Skip to content

Make okta and jamf properties snake_case #324

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
JonasBK merged 1 commit into from
Jun 26, 2026
+352 −352
Merged

Make okta and jamf properties snake_case #324

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions docs/opengraph/extensions/jamf/nodes/jamf_account.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -59,19 +59,19 @@ The tables below list edges defined by the Jamf extension only. Additional edges
| Property Name | Data Type | Description |
|---|---|---|
| displayname | string | Full name of the account holder |
| privilegeSet | string | Privilege set assigned (Administrator, Custom, etc.) |
| privilege_set | string | Privilege set assigned (Administrator, Custom, etc.) |
| objectid | string | Unique identifier for the Account |
| name | string | Username of the account |
| email | string | Email address associated with the account |
| siteID | integer | ID of the site the account is assigned to |
| accessLevel | string | Access level (Full Access, Site Access, Group Access) |
| site_id | integer | ID of the site the account is assigned to |
| access_level | string | Access level (Full Access, Site Access, Group Access) |
| enabled | string | Whether the account is enabled |
| Tier | integer | Security tier classification (0 for administrators) |
| localAccount | boolean | Whether this is a local Jamf account (not directory) |
| privilegesJSSObjects | string[] | JSS Object permissions granted to the account |
| privilegesJSSActions | string[] | JSS Action permissions granted |
| privilegesJSSOSettings | string[] | JSS Settings permissions granted |
| Groups | integer | Group assignment indicator |
| tier | integer | Security tier classification (0 for administrators) |
| local_account | boolean | Whether this is a local Jamf account (not directory) |
| privileges_jss_objects | string[] | JSS Object permissions granted to the account |
| privileges_jss_actions | string[] | JSS Action permissions granted |
| privileges_jss_settings | string[] | JSS Settings permissions granted |
| groups | integer | Group assignment indicator |

## Relationship Diagram

Expand Down
6 changes: 3 additions & 3 deletions docs/opengraph/extensions/jamf/nodes/jamf_apiclient.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,12 +50,12 @@ The tables below list edges defined by the Jamf extension only. Additional edges

| Property Name | Data Type | Description |
|---|---|---|
| displayName | string | Display name of the API client |
| display_name | string | Display name of the API client |
| name | string | Name of the API client |
| enabled | boolean | Whether the API client is enabled |
| authorizationScopes | string[] | API roles assigned to this client |
| authorization_scopes | string[] | API roles assigned to this client |
| privileges | string[] | Resolved list of all privileges from assigned roles |
| Tier | integer | Security tier classification |
| tier | integer | Security tier classification |

## Relationship Diagram

Expand Down
4 changes: 2 additions & 2 deletions docs/opengraph/extensions/jamf/nodes/jamf_computer.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ The tables below list edges defined by the Jamf extension only. Additional edges
| user_approved_enrollment | boolean | Whether enrollment was user-approved |
| user_approved_mdm | boolean | Whether MDM was user-approved |
| device_aad_infos | string | Azure AD device information |
| siteID | integer | ID of the site the computer belongs to |
| site_id | integer | ID of the site the computer belongs to |
| sitename | string | Name of the site |
| username | string | Assigned username |
| email_address | string | Assigned user email |
Expand All @@ -71,7 +71,7 @@ The tables below list edges defined by the Jamf extension only. Additional edges
| jamf_version | string | Jamf agent version |
| filevault2_users | string | FileVault 2 enabled users |
| local_accounts | string | Local user accounts |
| Tier | integer | Security tier classification |
| tier | integer | Security tier classification |

## Relationship Diagram

Expand Down
2 changes: 1 addition & 1 deletion docs/opengraph/extensions/jamf/nodes/jamf_computeruser.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ The tables below list edges defined by the Jamf extension only. Additional edges
| email | string | Email address of the user |
| objectid | string | Unique identifier for the Computer User |
| computer | string | ID of the computer this user is assigned to |
| Tier | integer | Security tier classification |
| tier | integer | Security tier classification |

