SafeNet Trusted Access

This integration enables you to process alerts from SafeNet Trusted Access (STA) indicating security risks to end user accounts, and apply security remediation actions on SafeNet Trusted Access through security orchestration playbooks.

Authentication & Identity Management · Thales SafeNet Trusted Access

Details

IDSafeNet Trusted Access
ProviderThales
CategoryAuthentication & Identity Management
From Version6.0.0
Docker Imagedemisto/python3:3.12.8.3296088
Supported ModulesAgentix XSIAM

README

This integration enables you to process alerts from SafeNet Trusted Access (STA) indicating security risks to end user accounts, and apply security remediation actions on SafeNet Trusted Access through security orchestration playbooks. For information about the configuration steps, visit our Help Documentation.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

NOTE : Perform create, update and delete operations using commands only for internal users or groups. Such operations aren’t recommended for synchronized users or groups.

sta-get-user-list

Get list of users in the tenant.

Base Command

sta-get-user-list

Input

Argument Name Description Required
limit The maximum number of results to return. Optional

Context Output

Path Type Description
STA.USER.ID string User ID of the user.
STA.USER.SCHEMA string Schema version number.
STA.USER.USERNAME string Username of the user.
STA.USER.FIRSTNAME string First name of the user.
STA.USER.LASTNAME string Last name of the user.
STA.USER.EMAIL string Email ID of the user.
STA.USER.MOBILENUMBER number Mobile number of the user.
STA.USER.ALIAS1 string Alias for the user.
STA.USER.ALIAS2 string Additional alias for the user.
STA.USER.ALIAS3 string Additional alias for the user.
STA.USER.ALIAS4 string Additional alias for the user.
STA.USER.ADDRESS string Address of the user.
STA.USER.CITY string City of the user.
STA.USER.STATE string State of the user.
STA.USER.COUNTRY string Country of the user.
STA.USER.POSTALCODE number Postal Code of the user.
STA.USER.SYNCHRONIZED boolean Is the user synchronized.

