Management of Normal and Admin Ids

[Megha]

Hi All,

We want to create multiple accounts for user on same provisioning system. The user will be have the account name like below:

Username:- Test User

Accountname1:-Test.u

Accountname2:-Test.u.admin

Please suggest on how to provision the above to the same AD connection using different security system,connection.

We have raised the ticket 143910 in freshdesk.

Unable to get much assistance. For replicating the issue, please refer the above ticket.

Regards,

Megha Urs B R

[Megha]

Hi All,

Any suggestions in this regards will be helpful.

Regards,

Megha Urs B R

[avinashchhetri · Accepted solution]

Hello @Megha,

From what I understand, you have one Active Directory but using two Security Systems/Endpoints and two connections. In essence, these are two separate entities in Saviynt.

If provisioning from the first connection / security system is working as expected, there should not be any issue with the second one as well, since the target is the same. All you have to do is update the JSON's to ensure the admin/elevated accounts are created as per the required attributes.

The account name is different as you have stated, that can be configured in the endpoint account rules or even the create account connector itself (samAccountName), since it just required an admin constant appended to the accountname combination, assuming users cannot have more than 1 admin/elevated account.

However, using two security systems and endpoints in Saviynt for the same target Active Directory might lead to duplicate groups to show up in Saviynt, (essentially the same group but in two endpoints) . The accounts could also be duplicated across endpoints if you do not use filters at the time of reconciliation.