MobileIronCLOUD

MobileIron Cloud Integration.

Endpoint · MobileIron-UEM

Details

IDMobileIronCLOUD
ProviderIvanti
CategoryEndpoint
From Version6.0.0
Docker Imagedemisto/python3:3.12.13.10116658
Supported ModulesAgentix XSIAM

README

MobileIron CLOUD Integration

MobileIron Cloud - Getting Started

  1. Log in to the MobileIron Cloud Admin console.
  2. Open the users section.
  3. Click the create user button and select the option to create a new API user. It is recommended to create a new user for the Cortex XSOAR integration specifically and not reuse
    an existing one.
  4. Fill in all the required details (i.e., use core-api-user as the username) and make sure you enter a strong password.
  5. When setting up the Cortex XSOAR integration, use the auto-generated email address as the username and the password you
    defined as the MobileIron tenant credentials.
  6. Click the Test button and ensure the connection can be established.

Refer to the API documentation at the MobileIron community for more details on setting up the API user.

MobileIron Cloud - Spaces

If you are dividing the devices into different spaces, it is important to make sure the integration
points to the correct Partition ID (Device Space ID).

You should leave this value blank if you are not using spaces or if you want the integration to automatically resolve the
default space ID.

Setting up pre-processing rules

If you are using the fetch incidents option, we recommend to set-up a pre-processing rule in order
to filter out any duplicates that might show up as part of the command.

  • In the Cortex XSOAR admin go to Settings -> Integrations -> Pre-Processing Rules
  • In Step 1 add a rule for Type equals MobileIron Cloud Device Incident.
  • In Step 2 select Drop and Update.
  • In Step 3 select Link to oldest incident created within the last 15 days and check the checkbox next to
    Search closed incidents .
  • Add an AND statement and enter MobileIron Device ID of existing incident is identical to the one of the incoming incident.
  • Save the rule.

Here is an example image of the rule

Pre-Processing Rules Example

Configure MobileIronCLOUD on Cortex XSOAR

  1. Navigate to Settings > Integrations > Servers & Services.
  2. Search for MobileIronCLOUD.
  3. Click Add instance to create and configure a new integration instance.

    Parameter Description Required
    url Server URL (i.e., https://eu1.mobileiron.com ) True
    credentials User Name True
    incidentType Incident type False
    partition_id Partition ID (leave empty to resolve default) False
    insecure Trust any certificate (not secure) False
    proxy Use system proxy settings False
    fetch_interval Fetch Interval (in minutes) True
    max_fetch Maximum number of incidents per fetch False
    isFetch Fetch incidents False
  4. Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

mobileiron-cloud-get-devices-data


Gets all the devices based on a particular filter query. The command might execute multiple API calls depending on the amount of devices that would be returned.

Base Command

mobileiron-cloud-get-devices-data

Input

Argument Name Description Required
query Filter query for fetching the device data. Default is registrationState=ACTIVE. Optional
max_fetch The maximum number of items returned in the list. Optional

