Applications
4 article
Application Basics
Last Updated: October 31, 2023Applications exist in SecurEnds just like they would exist within an organization. Each application set up in SecurEnds contains the user information relating to that user’s access of that application. Functionality Admins are able to add Applications to match identities across the established System of Record. Applications in SecurEnds reflect the applications within the organization, usually being a mirror image. You can connect your Application to SecurEnds via a CSV file, Flex Connector, or Pre-built Connector. Applications within SecurEnds can show credentials and/or entitlements in list view, with ability to export. Application data plugs in with Identity Mindmap allowing tracking of identities across multiple applications. Upon setting up an application within SecurEnds, you are prompted to choose your desired ticketing method. The desired ticketing output is application specific or can be universally configured. Interpreting Application Data within SecurEnds This is a view of the landing page under the Applications tab. When creating a new application, all users will fall into one of six buckets designating status of user information. All numbers present under the headers can be clicked into for list view. Report is exportable. Notice the outlined column headers below: When you export the application data (Gear icon->More->Export), SecurEnds will export the data to a CSV format and will have mapped the data to SecurEnds attributes. Below is the mapping detail Note: If there are Purged Credentials or Purged entitlements as a result of the most recent sync of teh application. Those are still present in the exported CSV data and will be denoted by a P within the Status and Entitlement Status attributes. You will want to exclude these from the CSV if you are just looking at data synced by from the applications. Status codes of E (Excluded) and D (Deleted) are valid records from your application, the SecurEnds Admin has simply chosen to classify these records respectively through an earlier action. For more information regarding adding Applications via CSV file upload, click here For more information regarding adding Application via Connector, click here.
Set up Application
Last Updated: October 31, 2023These instructions are for setting up a .csv based application. For setting up applications utilizing a connector or flex connector set up, please reference Connectors tab on left hand side.
Unmatched Credentials in Applications
Last Updated: November 1, 2023When you sync an application, SecurEnds attempts to match the credentials from the application data to an identity in the People data (coming from your SOR). Matching happens either by first and last name, email address or employee ID. Once the application sync completes, you will have matched credentials and you may have some unmatched credentials. Go to an application, select the Unmatched number for the application. Then for each unmatched user, you can go to the action gear icon and select Match or Assign. In some cases, you could have many unmatched credentials, so assigning to an identity in the People data for each credential, one at a time, can be time consuming. A Bulk Assign option, is available for each application, allows you to assign any number of Unmatched credentials to an email address of your choice. This email address must exist in the People data. Bulk Assign action
Service Accounts
Last Updated: November 1, 2023Credentials which represent Service Accounts can be assigned (or classified) as a Service Account type. Credentials assigned as a Service Account will be included in a review due to this process. Below are two ways to move an unmatched record to the Service Account category. Note: Only unmatched records can be assigned as Service Accounts. If you have Service Accounts “matched” to another credential, you will need to “unmatch” them first. Option 1: UI Process Option 2: Bulk Assign Process In some cases, you could have many service accounts, so assigning a reviewer to each service account, one at a time, can be time consuming. The Bulk Assign option that, is available for each application, allows you to assign any number of Unmatched credentials as a Service Account AND assign a reviewer to the Service Account. As noted before, if you have already “matched” a Service account to another credential, you will need to unmatched that service account first in order for it to be a part of the unmatched list of credentials. Service Accounts within Campaigns Service Accounts are visible in all campaign types and are denoted with the words ‘Service Account()’ within the campaign user view to differentiate these accounts from other user accounts.