Command Example


#### Context Example

```json
{
    "STA": {
        "USER": [
            {
                "email": "demo.user@demisto.com",
                "firstName": "Demo",
                "id": "CNlM6Pyq3nADXA4rWyUAAAAc",
                "isSynchronized": false,
                "lastName": "User",
                "schemaVersionNumber": "1.0",
                "userName": "demouser"
            },
            {
                "email": "test.user@demisto.com",
                "firstName": "Hello",
                "id": "CNlM6rvB0uQDXA4rWyUAAAAc",
                "isSynchronized": false,
                "lastName": "User",
                "schemaVersionNumber": "1.0",
                "userName": "hellouser"
            }
        ]
    }
}

Human Readable Output

List of users in the tenant

Id Schema Version Number User Name First Name Last Name Email Is Synchronized
CNlM6Pyq3nADXA4rWyUAAAAc 1.0 demouser Demo User demo.user@demisto.com false
CNlM6rvB0uQDXA4rWyUAAAAc 1.0 hellouser Hello User test.user@demisto.com false

sta-get-user-info

Get the profile information for a specific user.

Base Command

sta-get-user-info

Input

Argument Name Description Required
userName Username of the user. Required

Context Output

Path Type Description
STA.USER.ID string User ID of the user.
STA.USER.SCHEMA string Schema version number.
STA.USER.USERNAME string Username of the user.
STA.USER.FIRSTNAME string First name of the user.
STA.USER.LASTNAME string Last name of the user.
STA.USER.EMAIL string Email ID of the user.
STA.USER.MOBILENUMBER string Mobile number of the user.
STA.USER.ALIAS1 string Alias for the user.
STA.USER.ALIAS2 string Additional alias for the user.
STA.USER.ALIAS3 string Additional alias for the user.
STA.USER.ALIAS4 string Additional alias for the user.
STA.USER.CUSTOM1 string Custom value for the user.
STA.USER.CUSTOM2 string Additional custom value for the user.
STA.USER.CUSTOM3 string Additional custom value for the user.
STA.USER.ADDRESS string Address of the user.
STA.USER.CITY string City of the user.
STA.USER.STATE string State of the user.
STA.USER.COUNTRY string Country of the user.
STA.USER.POSTALCODE string Postal Code of the user.
STA.USER.SYNCHRONIZED boolean Is user synchronized.

Command Example

!sta-get-user-info userName="demouser"

Context Example

{
    "STA": {
        "USER": {
            "email": "demo.user@demisto.com",
            "firstName": "Demo",
            "id": "CNlM6Pyq3nADXA4rWyUAAAAc",
            "isSynchronized": false,
            "lastName": "User",
            "schemaVersionNumber": "1.0",
            "userName": "demouser"
        }
    }
}

Human Readable Output

Information for user - demouser

Id Schema Version Number User Name First Name Last Name Email Is Synchronized
CNlM6Pyq3nADXA4rWyUAAAAc 1.0 demouser Demo User demo.user@demisto.com false

sta-create-user

Create a new user in the tenant.

Base Command

sta-create-user

Input

Argument Name Description Required
userName User ID of the user. Required
first_name First name of the user. Required
last_name Last name of the user. Required
email Email ID of the user. Required
mobile_number Mobile number of the user. Optional
alias1 Alias for the user. Optional
alias2 Additional alias for the user. Optional
custom1 Custom value for the user. Optional
custom2 Additional custom value for the user. Optional
custom3 Additional custom value for the user. Optional
address Address of the user. Optional
city City of the user. Optional
state State of the user. Optional
country Country of the user. Optional
postal_code Postal Code of the user. Optional
synchronized Is user synchronized. Optional

Context Output

Path Type Description
STA.USER.ID string User ID of the user.
STA.USER.SCHEMA string Schema version number.
STA.USER.USERNAME string Username of the user.
STA.USER.FIRSTNAME string First name of the user.
STA.USER.LASTNAME string Last name of the user.
STA.USER.EMAIL string Email ID of the user.
STA.USER.MOBILENUMBER string Mobile number of the user.
STA.USER.ALIAS1 string Alias for the user.
STA.USER.ALIAS2 string Additional alias for the user.
STA.USER.CUSTOM1 string Custom value for the user.
STA.USER.CUSTOM2 string Additional custom value for the user.
STA.USER.CUSTOM3 string Additional custom value for the user.
STA.USER.ADDRESS string Address of the user.
STA.USER.CITY string City of the user.
STA.USER.STATE string State of the user.
STA.USER.COUNTRY string Country of the user.
STA.USER.POSTALCODE string Postal Code of the user.
STA.USER.SYNCHRONIZED boolean Is user synchronized.

Command Example

!sta-create-user email="test.user@demisto.com" first_name="User" last_name="Test" userName="usertest123"

Context Example

{
    "STA": {
        "USER": {
            "email": "test.user@demisto.com",
            "firstName": "User",
            "id": "iNlsjym+x1MLesvCSusAAAAc",
            "isSynchronized": false,
            "lastName": "Test",
            "schemaVersionNumber": "1.0",
            "userName": "usertest123"
        }
    }
}

Human Readable Output

STA user successfully created

Id Schema Version Number User Name First Name Last Name Email Is Synchronized
iNlsjym+x1MLesvCSusAAAAc 1.0 usertest123 User Test test.user@demisto.com false

sta-update-user-info

Update the profile for a specific user.

Base Command

sta-update-user-info

Input

Argument Name Description Required
userName User ID of the user. Required
first_name First name of the user. Optional
last_name Last name of the user. Optional
email Email ID of the user. Optional
mobile_number Mobile number of the user. Optional
alias1 Alias for the user. Optional
alias2 Additional alias for the user. Optional
address Address of the user. Optional
city City of the user. Optional
state State of the user. Optional
country Country of the user. Optional
postal_code Postal Code of the user. Optional
userName_new New userName to be updated. Optional

Context Output

Path Type Description
STA.USER.ID string User ID of the user.
STA.USER.SCHEMA string Schema version number.
STA.USER.USERNAME string Username of the user.
STA.USER.FIRSTNAME string First name of the user.
STA.USER.LASTNAME string Last name of the user.
STA.USER.EMAIL string Email ID of the user.
STA.USER.MOBILENUMBER number Mobile number for the user.
STA.USER.ALIAS1 string Alias for the user.
STA.USER.ALIAS2 string Additional alias for the user.
STA.USER.CUSTOM1 string Custom value for the user.
STA.USER.CUSTOM2 string Additional custom value for the user.
STA.USER.CUSTOM3 string Additional custom value for the user.
STA.USER.ADDRESS string Address of the user.
STA.USER.CITY string City of the user.
STA.USER.STATE string State of the user.
STA.USER.COUNTRY string Country of the user.
STA.USER.POSTALCODE number Postal Code of the user.
STA.USER.SYNCHRONIZED boolean Is user synchronized.

Command Example

!sta-update-user-info userName="usertest123" userName_new="testuser1" first_name="Demo" last_name="Name"

Context Example

{
    "STA": {
        "USER": {
            "email": "test.user@demisto.com",
            "firstName": "Demo",
            "id": "iNlsjym+x1MLesvCSusAAAAc",
            "isSynchronized": false,
            "lastName": "Name",
            "schemaVersionNumber": "1.0",
            "userName": "testuser1"
        }
    }
}

Human Readable Output

STA user successfully updated

Id Schema Version Number User Name First Name Last Name Email Is Synchronized
iNlsjym+x1MLesvCSusAAAAc 1.0 testuser1 Demo Name test.user@demisto.com false

sta-delete-user

Delete a user from the tenant.

Base Command

sta-delete-user

Input

Argument Name Description Required
userName Username of the user to be deleted. Required

Context Output

Path Type Description
STA.USER.ID string User ID of the user to be deleted from the tenant.
STA.USER.USERNAME string Username of the user to be deleted from the tenant.
STA.USER.DELETED boolean Returns true, if the user is deleted from the tenant.

Command Example

!sta-delete-user userName="testuser1"

Context Example

{
    "STA": {
        "USER": {
            "Deleted": true,
            "id": "iNlsjym+x1MLesvCSusAAAAc",
            "userName": "testuser1"
        }
    }
}

Human Readable Output

STA user - testuser1 successfully deleted

sta-get-user-groups

Return all the groups associated with a specific user.

Base Command

sta-get-user-groups

Input

Argument Name Description Required
userName Username of the user. Required
limit The maximum number of results to return. Optional

Context Output

Path Type Description
STA.USER.ID string User ID of the user.
STA.USER.SCHEMA string Schema version number.
STA.USER.USERNAME string Username of the user.
STA.USER.FIRSTNAME string First name of the user.
STA.USER.LASTNAME string Last name of the user.
STA.USER.EMAIL string Email ID of the user.
STA.USER.MOBILENUMBER number Mobile number for the user.
STA.USER.ALIAS1 string Alias for the user.
STA.USER.ALIAS2 string Additional alias for the user.
STA.USER.CUSTOM1 string Custom value for the user.
STA.USER.CUSTOM2 string Additional custom value for the user.
STA.USER.CUSTOM3 string Additional custom value for the user.
STA.USER.ADDRESS string Address of the user.
STA.USER.CITY string City of the user.
STA.USER.STATE string State of the user.
STA.USER.COUNTRY string Country of the user.
STA.USER.POSTALCODE number Postal Code of the user.
STA.USER.SYNCHRONIZED boolean Is user synchronized.
STA.USER.GROUP.ID string Group ID of the group.
STA.USER.GROUP.SCHEMA string Schema version for the group.
STA.USER.GROUP.NAME string Name of the group.
STA.USER.GROUP.DESCRIPTION string Description of the group.
STA.USER.GROUP.SYNCHRONIZED boolean Is group synchronized.

Command Example

!sta-get-user-groups userName="hellouser"

Context Example

{
    "STA": {
        "USER": {
            "email": "test.user@demisto.com",
            "firstName": "Hello",
            "groups": [
                {
                    "description": "User would be added to unusual activity group on denying Push Notification.",
                    "id": "50331650",
                    "isSynchronized": false,
                    "name": "TestUnusualActivityGroup",
                    "schemaVersionNumber": "1.0"
                },
                {
                    "description": "Group for testing.",
                    "id": "50331652",
                    "isSynchronized": false,
                    "name": "TestGroup0",
                    "schemaVersionNumber": "1.0"
                }
            ],
            "id": "CNlM6rvB0uQDXA4rWyUAAAAc",
            "isSynchronized": false,
            "lastName": "User",
            "schemaVersionNumber": "1.0",
            "userName": "hellouser"
        }
    }
}

Human Readable Output

Groups associated with user - hellouser

Id Schema Version Number Name Description Is Synchronized
50331650 1.0 TestUnusualActivityGroup Group for testing. false
50331652 1.0 TestGroup0 Group for testing. false

sta-get-group-list

Get list of groups in the tenant.

Base Command

sta-get-group-list

Input

Argument Name Description Required
limit The maximum number of results to return. Optional

Context Output

Path Type Description
STA.GROUP.ID string Group ID of the group.
STA.GROUP.SCHEMA string Schema version for the group.
STA.GROUP.NAME string Name of the group.
STA.GROUP.DESCRIPTION string Description of the group.
STA.GROUP.SYNCHRONIZED boolean Is group synchronized.

Command Example


#### Context Example

```json
{
    "STA": {
        "GROUP": [
            {
                "description": "Description has been updated.",
                "id": "50331649",
                "isSynchronized": false,
                "name": "TestGroup1",
                "schemaVersionNumber": "1.0"
            },
            {
                "description": "Unusual Activity Group for Testing",
                "id": "50331650",
                "isSynchronized": false,
                "name": "TestUnusualActivityGroup",
                "schemaVersionNumber": "1.0"
            },
            {
                "description": "Group for testing.",
                "id": "50331652",
                "isSynchronized": false,
                "name": "TestGroup0",
                "schemaVersionNumber": "1.0"
            }
        ]
    }
}

Human Readable Output

STA groups in the tenant

Id Schema Version Number Name Description Is Synchronized
50331649 1.0 TestGroup1 Description has been updated. false
50331650 1.0 TestUnusualActivityGroup Unusual Activity Group for Testing false
50331652 1.0 TestGroup0 Group for testing. false

sta-get-group-info

Get information for a specific group.

Base Command

sta-get-group-info

Input

Argument Name Description Required
groupName Name of the group. Required

Context Output

Path Type Description
STA.GROUP.ID string Group ID of the group.
STA.GROUP.SCHEMA string Schema version for the group.
STA.GROUP.NAME string Name of the group.
STA.GROUP.DESCRIPTION string Description of the group.
STA.GROUP.SYNCHRONIZED boolean Is group synchronized.