Context Output

Path Type Description
MobileIronCloud.Device.id Number ID of the device that is fetched.
MobileIronCloud.Device.guid String GUID of the device that is fetched.
MobileIronCloud.Device.deviceModel String Model of the device that is fetched.
MobileIronCloud.Device.deviceName String Name of the device that is fetched.
MobileIronCloud.Device.platformType String Platform type of the device that is fetched.
MobileIronCloud.Device.platformVersion String Platform version of the device that is fetched.
MobileIronCloud.Device.osBuildVersion String Operating system build version of the device that is fetched.
MobileIronCloud.Device.lastCheckin Date Last check in time of the device that is fetched.
MobileIronCloud.Device.registrationState String Registration state of the device that is fetched.
MobileIronCloud.Device.displayName String Display name of the device that is fetched.
MobileIronCloud.Device.firstName String First name of the device that is fetched.
MobileIronCloud.Device.lastName String Last name of the device that is fetched.
MobileIronCloud.Device.uid String UID of the device that is fetched.
MobileIronCloud.Device.emailAddress String Email address of the device that is fetched.
MobileIronCloud.Device.manufacturer String Manufacturer of the device that is fetched.
MobileIronCloud.Device.imei Unknown International Mobile Equipment Identity (IMEI) of the device that is fetched.
MobileIronCloud.Device.imei2 Unknown International Mobile Equipment Identity 2 (IME2) of the device that is fetched.
MobileIronCloud.Device.imsi String International Mobile Subscriber Identity (IMSI) of the device that is fetched.
MobileIronCloud.Device.wifiMacAddress String WiFi MAC address of the device that is fetched.
MobileIronCloud.Device.serialNumber Unknown Serial number of the device that is fetched.
MobileIronCloud.Device.altSerialNumber Unknown Alternative serial number of the device that is fetched.
MobileIronCloud.Device.ownershipType String Ownership type of the device that is fetched.
MobileIronCloud.Device.complianceState Boolean Compliance state of the device that is fetched.
MobileIronCloud.Device.roaming Boolean Roaming status of the device that is fetched.
MobileIronCloud.Device.supervised Unknown Device supervised.
MobileIronCloud.Device.udid String UDID of the device that is fetched.
MobileIronCloud.Device.policyViolationCount Number Policy violation count of the device that is fetched.
MobileIronCloud.Device.lastRegistrationTime Date Last registration time of the device that is fetched.
MobileIronCloud.Device.quarantined Boolean Whether the device is quarantined.
MobileIronCloud.Device.jailbroken Boolean Whether the device is jailbroken.

