Skip to content

Commit a585931

Browse files
ranbelranbel
committed
device profile selectors
1 parent 7f9f2b7 commit a585931

File tree

9 files changed

+123
-29
lines changed

9 files changed

+123
-29
lines changed

‎src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles.mdx‎

Lines changed: 67 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -130,20 +130,76 @@ Alternatively, if you do not have access to the CLI, you can use [DEX remote cap
130130

131131
## Selectors
132132

133-
| Selector | Description | WARP mode required |
134-
| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------ |
135-
| User email | Email address of a user <br /> `[email protected]` | Gateway with WARP |
136-
| User group emails | Email address of an [IdP group](/cloudflare-one/policies/gateway/identity-selectors/#idp-groups-in-gateway) <br /> `[email protected]` | Gateway with WARP |
137-
| User group IDs | ID of an [IdP group](/cloudflare-one/policies/gateway/identity-selectors/#idp-groups-in-gateway) <br /> `12jf495bhjd7893ml09o` | Gateway with WARP |
138-
| User group names | Name of an [IdP group](/cloudflare-one/policies/gateway/identity-selectors/#idp-groups-in-gateway) <br /> `developers` | Gateway with WARP |
139-
| Operating system | Operating system of the device <br /> `macOS` | Any mode |
140-
| Operating system version | [OS version](/cloudflare-one/identity/devices/warp-client-checks/os-version/#determine-the-os-version) specified in Semver format <br /> `1.2.0` | Any mode |
141-
| Managed network | [Network location](/cloudflare-one/connections/connect-devices/warp/configure-warp/managed-networks/) of the device | Any mode |
142-
| SAML Attributes | Attribute name and value from a [SAML IdP](/cloudflare-one/policies/gateway/identity-selectors/#generic-saml-idp) | Gateway with WARP |
143-
| Service Token | [Service token](/cloudflare-one/connections/connect-devices/warp/deployment/device-enrollment/#check-for-service-token) used to enroll the device | Any mode |
133+
You can configure device profiles to match against the following selectors, or criteria. Identity-based selectors are only available if the user [enrolled the device](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/) by logging in to an identity provider (IdP).
134+
135+
### User email
136+
137+
Apply a device profile based on the user's email.
138+
139+
<Render file="gateway/selectors/user-email" params={{ UIname: "User email" }}/>
140+
141+
### User group emails
142+
143+
Apply a device profile based on an IdP group email address of which the user is configured as a member in the IdP.
144+
145+
<Render file="gateway/selectors/user-group-email" params={{ UIname: "User group emails" }}/>
146+
147+
### User group IDs
148+
149+
Apply a device profile based on an IdP group ID of which the user is configured as a member in the IdP.
150+
151+
<Render file="gateway/selectors/user-group-ids" params={{ UIname: "User group IDs" }}/>
152+
153+
### User group names
154+
155+
Apply a device profile based on an IdP group name of which the user is configured as a member in the IdP.
156+
157+
<Render file="gateway/selectors/user-group-names" params={{ UIname: "User group names" }}/>
158+
159+
### Operating system
160+
161+
Apply a device profile based on the operating system of the device.
162+
163+
| UI name | API example |
164+
| --------------- | ------------------------------------------------- |
165+
| Operating system | `os.name in {\"windows\" \"mac\"}` |
166+
167+
### Operating system version
168+
169+
Apply a device profile based on the [OS version](/cloudflare-one/identity/devices/warp-client-checks/os-version/#determine-the-os-version) of the device.
170+
171+
| UI name | API example |
172+
| --------------- | ------------------------------------------------- |
173+
| Operating system version | `os.version == \"1.2.0\"` |
174+
175+
<Render file="warp/os-version-semver" />
176+
177+
### Managed network
178+
179+
Apply a device profile based on the [managed network](/cloudflare-one/connections/connect-devices/warp/configure-warp/managed-networks/) that the device is connected to.
180+
181+
| UI name | API example |
182+
| --------------- | ------------------------------------------------- |
183+
| Managed network | `network == \"Austin office\"` |
184+
185+
### SAML attributes
186+
187+
Apply a device profile based on an attribute name and value from a [SAML IdP](/cloudflare-one/policies/gateway/identity-selectors/#generic-saml-idp).
188+
189+
<Render file="gateway/selectors/saml-attributes" />
190+
191+
### Service token
192+
193+
Apply a device profile based on the [service token](/cloudflare-one/connections/connect-devices/warp/deployment/device-enrollment/#check-for-service-token) used to enroll the device.
194+
195+
| UI name | API example |
196+
| --------------- | ------------------------------------------------- |
197+
| Service Token | `identity.service_token_uuid == \"f174e90a-fafe-4643-bbbc-4a0ed4fc8415\"` |
144198

145199
## Comparison operators
146200

201+
Comparison operators determine how device profiles match a selector.
202+
147203
| Operator | Meaning |
148204
| -------- | ------------------------------------------ |
149205
| is | equals the defined value |

