Saviynt
Important
Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Saviynt offers comprehensive insights into identity-related risks. You can use the Saviynt plugin with Microsoft Copilot for Security to effectively enrich incidents and identify risky user access.
Some of the capabilities it provides include:
- Obtaining user profile details.
- Retrieving vendor or third-party organization details.
- Accessing comprehensive user access details across applications.
- Identifying dependencies of the access they possess.
- Checking if the identity holds privileged roles.
Note
This article contains information about third-party plugins. This is provided to help complete integration scenarios. However, Microsoft does not provide troubleshooting support for third-party plugins. Contact the third-party vendor for support.
Prerequisites
Saviynt Identity Cloud API Access: Refer to Saviynt API Reference for details.
Know before you begin
Integration with Copilot for Security requires a bearer token for API access authorization. You'll need to take the following steps before using the plugin.
Follow the steps below to obtain the authorization token:
- Login to the Saviynt Tenant using your service account credentials.
- Navigate to Admin > Settings > Webservice Auth Configuration.
- Select Generate Token.
- Copy the value for the access_token field in a safe place.
Note
Alternatively, you can use Postman to generate the authorization token using the {{url}}/ECM/api/login API. Refer to Saviynt's API documentation for more details.
Sign in to Microsoft Copilot for Security.
Access Manage Plugins by selecting the Sources button from the prompt bar.
Next to Saviynt, select Set up.
In the Saviynt settings pane:
- In the InstanceURL field, enter the Saviynt tenant URL (for example, "https://saviynttenant.saviyntcloud.com")
- In the Value field, paste your access_token, and then select Save.
Sample Saviynt prompts
After the Saviynt plugin is configured, you can use the following capabilities with Copilot for Security.
| Capability | Example prompts |
|---|---|
| Users | Get user details for <First Name> <Last Name> using the search criteria FirstName and LastName Get user details for <username> Get risk associated with user <username> |
| Organizations | Get the organization details for <organization name> Get a list of organizations that have not been certified for the last six months |
| Dependent Entitlements | Get dependent entitlements for "<entitlement name>" for <application> |
| Access Details | Get the access details for user <username> |
| Saviynt Role details | List the users who have access to Sav Role <Sav Role Name> |
Provide feedback
To provide feedback, contact Saviynt.