Command Example


#### Context Example

```json
{
  "MobileIronCloud": {
    "Device": [
      {
        "id": 123,
        "guid": "",
        "deviceModel": "VirtualBox",
        "deviceName": "DESKTOP-B76IV6U",
        "platformType": "WINDOWS_PHONE",
        "platformVersion": "10.0",
        "osBuildVersion": "",
        "lastCheckin": 1596026443798,
        "registrationState": "ACTIVE",
        "displayName": "Windows User",
        "firstName": "Windows",
        "lastName": "User",
        "uid": "userid",
        "emailAddress": "email",
        "manufacturer": "GmbH",
        "imei": null,
        "imei2": null,
        "imsi": "Not Present",
        "wifiMacAddress": "",
        "serialNumber": null,
        "altSerialNumber": null,
        "ownershipType": "UNKNOWN",
        "complianceState": false,
        "roaming": false,
        "supervised": null,
        "udid": "UIDVALUE",
        "clientLastCheckin": null,
        "prettyModel": "VirtualBox",
        "policyViolationCount": 1,
        "lastRegistrationTime": 1596022502880,
        "quarantined": false,
        "jailbroken": false,
        "windowsDeviceType": "WINDOWS_DESKTOP",
        "entityName": "DESKTOP-B76IV6U"
      }
    ]
  }
}

mobileiron-cloud-get-device-by-mac


Gets a single device matching the provided mac address.

Base Command

mobileiron-cloud-get-device-by-mac

Input

Argument Name Description Required
device_mac THe MAC address of the device to fetch. Required

Context Output

Path Type Description
MobileIronCloud.Device.id Number The ID of the device that is fetched.
MobileIronCloud.Device.guid String GUID of the device that is fetched.
MobileIronCloud.Device.deviceModel String Model of the device that is fetched.
MobileIronCloud.Device.deviceName String Name of the device that is fetched.
MobileIronCloud.Device.platformType String Platform type of the device that is fetched.
MobileIronCloud.Device.platformVersion String Platform version of the device that is fetched.
MobileIronCloud.Device.osBuildVersion String Operating system build version of the device that is fetched.
MobileIronCloud.Device.lastCheckin Date Last check in time of the device that is fetched.
MobileIronCloud.Device.registrationState String Registration state of the device that is fetched.
MobileIronCloud.Device.displayName String Display name of the device that is fetched.
MobileIronCloud.Device.firstName String First name of the device that is fetched.
MobileIronCloud.Device.lastName String Last name of the device that is fetched.
MobileIronCloud.Device.uid String UID of the device that is fetched.
MobileIronCloud.Device.emailAddress String Email address of the device that is fetched.
MobileIronCloud.Device.manufacturer String Manufacturer of the device that is fetched.
MobileIronCloud.Device.imei Unknown International Mobile Equipment Identity (IMEI) of the device that is fetched.
MobileIronCloud.Device.imei2 Unknown International Mobile Equipment Identity 2 (IME2) of the device that is fetched.
MobileIronCloud.Device.imsi String International mobile subscriber identity (IMSI) of the device that is fetched.
MobileIronCloud.Device.wifiMacAddress String WiFi MAC address of the device that is fetched.
MobileIronCloud.Device.serialNumber Unknown Serial number of the device that is fetched.
MobileIronCloud.Device.altSerialNumber Unknown Alternative serial number of the device that is fetched.
MobileIronCloud.Device.ownershipType String Ownership type of the device that is fetched.
MobileIronCloud.Device.complianceState Boolean Compliance state of the device that is fetched.
MobileIronCloud.Device.roaming Boolean Roaming status of the device that is fetched.
MobileIronCloud.Device.supervised Unknown Device Supervised
MobileIronCloud.Device.udid String Device UDID of the device that is fetched.
MobileIronCloud.Device.policyViolationCount Number Policy violation count of the device that is fetched.
MobileIronCloud.Device.lastRegistrationTime Date Last registration time of the device that is fetched.
MobileIronCloud.Device.quarantined Boolean Whether the device is quarantined.
MobileIronCloud.Device.jailbroken Boolean Whether the device is jailbroken.

Command Example

!mobileiron-cloud-get-device-by-mac device_mac=MAC_HERE

Context Example

{
  "MobileIronCloud": {
    "Device": {
      "id": 123,
      "guid": "",
      "deviceModel": "VirtualBox",
      "deviceName": "DESKTOP-B76IV6U",
      "platformType": "WINDOWS_PHONE",
      "platformVersion": "10.0",
      "osBuildVersion": "",
      "lastCheckin": 1596026443798,
      "registrationState": "ACTIVE",
      "displayName": "Windows User",
      "firstName": "Windows",
      "lastName": "User",
      "uid": "userid",
      "emailAddress": "email",
      "manufacturer": "GmbH",
      "imei": null,
      "imei2": null,
      "imsi": "Not Present",
      "wifiMacAddress": "",
      "serialNumber": null,
      "altSerialNumber": null,
      "ownershipType": "UNKNOWN",
      "complianceState": false,
      "roaming": false,
      "supervised": null,
      "udid": "UIDVALUE",
      "clientLastCheckin": null,
      "prettyModel": "VirtualBox",
      "policyViolationCount": 1,
      "lastRegistrationTime": 1596022502880,
      "quarantined": false,
      "jailbroken": false,
      "windowsDeviceType": "WINDOWS_DESKTOP",
      "entityName": "DESKTOP-B76IV6U"
    }
  }
}

mobileiron-cloud-get-device-by-serial


Gets a single device matching the provided value for the device serial number.

Base Command

mobileiron-cloud-get-device-by-serial

Input

Argument Name Description Required
device_serial Serial number of the device to fetch. Optional

Context Output

Path Type Description
MobileIronCloud.Device.id Number The ID of the device that is fetched.