## Relationship Diagram

Expand Down
18 changes: 9 additions & 9 deletions docs/opengraph/extensions/jamf/nodes/jamf_disabledaccount.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,19 +61,19 @@ The tables below list edges defined by the Jamf extension only. Additional edges
| Property Name | Data Type | Description |
|---|---|---|
| displayname | string | Full name of the account holder |
| privilegeSet | string | Privilege set assigned (Administrator, Custom, etc.) |
| privilege_set | string | Privilege set assigned (Administrator, Custom, etc.) |
| objectid | string | Unique identifier for the Account |
| name | string | Username of the account |
| email | string | Email address associated with the account |
| siteID | integer | ID of the site the account is assigned to |
| accessLevel | string | Access level (Full Access, Site Access, Group Access) |
| site_id | integer | ID of the site the account is assigned to |
| access_level | string | Access level (Full Access, Site Access, Group Access) |
| enabled | string | Whether the account is enabled (always "Disabled") |
| Tier | integer | Security tier classification (0 for administrators) |
| localAccount | boolean | Whether this is a local Jamf account (not directory) |
| privilegesJSSObjects | string[] | JSS Object permissions granted to the account |
| privilegesJSSActions | string[] | JSS Action permissions granted |
| privilegesJSSOSettings | string[] | JSS Settings permissions granted |
| Groups | integer | Group assignment indicator |
| tier | integer | Security tier classification (0 for administrators) |
| local_account | boolean | Whether this is a local Jamf account (not directory) |
| privileges_jss_objects | string[] | JSS Object permissions granted to the account |
| privileges_jss_actions | string[] | JSS Action permissions granted |
| privileges_jss_settings | string[] | JSS Settings permissions granted |
| groups | integer | Group assignment indicator |

## Relationship Diagram

Expand Down
6 changes: 3 additions & 3 deletions docs/opengraph/extensions/jamf/nodes/jamf_disabledapiclient.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,12 +52,12 @@ The tables below list edges defined by the Jamf extension only. Additional edges

| Property Name | Data Type | Description |
|---|---|---|
| displayName | string | Display name of the API client |
| display_name | string | Display name of the API client |
| name | string | Name of the API client |
| enabled | boolean | Whether the API client is enabled (always false) |
| authorizationScopes | string[] | API roles assigned to this client |
| authorization_scopes | string[] | API roles assigned to this client |
| privileges | string[] | Resolved list of all privileges from assigned roles |
| Tier | integer | Security tier classification |
| tier | integer | Security tier classification |

## Relationship Diagram

Expand Down
14 changes: 7 additions & 7 deletions docs/opengraph/extensions/jamf/nodes/jamf_group.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,15 +55,15 @@ The tables below list edges defined by the Jamf extension only. Additional edges
| Property Name | Data Type | Description |
|---|---|---|
| displayname | string | Display name of the group |
| privilegeSet | string | Privilege set assigned (Administrator, Custom, etc.) |
| privilege_set | string | Privilege set assigned (Administrator, Custom, etc.) |
| objectid | string | Unique identifier for the Group |
| name | string | Name of the group |
| siteID | integer | ID of the site the group is assigned to |
| accessLevel | string | Access level (Full Access, Site Access) |
| Tier | integer | Security tier classification (0 for administrator groups) |
| privilegesJSSObjects | string[] | JSS Object permissions granted to the group |
| privilegesJSSActions | string[] | JSS Action permissions granted |
| privilegesJSSOSettings | string[] | JSS Settings permissions granted |
| site_id | integer | ID of the site the group is assigned to |
| access_level | string | Access level (Full Access, Site Access) |
| tier | integer | Security tier classification (0 for administrator groups) |
| privileges_jss_objects | string[] | JSS Object permissions granted to the group |
| privileges_jss_actions | string[] | JSS Action permissions granted |
| privileges_jss_settings | string[] | JSS Settings permissions granted |
| members | string | Serialized list of group members |

## Relationship Diagram
Expand Down
4 changes: 2 additions & 2 deletions docs/opengraph/extensions/jamf/nodes/jamf_site.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,8 +38,8 @@ The tables below list edges defined by the Jamf extension only. Additional edges
| name | string | Name of the site |
| objectid | string | Unique identifier for the Site |
| displayname | string | Display name of the site |
| siteID | integer | Jamf site ID |
| Tier | integer | Security tier classification |
| site_id | integer | Jamf site ID |
| tier | integer | Security tier classification |

