Meeting Notes

Thursday, July 11, 2019

11:33 PM

 AS400 is a requestable system.

 There are 4 AS400 systems
 What system to request will be mentioned in the SNOW request.
 Account name format- provisioning team has the format/Syntax and that has to be entered
manually.
 In the ARS request form there is a Group profile(drop down),the data to be fetched is stored in the
organization table.
 Based on the selected group profile value, other values in the form will be populated.
 Password field is generic and there are no rules in place as of now. However users are Forced to
change the password on first logon.
 In the request form there are several attribute types:
 Saviynt generated
 Requestor selected
 From Group
 Type of connector used for AS400 connection is a Jar connector where a JAR is placed in Saviynt
server which performs all CRUD operations
 For account correlation Primary key is the employee id
 From Source it is a Text field which will be in the below format
 firstname lastname:emplid
 Correlation condition will be - substring(username,’:’,1) to username in users table.
 Create Account
 On a successful creation of account, username and password will be sent to the manager.
 There is no limit on the number of accounts a user can have in the application as of now.
 Disable account
 This will be achieved when the emplstatus changes from A to T in WD/ UltiPro feed.
 Detective rule is triggered and remove access task is created
 There is a provision for request based disablement also.
 Enable account
 This again follows the same process like Disable. Account will be enable if the emplstatus is
changed from T to A in WD/Ultipro.
 Delete account after 30days
 Custom query will be executed to determine the Account deletion flag.
 Based on account deletion flag(enddate>today), micro DB import is executed to set deletion
flag to yes .
 On a successful deletion ,in Saviynt the account status will be set as “suspended from import
service”.

Other Important points:

 For our query regarding cross domain issue
Answer from Campbell - Cross domain is reported -- Pending with Saviynt since it is a product
related issue.
 How many cross domain failures reported?
 13 failures a week on an average.
 Does Saviynt has any self-service functionality?
 No self-service in place.
 Are there any reports that are scheduled?
 Yes there are several reports that run and it will be sent to the provisioning team.
 What happens to the groups on termination? And Is there any movement of OU upon termination ?
Groups are not deleted and no OU movement.