MobileIronCloud.Device.guid String GUID of the device that is fetched.
MobileIronCloud.Device.deviceModel String Model of the device that is fetched.
MobileIronCloud.Device.deviceName String Name of the device that is fetched.
MobileIronCloud.Device.platformType String Platform type of the device that is fetched.
MobileIronCloud.Device.platformVersion String Platform version of the device that is fetched.
MobileIronCloud.Device.osBuildVersion String Operating system build version of the device that is fetched.
MobileIronCloud.Device.lastCheckin Date Last check in time of the device that is fetched.
MobileIronCloud.Device.registrationState String Registration state of the device that is fetched.
MobileIronCloud.Device.displayName String Display name of the device that is fetched.
MobileIronCloud.Device.firstName String First name of the device that is fetched.
MobileIronCloud.Device.lastName String Last name of the device that is fetched.
MobileIronCloud.Device.uid String UID of the device that is fetched.
MobileIronCloud.Device.emailAddress String Email address of the device that is fetched.
MobileIronCloud.Device.manufacturer String Manufacturer of the device that is fetched.
MobileIronCloud.Device.imei Unknown International Mobile Equipment Identity (IMEI) of the device that is fetched.
MobileIronCloud.Device.imei2 Unknown International Mobile Equipment Identity 2 (IME2) of the device that is fetched.
MobileIronCloud.Device.imsi String International mobile subscriber identity (IMSI) of the device that is fetched.
MobileIronCloud.Device.wifiMacAddress String WiFi MAC address of the device that is fetched.
MobileIronCloud.Device.serialNumber Unknown Serial number of the device that is fetched.
MobileIronCloud.Device.altSerialNumber Unknown Alternative serial number of the device that is fetched.
MobileIronCloud.Device.ownershipType String Ownership type of the device that is fetched.
MobileIronCloud.Device.complianceState Boolean Compliance state of the device that is fetched.
MobileIronCloud.Device.roaming Boolean Roaming status of the device that is fetched.
MobileIronCloud.Device.supervised Unknown Device Supervised
MobileIronCloud.Device.udid String Device UDID of the device that is fetched.
MobileIronCloud.Device.policyViolationCount Number Policy violation count of the device that is fetched.
MobileIronCloud.Device.lastRegistrationTime Date Last registration time of the device that is fetched.
MobileIronCloud.Device.quarantined Boolean Whether the device is quarantined.
MobileIronCloud.Device.jailbroken Boolean Whether the device is jailbroken.

Command Example

!mobileiron-cloud-get-device-by-serial device_serial=SERIAL_HERE

Context Example

{
  "MobileIronCloud": {
    "Device": {
      "id": 123,
      "guid": "",
      "deviceModel": "VirtualBox",
      "deviceName": "DESKTOP-B76IV6U",
      "platformType": "WINDOWS_PHONE",
      "platformVersion": "10.0",
      "osBuildVersion": "",
      "lastCheckin": 1596026443798,
      "registrationState": "ACTIVE",
      "displayName": "Windows User",
      "firstName": "Windows",
      "lastName": "User",
      "uid": "userid",
      "emailAddress": "email",
      "manufacturer": "GmbH",
      "imei": null,
      "imei2": null,
      "imsi": "Not Present",
      "wifiMacAddress": "",
      "serialNumber": null,
      "altSerialNumber": null,
      "ownershipType": "UNKNOWN",
      "complianceState": false,
      "roaming": false,
      "supervised": null,
      "udid": "UIDVALUE",
      "clientLastCheckin": null,
      "prettyModel": "VirtualBox",
      "policyViolationCount": 1,
      "lastRegistrationTime": 1596022502880,
      "quarantined": false,
      "jailbroken": false,
      "windowsDeviceType": "WINDOWS_DESKTOP",
      "entityName": "DESKTOP-B76IV6U"
    }
  }
}

mobileiron-cloud-unlock-device


Sends an unlock action to the device.

Base Command

mobileiron-cloud-unlock-device

Input

Argument Name Description Required
device_id The ID of the MobileIron device to fetch. Optional

Command Example

!mobileiron-cloud-unlock-device device_id=1100646

Human Readable Output

Action was performed successfully

mobileiron-cloud-retire-device


Sends a retire action to the device.

Base Command

mobileiron-cloud-retire-device

Input

Argument Name Description Required
device_id The ID of the MobileIron device to fetch. Optional

Human Readable Output

Action was performed successfully

mobileiron-cloud-wipe-device


Sends a wipe action to the device. This is a potentially destructive action as it will completely wipe the device.

Base Command

mobileiron-cloud-wipe-device

Input

Argument Name Description Required
device_id The ID of the MobileIron device to fetch. Optional

Human Readable Output

Action was performed successfully

mobileiron-cloud-force-check-in


Forces a check in to the particular device based on the device ID.

Base Command

mobileiron-cloud-force-check-in

Input

Argument Name Description Required
device_id The ID of the MobileIron device to fetch. Optional

Human Readable Output

Action was performed successfully

mobileiron-cloud-send-message


Sends a message to the device.

Base Command

mobileiron-cloud-send-message

Input

Argument Name Description Required
device_id The ID of the MobileIron device to fetch. Optional
message_type The type of notification to send. Possible values are: email, push. Default is push. Required
subject The subject of the email. (Only used if an email should be sent). Optional
message The message to be sent. Required

Human Readable Output

Action was performed successfully

mobileiron-cloud-get-device-by-id


Returns the data for a particular device based on the device ID.

Base Command

mobileiron-cloud-get-device-by-id

Input

Argument Name Description Required
