How to disable One Disable function
All,I been searching in the forums of how to disable the "one click disable" functionality and how we could restrict this to certain population of users.Anyone has encountered this similar situation before?
Forum Posts
Saviynt-CyberArk Rest Integration Error
Hi Team, Integration of CyberArk using Rest Connector We are getting error while importing data using rest connector but we are able to fetch data via postman. We are using IP only for connection and to import data as well. PFB Error Logs, connection...
ImportUserJSON - set status based on endDate
Hi,We are trying to update the user status based on endDate, using sav4sav user import. I tried the below line to check if the user’s endDate is in past AND user is active? if yes, update the status to Inactive else leave the status unchanged. But it...
AD disablementJSON with logic
Hi Team, we would like to implement a logic to disable JSON in the active directory, where it checks before proceeding. However, it seems that the logic(below highlighted) is not functioning properly.The highlighted logic mentioned below is working p...
Different workflows as per user attribute
Hi Team, We have use case regarding to workflow where we have to check if user attribute cp1 is 'ABC' then user creation approval will go to 1st workflow, If cp1 is 'XYZ' then user creation workflow will go for another approval process. How we can co...
How to export connection detail(Including all jsons)
I needs to know whether exporting connections details including all the operations JSONs.If we can please let me know the steps.
AD primary group ID need to add while creating AD account as Birthright
Hi TeamWe need to replace the primary group ID 513(domain users AD group) with a different group ID(AD group) when creating an AD account. A task has been generated, but it fails when I try to proceed.error screenshot with error message error message...
24.4 version:- Unlock operation for account-in AD - Malformed '”lockoutTime”' attribute value
Hi Team,We recently upgraded to 24.4 version from 23.11. We are trying to unlock AD account from ARS. We are using below unlockaccountjson:{”lockoutTime”: 0}It is throwing below error.error while Unlock operation for account-in AD - Malformed '”locko...
createrequest via the API for adding user to roles
Hi Team,I am encountering a 400 error unauthorized when attempting to call the API for adding a user to a role. However, I am able to successfully call other APIs. This is the first time I have used a role request. We have a use case where we need to...
Application Connector Invalid access token provided
We have configured the REST connector for the Coconut application and configured a security system, an endpoint, and an application data import job to import accounts from the application.We used the following JSON:connection Json:{ "authenticatio...
Box OOTB Connector Operations
Hi I am wondering if its possible to use the OOTB Box Connector. Alot of the connection configurations look to be obsfucated by Saviynt and handled on the backend. I don't see any config fields for most operations. Specifically, I am wondering if the...
Disconnected Securtiy System and endpoints
My team is looking to include disconnected applications into our quarterly access certification campaigns. Would it be possible to create a disconnected Security system and have that security system connected to multiple disconnected endpoints or doe...
Accented characters conversion
Hi,I am trying to convert the accented characters from the lastname attribute of users to English characters using Saviynt OOTB functionality, i.e., FN_EIC_REPLACE(STRING_TO_BE_REPLACED,null), but it keeps throwing an error: "Illegal mix of collation...
AD connection failing intermittently while using SSL certificate
AD connection failing intermittently while using SSL certificate. Below are the error we are getting :App1 Logsjavax.naming.CommunicationException: segotn1014.qrds.volvo.com:636 [Root exception is javax.net.ssl.SSLException: Read timed out] at com.s...
Steps for creating SSL certificate for AD connection?
Hi I was wondering if there is any documentation available that outlines the steps for creating an SSL Cert for use with AD connection via LDAPS over port 636 when connecting to a single DC with IP.I looked at the certificate management documentation...
Is there an option to disable emails to be send to users?
All,I am in a process of configuring the staging environment and I was wondering if there's an option of disabling the SMTP configuration. Currently I just changed the information on the SMTP settings to avoid sending emails, however, it is creating ...
Resolved! Update Account name into User's CP value using customquery.
Hi All,Need help in updating the Active directory's account name into any of the custom property values of the user using customquery.we tried following query it is not working UPDATE USERS AS US INNER JOIN user_accounts AS ua ON US.userkey = ua.user...
Resolved! How to reset API Password, not user password for local api account?
