Skip to main content

Saviynt

Description

The Saviynt connector uses the Saviynt REST API to discover user accounts, security groups, entitlements, and access request data within a Saviynt Enterprise Identity Cloud (EIC) deployment. It authenticates using an API token and provides visibility into IGA-governed access across connected applications and enterprise systems.

System Type Classification

FieldValue
System TypeApplication
Default Scan Priority500

Version Support

OrbisID EditionSupported
CommunityNo
ProYes
EnterpriseYes

Supported Protocol

ProtocolPortNotes
REST API (HTTPS)443 TCPBearer token via OAuth 2.0 password grant

What OrbisID Discovers

DataSource
User accountsPOST /ECM/api/v5/getUsers
Security groups (entitlements)POST /ECM/api/v5/getEntitlements
Group membershipsDerived from user entitlement assignments
User enabled statestatuskey field (1 = active)
Risk scoresriskScore per user

Connection Requirements

Required Permissions

Create a dedicated Saviynt service account with access to the API endpoints.

Minimum permissions:

  • SAV Role with View User and View Entitlement permissions
  • API access enabled for the service account

Credential Mapping

OrbisID FieldValue
credential.usernameSaviynt service account username
credential.passwordSaviynt service account password
system.hostnameSaviynt tenant hostname (e.g., myorg.saviyntcloud.com)

Network Requirements

The OrbisID server must have HTTPS access to the Saviynt tenant on port 443.

Configuration Steps

  1. In the Saviynt EIC console, create a service account with read-only SAV Role
  2. Create a Credential in OrbisID:
    • Username: Saviynt service account username
    • Password: Saviynt service account password
  3. Navigate to Systems → Add System
  4. Fill in the fields:
FieldValue
NameDescriptive name (e.g., Saviynt EIC – Production)
OS TypeSaviynt
System TypeApplication
HostnameSaviynt tenant hostname
CredentialThe scanning credential
  1. Click Test Connection
  2. Click Save

Troubleshooting

SymptomLikely CauseResolution
Authentication failedInvalid credentialsVerify service account credentials in the Saviynt console
No users returnedAPI access not enabledEnable API access for the service account in Saviynt
403 ForbiddenMissing SAV Role permissionsGrant View User and View Entitlement permissions
Rate limit errorsToo many API requestsReduce scan frequency or increase the scan interval