Enterprise Identity Cloud Discussions

Azure AD Remove Access Not working

Hello,We are intergating Azure AD with Saviynt. By following Azure AD Saviynt documentation Azure AD team has given required permissions to service user, yet Remove Access (AADGroups) is not happening.AADGroup":{"headers":null,"message":{"error":{"co...

How to Delete Enterprise Roles in bulk using Role Keys

We have duplicate enterprise roles. There are certain roles which have users and certain which don't but the roles have same name. We have fetched the details which roles have users and which don't along with the Role keys.Now we want to delete the d...

How to transfer/upload file to UNIX server through CPAM

We have onboarded few unix servers to CPAM and got one requirement to transfer files between the local workstation and the target UNIX server. I know we have a proper documentation for Windows server (Interaction Between Local and Target Endpoints (B...

PAM logs for Saviynt SIEM integration

We have followed this below document to integrate the Saviynt to Sentinel to fetch all audit logs for Saviynt however analytics query mentioned the document is not fetching the PAM related audit data.Saviynt SIEM Integration (saviyntcloud.com)Can you...

SNOW as Ticketing System

Hi Team,Connector Type: RestVersion: v24.3JSON attached for referenceCurrent Scenario:1. In Saviynt, I submit a Request for an Application-A by adding 4 Entitlements.2. Then Saviynt creates 4 Add-Access Tasks.3. Then, after running WSRERTY job, Savi...

Attestation Dashboard: null pointer exception

Hi,I'm trying to implement some dashboards for campaigns. I've been following the documentation but it ldoesn't seem to be up to date.1. I created a new dashboard : 2. I added this dashboard in ROLE_ADMIN SAV ROLE3. I had this error on the Dashboard ...

ADSI: disableaccountjson- error while moving user from one OU to another and prepending cn value

Hi, I want to prepend cn,name, dn with 'double underscore' and moveObjectToOU' ,with dn,moveobjecttoOU value I'm able to update the attributes for example:{"objects": [{"objectClasses": ["user"],"distinguishedName": "${account.accountID?.replace('\\'...

Decrypt Connection Json for RAAS & SOAP

Hi,I want to update connection Json for Soap & RAAS api, but it was encrypted. When I read the forum it says I need to enable Rest Questionary option from Global config. I enabled them but still I dont have an option to decrypt. But I can see the op...

Resolved! remove access Tasks are not picking up by prov job.

remove access Tasks are not picking up by prov job. during investigation we got to know that in existing comments there is something like- [04-15-2024-total task count (35) is greater than defined limit (30)]. [04-15-2024-total task count (35) is gre...

Action Event pass requestkey as argument

Hi All,We have a requirement where we need to call a custom JAR inside the workflow. I am aware that we can use the 'Action Event' block to achieve this.However, I also need to pass the 'requestkey' as argument to the JAR so that I can perform some o...

Email Templates Multiple Conditionals

Hello,We are attempting to implement an email template that displays information about a user based on any null values they may have.e.g.: if (user.costcenter == null) print "[something1...]" if (user.employeeID == null) print "[something2...]" if .....

AD Access import removing group membership

Hi Team,We have a user assigned to a particular group and only that group we are currently importing into saviynt(by providing groupbasedn with group DN)what we have observed when we trigger the account import first, we could see entitlement mapped t...

Limiting visibility inside access request approvals?

Hi,When requesting multiple accesses in one request, approvals of those accesses can be sent to different approvers for example based on ownership of the requested accesses.Currently all approvers assigned in the request can see approvals of others a...

passwords are not generated in email template

Hi Team,We need to generate the email for new joiner users and the email template contain the password.We are using the password: ${task?.password} to generate emails are triggered but we cannot see the data in the email body.we tried with all this b...

Requestkey check for tasks in ARS.

I am adding a few entitlements and also removing a few entitlements through ARS in a single request.Now irrespective of the tasktype, whether it is "task.tasktype=1" OR "task.tasktype=2", as the tasks have the same request key, I need to pass some st...

User account correlation rule

Hi TeamI am trying to perform user account correlation rule for SAP account import and below are the conditions that I need to address 1) username=account name2) lastname + first 2 characters of firstname = account name3) lastname + first 1 character...

