Security

Hello,
  I have configured the Intune extension to download Intune attributes into the endpoint repository which works without issues. What I want to do is pull the Intune email address Endpoint:Intune Email Address I can see it in access tracker when I try to enforce on that attribute says "Policy server Failed to get value for attributes=[Endpoint:Intune Email Address]".  

My enforcement is %{Authorization:[Endpoints Repository]:Endpoint:Intune Email Address}

I'm assuming that I need to write a SQL filter query to do this beyond my capability anyone know what the filter query would be?





------------------------------
Kelly L
------------------------------

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software
------------------------------

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L
------------------------------

Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software
------------------------------

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software
------------------------------

Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L
------------------------------


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software

I want to replace the user which is the mac address with the intune email address as part of a enforcement profile. That way when I see that person on the controller I know who they are by their email address as the user.  This is what I have in there now. 

%{Authorization:[Endpoints Repository]:%{Endpoint:Intune Email Address}

After authenticating the mac address the access tracker says.  

Policy server Failed to get value for attributes=[Endpoint:Intune Email Address]


------------------------------
Kelly L
------------------------------

Original Message:
Sent: Sep 17, 2021 02:23 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software
------------------------------


Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software

You could import the attached zip under Policy Manager » Configuration » Enforcement » Profiles and use this profile in your enforcement policy.
ZIP password 'aruba' without quotes.
Snippet from the lab:


Enforcement Profile:




------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP
------------------------------

Original Message:
Sent: Sep 17, 2021 04:52 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I want to replace the user which is the mac address with the intune email address as part of a enforcement profile. That way when I see that person on the controller I know who they are by their email address as the user.  This is what I have in there now. 

%{Authorization:[Endpoints Repository]:%{Endpoint:Intune Email Address}

After authenticating the mac address the access tracker says.  

Policy server Failed to get value for attributes=[Endpoint:Intune Email Address]


------------------------------
Kelly L
------------------------------


Original Message:
Sent: Sep 17, 2021 02:23 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software


Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software

That worked thanks

------------------------------
Kelly L
------------------------------

Original Message:
Sent: Sep 17, 2021 02:23 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software
------------------------------


Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software

How would I roll map other Intune Attributes when I look I don't see any names of the attributes in that drop down list.  Does this have to be added each time with an XML file?

------------------------------
Kelly L
------------------------------

Original Message:
Sent: Sep 17, 2021 06:23 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

That worked thanks

------------------------------
Kelly L
------------------------------


Original Message:
Sent: Sep 17, 2021 02:23 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software


Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software

To see the available set of attributes that could be leveraged in policy, you can navigate to Policy Manager » Configuration » Identity » Endpoints » Attributes of an intune managed device.


------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP
------------------------------

Original Message:
Sent: Sep 20, 2021 03:24 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

How would I roll map other Intune Attributes when I look I don't see any names of the attributes in that drop down list.  Does this have to be added each time with an XML file?

------------------------------
Kelly L
------------------------------


Original Message:
Sent: Sep 17, 2021 06:23 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

That worked thanks

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 02:23 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software


Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software

When I try to find the Intune attributes in the drop down I don't see them for roll mapping.


------------------------------
Kelly L
------------------------------

Original Message:
Sent: Sep 20, 2021 08:19 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

To see the available set of attributes that could be leveraged in policy, you can navigate to Policy Manager » Configuration » Identity » Endpoints » Attributes of an intune managed device.


------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP
------------------------------


Original Message:
Sent: Sep 20, 2021 03:24 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

How would I roll map other Intune Attributes when I look I don't see any names of the attributes in that drop down list.  Does this have to be added each time with an XML file?

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 06:23 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

That worked thanks

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 02:23 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software


Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software

we have to use Endpoint: Attributes, 



------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP
------------------------------

Original Message:
Sent: Sep 21, 2021 10:48 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

When I try to find the Intune attributes in the drop down I don't see them for roll mapping.


------------------------------
Kelly L
------------------------------


Original Message:
Sent: Sep 20, 2021 08:19 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

To see the available set of attributes that could be leveraged in policy, you can navigate to Policy Manager » Configuration » Identity » Endpoints » Attributes of an intune managed device.


------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP


Original Message:
Sent: Sep 20, 2021 03:24 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

How would I roll map other Intune Attributes when I look I don't see any names of the attributes in that drop down list.  Does this have to be added each time with an XML file?

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 06:23 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

That worked thanks

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 02:23 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software


Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software

That worked thanks.

------------------------------
Kelly L
------------------------------

Original Message:
Sent: Sep 21, 2021 01:42 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

we have to use Endpoint: Attributes, 



------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP
------------------------------


Original Message:
Sent: Sep 21, 2021 10:48 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

When I try to find the Intune attributes in the drop down I don't see them for roll mapping.


------------------------------
Kelly L


Original Message:
Sent: Sep 20, 2021 08:19 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

To see the available set of attributes that could be leveraged in policy, you can navigate to Policy Manager » Configuration » Identity » Endpoints » Attributes of an intune managed device.


------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP


Original Message:
Sent: Sep 20, 2021 03:24 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

How would I roll map other Intune Attributes when I look I don't see any names of the attributes in that drop down list.  Does this have to be added each time with an XML file?

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 06:23 PM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

That worked thanks

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 02:23 PM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

We don't have a create a custom SQL you can directly use it using %{Endpoint: Attribute Name} in role mapping or enforcement policies.
Also, if you could elaborate on the requirement as where we are using this attribute?

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software


Original Message:
Sent: Sep 17, 2021 10:12 AM
From: Kelly Levine
Subject: Pulling Intune email attribute from endpoint repository

I tried that I get a syntax error when I add the that to the filter. 

The filter has been saved but has the following error:
Invalid SQL syntax - ERROR: syntax error at end of input Position: 4  

All the other SQL commands start with SELECT example 
"SELECT mac_address AS User_Password FROM tips_endpoints WHERE mac_address = LOWER('%{Connection:Client-Mac-Address-NoDelim}') AND status = 'Known'"

------------------------------
Kelly L


Original Message:
Sent: Sep 17, 2021 04:57 AM
From: Sandeep Yadav
Subject: Pulling Intune email attribute from endpoint repository

Hi Kelly,

The authorisation is only required if you would like to fetch profiling info like Device type or OS Family etc.
To fetch the endpoint attributes you can directly use %{Endpoint: Attribute Name}, hence the attribute in your case should be %{Endpoint:Intune Email Address}.

------------------------------
SANDEEP YADAV
Global Escalation Center, ACCP | Aruba Software