## Relationship Diagram

Expand Down
18 changes: 9 additions & 9 deletions docs/opengraph/extensions/jamf/nodes/jamf_ssointegration.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,16 +35,16 @@ The tables below list edges defined by the Jamf extension only. Additional edges

| Property Name | Data Type | Description |
|---|---|---|
| ssoEnabled | boolean | Whether SSO is enabled |
| idpUrl | string | Identity Provider URL |
| idpProviderType | string | Type of identity provider |
| entityId | string | SAML entity ID |
| groupAttributeName | string | Attribute name for group mapping |
| groupRdnKey | string | RDN key for group lookups |
| siteID | string | Site ID (always "-1" for global) |
| Tier | integer | Security tier classification (0) |
| sso_enabled | boolean | Whether SSO is enabled |
| idp_url | string | Identity Provider URL |
| idp_provider_type | string | Type of identity provider |
| entity_id | string | SAML entity ID |
| group_attribute_name | string | Attribute name for group mapping |
| group_rdn_key | string | RDN key for group lookups |
| site_id | string | Site ID (always "-1" for global) |
| tier | integer | Security tier classification (0) |
| name | string | Name of the SSO integration |
| enrollmentSsoConfig | string | Enrollment SSO configuration |
| enrollment_sso_config | string | Enrollment SSO configuration |

## Relationship Diagram

Expand Down
2 changes: 1 addition & 1 deletion docs/opengraph/extensions/jamf/nodes/jamf_tenant.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ The tables below list edges defined by the Jamf extension only. Additional edges
| type | string | Hosting type (cloud-hosted or on-premesis) |
| objectid | string | Unique identifier matching the tenant name |
| displayname | string | Display name of the Tenant |
| Tier | integer | Security tier classification |
| tier | integer | Security tier classification |

## Relationship Diagram

Expand Down
8 changes: 4 additions & 4 deletions docs/opengraph/extensions/jamf/queries.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -152,7 +152,7 @@ Expand the graph by one edge showing nodes with edges to Tier 1 nodes with edges

```cypher
MATCH p=(a) - [] -> (s)-[r]->(t)
WHERE s.Tier = 1 AND t.Tier = 0
WHERE s.tier = 1 AND t.tier = 0
AND type(r) <> 'jamf_Contains'
RETURN p
LIMIT 1000
Expand Down Expand Up @@ -220,7 +220,7 @@ Retrieve attack paths between Tier 1 nodes and Tier 0 nodes that are fully trave

```cypher
MATCH p=(s)-[r*1..5]->(t)
WHERE s.Tier = 1 AND t.Tier = 0
WHERE s.tier = 1 AND t.tier = 0
AND s.primarykind <> 'jamf_Tenant'
AND s.primarykind <> 'jamf_Site'
AND r.traversable = True
Expand All @@ -236,7 +236,7 @@ Retrieve direct edges between Tier 1 nodes and Tier 0 nodes

```cypher
MATCH p=(s)-[]->(t)
WHERE s.Tier = 1 AND t.Tier = 0
WHERE s.tier = 1 AND t.tier = 0
RETURN p
LIMIT 1000
```
Expand All @@ -249,7 +249,7 @@ Filter out jamf_Contains edges from Tiered node query

```cypher
MATCH p=(s)-[r]->(t)
WHERE s.Tier = 1 AND t.Tier = 0
WHERE s.tier = 1 AND t.tier = 0
AND type(r) <> 'jamf_Contains'
RETURN p
LIMIT 1000
Expand Down
28 changes: 14 additions & 14 deletions docs/opengraph/extensions/okta/nodes/okta_agent.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,28 +37,28 @@ The tables below list edges defined by the Okta extension only. Additional edges
| ---- | ------ | ---- | ----------- |
| `id` | `agent.id` | `string` | Unique agent identifier. |
| `name` | `agent.name` | `string` | Agent name shown in Okta Admin Console. |
| `displayName` | `agent.name` | `string` | Display label used in BloodHound. |
| `oktaDomain` | Collector context (non-API) | `string` | Okta organization domain where the agent exists. |
| `poolName` | `agentPool.name` | `string` | Name of the parent [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool). For AD pools this typically corresponds to the synced AD domain. |
| `operationalStatus` | `agent.operationalStatus` | `string` | Runtime health/operational state reported by Okta. |
| `updateStatus` | `agent.updateStatus` | `string` | Agent software update state. |
| `display_name` | `agent.name` | `string` | Display label used in BloodHound. |
| `okta_domain` | Collector context (non-API) | `string` | Okta organization domain where the agent exists. |
| `pool_name` | `agentPool.name` | `string` | Name of the parent [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool). For AD pools this typically corresponds to the synced AD domain. |
| `operational_status` | `agent.operationalStatus` | `string` | Runtime health/operational state reported by Okta. |
| `update_status` | `agent.updateStatus` | `string` | Agent software update state. |
| `type` | `agent.type` | `string` | Agent type (for example AD, LDAP, IWA, or RADIUS). |
| `version` | `agent.version` | `string` | Agent software version. |
| `poolId` | `agent.poolId` | `string` | Identifier of the parent Okta agent pool. |
| `lastConnection` | `FromUnixTime(agent.lastConnection)` | `datetime` | Timestamp of the last successful agent connection to Okta. |
| `pool_id` | `agent.poolId` | `string` | Identifier of the parent Okta agent pool. |
| `last_connection` | `FromUnixTime(agent.lastConnection)` | `datetime` | Timestamp of the last successful agent connection to Okta. |

## Sample Property Values