Command Example

!sta-get-group-info groupName="TestGroup1"

Context Example

{
    "STA": {
        "GROUP": {
            "description": "Description has been updated.",
            "id": "50331649",
            "isSynchronized": false,
            "name": "TestGroup1",
            "schemaVersionNumber": "1.0"
        }
    }
}

Human Readable Output

Group - TestGroup1

Id Schema Version Number Name Description Is Synchronized
50331649 1.0 TestGroup1 Description has been updated. false

sta-get-group-members

Get list of users in a specific group.

Base Command

sta-get-group-members

Input

Argument Name Description Required
groupName Name of the group. Required
limit The maximum number of results to return. Optional

Context Output

Path Type Description
STA.GROUP.ID string Group ID of the group.
STA.GROUP.SCHEMA string Schema version for the group.
STA.GROUP.NAME string Name of the group.
STA.GROUP.DESCRIPTION string Description of the group.
STA.GROUP.SYNCHRONIZED boolean Is group synchronized.
STA.GROUP.USER.ID string User ID of the user.
STA.GROUP.USER.NAME string Username of the user.
STA.GROUP.USER.TYPE string Type of the user.
STA.GROUP.USER.LINKS.SELF string Link for the user details.

Command Example

!sta-get-group-members groupName="TestGroup0"

Context Example

{
    "STA": {
        "GROUP": {
            "description": "Group for testing.",
            "id": "50331652",
            "isSynchronized": false,
            "name": "TestGroup0",
            "schemaVersionNumber": "1.0",
            "users": [
                {
                    "id": "CNlM6Pyq3nADXA4rWyUAAAAc",
                    "links": {
                        "self": "https://api.stademo.com/api/v1/tenants/HNISOUTHA4/users/CNlM6Pyq7nADXA4rWyUAAATc?isUid=true"
                    },
                    "name": "demouser",
                    "type": "User"
                },
                {
                    "id": "CNlM6rvB0uQDXA4rWyUAAAAc",
                    "links": {
                        "self": "https://api.stademo.com/api/v1/tenants/HNISOUTHA4/users/CNlM6rvB9uQDXA4rWyUAAATc?isUid=true"
                    },
                    "name": "hellouser",
                    "type": "User"
                }
            ]
        }
    }
}

Human Readable Output

Members of group - TestGroup0

Id Name Type
CNlM6Pyq3nADXA4rWyUAAAAc demouser User
CNlM6rvB0uQDXA4rWyUAAAAc hellouser User

sta-create-group

Create a new group in the tenant.

Base Command

sta-create-group

Input

Argument Name Description Required
groupName Name of the group. Required
description Description of the group. Optional
synchronized Is group synchronized. Optional

Context Output

Path Type Description
STA.GROUP.ID string Group ID of the group.
STA.GROUP.SCHEMA string Schema version for the group.
STA.GROUP.NAME string Name of the group.
STA.GROUP.DESCRIPTION string Description of the group.
STA.GROUP.SYNCHRONIZED boolean Is group synchronized.

Command Example

!sta-create-group groupName="TestGroup2" description="Group description." synchronized=False

Context Example

{
    "STA": {
        "GROUP": {
            "description": "Group description.",
            "id": "16777228",
            "isSynchronized": false,
            "name": "TestGroup2",
            "schemaVersionNumber": "1.0"
        }
    }
}

Human Readable Output

STA group - TestGroup2 successfully created

Id Schema Version Number Name Description Is Synchronized
16777228 1.0 TestGroup2 Group description. false

sta-delete-group

Delete group from the tenant.

Base Command

sta-delete-group

Input

Argument Name Description Required
groupName Name of the group to be deleted. Required

Context Output

Path Type Description
STA.GROUP.ID string Group ID of the group to be deleted.
STA.GROUP.GROUPNAME string Name of the group to be deleted.
STA.GROUP.DELETED boolean Returns true, if the group is deleted from the tenant.

Command Example

!sta-delete-group groupName="TestGroup2"

Context Example

{
    "STA": {
        "GROUP": {
            "Deleted": true,
            "groupName": "TestGroup2",
            "id": "16777228"
        }
    }
}

Human Readable Output

STA group - TestGroup2 successfully deleted

sta-update-group-info

Update information for a specific group.

Base Command

sta-update-group-info

Input

Argument Name Description Required
groupName Name of the group to be updated. Required
description Description of the group. Optional
groupName_new New name in case you want to update the group name. Optional

Context Output

Path Type Description
STA.GROUP.ID string Group ID of the group.
STA.GROUP.SCHEMA string Schema version for the group.
STA.GROUP.NAME string Name of the group.
STA.GROUP.DESCRIPTION string Description of the group.
STA.GROUP.SYNCHRONIZED boolean Is group synchronized.

Command Example

!sta-update-group-info groupName="TestGroup1" description="Description has been updated."

Context Example

{
    "STA": {
        "GROUP": {
            "description": "Description has been updated.",
            "id": "50331649",
            "isSynchronized": false,
            "name": "TestGroup1",
            "schemaVersionNumber": "1.0"
        }
    }
}

Human Readable Output

STA user successfully updated

Id Schema Version Number Name Description Is Synchronized
50331649 1.0 TestGroup1 Description has been updated. false

sta-user-exist-group

Check if user exists in a specific group.

Base Command

sta-user-exist-group

Input

Argument Name Description Required
userName Username of the user to be checked. Required
groupName Group name in which you want to search for the user. Required

Context Output

Path Type Description
STA.EXIST.USER.GROUP boolean Check if user exists in group. Returns true, if the user is a member of the group.

Command Example

!sta-user-exist-group groupName="TestGroup1" userName="hellouser"

Context Example

{
    "STA": {
        "EXIST": {
            "USER": {
                "GROUP": true
            }
        }
    }
}

Human Readable Output

Yes, user - hellouser is a member of group - TestGroup1

sta-add-user-group

Add user to a specific group.

Base Command

sta-add-user-group

Input

Argument Name Description Required
userName User name of the user to be added. Required
groupName Name of the group in which the user needs to be added. Required

Context Output

Path Type Description
STA.UPDATE.USER.GROUP.USERID string User ID of the user.
STA.UPDATE.USER.GROUP.USERNAME string Username of the user.
STA.UPDATE.USER.GROUP.GROUPID string Group ID of the group.
STA.UPDATE.USER.GROUP.GROUPNAME string Groupname of the group.
STA.UPDATE.USER.GROUP.STATUS boolean Returns true, if the user successfully added to the group.

Command Example

!sta-add-user-group groupName="TestGroup1" userName="hellouser"

Context Example

{
    "STA": {
        "UPDATE": {
            "USER": {
                "GROUP": {
                    "groupName": "TestGroup1",
                    "group_id": "50331649",
                    "status": true,
                    "userName": "hellouser",
                    "user_id": "CNlM6rvB0uQDXA4rWyUAAAAc"
                }
            }
        }
    }
}

Human Readable Output

User - hellouser successfully added to the group - TestGroup1

sta-remove-user-group

Remove user from a group.

Base Command

sta-remove-user-group

Input

Argument Name Description Required
userName User name of the user to be deleted from the group. Required
groupName Group name from which the user needs to be deleted. Required

Context Output

Path Type Description
STA.UPDATE.USER.GROUP.USERID string User ID of the user.
STA.UPDATE.USER.GROUP.USERNAME string Username of the user.
STA.UPDATE.USER.GROUP.GROUPID string Group ID of the group.
STA.UPDATE.USER.GROUP.GROUPNAME string Groupname of the group.
STA.UPDATE.USER.GROUP.STATUS boolean Returns false, if the user successfully removed from the group.