device_id The ID of the MobileIron device to fetch. Required

Context Output

Path Type Description
MobileIronCloud.Device.id Number The ID of the device that is fetched.
MobileIronCloud.Device.guid String GUID of the device that is fetched.
MobileIronCloud.Device.deviceModel String Model of the device that is fetched.
MobileIronCloud.Device.deviceName String Name of the device that is fetched.
MobileIronCloud.Device.platformType String Platform type of the device that is fetched.
MobileIronCloud.Device.platformVersion String Platform version of the device that is fetched.
MobileIronCloud.Device.osBuildVersion String Operating system build version of the device that is fetched.
MobileIronCloud.Device.lastCheckin Date Last check in time of the device that is fetched.
MobileIronCloud.Device.registrationState String Registration state of the device that is fetched.
MobileIronCloud.Device.displayName String Display name of the device that is fetched.
MobileIronCloud.Device.firstName String First name of the device that is fetched.
MobileIronCloud.Device.lastName String Last name of the device that is fetched.
MobileIronCloud.Device.uid String UID of the device that is fetched.
MobileIronCloud.Device.emailAddress String Email address of the device that is fetched.
MobileIronCloud.Device.manufacturer String Manufacturer of the device that is fetched.
MobileIronCloud.Device.imei Unknown International Mobile Equipment Identity (IMEI) of the device that is fetched.
MobileIronCloud.Device.imei2 Unknown International Mobile Equipment Identity 2 (IME2) of the device that is fetched.
MobileIronCloud.Device.imsi String International mobile subscriber identity (IMSI) of the device that is fetched.
MobileIronCloud.Device.wifiMacAddress String WiFi MAC address of the device that is fetched.
MobileIronCloud.Device.serialNumber Unknown Serial number of the device that is fetched.
MobileIronCloud.Device.altSerialNumber Unknown Alternative serial number of the device that is fetched.
MobileIronCloud.Device.ownershipType String Ownership type of the device that is fetched.
MobileIronCloud.Device.complianceState Boolean Compliance state of the device that is fetched.
MobileIronCloud.Device.roaming Boolean Roaming status of the device that is fetched.
MobileIronCloud.Device.supervised Unknown Device Supervised
MobileIronCloud.Device.udid String Device UDID of the device that is fetched.
MobileIronCloud.Device.policyViolationCount Number Policy violation count of the device that is fetched.
MobileIronCloud.Device.lastRegistrationTime Date Last registration time of the device that is fetched.
MobileIronCloud.Device.quarantined Boolean Whether the device is quarantined.
MobileIronCloud.Device.jailbroken Boolean Whether the device is jailbroken.

Command Example

!mobileiron-cloud-get-device-by-id device_id=1100646

Context Example

{
  "MobileIronCloud": {
    "Device": {
      "id": 123,
      "guid": "",
      "deviceModel": "VirtualBox",
      "deviceName": "DESKTOP-B76IV6U",
      "platformType": "WINDOWS_PHONE",
      "platformVersion": "10.0",
      "osBuildVersion": "",
      "lastCheckin": 1596026443798,
      "registrationState": "ACTIVE",
      "displayName": "Windows User",
      "firstName": "Windows",
      "lastName": "User",
      "uid": "userid",
      "emailAddress": "email",
      "manufacturer": "GmbH",
      "imei": null,
      "imei2": null,
      "imsi": "Not Present",
      "wifiMacAddress": "",
      "serialNumber": null,
      "altSerialNumber": null,
      "ownershipType": "UNKNOWN",
      "complianceState": false,
      "roaming": false,
      "supervised": null,
      "udid": "UIDVALUE",
      "clientLastCheckin": null,
      "prettyModel": "VirtualBox",
      "policyViolationCount": 1,
      "lastRegistrationTime": 1596022502880,
      "quarantined": false,
      "jailbroken": false,
      "windowsDeviceType": "WINDOWS_DESKTOP",
      "entityName": "DESKTOP-B76IV6U"
    }
  }
}

Configuration parameters

  • isFetch — Fetch incidents
  • incidentType — Incident type
  • incidentFetchInterval — Incidents Fetch Interval
  • url — Server URL (i.e., https://eu1.mobileiron.com ) (required)
  • credentials — User Name (required)
  • partition_id — Partition ID (leave empty to resolve default)
  • max_fetch — Maximum number of incidents per fetch
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (9)

  • mobileiron-cloud-force-check-in

    Forces a check in to the particular device based on the device ID.

  • mobileiron-cloud-get-device-by-id

    Returns the data for a particular device based on the device id.

  • mobileiron-cloud-get-device-by-mac

    Gets a single device matching the provided MAC address.

  • mobileiron-cloud-get-device-by-serial

    Gets a single device matching the provided value for the device serial number.

  • mobileiron-cloud-get-devices-data

    Gets all the devices based on a particular filter query. The command might execute multiple API calls depending on the amount of devices that are returned.

  • mobileiron-cloud-retire-device

    Sends a retire action to the device.

  • mobileiron-cloud-send-message

    Sends a message to the device.

  • mobileiron-cloud-unlock-device

    Sends an unlock action to the device.

  • mobileiron-cloud-wipe-device

    Sends a wipe action to the device. This is a potentially destructive action as it will completely wipe the device.

category: Endpoint
sectionorder:
- Connect
- Collect
provider: Ivanti
commonfields:
  id: MobileIronCLOUD
  version: -1
configuration:
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- defaultvalue: MobileIron Cloud Device Incident
  display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  advanced: true
  section: Collect
