We added a new feature to Addigy Identity: User Attributes. User Attributes provide another powerful way to manage devices using a user-centric approach that can reduce a lot of admin time and simplify workflows. Once an end-user signs into their identity provider account, data returned from the provider is available within Addigy as device facts. Data such as Employee Department, Hire Date, Employee Type, etc., are very useful for automating Addigy in response to changes in your organization.
Links To Enable Collection of User Attributes:
- Addigy Identity User Attributes Google Steps
- Addigy Identity User Attributes Azure Steps
- Addigy Identity User Attributes Okta Steps
What data does Addigy Identity fetch when the "Collect User Attributes" setting is turned on?
- Identity Email
- Identity Employee Department
- Identity Employee Hire Date
- Identity Employee Type
- Identity Mobile Phone
- Identity Provider Name
- Identity User Display Name
- Identity Username
- Identity Office Location
- Identity Usage Location
- Identity Password Set Date
The following table lists the Addigy Identity attribute mappings and the corresponding cloud identity provider attributes:
Addigy Attribute Name |
Attribute Mapping Value |
Attribute Meaning |
Identity Providers That Collect Which Attributes |
Identity Email |
|
Email address for the user; for example: ["j@companyname.com"] NOTE: This property cannot contain accent characters. |
Azure, Google, Okta |
Identity Employee Department |
department |
The name of the department in which the user works. |
Azure, Google, Okta |
Identity Employee Hire Date |
employeeHireDate |
The date and time when the user was hired or will start work in case of a future hire. |
Azure and Google |
Identity Employee Type |
employeeType |
Captures enterprise worker type. For example, Employee, Contractor, Consultant, or Vendor. |
Azure, Google, Okta |
Identity Mobile Phone |
mobilePhone |
The primary cellular telephone number for the user. |
Azure, Google, Okta |
Identity Provider Name |
okta, google, azure |
The name of the Identity Provider. |
Azure, Google, Okta |
Identity User Display Name |
displayName |
The name is displayed in the directory for the user. This is usually the combination of the user's first and middle initial and last names. This property is required when a user is created and cannot be cleared during updates. |
Azure, Google, Okta |
Identity Username |
userPrincipalName |
The UPN is an Internet-style login name for the user based on the Internet standard RFC 822. By convention, this should map to the user's email name. The general format is alias@domain, where the domain must be present in the tenant's collection of verified domains. This property is required when a user is created. |
Azure, Google, Okta |
Identity Office Location |
usageLocation
|
A two letter country code (ISO standard 3166). Examples include: US, JP, and GB.
|
Azure, Google, Okta |
Identity Usage Location |
officeLocation |
The office location in the user's place of business. |
Azure only |
Identity Password Set Date |
lastPasswordChangeDateTime |
The time when this Azure AD user last changed their password or when their password was created, whichever date the latest action was performed. |
Azure, Google, Okta |
FAQs
How often does this data refresh?
After the end-user successfully signs in each time.
What should I do with these attributes now?
We highly recommend utilizing these User Attribute device facts to automatically filter devices using flex policies.
Does this new feature cost extra?
Nope, this feature does not come with an additional cost.
Where do I go to see these populated fields?
There are multiple ways to see this data. One way is by going to the devices page > Click on Columns > Search for "Identity." Then, select the attributes you would like to see.
I don't have this feature enabled. Does Addigy still collect the user data?
User information is only collected if the Collect User Attributes setting is enabled.
Why do some of my device facts show N/A?
It could mean the end-user still needs to sign in successfully or that the field in the Identity Provider directory is blank. It could also mean the feature is not enabled or configured properly.
How do I make a feature request for User Attributes?
Go to support.addigy.com to visit the Community Feedback section and create a new post. For more information, here are the Guidelines for Creating Feedback Posts.