Command Example

!sta-remove-user-group groupName="TestGroup1" userName="hellouser"

Context Example

{
    "STA": {
        "UPDATE": {
            "USER": {
                "GROUP": {
                    "groupName": "TestGroup1",
                    "group_id": "50331649",
                    "status": false,
                    "userName": "hellouser",
                    "user_id": "CNlM6rvB0uQDXA4rWyUAAAAc"
                }
            }
        }
    }
}

Human Readable Output

User - hellouser successfully removed from the group - TestGroup1

sta-get-logs

Get access, authentication, and audit logs.

Base Command

sta-get-logs

Input

Argument Name Description Required
userName Username of the user. Optional
since Filter logs since the specified date and time in Universal Time Coordinated time zone. Format : yyyy-mm-ddTHH:mm:ss.fffZ .Example : 2021-06-03T06:27:00.000Z Optional
until Filter logs until the specified date and time in Universal Time Coordinated time zone. Format : yyyy-mm-ddTHH:mm:ss.fffZ .Example : 2021-06-03T07:40:00.000Z Optional
limit The maximum number of results to return. Optional

Context Output

Path Type Description
STA.LOGS.TIMESTAMP string Timestamp of event.
STA.LOGS.USERNAME string Username of the user.
STA.LOGS.TYPE string Type of event log.
STA.LOGS.CREDENTIAL string Credential type of the event.
STA.LOGS.ACTION string Authentication action.
STA.LOGS.RESULT string Authentication Action Result.
STA.LOGS.MESSAGE string Message or description of the event.
STA.LOGS.APPLICATION string Application name.
STA.LOGS.POLICY string Policy applied for the application.
STA.LOGS.STATE string State of the access request.
STA.LOGS.OPERATIONTYPE string Operation type.
STA.LOGS.OPERATIONOBJECT string Operation object type.
STA.LOGS.OPERATIONNAME string Operation object name.
STA.LOGS.SERIAL string Serial number of authentication.
STA.LOGS.IP string IP address of the user.

Command Example

!sta-get-logs userName="demouser" since="2021-07-21T12:22:16.718Z"

Context Example

{
    "STA": {
        "LOGS": [
            {
                "actionText": "AUTH_ATTEMPT",
                "applicationName": "",
                "credentialType": "MobilePASS",
                "ip": "8.8.8.8",
                "logType": "AUTHENTICATION",
                "message": "Login from SafeNet Authentication Service Console.",
                "operationObjectName": "",
                "operationObjectType": "",
                "operationType": "",
                "policyName": "",
                "resultText": "CHALLENGE",
                "serial": "1000014514",
                "state": "",
                "timeStamp": "2021-07-22T08:19:05.5905986Z",
                "userName": "demouser"
            },
            {
                "actionText": "AUTH_ATTEMPT",
                "applicationName": "",
                "credentialType": "MobilePASS",
                "ip": "8.8.8.8",
                "logType": "AUTHENTICATION",
                "message": "Login from SafeNet Authentication Service Console.",
                "operationObjectName": "",
                "operationObjectType": "",
                "operationType": "",
                "policyName": "",
                "resultText": "AUTH_SUCCESS",
                "serial": "1000014514",
                "state": "",
                "timeStamp": "2021-07-22T08:20:45.5326006Z",
                "userName": "demouser"
            },
            {
                "actionText": "",
                "applicationName": "",
                "credentialType": "otp",
                "ip": "8.8.8.8",
                "logType": "OPERATOR_LOGIN",
                "message": "",
                "operationObjectName": "",
                "operationObjectType": "",
                "operationType": "",
                "policyName": "",
                "resultText": "",
                "serial": "",
                "state": "Accepted",
                "timeStamp": "2021-07-22T08:20:45.638Z",
                "userName": "demouser"
            }
        ]
    }
}

Human Readable Output

Logs

Time Stamp User Name Log Type Credential Type Action Text Result Text Message State Serial Ip
2021-07-22T08:19:05.5905986Z demouser AUTHENTICATION MobilePASS AUTH_ATTEMPT CHALLENGE Login from SafeNet Authentication Service Console.   1000014514 8.8.8.8
2021-07-22T08:20:45.5326006Z demouser AUTHENTICATION MobilePASS AUTH_ATTEMPT AUTH_SUCCESS Login from SafeNet Authentication Service Console.   1000014514 8.8.8.8
2021-07-22T08:20:45.638Z demouser OPERATOR_LOGIN otp       Accepted   8.8.8.8

sta-validate-tenant

Checks if you have permission to access the requested tenant.

Base Command

sta-validate-tenant

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
STA.VALIDATE.TENANT boolean Checks if you have permission to access the requested tenant.

Command Example


#### Context Example

```json
{
    "STA": {
        "VALIDATE": {
            "TENANT": true
        }
    }
}

Human Readable Output

The requested tenant is accessible

sta-get-application-list

Get the list of the applications in the tenant.

Base Command

sta-get-application-list

Input

Argument Name Description Required
limit The maximum number of results to return. Optional

Context Output

Path Type Description
STA.APPLICATION.ID string ID of the application.
STA.APPLICATION.NAME string Name of the application.
STA.APPLICATION.STATUS string Status of the application.

Command Example


#### Context Example

```json
{
    "STA": {
        "APPLICATION": [
            {
                "id": "g444faf1-6d7a-44t2-98c1-43572422b409",
                "name": "Application1",
                "status": "Active"
            },
            {
                "id": "k0de1afc-59ef-66bc-9abd-dacca890a390",
                "name": "Application2",
                "status": "Active"
            }
        ]
    }
}

Human Readable Output

List of applications in the tenant

Id Name Status
g444faf1-6d7a-44t2-98c1-43572422b409 Application1 Active
k0de1afc-59ef-66bc-9abd-dacca890a390 Application2 Active

sta-get-application-info

Get the information for a specific application in the tenant.

Base Command

sta-get-application-info

Input

Argument Name Description Required
applicationName Name of the application. Required

Context Output

Path Type Description
STA.APPLICATION.ID string ID of the application.
STA.APPLICATION.NAME string Name of the application.
STA.APPLICATION.STATUS string Status of the application.
STA.APPLICATION.TYPE string Status of the application.
STA.APPLICATION.TEMPLATE string Name of the template.
STA.APPICATION.ASSIGNMENT string Groups or users authorized to access an application.
STA.APPICATION.SCHEMA string Schema version number.
STA.APPICATION.LASTMODIFIED string Last modified date and time of application.

Command Example

!sta-get-application-info applicationName="Application1"

Context Example

{
    "STA": {
        "APPLICATION": {
            "applicationType": "Saml",
            "assignment": {
                "everyone": true
            },
            "id": "9ccbad94-06c2-4af2-bb9b-af9f811ccfdb",
            "lastModified": "2021-08-27T12:25:47.998Z",
            "name": "Application1",
            "schemaVersionNumber": "1.0",
            "status": "Active",
            "templateName": "Template1"
        }
    }
}

Human Readable Output

Information of application - Application1

Id Name Status Application Type Template Name Assignment Schema Version Number Last Modified
9ccbad94-06c2-4af2-bb9b-af9f811ccfdb Application1 Active Saml Template1 All 1.0 2021-08-27T12:25:47.998Z

sta-get-user-applications

Get the list of the applications assigned to a specific user.