- display: Server URL (i.e., https://eu1.mobileiron.com )
  name: url
  required: true
  type: 0
  section: Connect
- display: User Name
  name: credentials
  required: true
  type: 9
  section: Connect
- additionalinfo: Leave empty to automatically fetch the default partition ID for the configured tenant.
  display: Partition ID (leave empty to resolve default)
  name: partition_id
  type: 0
  required: false
  section: Connect
- defaultvalue: '50'
  display: Maximum number of incidents per fetch
  name: max_fetch
  type: 0
  required: false
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
description: MobileIron Cloud Integration.
display: MobileIronCLOUD
name: MobileIronCLOUD
script:
  commands:
  - arguments:
    - defaultValue: registrationState=ACTIVE
      description: Filter query for fetching the device data. Default is "registrationState=ACTIVE".
      name: query
    - description: The maximum number of items returned in the list.
      name: max_fetch
    description: Gets all the devices based on a particular filter query. The command might execute multiple API calls depending on the amount of devices that are returned.
    name: mobileiron-cloud-get-devices-data
    outputs:
    - contextPath: MobileIronCloud.Device.id
      description: ID of the device that is fetched.
      type: Number
    - contextPath: MobileIronCloud.Device.guid
      description: GUID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.deviceModel
      description: Model of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.deviceName
      description: Name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.platformType
      description: Platform type of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.platformVersion
      description: Platform version of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.osBuildVersion
      description: Operating system build version of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.lastCheckin
      description: Last check in time of the device that is fetched.
      type: Date
    - contextPath: MobileIronCloud.Device.registrationState
      description: Registration state of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.displayName
      description: Display name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.firstName
      description: First name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.lastName
      description: Last name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.uid
      description: UID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.emailAddress
      description: Email address of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.manufacturer
      description: Manufacturer of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.imei
      description: International Mobile Equipment Identity (IMEI) of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.imei2
      description: International Mobile Equipment Identity 2 (IMEI2) of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.imsi
      description: International mobile subscriber identity (IMSI) of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.wifiMacAddress
      description: WiFi MAC address of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.serialNumber
      description: Serial number of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.altSerialNumber
      description: Alternative serial number of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.ownershipType
      description: Ownership type of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.complianceState
      description: Compliance state of the device that is fetched.
      type: Boolean
    - contextPath: MobileIronCloud.Device.roaming
      description: Roaming status of the device that is fetched.
      type: Boolean
    - contextPath: MobileIronCloud.Device.supervised
      description: Device supervised.
      type: Unknown
    - contextPath: MobileIronCloud.Device.udid
      description: UDID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.policyViolationCount
      description: Policy violation count of the device that is fetched.
      type: Number
    - contextPath: MobileIronCloud.Device.lastRegistrationTime
      description: Last registration time of the device that is fetched.
      type: Date
    - contextPath: MobileIronCloud.Device.quarantined
      description: Whether the device is quarantined.
      type: Boolean
    - contextPath: MobileIronCloud.Device.jailbroken
      description: Whether the device is jailbroken.
      type: Boolean
  - arguments:
    - description: THe MAC address of the device to fetch.
      name: device_mac
      required: true
    description: Gets a single device matching the provided MAC address.
    name: mobileiron-cloud-get-device-by-mac
    outputs:
    - contextPath: MobileIronCloud.Device.id
      description: The ID of the device that is fetched.
      type: Number
    - contextPath: MobileIronCloud.Device.guid
      description: GUID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.deviceModel
      description: Model of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.deviceName
      description: Name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.platformType
      description: Platform type of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.platformVersion
      description: Platform version of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.osBuildVersion
      description: Operating system build version of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.lastCheckin
      description: Last check in time of the device that is fetched.
      type: Date
    - contextPath: MobileIronCloud.Device.registrationState