Hi on 24.3. We have SSO enabled and I have created an Saviynt API account, set the password, set localauthenabled to 1 and set passwordexpired to false. The problem is that it looks like with version 24.x there is also an "API Password" associated wi...
Can we close pending task in Saviynt based on SNOW request status - IGA App integration ?
Hello Experts,We have few disconnected applications which is requested via ServiceNow IGA App, pending task will be created in Saviynt after all approvals completed.Is there any option/configuration which we can enable, which will close the Saviynt p...
Replace Qualifiers/prefix/suffixes from Name during Import
Hi Team,We have a requirement where we need to replace any qualifiers from the names of imported Users like MR. , JR. , Sr. , II, IV, X which mostly appear as prefix or suffix of names.e.g - Robert Viv IV should convert to Rober Viv, Downey J...
Resolved! endpoint dynamic attribute date selection
We have configured a dynamic attribute example:Date, and gave it a default value for test purposes like below. This calendar view does not have the option to select month/year without having scroll through months at a time to arrive to say 2024... is...
Resolved! User Identity Creation is not working using Saviynt User Registration Form
Hi All,We are using Saviynt Version 23.9 there we create one saviynt user registration form through global configuration.Below is the setting that we did -After creation of form we are trying to create user but User Identity creation is not happening...
Dynami Attributes action string.
Hi, We have a requirement if entitlement is selected only then show "country" field as required. If ent. is not selected then don't show the country attribute in dynamic attribute. We have 10 entitlements. in ent. selection attribute action string i ...
SC2 Alternative
So my customer is not at leaning to a on-prem component i.e. SC2 client server in the customer env. So could anybody provide more info on option 2 and option 3? Any information would be highly appreciated.
Query regarding UserNotInFileAction attribute during Import
Hi Team,Could you please confirm which users are considered by Saviynt to terminate/Inactivate when we specify <userNotInFileAction>INACTIVATE</userNotInFileAction> during import in the connection User Import XML.We tried to test this using both Full...
Resolved! Conditional statements in Email Template <To:> line
Has anyone used a conditional in the To: line of an email template?I am using <%if (user?.custompropertyXX == 'True') print "user@domain.net, DL-Group@domain.com" else print "${manager?.email}, DL-Group@domain.com"%> I keep getting the manager's emai...
Resolved! Dynamic child attributes do not refresh in user update form
I have a problem with child attributes in the user update form that you can set up in the global configurations under Identity Lifecycle. I already had a ticket with Saviynt, but they say this behavior is standard. However, end users would not expect...
ModifyUserDataJson Query not updating value correctly
Hi Team,We have a requirement where if User email is present in Saviynt but empty/null in the import HR source data, it should not update the email for the User during import,whereas if email is abc@sav.com in Saviynt and xyz@sav.com in HR source tab...
Tile font color change in Campaign Dashboard
Hi Team, Can we change font color white to black in Campaign Dashboard?? Let me know if we can change this In-Process Certification text font color to black. Thanks in Advance Regards,Gaurav
Update account attribute to user attribute in EIC
Hi Team,We have requirement to show AD account last login attribute in User manager cert employment verification stage. Since we cannot display account attribute in employment verification stage, we are thinking to update account last login value to ...
SFTP File Upload
Hi,We have a SFTP connector, which downloads userImport file and imports users. We have a requirement to send back few attributes to SFTP location in CSV format.What could be the best practice to implement this? Best regards,Harish
display child entitlement value in entitlement hierarchy
Hi ,We have a requirement for a DB application were the entitlement value should be seen in the current entitlement as a child entitlement or when its being displayed as " No record found" as followswe have an entitlement type called access and two ...
Use Dynamic attribute in Email Template
Hi, I am trying to use a endpoint dynamic attribute in the "To" field of the email template but it is not working. I referred to this article: https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter06-EIC-Configurations/Creating-and...
Database kerberos/windows authentication
Hi I am trying to set up kerberos/windows authentication for a DB connection to a MySql server. I am reading through the documentation and there are a handful of operations and files that look to have to be done on the saviynt server. Is that correct...
uploading entitlements from CSV Under the Other entitlements details Tab
Hi ,We have a CSV file that contains a group name and its associated another group for instance group A is an entitlement and group B is the associated entitlement to group A so that if a task is generated for group A , group B should also be auto as...