Base Command

sta-get-user-applications

Input

Argument Name Description Required
userName Username of the user. Required
limit The maximum number of results to return. Optional

Context Output

Path Type Description
STA.USER.ID string User ID of the user.
STA.USER.SCHEMA string Schema version number.
STA.USER.USERNAME string Username of the user.
STA.USER.FIRSTNAME string First name of the user.
STA.USER.LASTNAME string Last name of the user.
STA.USER.EMAIL string Email ID of the user.
STA.USER.MOBILENUMBER number Mobile number for the user.
STA.USER.ALIAS1 string Alias for the user.
STA.USER.ALIAS2 string Additional alias for the user.
STA.USER.CUSTOM1 string Custom value for the user.
STA.USER.CUSTOM2 string Additional custom value for the user.
STA.USER.CUSTOM3 string Additional custom value for the user.
STA.USER.ADDRESS string Address of the user.
STA.USER.CITY string City of the user.
STA.USER.STATE string State of the user.
STA.USER.COUNTRY string Country of the user.
STA.USER.POSTALCODE number Postal Code of the user.
STA.USER.SYNCHRONIZED boolean Is user synchronized.
STA.USER.APPLICATION.ID string ID of the application.
STA.USER.APPLICATION.NAME string Name of the application.
STA.USER.APPLICATION.STATUS string Status of the application.

Command Example

!sta-get-user-applications userName="hellouser"

Context Example

{
    "STA": {
        "USER": {
            "applications": [
                {
                    "id": "9570b825-961e-4ed3-aa51-e53b732b16ec",
                    "name": "Application1",
                    "status": "Active"
                },
                {
                    "id": "66df07af-7c95-42e7-b0cd-2e97b6827d59",
                    "name": "Application2",
                    "status": "Active"
                }
            ],
            "email": "test.user@demisto.com",
            "firstName": "Hello",
            "id": "ONksETu5i8cDs0k67bQAAAD9",
            "isSynchronized": false,
            "lastName": "User",
            "schemaVersionNumber": "1.0",
            "userName": "hellouser"
        }
    }
}

Human Readable Output

Applications associated with user - hellouser

Id Name Status
9570b825-961e-4ed3-aa51-e53b732b16ec Application1 Active
66df07af-7c95-42e7-b0cd-2e97b6827d59 Application2 Active

sta-get-user-sessions

Get sessions for a specific user.

Base Command

sta-get-user-sessions

Input

Argument Name Description Required
userName Username of the user. Required

Context Output

Path Type Description
STA.USER.ID string User ID of the user.
STA.USER.SCHEMA string Schema version number.
STA.USER.USERNAME string Username of the user.
STA.USER.FIRSTNAME string First name of the user.
STA.USER.LASTNAME string Last name of the user.
STA.USER.EMAIL string Email ID of the user.
STA.USER.MOBILENUMBER number Mobile number for the user.
STA.USER.ALIAS1 string Alias for the user.
STA.USER.ALIAS2 string Additional alias for the user.
STA.USER.CUSTOM1 string Custom value for the user.
STA.USER.CUSTOM2 string Additional custom value for the user.
STA.USER.CUSTOM3 string Additional custom value for the user.
STA.USER.ADDRESS string Address of the user.
STA.USER.CITY string City of the user.
STA.USER.STATE string State of the user.
STA.USER.COUNTRY string Country of the user.
STA.USER.POSTALCODE number Postal Code of the user.
STA.USER.SYNCHRONIZED boolean Is user synchronized.
STA.USER.SESSION.ID string Session ID for the user.
STA.USER.SESSION.START string Session start timestamp.
STA.USER.SESSION.EXPIRY string Session end timestamp.
STA.USER.SESSION.APPLICATION.ID string Name of the application.
STA.USER.SESSION.APPLICATION.NAME boolean Returns true, if the user session is deleted for an application.

Command Example

!sta-get-user-sessions userName="hellouser"

Context Example

{
    "STA": {
        "USER": {
            "email": "test.user@demisto.com",
            "firstName": "Hello",
            "id": "ONksETu5i8cDs0k67bQAAAD9",
            "isSynchronized": false,
            "lastName": "User",
            "schemaVersionNumber": "1.0",
            "sessions": [
                {
                    "applications": [
                        {
                            "id": "entity-id1",
                            "name": "Application1"
                        },
                        {
                            "id": "entity-id2",
                            "name": "Application2"
                        }
                    ],
                    "expiry": 1633086960,
                    "id": "86f4593d-fb8a-4f62-byd9-ceb833a8090b",
                    "start": 1633079752
                }
            ],
            "userName": "hellouser"
        }
    }
}

Human Readable Output

Sessions associated with user - hellouser

Id Start Expiry Applications
86f4593d-fb8a-4f62-byd9-ceb833a8090b 1633079752 1633086960 Application1, Application2

sta-delete-user-sessions

Delete all the active SSO sessions for a specific user from STA.

Base Command

sta-delete-user-sessions

Input

Argument Name Description Required
userName Username of the user. Required

Context Output

Path Type Description
STA.USER.ID string User ID of the user.
STA.USER.USERNAME string Username of the user.
STA.USER.SESSION.DELETED boolean Returns true, if all the user SSO sessions are deleted successfully.

Command Example

!sta-delete-user-sessions userName="hellouser"

Context Example

{
    "STA": {
        "USER": {
            "id": "",
            "sessions": {
                "Deleted": true
            },
            "userName": "hellouser"
        }
    }
}

Human Readable Output

IDP Sessions for the user - hellouser successfully deleted

Configuration parameters

  • url — URL (required)
  • tenant_code — Tenant Code (required)
  • api_key — API Key (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (22)

  • sta-add-user-group

    Add user to a specific group.

  • sta-create-group

    Create a new group in the tenant.

  • sta-create-user

    Create a new user in the tenant.

  • sta-delete-group

    Delete group from the tenant.

  • sta-delete-user

    Delete user from the tenant.

  • sta-delete-user-sessions

    Delete all the active SSO sessions for a specific user from the STA.

  • sta-get-application-info

    Get the information for a specific application in the tenant.

  • sta-get-application-list

    Get the list of the applications in the tenant.

  • sta-get-group-info

    Get information for a specific group.

  • sta-get-group-list

    Get list of groups in the tenant.

  • sta-get-group-members

    Get list of users in a specific group.

  • sta-get-logs

    Get access, authentication, and audit logs.

  • sta-get-user-applications

    Get the list of the applications assigned to a specific user.

  • sta-get-user-groups

    Return all the groups associated with a specific user.

  • sta-get-user-info

    Get the profile information for a specific user.

  • sta-get-user-list

    Get list of users in the tenant.

  • sta-get-user-sessions

    Get sessions for a specific user.

  • sta-remove-user-group

    Remove user from a group.

  • sta-update-group-info

    Update information for a specific group.

  • sta-update-user-info

    Update the profile for a specific user.

  • sta-user-exist-group

    Check if user exists in a specific group.

  • sta-validate-tenant

    Checks if you have permission to access the requested tenant.

