
New Contributor III

We are planning to configure email alerts for PAM enabled accounts for the following scenarios

  • 15 mins before the credentials checkout request expires.
  • Password rotated after the account check-in process
  • When the account authorization request expires
3 REPLIES 3

NageshK
Saviynt Employee
Saviynt Employee

@suresh_ravuri Thanks for posting your question. I'm reviewing this to see if it is possble to achieve this via Analytics. 

Thanks

Nagesh K

Hi Nagesh

 

I have created the following Analytical query, It lists all credential checkout requests that are expiring in 30 minutes, however, no email alert is being sent to the end.

select u.USERNAME as 'User Name',u.email as 'User Email',ac.NAME 'Privileged ID', ep.DISPLAYNAME as 'Target System', If (ep.endpointname like '%RemoteApp%','Remote App',ep_prop.PLATFORM_TYPE) as 'Type',SUBSTRING_INDEX(arsreq.JBPMPROCESSINSTANCEID,'.',-1) as 'Request ID', ffid_s.Request_START_DATE as 'Start Time', ffid_s.Request_END_DATE 'End Time' from USERS u inner join FFID_SESSIONS ffid_s on (ffid_s.requested_by=u.userkey) inner join ACCOUNTS ac on ( ffid_s.ACCOUNT_KEY=ac.ACCOUNTKEY ) inner join ENDPOINTS ep on ( ac.ENDPOINTKEY=ep.ENDPOINTKEY ) inner join ENDPOINTS_PROPERTIES ep_prop on ( ep_prop.ENDPOINTKEY=ep.ENDPOINTKEY ) inner join request_access reqaccess on ffid_s.REQUEST_ACCESS_KEY=reqaccess.REQUEST_ACCESSKEY inner join ars_requests arsreq on reqaccess.REQUESTKEY = arsreq.REQUESTKEY WHERE ac.ACCOUNTCONFIG like '%"CREDENTIAL"%' and request_end_date <= ADDTIME(now(), "3000") and request_end_date > now()

 

NageshK
Saviynt Employee
Saviynt Employee

@suresh_ravuri Have you associated an email template to the analytic control? And the email template's To list should contain {userEmail} parameter

Thanks,

Nagesh K