idp group

This inspector type, available starting with BigFix version 11.0.7, represents a group defined within an identity provider (IdP). Such a group can contain both users and enrolled computers. The currently supported IdPs are Active Directory and Microsoft Entra ID.

Creation
Properties

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

Creation

idp group of <client> : idp group

If the computer is joined to an identity provider, returns a list of objects representing the groups it belongs to. Otherwise, returns an error.

Q: names of idp groups of client
A: WinLaptop
A: Rome Lab Computers

Plural: idp groups

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

permalink source

idp group of <idp user> : idp group

Returns a list of objects representing the groups that the IdP user belongs to. Returns an error if this information is not available.

Q: names of idp groups of idp user of client
A: Developers_Users
A: Testers_Users

Plural: idp groups

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

permalink source

Properties

common name of <idp group> : string

If the group's identity provider is Active Directory, returns its common name (CN). Otherwise, returns an error.

Q: common names of idp groups of client
A: WinLaptop
A: Rome Lab Computers

Plural: common names

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

permalink source

directory type of <idp group> : string

Returns the group's identity provider type. The possible return values are:

ActiveDirectory, for an Active Directory group
EntraID, for an Entra ID group
Manual, if the client settings _BESClient_ManageBy_UserPrincipalName or _BESClient_ManageBy_MemberOf are set.

Q: directory types of idp groups of client
A: ActiveDirectory
A: ActiveDirectory

Plural: directory types

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

permalink source

display name of <idp group> : string

Returns the display name of the IdP group. If the IdP group is an Active Directory group and has no display name, returns its name instead. Returns an error if this information is not available.

Q: display names of idp groups of client
A: WinLaptop
A: Rome Lab Computers

Plural: display names

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

permalink source

distinguished name of <idp group> : string

If the group's identity provider is Active Directory, returns its distinguished name (DN). Otherwise, returns an error.

Q: distinguished names of idp groups of client
A: cn=winlaptop,ou=_computergroups,ou=_hclcerter,dc=idptest,dc=local
A: cn=rome lab computers,ou=_computergroups,ou=_hclcerter,dc=idptest,dc=local

Plural: distinguished names

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

permalink source

id of <idp group> : string

If the group's identity provider is Entra ID, returns group GUID. Otherwise, returns an error.

Q: ids of idp groups of client
A: aa71ac1b-e6af-479f-90db-5511fa224dd3

Plural: ids

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

permalink source

sam account name of <idp group> : string

If the group's identity provider is Active Directory, returns its Security Account Manager (SAM) account name. Otherwise, returns an error.

Q: sam account names of idp groups of client
A: WinLaptop
A: Rome Lab Computers

Plural: sam account names

Version	Platforms
11.0.7.0	AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows

permalink source