Source

SafeNetTrustedAccess.py SafeNetTrustedAccess_test.py SafeNetTrustedAccess.yml SafeNetTrustedAccess_description.md command_examples.txt
Download History Raw 
category: Authentication & Identity Management
provider: Thales
commonfields:
  id: SafeNet Trusted Access
  version: -1
configuration:
- additionalinfo: The URL consists of the root part of the REST API Endpoint URL provided in SafeNet Trusted Access, and has the form https://api.[name].com
  display: URL
  name: url
  required: true
  type: 0
- additionalinfo: Tenant code for your virtual server or account.
  display: Tenant Code
  name: tenant_code
  required: true
  type: 0
- additionalinfo: API key for authentication.
  display: API Key
  name: api_key
  required: true
  type: 4
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: This integration enables you to process alerts from SafeNet Trusted Access (STA) indicating security risks to end user accounts, and apply security remediation actions on SafeNet Trusted Access through security orchestration playbooks.
display: Thales SafeNet Trusted Access
name: SafeNet Trusted Access
script:
  commands:
  - arguments:
    - description: The maximum number of results to return.
      name: limit
    description: Get list of users in the tenant.
    name: sta-get-user-list
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.USER.SCHEMA
      description: Schema version number.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.USER.FIRSTNAME
      description: First name of the user.
      type: string
    - contextPath: STA.USER.LASTNAME
      description: Last name of the user.
      type: string
    - contextPath: STA.USER.EMAIL
      description: Email ID of the user.
      type: string
    - contextPath: STA.USER.MOBILENUMBER
      description: Mobile number of the user.
      type: number
    - contextPath: STA.USER.ALIAS1
      description: Alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS2
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS3
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS4
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.ADDRESS
      description: Address of the user.
      type: string
    - contextPath: STA.USER.CITY
      description: City of the user.
      type: string
    - contextPath: STA.USER.STATE
      description: State of the user.
      type: string
    - contextPath: STA.USER.COUNTRY
      description: Country of the user.
      type: string
    - contextPath: STA.USER.POSTALCODE
      description: Postal Code of the user.
      type: number
    - contextPath: STA.USER.SYNCHRONIZED
      description: Is the user synchronized.
      type: boolean
  - arguments:
    - description: Username of the user.
      name: userName
      required: true
    description: Get the profile information for a specific user.
    execution: true
    name: sta-get-user-info
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.USER.SCHEMA
      description: Schema version number.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.USER.FIRSTNAME
      description: First name of the user.
      type: string
    - contextPath: STA.USER.LASTNAME
      description: Last name of the user.
      type: string
    - contextPath: STA.USER.EMAIL
      description: Email ID of the user.
      type: string
    - contextPath: STA.USER.MOBILENUMBER
      description: Mobile number of the user.
      type: string
    - contextPath: STA.USER.ALIAS1
      description: Alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS2
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS3
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS4
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.CUSTOM1
      description: Custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM2
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM3
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.ADDRESS
      description: Address of the user.
      type: string
    - contextPath: STA.USER.CITY
      description: City of the user.
      type: string
    - contextPath: STA.USER.STATE
      description: State of the user.
      type: string
    - contextPath: STA.USER.COUNTRY
      description: Country of the user.
      type: string
    - contextPath: STA.USER.POSTALCODE
      description: Postal Code of the user.
      type: string
    - contextPath: STA.USER.SYNCHRONIZED
      description: Is user synchronized.
      type: boolean
  - arguments:
    - description: User ID of the user.
      name: userName
      required: true
    - description: First name of the user.
      name: first_name
      required: true
    - description: Last name of the user.
      name: last_name
      required: true
    - description: Email ID of the user.
      name: email
      required: true
    - description: Mobile number of the user.
      name: mobile_number
    - description: Alias for the user.
      name: alias1
    - description: Additional alias for the user.
      name: alias2
    - description: Custom value for the user.
      name: custom1
    - description: Additional custom value for the user.
      name: custom2
    - description: Additional custom value for the user.
      name: custom3
    - description: Address of the user.
      name: address
    - description: City of the user.
      name: city
    - description: State of the user.
      name: state
    - description: Country of the user.
      name: country
    - description: Postal Code of the user.
      name: postal_code
    - description: Is user synchronized.
      name: synchronized
    description: Create a new user in the tenant.
    name: sta-create-user
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.USER.SCHEMA
      description: Schema version number.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.USER.FIRSTNAME
      description: First name of the user.
      type: string
    - contextPath: STA.USER.LASTNAME
      description: Last name of the user.
      type: string
    - contextPath: STA.USER.EMAIL
      description: Email ID of the user.
      type: string
    - contextPath: STA.USER.MOBILENUMBER
      description: Mobile number of the user.
      type: string
    - contextPath: STA.USER.ALIAS1
      description: Alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS2
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.CUSTOM1
      description: Custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM2
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM3
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.ADDRESS
      description: Address of the user.
      type: string
    - contextPath: STA.USER.CITY
      description: City of the user.
      type: string
    - contextPath: STA.USER.STATE
      description: State of the user.
      type: string
    - contextPath: STA.USER.COUNTRY
      description: Country of the user.
      type: string
    - contextPath: STA.USER.POSTALCODE
      description: Postal Code of the user.
      type: string
    - contextPath: STA.USER.SYNCHRONIZED
      description: Is user synchronized.
      type: boolean
  - arguments:
    - description: User ID of the user.
      name: userName
      required: true
    - description: First name of the user.
      name: first_name
    - description: Last name of the user.
      name: last_name
    - description: Email ID of the user.
      name: email
    - description: Mobile number of the user.
      name: mobile_number
    - description: Alias for the user.
      name: alias1
    - description: Additional alias for the user.
      name: alias2
    - description: Address of the user.
      name: address
    - description: City of the user.
      name: city
    - description: State of the user.
      name: state
    - description: Country of the user.
      name: country
    - description: Postal Code of the user.
      name: postal_code
    - description: New userName to be updated.
      name: userName_new
    description: Update the profile for a specific user.
    name: sta-update-user-info
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.USER.SCHEMA
      description: Schema version number.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.USER.FIRSTNAME
      description: First name of the user.
      type: string
    - contextPath: STA.USER.LASTNAME
      description: Last name of the user.
      type: string
    - contextPath: STA.USER.EMAIL
      description: Email ID of the user.
      type: string
    - contextPath: STA.USER.MOBILENUMBER
      description: Mobile number for the user.
      type: number
    - contextPath: STA.USER.ALIAS1
      description: Alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS2
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.CUSTOM1
      description: Custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM2
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM3
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.ADDRESS
      description: Address of the user.
      type: string
    - contextPath: STA.USER.CITY
      description: City of the user.
      type: string
    - contextPath: STA.USER.STATE
      description: State of the user.
      type: string
    - contextPath: STA.USER.COUNTRY
      description: Country of the user.
      type: string
    - contextPath: STA.USER.POSTALCODE
      description: Postal Code of the user.
      type: number
    - contextPath: STA.USER.SYNCHRONIZED
