In Classic UI, SOD is not evaluating for roles/entitlements.

[sumalatham]

Hello Team

Configured SOD for AzureAD Entitlements in SOD Tab. SOD is evaluating for entitlements/roles for that endpoint if endpoint is in New UI.

But SOD is not evaluating for entitlements/roles for that same endpoint if endpoint is in classic UI.

Any ideas on this issue?

[sai_sp]

@sumalatham To evaluate SOD using the classic UI certains configs need to be updated. It is highly recommended to use the new UI rather than the classic UI. Can you please let us know the requirement around why the classic UI is needed?

[rushikeshvartak]

Make sure "Show SOD in request" under SAV role is enabled.

[sumalatham]

@sai_sp 

Application roles created for en1 endpoint. Another endpoint ep2 entitlements added in this applications roles and filtering application roles based on the dynamic attributes. 

In new ui , we are unable to see existing application roles in ARS. we are using classic UI.

Please can you tell me what the configuration needs to be do for classic UI SOD?

[rushikeshvartak]

Does user have atleast 1 entitlement from application role 

[sumalatham]

Yes, user have application role and role related entitlements but in new ui , we are unable to see existing application roles in ARS.

[sai_sp]

@sumalatham why would you be adding endpoint 2 entitlements to this application role? That would be nothing but an enterprise role. Did you explore the option of enterprise roles?

[sumalatham]

@sai_sp that is the requirement. Initially onwards, they are using application roles instead of enterprise roles.

Please can you tell me what the configuration needs to be do for classic UI SOD?