There are 4 AS400 systems What system to request will be mentioned in the SNOW request. Account name format- provisioning team has the format/Syntax and that has to be entered manually. In the ARS request form there is a Group profile(drop down),the data to be fetched is stored in the organization table. Based on the selected group profile value, other values in the form will be populated. Password field is generic and there are no rules in place as of now. However users are Forced to change the password on first logon. In the request form there are several attribute types: Saviynt generated Requestor selected From Group Type of connector used for AS400 connection is a Jar connector where a JAR is placed in Saviynt server which performs all CRUD operations For account correlation Primary key is the employee id From Source it is a Text field which will be in the below format firstname lastname:emplid Correlation condition will be - substring(username,’:’,1) to username in users table. Create Account On a successful creation of account, username and password will be sent to the manager. There is no limit on the number of accounts a user can have in the application as of now. Disable account This will be achieved when the emplstatus changes from A to T in WD/ UltiPro feed. Detective rule is triggered and remove access task is created There is a provision for request based disablement also. Enable account This again follows the same process like Disable. Account will be enable if the emplstatus is changed from T to A in WD/Ultipro. Delete account after 30days Custom query will be executed to determine the Account deletion flag. Based on account deletion flag(enddate>today), micro DB import is executed to set deletion flag to yes . On a successful deletion ,in Saviynt the account status will be set as “suspended from import service”.
Other Important points:
For our query regarding cross domain issue Answer from Campbell - Cross domain is reported -- Pending with Saviynt since it is a product related issue. How many cross domain failures reported? 13 failures a week on an average. Does Saviynt has any self-service functionality? No self-service in place. Are there any reports that are scheduled? Yes there are several reports that run and it will be sent to the provisioning team. What happens to the groups on termination? And Is there any movement of OU upon termination ? Groups are not deleted and no OU movement.