- Navigate to Saviynt IGA -> Saviynt Scheduled Job.
- Select New at the top right corner.
- Select ‘Automatically run a script of your choosing’ from the list.
- Provide the name of the job and the schedule (one time run or schedule to run periodically). Then add the below script under the ‘Run this script’.
- Schedule the frequency of the job as per the requirement and save the job.
Note: This script is customized according to the requirement to use SNOW Employee ID for correlation mappings. In case the corelation logic is different, then update the script accordingly.
Also, this script retrieves all users updated in the last 24 hours and link them. In case there are users which were last updated more than 24 hours ago, then either update the script to increase the duration to a value more than 24 hours Or use the UI option to link single user as defined in section “Single User linking using Servicenow UI”
// Runs the user linking process for all disconnected users
//
var userHelper = new x_saviy_iga.UserHelper();
var jobLogHelper = new x_saviy_iga.JobLogHelper();
var Saviynt = new x_saviy_iga.Saviynt();
var jobName = "LINK_SAVIYNT_TO_SN_USERS";
var jobLogID = jobLogHelper.createJobLog(jobName, "USER_LINKING", "INTERNAL_LINKING", "INTERNAL", false);
jobLogHelper.setJobRunning(jobLogID);
var svntUserField = Saviynt.getProperty(Saviynt.PROPERTY_USER_LINK_USERNAME, "username");
var svntEmailField = Saviynt.getProperty(Saviynt.PROPERTY_USER_LINK_EMAIL, "email");
var svntField = Saviynt.getProperty(Saviynt.PROPERTY_USER_LINK_SVNT_CORRELATION_FIELD, null);
var totalRecords = 0;
var totalImported = 0;
var rankUsername = parseInt(Saviynt.getProperty(Saviynt.PROPERTY_USER_LINK_RANK_USERNAME, 1));
var rankEmail = parseInt(Saviynt.getProperty(Saviynt.PROPERTY_USER_LINK_RANK_EMAIL, 2));
var rankField = parseInt(Saviynt.getProperty(Saviynt.PROPERTY_USER_LINK_CORRELATION_RANK, 0));
var snField = Saviynt.getProperty(Saviynt.PROPERTY_USER_LINK_SN_CORRELATION_FIELD, null);
var savUsers = new GlideRecord("x_saviy_iga_user");
/*
if (this.disableUserLinkingActive == true) {
jobLogHelper.log(jobLogID, "DisableUserLinking activated: Limiting linking to new Users only");
savUsers.addEncodedQuery("active=true^disable_user_linking=false^userISEMPTY");
} else {
jobLogHelper.log(jobLogID, "Linking all Saviynt users not already linked");
savUsers.addEncodedQuery("active=true^userISEMPTY");
}
*/
var dateToday = new GlideDate();
//savUsers.addEncodedQuery("last_updatedRELATIVELT@hour@ago@24^last_detected_dateRELATIVEGT@hour@ahead@24");
savUsers.addEncodedQuery("last_updatedRELATIVELT@hour@ahead@24^last_updatedRELATIVEGT@hour@ago@24");
jobLogHelper.log(jobLogID, "Linking all Saviynt users updated in last 24 hours and also 24 hours after");
savUsers.query();
var saviyntUserMap = {};
saviyntUserMap['username'] = 'saviynt_user';
saviyntUserMap['email'] = 'email';
saviyntUserMap['systemUserName'] = 'system_user_name';
//saviyntUserMap['employeeid'] = 'employee_id';
saviyntUserMap['SNOWEMPLOYEEID'] = 'employee_id';
while(savUsers.next()){
var svntUserDataFromMap = saviyntUserMap[svntUserField];
var svntEmailDataFromMap = saviyntUserMap[svntEmailField];
var svntCustomDataFromMap = saviyntUserMap[svntField];
var svntUserData = savUsers.getValue(svntUserDataFromMap);
var svntEmailData = savUsers.getValue(svntEmailDataFromMap);
var svntCustomData = savUsers.getValue(svntCustomDataFromMap);
var svntID = savUsers.getValue("saviynt_user");
var userLinked = linkRemoteUsers(svntUserData, svntEmailData, svntCustomData, svntID,savUsers.active,jobLogHelper,jobLogID,rankUsername,rankEmail,rankField,snField);
totalRecords++;
jobLogHelper.setTotalRecords(jobLogID, totalRecords);
if (userLinked) {
totalImported++;
jobLogHelper.setTotalImported(jobLogID, totalImported);
}
}
jobLogHelper.log(jobLogID, "Job Completed - Total Linked: " + totalImported);
jobLogHelper.setJobComplete(jobLogID);
function linkRemoteUsers(saviyntUsername, saviyntEmail, saviyntCustom, saviyntID, saviyntActive,jobLogHelper,jobLogID,rankUsername,rankEmail,rankField,snField) {
//
// Links the remote users with the saviynt user base.
//
var searchObj = [{
rank: rankUsername,
field: "user_name",
qry: "user_name=",
data: saviyntUsername
},
{
rank: rankEmail,
field: "email",
qry: "email=",
data: saviyntEmail
},
{
rank: rankField,
field: snField,
qry: snField + "=",
data: saviyntCustom
}
];
searchObj.sort(function (a, b) {
return a.rank - b.rank;
});
var userLinked = false;
searchObj.forEach(function (item) {
// proceed with linking if the rank is not 0, a query exists, data exists, and a Saviynt ID exists
if (item.rank !== 0 && item.qry && item.data && saviyntID) {
var sysUserRecord = new GlideRecord("sys_user");
// verify we are working with a valid field
if (sysUserRecord.isValidField(item.field)) {
//sysUserRecord.addNullQuery("x_saviy_iga_saviynt_id");
sysUserRecord.addEncodedQuery(item.qry + item.data);
sysUserRecord.query();
if (sysUserRecord.next()) {
sysUserRecord.setValue("x_saviy_iga_saviynt_id", saviyntID); // populate sys_user field with Saviynt ID
sysUserRecord.setValue("x_saviy_iga_saviynt_user_active", saviyntActive);
if (sysUserRecord.update()) {
userLinked = true;
}
}
} else {
jobLogHelper.log(jobLogID, "The ServiceNow Correlation field " + item.field + " is not a valid field");
}
}
});
var savUser = new GlideRecord(Saviynt.SAVIYNT_USER_TABLE);
savUser.addQuery("saviynt_user", saviyntID);
savUser.query();
if (savUser.next()) {
var userMatchRecord = new GlideRecord("sys_user");
userMatchRecord.addQuery("x_saviy_iga_saviynt_id", saviyntID);
userMatchRecord.query();
if (userMatchRecord.next()) {
savUser.user = userMatchRecord.getValue("sys_id");
}
savUser.disable_user_linking = true;
if (!savUser.update()) {
jobLogHelper.log(jobLogID,"Unable to update Saviynt User with Sys User reference" + saviyntID);
}
}
if (userLinked == false) {
jobLogHelper.log(jobLogID,"Unable to link Saviynt User ID " + saviyntID);
}
return userLinked;
}
Single User linking using Servicenow UI
In case you want to link single user from UI then refer to following steps
Navigate to Saviynt IGA -> Users -> Select the user.
Click on the ‘Link to ServiceNow User’
System will then evaluate the user link properties and will link the user accordingly. If the linking is successful, the user will appear in the ‘Sys users with Saviynt ID’ list.