‎src/content/docs/cloudflare-one/identity/devices/warp-client-checks/os-version.mdx‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,10 +25,9 @@ The OS Version device posture attribute checks whether the version of a device's
2525
2. Scroll down to **WARP client checks** and select **Add new**.
2626
3. Select **OS version**.
2727
4. Configure the **Operating system**, **Operator**, and **Version** fields to specify the [OS version](#determine-the-os-version) you want devices to match.
28-
:::note
2928

30-
The OS version must be specified as a valid [Semver](https://semver.org/). For example, if your device is running OS version `1.2`, you must enter `1.2.0`.
31-
:::
29+
<Render file="warp/os-version-semver" />
30+
3231
5. (Optional) Configure additional OS-specific fields:
3332

3433
<Tabs> <TabItem label="macOS">

‎src/content/docs/cloudflare-one/policies/gateway/identity-selectors.mdx‎

Lines changed: 5 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -36,41 +36,31 @@ Gateway will automatically detect changes in user name, title, and group members
3636

3737
Specify a value from the SAML Attribute Assertion.
3838

39-
| UI name | API example |
40-
| --------------- | ------------------------------------------------- |
41-
| SAML Attributes | `identity.saml_attributes == "\"group=finance\""` |
39+
<Render file="gateway/selectors/saml-attributes" />
4240

4341
### User Email
4442

4543
Use this selector to create identity-based Gateway rules based on a user's email.
4644

47-
| UI name | API example value |
48-
| ---------- | ------------------------------------------- |
49-
| User Email | `identity.email == "[email protected]"` |
45+
<Render file="gateway/selectors/user-email" params={{ UIname: "User Email" }}/>
5046

5147
### User Group IDs
5248

5349
Use this selector to create identity-based Gateway rules based on an IdP group ID of which the user is configured as a member in the IdP.
5450

55-
| UI name | API example |
56-
| -------------- | ---------------------------------------------- |
57-
| User Group IDs | `identity.groups.id == "12jf495bhjd7893ml09o"` |
51+
<Render file="gateway/selectors/user-group-ids" params={{ UIname: "User Group IDs" }}/>
5852

5953
### User Group Email
6054

6155
Use this selector to create identity-based Gateway rules based on an IdP group email address of which the user is configured as a member in the IdP.
6256

63-
| UI name | API example |
64-
| ---------------- | ------------------------------------------------- |
65-
| User Group Email | `identity.groups.id == "[email protected]"` |
57+
<Render file="gateway/selectors/user-group-email" params={{ UIname: "User Group Email" }}/>
6658

6759
### User Group Names
6860

6961
Use this selector to create identity-based Gateway rules based on an IdP group name of which the user is configured as a member in the IdP.
7062

71-
| UI name | API example |
72-
| ---------------- | --------------------------------------- |
73-
| User Group Names | `identity.groups.name == "\"finance\""` |
63+
<Render file="gateway/selectors/user-group-names" params={{ UIname: "User Group Names" }}/>
7464

7565
### User Name
7666

‎src/content/partials/cloudflare-one/gateway/selectors/saml-attributes.mdx‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
{}
3+
---
4+
5+
| UI name | API example |
6+
| --------------- | ------------------------------------------------- |
7+
| SAML Attributes | `identity.saml_attributes == "\"group=finance\""` |

‎src/content/partials/cloudflare-one/gateway/selectors/user-email.mdx‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
params:
3+
- UIname
4+
---
5+
6+
| UI name | API example value |
7+
| ---------- | ------------------------------------------- |
8+
| {props.UIname} | `identity.email == "[email protected]"` |

‎src/content/partials/cloudflare-one/gateway/selectors/user-group-email.mdx‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
params:
3+
- UIname
4+
---
5+
6+
| UI name | API example |
7+
| ---------------- | ------------------------------------------------- |
8+
| {props.UIname} | `identity.groups.email == "[email protected]"` |

‎src/content/partials/cloudflare-one/gateway/selectors/user-group-ids.mdx‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
params:
3+
- UIname
4+
---
5+
6+
| UI name | API example |
7+
| ---------------- | ------------------------------------------------- |
8+
| {props.UIname} | `identity.groups.id == "12jf495bhjd7893ml09o"` |

‎src/content/partials/cloudflare-one/gateway/selectors/user-group-names.mdx‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
params:
3+
- UIname
4+
---
5+
6+
| UI name | API example |
7+
| ---------------- | ------------------------------------------------- |
8+
| {props.UIname} | `identity.groups.name == "\"finance\""` |

‎src/content/partials/cloudflare-one/warp/os-version-semver.mdx‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
{}
3+
4+
---
5+
6+
:::note
7+
8+
The OS version must be specified as a valid [Semver](https://semver.org/). For example, if your device is running OS version `1.2`, you must enter `1.2.0`.
9+
10+
:::

0 commit comments

Comments
 (0)