# Service account setup in Sailpoint IDN **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** provisioning, aggregation, sailpoint-identity-security, connectors\ **Created:** [April 27, 2025, 6:09am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144 "2025-04-27T06:09:54Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![simplymanish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/simplymanish/32/23118_2.png) [@simplymanish](https://developer.sailpoint.com/discuss/u/simplymanish)\ **Post date:** [April 27, 2025, 6:09am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/1 "2025-04-27T06:09:54Z")
I am trying to create a Sailpoint Service account using delimated flat file but after following the article given by sailpoint I am unable to login after registration and changing password. What can be the issue ? ---
**Author:** ![sidharth\_tarlapally](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sidharth_tarlapally/32/26178_2.png) [@sidharth\_tarlapally](https://developer.sailpoint.com/discuss/u/sidharth_tarlapally)\ **Post date:** [April 27, 2025, 7:35am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/2 "2025-04-27T07:35:46Z")
@simplymanish Hello Manish , what is he error that you are seeing during the login ? Make sure you use the right username . ---
**Author:** ![vishal\_kejriwal1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vishal_kejriwal1/32/10904_2.png) [@vishal\_kejriwal1](https://developer.sailpoint.com/discuss/u/vishal_kejriwal1)\ **Post date:** [April 27, 2025, 9:23pm UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/3 "2025-04-27T21:23:54Z")
You can create an identity using the csv file . Go to the identity and trigger change password . You will get notification and the. You can set the new password and that you can use to logon with that identity . ---
**Author:** ![simplymanish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/simplymanish/32/23118_2.png) [@simplymanish](https://developer.sailpoint.com/discuss/u/simplymanish)\ **Post date:** [April 28, 2025, 4:03am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/4 "2025-04-28T04:03:29Z")
It says we cannot find the account with same username and username is correct. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/e/c/ecf30942508b4f484ad783dfec68ff9b5d5d265e.png) ---
**Author:** ![sidharth\_tarlapally](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sidharth_tarlapally/32/26178_2.png) [@sidharth\_tarlapally](https://developer.sailpoint.com/discuss/u/sidharth_tarlapally)\ **Post date:** [April 28, 2025, 4:29am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/5 "2025-04-28T04:29:52Z")
@simplymanish It seems your tenant is configured with SSO. These credentials are different from the IdentityNow Credentials. Use this URL to bypass this , and make sure the Identity has the admin level access . [https://tenantname.identitynow.com?prompt=true](https://tenantname.identitynow.com?prompt=true) ---
**Author:** ![simplymanish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/simplymanish/32/23118_2.png) [@simplymanish](https://developer.sailpoint.com/discuss/u/simplymanish)\ **Post date:** [April 28, 2025, 5:20am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/6 "2025-04-28T05:20:10Z")
Do it should have any admin access , I mean its a service account only. ---
**Author:** ![sidharth\_tarlapally](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sidharth_tarlapally/32/26178_2.png) [@sidharth\_tarlapally](https://developer.sailpoint.com/discuss/u/sidharth_tarlapally)\ **Post date:** [April 28, 2025, 5:25am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/7 "2025-04-28T05:25:07Z")
@simplymanish Can you clarify what the service account in this case means ? ---
**Author:** ![simplymanish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/simplymanish/32/23118_2.png) [@simplymanish](https://developer.sailpoint.com/discuss/u/simplymanish)\ **Post date:** [April 28, 2025, 5:26am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/8 "2025-04-28T05:26:14Z")
@sidharth_tarlapally It will be used for crowdstrike integration process which will have some limited access in sailpoint environment. ---
