Posts

Exchange Integration using REST Connector in Saviynt

Use-case requirement: Use Saviynt REST Connector to invoke/Execute PowerShell script which is placed in Windows Server machine. PowerShell Scripts connects to Exchange and enables or disables users Exchange account. REST Connection Details: ConnectionJSON: Replace the HOSTNAME and SaviyntWebApp name(based on the Saviynt App name deployed in IIS Server, I have deployed Saviynt app as SaviyntWebApp in the IIS server, you can find the details on how to deploy Saiviynt App in IIS server in the Saviynt Freshdesk documentation)  If you don't have a script for testConnection.ps1(Place your testConnection.ps1 script in C:\Saviynt\Scripts\ directory) then you can simply replace it with  "httpParams": "{\"Script\":\"Test-NetConnection HOSTNAME -Port 443\"}" If you are using hostname instead of IP then make sure the IP to Hostname(DNS) config is in Place on the Saviynt Infra side. {   "authentications": {     "auth": {       "au...

General MySQL useful Queries

 1. Delete duplicate rows in the table a. Delete all the duplicate rows DELETE t1 FROM newuserdata t1 INNER JOIN newuserdata t2 WHERE t1.customproperty1 != t2.customproperty1 AND t1.customproperty2 = t2.customproperty2 AND t1.customproperty3 = t2.customproperty3; b. Delete duplicate row and keeps the highest customproperty1 DELETE t1 FROM newuserdata t1 INNER JOIN newuserdata t2 WHERE t1.customproperty1 < t2.customproperty1 AND t1.customproperty2 = t2.customproperty2 AND t1.customproperty3 = t2.customproperty3; The above query also can be used in MODIFYUSERDATAJSON of the HR Connection to delete duplicate user records from the HR import

How to update Endpoint(Account) Custom property labels in Saviynt

Image
Saviynt supports 45 Custom properties to use to store account information and comes with default labels. To make it user-friendly and readable format we are required to update the labels. This can be achieved in Saviynt by following the below steps. Step 1: Log in to Saviynt Instance And Navigate to Endpoint Navigate to Admin => Identity Repository => Security Systems => Select the Security System and Endpoint and then navigate to the Other Attributes page of Endpoint Scroll down until you see the option to update the labels for the attributes, and update the editable text boxes for all the required custom properties Note: This label change is applicable only for the selected endpoint, you need to update the same for all endpoints separately. I personally Suggest adding the cp# at the end of the label so that you can easily identify the backend name for Example for Custom Property 1 if the label is department then use department cp1 Note: this change takes time to reflect ...

How to update Role Custom property labels in Saviynt

Image
Saviynt supports 60 Custom properties to use to store Role information and comes with default labels. To make it user-friendly and readable format we are required to update the labels. This can be achieved in Saviynt by following the below steps. Step 1: Assign the below SAV Roles to yourself Search for your user under Admin => Identity => Repository => enter your username and search Navigate to SAV Roles Tab in your user profile and add the below roles using the Action button  ROLE_UIADMIN  ROLE_ADMIN  The above roles are needed to update the labels in the Saviynt Application. Sometimes in Prod, you may not be supposed to do this directly as an Audit compliance issue, so you can use approval workflows if configured or seek approvals from IGA Administrators. Step 2: Logout and Login again Note: Sometimes you may also need to clear the browsing history or cache Step 3: Update the Role Custom Property Label Navigate to Admin => Identity Repository => Roles =...

Updating User custom property labels in Saviynt

Image
Saviynt supports 65 Custom properties to use to store user information and comes with default labels. To make it user-friendly and readable format we are required to update the labels. This can be achieved in Saviynt by following the below steps. Step 1: Assign the below SAV Roles to yourself Search for your user under Admin => Identity => Repository => enter your username and search Navigate to SAV Roles Tab in your user profile and add the below roles using the Action button  ROLE_UIADMIN  ROLE_ADMIN  The above roles are needed to update the labels in the Saviynt Application. Sometimes in Prod, you may not be supposed to do this directly as an Audit compliance issue, so you can use approval workflows if configured or seek approvals from IGA Administrators. Step 2: Logout and Login again Note: Sometimes you may also need to clear the browsing history or cache Step 3: Update the Custom Property Label Navigate to Admin => Identity Repository => Users => p...

Setting default Saviynt application UI language for the users in Saviynt

Saviynt allows administrators to select a list of preferred languages as UI application languages for their end users, but the user needs to select it from User Menu => Languages => preferred languages and the default application UI language is always English, in case you need to set another language as default then this article helps you in achieving the same. As an Administrator, you can set the list of preferred languages for users by navigating Admin => Global Configurations => Preferences => Languages Supported Use case or Requirement: I want to set the default application UI language as Dutch for users who belong to the NL  department and for all other users with English Below are the steps to implement the above-said requirement. Step 1: Include departmentname in the ImportUserJSON in the HR Connection Make sure you have departmentname attribute value mapped in the ImportUserJSON in your HR Connection Example: sample ImportUserJSON "departmentna...

Using custom java code in the Saviynt Email Templates

Image
Sometimes in complex requirements, we may not able to use groovy scripts to meet the requirements in that situation we can use custom java code in the Saviynt email templates Another use case is that the subject field in Saivynt supports only 255 characters, if you have complex if-else logic which makes more than 255 characters then you can use custom java code to generate the subject line, however, make sure the custom java code returns less than 255 characters as the subject line to avoid unnecessary references issue(in audit tables?). Requirement : Generate a subject line based on the below conditions If the user's employee type is Internal then  New Personal AD Account is created for you, Account Name: [ Account display name ] otherwise New Personal AD Account is created for a user starting on [User start date in dd-MM-YYYY format], Account Name: [ Account display name ] Step 1: Create a java package and create a JAR  The source code is available in the below link https://...