      description: Registration state of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.displayName
      description: Display name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.firstName
      description: First name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.lastName
      description: Last name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.uid
      description: UID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.emailAddress
      description: Email address of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.manufacturer
      description: Manufacturer of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.imei
      description: International Mobile Equipment Identity (IMEI) of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.imei2
      description: International Mobile Equipment Identity2 (IME2) of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.imsi
      description: International mobile subscriber identity (IMSI) of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.wifiMacAddress
      description: WiFi MAC address of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.serialNumber
      description: Serial number of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.altSerialNumber
      description: Alternative serial number of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.ownershipType
      description: Ownership type of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.complianceState
      description: Compliance state of the device that is fetched.
      type: Boolean
    - contextPath: MobileIronCloud.Device.roaming
      description: Roaming status of the device that is fetched.
      type: Boolean
    - contextPath: MobileIronCloud.Device.supervised
      description: Device supervised.
      type: Unknown
    - contextPath: MobileIronCloud.Device.udid
      description: UDID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.policyViolationCount
      description: Policy violation count of the device that is fetched.
      type: Number
    - contextPath: MobileIronCloud.Device.lastRegistrationTime
      description: Last registration time of the device that is fetched.
      type: Date
    - contextPath: MobileIronCloud.Device.quarantined
      description: Whether the device is quarantined.
      type: Boolean
    - contextPath: MobileIronCloud.Device.jailbroken
      description: Whether the device is jailbroken.
      type: Boolean
  - arguments:
    - description: Serial number of the device to fetch.
      name: device_serial
    description: Gets a single device matching the provided value for the device serial number.
    name: mobileiron-cloud-get-device-by-serial
    outputs:
    - contextPath: MobileIronCloud.Device.id
      description: The ID of the device that is fetched.
      type: Number
    - contextPath: MobileIronCloud.Device.guid
      description: GUID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.deviceModel
      description: Model of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.deviceName
      description: Name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.platformType
      description: Platform type of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.platformVersion
      description: Platform version of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.osBuildVersion
      description: Operating system build version of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.lastCheckin
      description: Last check in time of the device that is fetched.
      type: Date
    - contextPath: MobileIronCloud.Device.registrationState
      description: Registration state of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.displayName
      description: Display name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.firstName
      description: First name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.lastName
      description: Last name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.uid
      description: UID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.emailAddress
      description: Email address of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.manufacturer
      description: Manufacturer of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.imei
      description: International Mobile Equipment Identity (IMEI) of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.imei2
      description: International Mobile Equipment Identity 2 (IME2) of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.imsi
      description: International mobile subscriber identity (IMSI) of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.wifiMacAddress
      description: WiFi MAC address of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.serialNumber
      description: Serial number of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.altSerialNumber
      description: Alternative serial number of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.ownershipType
      description: Ownership type of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.complianceState
      description: Compliance state of the device that is fetched.
      type: Boolean
    - contextPath: MobileIronCloud.Device.roaming
      description: Roaming status of the device that is fetched.
      type: Boolean
    - contextPath: MobileIronCloud.Device.supervised
      description: Device supervised.
      type: Unknown
    - contextPath: MobileIronCloud.Device.udid
      description: UDID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.policyViolationCount
      description: Policy violation count of the device that is fetched.
      type: Number
    - contextPath: MobileIronCloud.Device.lastRegistrationTime