**Author:** ![sidharth\_tarlapally](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sidharth_tarlapally/32/26178_2.png) [@sidharth\_tarlapally](https://developer.sailpoint.com/discuss/u/sidharth_tarlapally)\ **Post date:** [April 28, 2025, 10:02am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/9 "2025-04-28T10:02:05Z")
@simplymanish Please correct me if I’m misunderstanding the scenario: > You are trying to create an Identity (Account) using a delimited file. These accounts are service accounts intended for Source Integrations. If that’s correct, then the Identity should be created within the tenant. If you want this Identity to log in to the tenant, you can invite and register it (which it seems you have already attempted, but it’s not working). This issue is likely due to the fact that SailPoint supports three authentication methods for logging into the tenant: - **Native Authentication** : Logging into the tenant using the registered username and password (set during the email registration process). - **Pass-Through Authentication** : Authentication via Direct Connection Applications (we can ignore this for now). - **SSO (Single Sign-On)**: Authentication via an Identity Provider (Microsoft Azure, in your case), where Azure verifies if the user trying to log in exists. Since your tenant is configured with **SSO** , the service account you’re trying to log in with **must exist in Azure**. If the account does not exist in Azure, you can **bypass SSO** by **promoting the Service Account Identity to Admin Level Access**. If you’re unsure about the _Azure Identity Provider_ setup and _SSO_ configuration, I suggest promoting the Identity you created for the service account to Admin level. To promote it: - Navigate to **Admin → Identity Management → Identities** - Search for the Service Account Identity - Click on the ellipsis (three dots) → **Set User Levels** → Enable **Admin** (Reference screenshots) ![image](https://global.discourse-cdn.com/sailpoint/original/3X/a/6/a61e43f8d8d3e3d8447824321568128776dc2373.png) ![image](https://global.discourse-cdn.com/sailpoint/original/3X/5/b/5be0790a66a15e730698416f2731f60533eaeff9.png) Now, try logging in using the credentials you created during the invite/registration step. Be sure to use the specific URL [https://tenantname.identitynow.com?prompt=true](https://tenantname.identitynow.com/?prompt=true) that allows Admin-level identities to bypass SSO and use Native Authentication. Let me know if you need more info on this Thanks Sid ---
**Author:** ![simplymanish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/simplymanish/32/23118_2.png) [@simplymanish](https://developer.sailpoint.com/discuss/u/simplymanish)\ **Post date:** [April 28, 2025, 10:05am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/10 "2025-04-28T10:05:52Z")
Hi @sidharth_tarlapally This solution is helpful and I have gone through this already and was reluctnat to give admin permission to service account. Still your response is quite helpful for me. Also you have understood the scenario correctly. ---
**Author:** ![sidharth\_tarlapally](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sidharth_tarlapally/32/26178_2.png) [@sidharth\_tarlapally](https://developer.sailpoint.com/discuss/u/sidharth_tarlapally)\ **Post date:** [April 28, 2025, 10:39am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/11 "2025-04-28T10:39:00Z")
@simplymanish May I know the purpose of these service account Identities ? You can utilise machine accounts , if these align with your purpose : > **[Machine Identity Security - Overview - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/machine/index.html)** > > SailPoint Identity Services Documentation ---
**Author:** ![sidharth\_tarlapally](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sidharth_tarlapally/32/26178_2.png) [@sidharth\_tarlapally](https://developer.sailpoint.com/discuss/u/sidharth_tarlapally)\ **Post date:** [April 28, 2025, 11:34am UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/12 "2025-04-28T11:34:21Z")
- udpate Sorry ! , I overlooked , it seems there is an update on “Bypassing”: Any user level apart from the Admin , can also bypass the SSO . If you want user-level identities to bypass sso , it is also possible . Please refer : > **[Configuring Identity Security Cloud as a Service Provider - SailPoint...](https://documentation.sailpoint.com/saas/help/common/config_isc_service_provider.html#bypassing-the-identity-provider)** > > SailPoint Identity Services Documentation ---
**Author:** ![simplymanish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/simplymanish/32/23118_2.png) [@simplymanish](https://developer.sailpoint.com/discuss/u/simplymanish)\ **Post date:** [April 28, 2025, 1:13pm UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/13 "2025-04-28T13:13:29Z")
@sidharth_tarlapally Thank you so much and it worked. Could you please help me with one more query ? I have to add below permissions and user role should be there to add these roles. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/9/b/9b5723b150135afc596156fb0d940266eb70d3d1.png) ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [June 27, 2025, 1:14pm UTC](https://developer.sailpoint.com/discuss/t/service-account-setup-in-sailpoint-idn/116144/14 "2025-06-27T13:14:04Z")
Closed on June 27, 2025, 1:14pm UTC This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.