Saviynt Security Manager

Saviynt Enterprise Identity Cloud is a cloud identity and access governance platform.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Users
• Groups
• Security Roles

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the Saviynt Security Manager server.

2. User Name and Password (required) - The credentials for a user account that has the permissions to fetch assets.

3. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

4. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

5. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

6. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

7. API version (required, default: api/v5)

   • Select api/v5 for SSM 5.2 or newer versions.
   • Select api for older versions of SSM.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Fields to skip - From the dropdown, select fields to ignore for user data.
2. Fetch attestations and entitlements - Select this option to fetch attestation and entitlement data. Note: This adds at least 2 requests per user and makes the fetch 3 times slower.
3. Fetch access details entitlements - Select this option to fetch access details entitlements.
4. Fetch groups - Select this option to fetch Groups as Identity assets. Groups are used to populate the Associated Groups field on users.
5. Fetch roles - Select this option to fetch Roles as Identity assets. Roles are used to populate the Assigned Roles field for users.
6. Page size (Default: 100) - Number of records fetched per page from each Saviynt endpoint.
7. Enrichment batch size (Default: 20) - Number of users enriched concurrently per batch (async requests fired at a time).
8. Enable Custom Parsing - Enable this option to define how to parse specific fields from the raw data fetched. You can choose to parse the data into an already existing field, or create a new one. This adapter supports Device Custom Parsing. See Adapter Custom Parsing for more information.

APIs

Axonius uses the Saviynt Security Manager API and the following endpoints:

• Get User List - POST {api_version}/getUser - Fetches users with optional pagination
• Get User Groups - POST {api_version}/fetchUserGroup - Fetches groups and group members
• Get User Roles - POST {api_version}/getRoles - Fetches roles assigned to users

Supported From Version

Supported from Axonius version 4.5