      description: Is user synchronized.
      type: boolean
  - arguments:
    - description: Username of the user to be deleted.
      name: userName
      required: true
    description: Delete user from the tenant.
    execution: true
    name: sta-delete-user
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user to be deleted from the tenant.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user to be deleted from the tenant.
      type: string
    - contextPath: STA.USER.DELETED
      description: Returns true, if the user deleted from the tenant.
      type: boolean
  - arguments:
    - description: Username of the user.
      name: userName
      required: true
    - description: The maximum number of results to return.
      name: limit
    description: Return all the groups associated with a specific user.
    name: sta-get-user-groups
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.USER.SCHEMA
      description: Schema version number.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.USER.FIRSTNAME
      description: First name of the user.
      type: string
    - contextPath: STA.USER.LASTNAME
      description: Last name of the user.
      type: string
    - contextPath: STA.USER.EMAIL
      description: Email ID of the user.
      type: string
    - contextPath: STA.USER.MOBILENUMBER
      description: Mobile number for the user.
      type: number
    - contextPath: STA.USER.ALIAS1
      description: Alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS2
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.CUSTOM1
      description: Custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM2
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM3
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.ADDRESS
      description: Address of the user.
      type: string
    - contextPath: STA.USER.CITY
      description: City of the user.
      type: string
    - contextPath: STA.USER.STATE
      description: State of the user.
      type: string
    - contextPath: STA.USER.COUNTRY
      description: Country of the user.
      type: string
    - contextPath: STA.USER.POSTALCODE
      description: Postal Code of the user.
      type: number
    - contextPath: STA.USER.SYNCHRONIZED
      description: Is user synchronized.
      type: boolean
    - contextPath: STA.USER.GROUP.ID
      description: Group ID of the group.
      type: string
    - contextPath: STA.USER.GROUP.SCHEMA
      description: Schema version for the group.
      type: string
    - contextPath: STA.USER.GROUP.NAME
      description: Name of the group.
      type: string
    - contextPath: STA.USER.GROUP.DESCRIPTION
      description: Description of the group.
      type: string
    - contextPath: STA.USER.GROUP.SYNCHRONIZED
      description: Is group synchronized.
      type: boolean
  - arguments:
    - description: The maximum number of results to return.
      name: limit
    description: Get list of groups in the tenant.
    name: sta-get-group-list
    outputs:
    - contextPath: STA.GROUP.ID
      description: Group ID of the group.
      type: string
    - contextPath: STA.GROUP.SCHEMA
      description: Schema version for the group.
      type: string
    - contextPath: STA.GROUP.NAME
      description: Name of the group.
      type: string
    - contextPath: STA.GROUP.DESCRIPTION
      description: Description of the group.
      type: string
    - contextPath: STA.GROUP.SYNCHRONIZED
      description: Is group synchronized.
      type: boolean
  - arguments:
    - description: Name of the group.
      name: groupName
      required: true
    description: Get information for a specific group.
    name: sta-get-group-info
    outputs:
    - contextPath: STA.GROUP.ID
      description: Group ID of the group.
      type: string
    - contextPath: STA.GROUP.SCHEMA
      description: Schema version for the group.
      type: string
    - contextPath: STA.GROUP.NAME
      description: Name of the group.
      type: string
    - contextPath: STA.GROUP.DESCRIPTION
      description: Description of the group.
      type: string
    - contextPath: STA.GROUP.SYNCHRONIZED
      description: Is group synchronized.
      type: boolean
  - arguments:
    - description: Name of the group.
      name: groupName
      required: true
    - description: The maximum number of results to return.
      name: limit
    description: Get list of users in a specific group.
    name: sta-get-group-members
    outputs:
    - contextPath: STA.GROUP.ID
      description: Group ID of the group.
      type: string
    - contextPath: STA.GROUP.SCHEMA
      description: Schema version for the group.
      type: string
    - contextPath: STA.GROUP.NAME
      description: Name of the group.
      type: string
    - contextPath: STA.GROUP.DESCRIPTION
      description: Description of the group.
      type: string
    - contextPath: STA.GROUP.SYNCHRONIZED
      description: Is group synchronized.
      type: boolean
    - contextPath: STA.GROUP.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.GROUP.USER.NAME
      description: Username of the user.
      type: string
    - contextPath: STA.GROUP.USER.TYPE
      description: Type of the user.
      type: string
    - contextPath: STA.GROUP.USER.LINKS.SELF
      description: Link for the user details.
      type: string
  - arguments:
    - description: Name of the group.
      name: groupName
      required: true
    - description: Description of the group.
      name: description
    - description: Is group synchronized.
      name: synchronized
    description: Create a new group in the tenant.
    name: sta-create-group
    outputs:
    - contextPath: STA.GROUP.ID
      description: Group ID of the group.
      type: string
    - contextPath: STA.GROUP.SCHEMA
      description: Schema version for the group.
      type: string
    - contextPath: STA.GROUP.NAME
      description: Name of the group.
      type: string
    - contextPath: STA.GROUP.DESCRIPTION
      description: Description of the group.
      type: string
    - contextPath: STA.GROUP.SYNCHRONIZED
      description: Is group synchronized.
      type: boolean
  - arguments:
    - description: Name of the group to be deleted.
      name: groupName
      required: true
    description: Delete group from the tenant.
    execution: true
    name: sta-delete-group
    outputs:
    - contextPath: STA.GROUP.ID
      description: Group ID of the group to be deleted.
      type: string
    - contextPath: STA.GROUP.GROUPNAME
      description: Name of the group to be deleted.
      type: string
    - contextPath: STA.GROUP.DELETED
      description: Returns true, if the group deleted from the tenant.
      type: boolean
  - arguments:
    - description: Name of the group to be updated.
      name: groupName
      required: true
    - description: Description of the group.
      name: description
    - description: New name in case you want to update the group name.
      name: groupName_new
    description: Update information for a specific group.
    name: sta-update-group-info
    outputs:
    - contextPath: STA.GROUP.ID
      description: Group ID of the group.
      type: string
    - contextPath: STA.GROUP.SCHEMA
      description: Schema version for the group.
      type: string
    - contextPath: STA.GROUP.NAME
      description: Name of the group.
      type: string
    - contextPath: STA.GROUP.DESCRIPTION
      description: Description of the group.
      type: string
    - contextPath: STA.GROUP.SYNCHRONIZED
      description: Is group synchronized.
      type: boolean
  - arguments:
    - description: Username of the user to be checked.
      name: userName
      required: true
    - description: Group name in which you want to search for the user.
      name: groupName
      required: true
    description: Check if user exists in a specific group.
    name: sta-user-exist-group
    outputs:
    - contextPath: STA.EXIST.USER.GROUP
      description: Check if user exists in group. Returns true, if the user is a member of the group.
      type: boolean
  - arguments:
    - description: User name of the user to be added.
      name: userName
      required: true
    - description: Name of the group in which the user needs to be added.
      name: groupName
      required: true
    description: Add user to a specific group.
    name: sta-add-user-group
    outputs:
    - contextPath: STA.UPDATE.USER.GROUP.USERID
      description: User ID of the user.
      type: string
    - contextPath: STA.UPDATE.USER.GROUP.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.UPDATE.USER.GROUP.GROUPID
      description: Group ID of the group.
      type: string
    - contextPath: STA.UPDATE.USER.GROUP.GROUPNAME
      description: Groupname of the group.
      type: string
    - contextPath: STA.UPDATE.USER.GROUP.STATUS
      description: Returns true, if the user successfully added to the group.
      type: boolean
  - arguments:
    - description: User name of the user to be deleted from the group.
      name: userName
      required: true
    - description: Group name from which the user needs to be deleted.
      name: groupName
      required: true
    description: Remove user from a group.
    name: sta-remove-user-group
    outputs:
    - contextPath: STA.UPDATE.USER.GROUP.USERID
      description: User ID of the user.
      type: string