```yaml
id: a53xfufl4rqWcHhQo697
name: LON-SRV01
displayName: LON-SRV01
poolId: 0oaxg9rhdd7ncGCXv697
oktaDomain: contoso.okta.com
poolName: contoso.local
operationalStatus: DISRUPTED
updateStatus: Cancelled
display_name: LON-SRV01
pool_id: 0oaxg9rhdd7ncGCXv697
okta_domain: contoso.okta.com
pool_name: contoso.local
operational_status: DISRUPTED
update_status: Cancelled
type: AD
version: 3.22.0
lastConnection: 2026-01-15T02:29:40+00:00
last_connection: 2026-01-15T02:29:40+00:00
```
12 changes: 6 additions & 6 deletions docs/opengraph/extensions/okta/nodes/okta_agentpool.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,9 +50,9 @@ The tables below list edges defined by the Okta extension only. Additional edges
| ---- | ------ | ---- | ----------- |
| `id` | `agentPool.id + "_pool"` | `string` | Unique agent pool identifier. |
| `name` | `agentPool.name` | `string` | Name of the Okta agent pool. |
| `displayName` | `agentPool.name` | `string` | Display label used in BloodHound. |
| `oktaDomain` | Collector context (non-API) | `string` | Okta organization domain where the agent pool exists. |
| `operationalStatus` | `agentPool.operationalStatus` | `string` | Current health/operational state of the agent pool. |
| `display_name` | `agentPool.name` | `string` | Display label used in BloodHound. |
| `okta_domain` | Collector context (non-API) | `string` | Okta organization domain where the agent pool exists. |
| `operational_status` | `agentPool.operationalStatus` | `string` | Current health/operational state of the agent pool. |
| `type` | `agentPool.type` | `string` | Agent pool type (for example AD, LDAP, IWA, RADIUS). |

<Info>
Expand All @@ -64,8 +64,8 @@ The `_pool` suffix is therefore added to the `id` property of `Okta_AgentPool` n
```yaml
id: 0oaxg9rhdd7ncGCXv697_pool
name: contoso.local
displayName: contoso.local
oktaDomain: contoso.okta.com
operationalStatus: DISRUPTED
display_name: contoso.local
okta_domain: contoso.okta.com
operational_status: DISRUPTED
type: AD
```
20 changes: 10 additions & 10 deletions docs/opengraph/extensions/okta/nodes/okta_apiserviceintegration.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,21 +49,21 @@ The tables below list edges defined by the Okta extension only. Additional edges
| ---- | ------ | ---- | ----------- |
| `id` | `service.id` | `string` | Unique API service integration identifier. |
| `name` | `service.name` | `string` | Name of the API service integration in Okta. |
| `displayName` | `service.name` | `string` | Display label used in BloodHound. |
| `oktaDomain` | Collector context (non-API) | `string` | Okta organization domain where the integration exists. |
| `appType` | `service.type` | `string` | Integration/application type identifier. |
| `oauthScopes` | `service.grantedScopes` | `string[]` | OAuth 2.0 scopes granted to the integration. |
| `createdAt` | `service.createdAt` | `datetime` | Timestamp when the integration was created. |
| `display_name` | `service.name` | `string` | Display label used in BloodHound. |
| `okta_domain` | Collector context (non-API) | `string` | Okta organization domain where the integration exists. |
| `app_type` | `service.type` | `string` | Integration/application type identifier. |
| `oauth_scopes` | `service.grantedScopes` | `string[]` | OAuth 2.0 scopes granted to the integration. |
| `created_at` | `service.createdAt` | `datetime` | Timestamp when the integration was created. |

## Sample Property Values

