# Integrating SailPoint with Jack Henry

Jack Henry has multiple products and SailPoint integrates with Episys. SailPoint uses SymXchange to access the Episys database. SymXchange is a web service interface that provides first- and third-party applications access to the Episys database.

Connecting SailPoint to your Jack Henry allows the connector to handle the following entities from Episys:

- Users
- PrivilegeGroup

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Jack Henry connector supports the following features:

### Account Management

- Aggregation
- Filter accounts based on status (Inactive and Frozen)
- Add and remove entitlement (Privilege Group)
- Enable or disable user accounts
- Update of the following attributes:

| Attribute | Values |
| --- | --- |
| User\_Name |  |
| User\_ActiveMode | The integer values for user types are as follows: 0 - Active, 1 - Inactive, 2 - Frozen |
| User\_Email |  |
| User\_Title |  |
| User\_Type | The integer values for user types are as follows: 0 - Employee, 1 - Member |

### Entitlement Management

- Aggregation

## Prerequisites

- Configure at least one virtual appliance cluster and successfully test the connection. For more information, refer to the [Virtual Appliance Reference Guide](<https://documentation.sailpoint.com/saas/help/va/index.html>).
- Jack Henry communicates with the Episys database through SymXchange, hence SymXchange instance must be configured on the Episys host.
- Required ports for the SymXchange web services communication must be opened at the firewall.
- To fetch users, the connector invokes a powerON script deployed on the Episys Quest Console. The default script returns all users on the Episys database in JSON format. Download the powerON script from the [SailPoint Developer Community](<https://community.sailpoint.com/knowledge/SailPoint-Fetch-User-PowerOn-Script-Jack-Henry>) and install it on the Episys Quest Console. Refer to Episys documentation for information on installing a powerON script.

  The following is an example of the script response:

  ```json
  {
  "users":[
  {
  "Number":"0000",
  "ActiveMode":"0",
  "Name":"DEFAULT TELLER",
  "JobTitle":"",
  "Type":"0",
  "Email":"",
  "Location":"",
  "RecordChangeDate":"04/24/10",
  "PrivilegeGroup":[0,0,0,0........,0]
  },
  {
  "Number":"0001",
  "ActiveMode":"0",
  "Name":"VAULT",
  "JobTitle":"TEST_ADMIIN_DEMO",
  "Type":"0",
  "Email":"Test_email_update_demo@sp.com",
  "Location":"PUNE",
  "RecordChangeDate":"04/24/10",
  "PrivilegeGroup":[0,0,0,0........,0]
  }
  ]
  }
  ```

### Supported Objects

- Users
- Privilege Group

## Required Permissions

The connector supports authentication using an administrative password (AdministrativeCredentials). The administrative password is set in the SymXchange Client Parameters.

### Jack Henry Symitar 2019

The administrator must have read/write permission on the following web services for Jack Henry Symitar 2019:

- `https://********/SymXchange/2019.01/episysinformation?wsdl`
- `https://********/SymXchange/2019.01/poweron?wsdl`
- `https://********/SymXchange/2019.01/user?wsdl`

### Jack Henry Symitar 2024

The administrator must have read/write permission on the following web services for Jack Henry Symitar 2024:

- `https://********/SymXchange/information?wsdl`
- `https://********/SymXchange/poweron?wsdl`
- `https://********/SymXchange/user?wsdl`