There is a need to ensure that the organization's security posture is maintained and that all compliance guidelines and regulations are met. The need to govern the lifecycle of non-human accounts (creation, updates, and retirement) is paramount. Like...
We have a requirement that disabled AD accounts of users must be requested to be reactivated by their managers only. We have an attribute from the HR system that tells if a given user is a manager or not. At the endpoint level, the state and status f...
I am trying to import users for SAV4SAV REST endpoint using a REST connection. My import user json is as follows:{"call": [{"connection": "acctAuth","url": "https://access-qa.<<companyname>>.com/ECM/api/v5/user?q=accountExpired:0&fields=username,cust...
We have several SCIM endpoints that expose APIs to 3rd party consumers. Their requirement is to register the URL of the SCIM endpoint in Saviynt to establish a connection and have Saviynt on-board and off-board users from that endpoint.Is it possible...
We have a requirement to disable AD accounts through a ServiceNow catalog that will consume Saviynt API to disable user's AD account. I am trying to restrict the access for ServiceNow to consume only the /ECM/api/v5/updateUser API instead of opening ...
The use of contains works now. We have been able to implement this by configuring a validation between SAV roles and the drop down action items and and configuring a validation condition in Global Config under Identity Lifecycle --> Register User For...
I have been able to implement this through the User update form through a combination of SAV role to manual actions in the dropdown and configuring validation condition to prevent managers from enabling an AD account of a user who is not their direct...
loggedInUserRole.contains('Manager') does not work in the validation condition. I have to use == . The functionality is still not working with either expressions.