User Import Source System Update/Change

Hi Team,As of today we are using Azure AD as the trusted application for user identity to Saviynt. Going forward we have a new requirement to add another trusted application as Success Factor from this we have about 20% of users will be imported and ...

Active Directory Provisioning and deprovisioning

Hi Team,We have to add users to the AD group, I don't see separate JSON for the same.Do we just need to add "{“conf”:[{“ADDMEMBERTOENT”:“TRUE”},{“ADDUSERTOENT”:“TRUE”}]}" value in the endpoint?Thanks

Advance Query For whom can the user setup delegate

Hello,I want to restrict delegation setup to self and N+1Use case: I need to allow any user to setup delegation for himself or for his/her manager behalf.Thank you

Resolved! Role Change History Table

Hello,Is there a way to get change history details for roles in EIC?Thanks

Update account attribute to user attribute in EIC

Hi Team,We have requirement to show AD account last login attribute in User manager cert employment verification stage. Since we cannot display account attribute in employment verification stage, we are thinking to update account last login value to ...

Analytics query to get the summary of User Manager Campaign

Hi,We need a query for creating analytics to get the summary of the User Manager Campaign.Regards,Naveen

SC2 Connector High Availability

We currently have 2 servers where the SC2 clients are installed. To the best of my knowledge, it is currently setup in an active/passive state.I am working on upgrading the OS's of the servers due to them being EOL and want to start by upgrading the ...

Comparison of user.customproperty10 OLD VALUE and NEW VALUE

I have a requirement to run an SOAP query for deleting a dealership from an account , I am able to get it down using below query.<I_DEALER_IDS>${user.customproperty10}</I_DEALER_IDS> Now I have a requirement that i want to compare user.custompropert...

Termination email body sending incorrectly from update user rule

When user update rule fires off for Terminated users, I have notify as email. The email is hitting the mailbox, but the only thing in the body is the word true. Below is the html I am expecting to render. <!doctype html> <html xmlns="http://www.w...

Require more details around "accountNotInImportAction" attribute

HiWe have this attribute "accountNotInImportAction" inside accountParams->statusAndThresholdConfig. Somehow i am not able to find whats its purpose, description, possible values and their description (like difference between Delete and Suspend) in Sa...

Analytic Report Generation Date

Hi Team,we have requirement of sending email notification with analytic report generated time.We are unable to receive any email notifications with the below paramenters.1. ${date}2. ${ANALYTICSDATA.'START DATE'[i]}3. ${ANALYTICSDATAMAP.get("START DA...

Resolved! SFTP connection is failing with SSH Key

Hi Team,I have created connection SFTP as per the instruction in the document Configuring the Integration for File Transfer (saviyntcloud.com)But with username and password connection is successful. But we should use SSH key instead of password as au...

No Change Password task created for Service Account Password Reset

We are trying to update the Service Owner password from ARS. But after the successful submission we can see the success message like below, but no task is created for the actual password change. Could you please share your thoughts on why we aren't ...

Resolved! Generate Entitlement displayname from entitlement_value on import job

Hi Team,I want to modify the entiltlement_value string to create the displayname during import job. It would be something like this:entitlement_value = "ABC_XYZ_View_Group" ----> displayname = "ABC XYZ"Is there any way I can modify the ImportAccEntJ...

fetchRequestHistoryDetails and fetchRequestHistory API not returning request details

Hi Team,We are using fetchRequestHistoryDetails and fetchRequestHistory API to fetch the request details but API not returning request details.Please find below postman screenshot: Let me know if any config changes are required.Thanks,Randhir Kumar.

Resolved! Change Label in Upload User Preview

Hi Team, We want to change the label for attribute while uploading the user via CSV import. Where we can make this changes in the Manage Label I am not getting exact attribute name. Instead of 'Customproperty5' we have to show here 'ActionType'

Not able to correlate identities in Saviynt app for servicenow

Requirement:Implement Saviynt app for servicenow.Achievements:Installation of saviynt app for servicenow is done properly. All identities, accounts, entitlements and applications imported to saviynt app for servicenow.Challenge:I tried updating user ...

Getting error while importing accounts from AD

Hi,I am facing an issue while importing the accounts from AD. The connection is successful but the import job is failing with the error: Got Exception while performing ctx.search: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: N...