```yaml
id: 0oaz7jy5f2oXnvtmN697
name: Falcon Shield
displayName: Falcon Shield
oktaDomain: contoso.okta.com
appType: falconshieldapiservice
oauthScopes:
display_name: Falcon Shield
okta_domain: contoso.okta.com
app_type: falconshieldapiservice
oauth_scopes:
- okta.users.read
- okta.oauthIntegrations.read
- okta.threatInsights.read
Expand All @@ -79,7 +79,7 @@ oauthScopes:
- okta.policies.read
- okta.networkZones.read
- okta.features.read
createdAt: 2026-01-15T12:25:42.000Z
created_at: 2026-01-15T12:25:42.000Z
```

## Integration OAuth 2.0 Scopes
Expand Down
32 changes: 16 additions & 16 deletions docs/opengraph/extensions/okta/nodes/okta_apitoken.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,28 +37,28 @@ No inbound edges are defined by the Okta extension for this node.
| ---- | ------ | ---- | ----------- |
| `id` | `apiToken.id` | `string` | Unique API token identifier. |
| `name` | `apiToken.name` | `string` | Friendly name of the API token. |
| `displayName` | `apiToken.name` | `string` | Display label used in BloodHound. |
| `oktaDomain` | Collector context (non-API) | `string` | Okta organization domain where the token exists. |
| `userId` | `apiToken.userId` | `string` | ID of the Okta user that owns the token. |
| `clientName` | `apiToken.clientName` | `string` | Client/application name associated with the token. |
| `display_name` | `apiToken.name` | `string` | Display label used in BloodHound. |
| `okta_domain` | Collector context (non-API) | `string` | Okta organization domain where the token exists. |
| `user_id` | `apiToken.userId` | `string` | ID of the Okta user that owns the token. |
| `client_name` | `apiToken.clientName` | `string` | Client/application name associated with the token. |
| `created` | `apiToken.created` | `datetime` | Token creation timestamp. |
| `lastUpdated` | `apiToken.lastUpdated` | `datetime` | Last update timestamp of token metadata. |
| `expiresAt` | `apiToken.expiresAt` | `datetime` | Token expiration timestamp. |
| `networkConnection` | `apiToken.network.connection` | `string` | Network connection restriction for token usage. |
| `tokenWindow` | `ToTimeSpan(apiToken.tokenWindow)` | `duration` | Inactivity window converted to `TimeSpan` when present. |
| `last_updated` | `apiToken.lastUpdated` | `datetime` | Last update timestamp of token metadata. |
| `expires_at` | `apiToken.expiresAt` | `datetime` | Token expiration timestamp. |
| `network_connection` | `apiToken.network.connection` | `string` | Network connection restriction for token usage. |
| `token_window` | `ToTimeSpan(apiToken.tokenWindow)` | `duration` | Inactivity window converted to `TimeSpan` when present. |

## Sample Property Values

```yaml
id: 00T36fk75smeJybKx697
name: Postman
displayName: Postman
oktaDomain: contoso.okta.com
userId: 00uw0o8iizq37KgKP697
clientName: Okta API
display_name: Postman
okta_domain: contoso.okta.com
user_id: 00uw0o8iizq37KgKP697
client_name: Okta API
created: 2025-10-03T10:08:09+00:00
lastUpdated: 2026-01-31T20:22:42+00:00
expiresAt: 2026-03-02T20:22:42+00:00
networkConnection: ANYWHERE
tokenWindow: 30.00:00:00
last_updated: 2026-01-31T20:22:42+00:00
expires_at: 2026-03-02T20:22:42+00:00
network_connection: ANYWHERE
token_window: 30.00:00:00
```
Loading
Loading