    - contextPath: STA.UPDATE.USER.GROUP.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.UPDATE.USER.GROUP.GROUPID
      description: Group ID of the group.
      type: string
    - contextPath: STA.UPDATE.USER.GROUP.GROUPNAME
      description: Groupname of the group.
      type: string
    - contextPath: STA.UPDATE.USER.GROUP.STATUS
      description: Returns false, if the user successfully removed from the group.
      type: boolean
  - arguments:
    - description: Username of the user.
      name: userName
    - description: 'Filter logs since the specified date and time in Universal Time Coordinated time zone. Format : yyyy-mm-ddTHH:mm:ss.fffZ  .Example : 2021-06-03T06:27:00.000Z.'
      name: since
    - description: 'Filter logs until the specified date and time in Universal Time Coordinated time zone. Format : yyyy-mm-ddTHH:mm:ss.fffZ  .Example : 2021-06-03T07:40:00.000Z.'
      name: until
    - description: The maximum number of results to return.
      name: limit
    description: Get access, authentication, and audit logs.
    name: sta-get-logs
    outputs:
    - contextPath: STA.LOGS.TIMESTAMP
      description: Timestamp of event.
      type: string
    - contextPath: STA.LOGS.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.LOGS.TYPE
      description: Type of event log.
      type: string
    - contextPath: STA.LOGS.CREDENTIAL
      description: Credential type of the event.
      type: string
    - contextPath: STA.LOGS.ACTION
      description: Authentication action.
      type: string
    - contextPath: STA.LOGS.RESULT
      description: Authentication Action Result.
      type: string
    - contextPath: STA.LOGS.MESSAGE
      description: Message or description of the event.
      type: string
    - contextPath: STA.LOGS.APPLICATION
      description: Application name.
      type: string
    - contextPath: STA.LOGS.POLICY
      description: Policy applied for the application.
      type: string
    - contextPath: STA.LOGS.STATE
      description: State of the access request.
      type: string
    - contextPath: STA.LOGS.OPERATIONTYPE
      description: Operation type.
      type: string
    - contextPath: STA.LOGS.OPERATIONOBJECT
      description: Operation object type.
      type: string
    - contextPath: STA.LOGS.OPERATIONNAME
      description: Operation object name.
      type: string
    - contextPath: STA.LOGS.SERIAL
      description: Serial number of authentication.
      type: string
    - contextPath: STA.LOGS.IP
      description: IP address of the user.
      type: string
  - arguments: []
    description: Checks if you have permission to access the requested tenant.
    name: sta-validate-tenant
    outputs:
    - contextPath: STA.VALIDATE.TENANT
      description: Checks if you have permission to access the requested tenant.
      type: boolean
  - arguments:
    - description: The maximum number of results to return.
      name: limit
    description: Get the list of the applications in the tenant.
    name: sta-get-application-list
    outputs:
    - contextPath: STA.APPLICATION.ID
      description: ID of the application.
      type: string
    - contextPath: STA.APPLICATION.NAME
      description: Name of the application.
      type: string
    - contextPath: STA.APPLICATION.STATUS
      description: Status of the application.
      type: string
  - arguments:
    - description: Name of the application.
      name: applicationName
      required: true
    description: Get the information for a specific application in the tenant.
    name: sta-get-application-info
    outputs:
    - contextPath: STA.APPLICATION.ID
      description: ID of the application.
      type: string
    - contextPath: STA.APPLICATION.NAME
      description: Name of the application.
      type: string
    - contextPath: STA.APPLICATION.STATUS
      description: Status of the application.
      type: string
    - contextPath: STA.APPLICATION.TYPE
      description: Status of the application.
      type: string
    - contextPath: STA.APPLICATION.TEMPLATE
      description: Name of the template.
      type: string
    - contextPath: STA.APPICATION.ASSIGNMENT
      description: Groups or users authorized to access an application.
      type: string
    - contextPath: STA.APPICATION.SCHEMA
      description: Schema version number.
      type: string
    - contextPath: STA.APPICATION.LASTMODIFIED
      description: Last modified date and time of application.
      type: string
  - arguments:
    - description: Username of the user.
      name: userName
      required: true
    - description: The maximum number of results to return.
      name: limit
    description: Get the list of the applications assigned to a specific user.
    name: sta-get-user-applications
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.USER.SCHEMA
      description: Schema version number.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.USER.FIRSTNAME
      description: First name of the user.
      type: string
    - contextPath: STA.USER.LASTNAME
      description: Last name of the user.
      type: string
    - contextPath: STA.USER.EMAIL
      description: Email ID of the user.
      type: string
    - contextPath: STA.USER.MOBILENUMBER
      description: Mobile number for the user.
      type: number
    - contextPath: STA.USER.ALIAS1
      description: Alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS2
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.CUSTOM1
      description: Custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM2
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM3
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.ADDRESS
      description: Address of the user.
      type: string
    - contextPath: STA.USER.CITY
      description: City of the user.
      type: string
    - contextPath: STA.USER.STATE
      description: State of the user.
      type: string
    - contextPath: STA.USER.COUNTRY
      description: Country of the user.
      type: string
    - contextPath: STA.USER.POSTALCODE
      description: Postal Code of the user.
      type: number
    - contextPath: STA.USER.SYNCHRONIZED
      description: Is user synchronized.
      type: boolean
    - contextPath: STA.USER.APPLICATION.ID
      description: ID of the application.
      type: string
    - contextPath: STA.USER.APPLICATION.NAME
      description: Name of the application.
      type: string
    - contextPath: STA.USER.APPLICATION.STATUS
      description: Status of the application.
      type: string
  - arguments:
    - description: Username of the user.
      name: userName
      required: true
    description: Get sessions for a specific user.
    name: sta-get-user-sessions
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.USER.SCHEMA
      description: Schema version number.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.USER.FIRSTNAME
      description: First name of the user.
      type: string
    - contextPath: STA.USER.LASTNAME
      description: Last name of the user.
      type: string
    - contextPath: STA.USER.EMAIL
      description: Email ID of the user.
      type: string
    - contextPath: STA.USER.MOBILENUMBER
      description: Mobile number for the user.
      type: number
    - contextPath: STA.USER.ALIAS1
      description: Alias for the user.
      type: string
    - contextPath: STA.USER.ALIAS2
      description: Additional alias for the user.
      type: string
    - contextPath: STA.USER.CUSTOM1
      description: Custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM2
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.CUSTOM3
      description: Additional custom value for the user.
      type: string
    - contextPath: STA.USER.ADDRESS
      description: Address of the user.
      type: string
    - contextPath: STA.USER.CITY
      description: City of the user.
      type: string
    - contextPath: STA.USER.STATE
      description: State of the user.
      type: string
    - contextPath: STA.USER.COUNTRY
      description: Country of the user.
      type: string
    - contextPath: STA.USER.POSTALCODE
      description: Postal Code of the user.
      type: number
    - contextPath: STA.USER.SYNCHRONIZED
      description: Is user synchronized.
      type: boolean
    - contextPath: STA.USER.SESSION.ID
      description: Session ID for the user.
      type: string
    - contextPath: STA.USER.SESSION.START
      description: Session start timestamp.
      type: string
    - contextPath: STA.USER.SESSION.EXPIRY
      description: Session end timestamp.
      type: string
    - contextPath: STA.USER.SESSION.APPLICATION.ID
      description: Name of the application.
      type: string
    - contextPath: STA.USER.SESSION.APPLICATION.NAME
      description: Returns true, if the user session deleted for an application.
      type: boolean
  - arguments:
    - description: Username of the user.
      name: userName
      required: true
    description: Delete all the active SSO sessions for a specific user from the STA.
    name: sta-delete-user-sessions
    outputs:
    - contextPath: STA.USER.ID
      description: User ID of the user.
      type: string
    - contextPath: STA.USER.USERNAME
      description: Username of the user.
      type: string
    - contextPath: STA.USER.SESSION.DELETED
      description: Returns true, if all the user SSO sessions deleted successfully.
      type: boolean
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)