ADSI FULL Access Recon job is taking 20 hours and still giving error message

We are running ADSI FULL Access Recon job every weekend. The job is taking 20 hours or more everytime. The issue is that job either fails or does not give an end time, suggesting that the job did not complete successfully.Is there any way to reduce t...

Workflow : Check multiples or single owners on single entitlement for Auto approval

Case : If requestor is a entitlement owner of requested entitlement then request should be Auto approve else it go with manager approval. Note we have single or multiple owners to a single entitlement with rank 1.So I used below IF-else conditions, b...

Generate Unique 9 digit username for users coming in from AD as auth source

Hi,We require to generate a unique 9 digit numeric number prefixed with C_ for users coming in from AD as AUTH source. What is the best practice to do this? I read some posts that mentioned the use of Register user rule and inline pre-processor. I tr...

Issue with ADSI Connector: extensionAttribute3 Population Failure in Active Directory

Hi everyone,We're currently working on integrating Active Directory using the ADSI connector, and we have a requirement to populate extensionAttributes in AD. However, we've encountered an issue where the AD account is being created but fails to popu...

Rest based provisioning using CSRF token fetch fails

Hi Team,Trying to provision the Access through rest call for SAP IDM target system. It says accountID is null in debug statement and no errors. I have added all the required details in the attached pdf document. can you please help on this? When I...

Enterprise Role Association to 17K Users Recommendation

Hi there - We are in the process of aligning Saviynt to a role framework at a customer that will has approximately 17K users and will have 1.5K roles based on a job code parameter that is being ingested from the authoritative source. We have a scenar...

Creating a RUNTIME ANLAYTICS Report to pull all the tasks related to campaigns without AD connection

Hi,I am trying to create a RUNTIME ANLAYTICS Report to pull all the tasks related to campaigns without having AD connection. I can pull all the data, however when I specify the TASKTYPE in report and while running it, we are getting alert as [Alert: ...

Resolved! Active Directory Entitlement Import

Hello,in the connection for Active Directory, in groupImportMapping, is it possible to add conditions to the mapping?For example, I would like to import the description from AD into entitlement_glossary in Saviynt, but only write it in Saviynt if the...

Terminate the user if user not in feed

Hi Team,We are working on the user termination through user import full Job and we have set the 'User Not In Feed Action' as "Inactiveuseronly" but it is not terminating after user import.Also we have tried by setting 'User Not In Feed Action' as 'I...

Entitlement Owner Mapping Between Endpoints

Hello, We have two AD connections; one for regular user accounts and one for admin accounts. We are wanting to map the accountID of an owner on the regular AD connection to be the owner of the entitlement on the Admin AD connection. Is there a way to...

Disable Account instead or Removing from AD domain

Hi All,We have a scenario where we want to disable the accounts instead of removing it from AD domain when revoke task is created via campaign.I understand that disable task won't be created but what if we use something like below -{"objects": [{"ob...

Re-baseline only one account

Hi,We need to re-baseline only one account as this account belongs to active directory endpoint. and we do not want to re-baseline the ad endpoint itself.

getting access denied error while uploading CSV file with Sav Role as Manager

Hi Team, I am trying to upload CSV file having Sav role as Role_Manager. But I am getting below error. I tried to check the feature access present in Role_Admin access for user upload. I assigned to Role_Manager sav role. But did not work. I have up...

How to get Event Access time in Audit Report

Hi ,We have created the Audit report using below OOTB query.select ua.TYPEOFACCESS as 'Object Type',ua.ActionType as 'Action Taken',u.username as 'Accessed By', ua.IPADDRESS as 'IP Address',ua.ACCESSTIME as 'Event Time',ua.DETAIL as 'Message' from us...

Saviynt for Saviynt - SaviyntForSaviyntAccountImportJobTrigger

Hello, I have the Job below that is failing now i dont't know why. I use this Job to update the status attribut for external worker.The error i get :ImportUserJSON IN Saviynt For Saviynt connexion : Anyone can help please? Regards,Ray

Issue for Token generation with REST Connection

Hi Team,We have Oauth2.0 authentication to generate access_token for EC_NOV application. When we run the job to import account, we are getting 401 error. I have raised a ticket before for the same https://forums.saviynt.com/t5/identity-governance/res...