      description: Last registration time of the device that is fetched.
      type: Date
    - contextPath: MobileIronCloud.Device.quarantined
      description: Whether the device is quarantined.
      type: Boolean
    - contextPath: MobileIronCloud.Device.jailbroken
      description: Whether the device is jailbroken.
      type: Boolean
  - arguments:
    - description: The ID of the MobileIron device to fetch.
      name: device_id
    description: Sends an unlock action to the device.
    name: mobileiron-cloud-unlock-device
  - arguments:
    - description: The ID of the MobileIron device to fetch.
      name: device_id
    description: Sends a retire action to the device.
    name: mobileiron-cloud-retire-device
  - arguments:
    - description: The ID of the MobileIron device to fetch.
      name: device_id
    description: Sends a wipe action to the device. This is a potentially destructive action as it will completely wipe the device.
    name: mobileiron-cloud-wipe-device
  - arguments:
    - description: The ID of the MobileIron device to fetch.
      name: device_id
    description: Forces a check in to the particular device based on the device ID.
    name: mobileiron-cloud-force-check-in
  - arguments:
    - description: The ID of the MobileIron device to fetch.
      name: device_id
    - auto: PREDEFINED
      defaultValue: push
      description: 'The type of notification to send. Possible values are: "email" and "push". Default is "push".'
      name: message_type
      predefined:
      - email
      - push
      required: true
    - description: The subject of the email. (Only used if an email should be sent.)
      name: subject
    - description: The message to be sent.
      name: message
      required: true
    description: Sends a message to the device.
    name: mobileiron-cloud-send-message
  - arguments:
    - description: The ID of the MobileIron device to fetch.
      name: device_id
      required: true
    description: Returns the data for a particular device based on the device id.
    name: mobileiron-cloud-get-device-by-id
    outputs:
    - contextPath: MobileIronCloud.Device.id
      description: The ID of the device that is fetched.
      type: Number
    - contextPath: MobileIronCloud.Device.guid
      description: GUID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.deviceModel
      description: Model of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.deviceName
      description: Name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.platformType
      description: Platform type of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.platformVersion
      description: Platform version of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.osBuildVersion
      description: Operating system build version of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.lastCheckin
      description: Last check in time of the device that is fetched.
      type: Date
    - contextPath: MobileIronCloud.Device.registrationState
      description: Registration state of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.displayName
      description: Display name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.firstName
      description: First name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.lastName
      description: Last name of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.uid
      description: UID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.emailAddress
      description: Email address of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.manufacturer
      description: Manufacturer of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.imei
      description: International Mobile Equipment Identity (IMEI) of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.imei2
      description: International Mobile Equipment Identity 2 (IME2) of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.imsi
      description: International mobile subscriber identity (IMSI) of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.wifiMacAddress
      description: WiFi MAC address of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.serialNumber
      description: Serial number of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.altSerialNumber
      description: Alternative serial number of the device that is fetched.
      type: Unknown
    - contextPath: MobileIronCloud.Device.ownershipType
      description: Ownership type of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.complianceState
      description: Compliance state of the device that is fetched.
      type: Boolean
    - contextPath: MobileIronCloud.Device.roaming
      description: Roaming status of the device that is fetched.
      type: Boolean
    - contextPath: MobileIronCloud.Device.supervised
      description: Device supervised.
      type: Unknown
    - contextPath: MobileIronCloud.Device.udid
      description: UDID of the device that is fetched.
      type: String
    - contextPath: MobileIronCloud.Device.policyViolationCount
      description: Policy violation count of the device that is fetched.
      type: Number
    - contextPath: MobileIronCloud.Device.lastRegistrationTime
      description: Last registration time of the device that is fetched.
      type: Date
    - contextPath: MobileIronCloud.Device.quarantined
      description: Whether the device is quarantined.
      type: Boolean
    - contextPath: MobileIronCloud.Device.jailbroken
      description: Whether the device is jailbroken.
      type: Boolean
  dockerimage: demisto/python3:3.12.13.10116658
  isfetch: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests (auto formatted)
defaultmapperin: MobileIron Incident Incoming Mapper
fromversion: 6.0.0