Resolved! Comparison of user.customproperty10 OLD VALUE and NEW VALUE
I have a requirement to run an SOAP query for deleting a dealership from an account , I am able to get it down using below query.<I_DEALER_IDS>${user.customproperty10}</I_DEALER_IDS> Now I have a requirement that i want to compare user.custompropert...
Resolved! Change Label in Upload User Preview
Hi Team, We want to change the label for attribute while uploading the user via CSV import. Where we can make this changes in the Manage Label I am not getting exact attribute name. Instead of 'Customproperty5' we have to show here 'ActionType'
Resolved! Entitlement Campaign Configuration - Entitlement Query
Hi,I was looking under Data analyzer to get the attribute for queries that we specify under 'Advanced Campaign Configuration, but could not find any.Under 'advanced campaign configurations', we need a report that gives us the 'entitlements query', Is...
Error Encountered while submitting update user request form.
We have configured the Register User form in Saviynt. When we fill the user creation form fields and click on submit, the user will be created, and all form fields are updated in the user's details. When we open the update user form, select the user...
Resolved! replace apostrophe and period character in lastname
Hi ,We are getting names from source as for instance ( Fernoldjr. , O'connell etc.) which then creates email as in firstname.fernoldjr..com To escape the special characters (',.) below is the preprocessor I was trying however , I was getting syntax e...
Getting entitlement value in Request form from dataset
Hi ,we have a requirement where we are getting a csv with information of an attribute and its particular group Can we use it as part of a Dataset and call it in the request form for example attached is the file where we have a country and its associ...
saviynt rest access and refresh token expires - any way to refresh indefinitely?
hello we have a saviynt rest used to create saviynt account, and update username etc.. the access/refresh token was platform generated via webauth service and it expires every 1 hour/3600 hours. Is there a way to keep extending it indefinitely? if so...
Resolved! Replace sAMAccountName in USER_ATTRIBUTE - AD Connector
Hi All,I have an AD Connector where we mentioned accountname rule & sAMAccountName to provision as - ${user.username.toLowerCase()+'admin'}And the provision of the account is working fine and the sAMAccountname also displaying like Ex: "cjackadmin". ...
User Import Source System Update/Change
Hi Team,As of today we are using Azure AD as the trusted application for user identity to Saviynt. Going forward we have a new requirement to add another trusted application as Success Factor from this we have about 20% of users will be imported and ...
Resolved! Termination email body sending incorrectly from update user rule
When user update rule fires off for Terminated users, I have notify as email. The email is hitting the mailbox, but the only thing in the body is the word true. Below is the html I am expecting to render. <!doctype html> <html xmlns="http://www.w...
Capturing organization updated attributes in email template
Hi,We have an email template to notify the owners about all the organization related attributes update.using ${customerhistory.<attrib_name>}, I am able to retrieve the current value.Now having this solves are concern to display org name and other at...
Resolved! Email generation rule for duplicate email.
Hi, We have requirement that some users have multiple first names or last names (i.e., Lara-Rodriguez, Pyaram-Shashidhar, Cotto-Sediles, etc). In this case, the email generation rule should be as follows- If the first name or last name contains a hyp...
Resolved! SQL in comma separated enum list
Hi,I'm using an Enum dynamic attribute so it stores value in comma separated list like 'AV,EP,DR'I need to check if a value is inside this list like 'AV' is in 'AV,EP,DR' ?I try some sql code in data analyzer but it doesn't work, some functions are n...
mapping enddate from HR to saviynt issue
we added this for the ENDDATE: "ENDDATE": "EndDate~#~datetime" but Saviynt is not updating the field. So we tested with "CUSTOMPROPERTY57": "EndDate~#~datetime" to know if we can get something and we do receive the value in CP57. Do you have any i...
How can I get a copy of the Saviynt Soc 1 Type 2 report
How can I get a copy of the Saviynt Soc 1 Type 2 report?Need it for SOX Compliance audit. thanks
