Okta IAM - App Sync (mapper)
Okta Mapper (In)
Details
| ID | Okta IAM - App Sync (mapper) |
|---|---|
| Type | mapping-incoming |
| Version | -1 |
| From Version | 6.0.0 |
| Default Incident Type | — |
| Feed | No |
{ "description": "", "feed": false, "id": "Okta IAM - App Sync (mapper)", "mapping": { "IAM - App Add": { "dontMapEventToLabels": false, "internalMapping": { "Application Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Application Name": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Display Name": { "complex": { "accessor": "displayName", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Event Type": { "complex": null, "simple": "eventType" }, "User Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Username": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "actor": { "complex": null, "simple": "actor.alternateId" }, "details": { "complex": null, "simple": "displayMessage" }, "name": { "complex": { "accessor": "displayName", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" } } }, "IAM - App Remove": { "dontMapEventToLabels": false, "internalMapping": { "Application Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Application Name": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Display Name": { "complex": { "accessor": "displayName", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Event Type": { "complex": null, "simple": "eventType" }, "User Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Username": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "actor": { "complex": null, "simple": "actor.alternateId" }, "details": { "complex": null, "simple": "displayMessage" }, "name": { "complex": { "accessor": "displayName", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" } } }, "IAM - App Update": { "dontMapEventToLabels": false, "internalMapping": { "Application Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Application Name": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Display Name": { "complex": { "accessor": "displayName", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Event Type": { "complex": null, "simple": "eventType" }, "User Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Username": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "actor": { "complex": null, "simple": "actor.alternateId" }, "details": { "complex": { "accessor": "changedAttributes", "filters": [], "root": "debugContext.debugData", "transformers": [ { "args": { "prefix": { "isContext": false, "value": { "complex": null, "simple": "Updated the following attribute(s) on Okta: " } }, "suffix": { "isContext": false, "value": null } }, "operator": "concat" } ] }, "simple": "" }, "name": { "complex": { "accessor": "displayName", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" } } }, "IAM - Group Membership Update": { "dontMapEventToLabels": false, "internalMapping": { "Application Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Application Name": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Display Name": { "complex": { "accessor": "displayName", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Event Type": { "complex": null, "simple": "eventType" }, "Group ID": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "UserGroup" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "User Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Username": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "actor": { "complex": null, "simple": "actor.alternateId" }, "details": { "complex": null, "simple": "displayMessage" }, "name": { "complex": { "accessor": "displayName", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" } } }, "IAM - Terminate User": { "dontMapEventToLabels": false, "internalMapping": { "Application Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Application Name": { "complex": { "accessor": "alternateId", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "AppInstance" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "Display Name": { "complex": null, "simple": "displayname" }, "Email": { "complex": null, "simple": "email" }, "Employee ID": { "complex": null, "simple": "employeeid" }, "Employment Status": { "complex": null, "simple": "\"Terminated\"" }, "Event Type": { "complex": null, "simple": "eventType" }, "Source Username": { "complex": null, "simple": "actor.alternateId" }, "Termination Trigger": { "complex": null, "simple": "\"TUFE\"" }, "User Id": { "complex": { "accessor": "id", "filters": [ [ { "ignoreCase": false, "left": { "isContext": true, "value": { "complex": null, "simple": "target.type" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "User" } } } ] ], "root": "target", "transformers": [] }, "simple": "" }, "UserProfile": { "complex": null, "simple": "UserProfile" }, "Username": { "complex": null, "simple": "username" }, "actor": { "complex": null, "simple": "actor.alternateId" }, "details": { "complex": null, "simple": "displayMessage" }, "name": { "complex": null, "simple": "displayname" } } } }, "name": "Okta IAM - App Sync (mapper)", "type": "mapping-incoming", "version": -1, "fromVersion": "6.0.0", "supportedModules": [ "agentix", "xsiam" ] }