42Gears SureMDM

Visualize your 42Gears SureMDM managed devices, device groups, and installed applications, and monitor changes through queries and alerts. This integration ingests the devices enrolled in SureMDM along with their hardware, network, and security details, the group hierarchy that organizes them, and the applications installed on each device to provide visibility into your mobile and endpoint fleet.

Installation

Installation

info

To configure this integration you will need the username and password used to sign in to your SureMDM console, along with your SureMDM API Key. The SureMDM API authenticates each request using Basic Auth (username and password) together with an ApiKey header.

Configuration in SureMDM

To find your SureMDM API Key:

1. Log in to your SureMDM Web Console.
2. Navigate to Settings > Account Settings > Account Management.
3. Locate the API Key shown on the screen and copy it for use in JupiterOne.

See How to find out the API Key for your SureMDM account for more information.

Configuration in JupiterOne

To install the 42Gears SureMDM integration in JupiterOne, navigate to the Integrations tab in JupiterOne and select 42Gears SureMDM. Click New Instance to begin configuring your integration.

Creating an instance requires the following:

• Description to assist in identifying the integration instance, if desired.

• Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as DISABLED and manually execute the integration.

• Username - The SureMDM console login username (the same username used to sign in to the SureMDM UI), used for Basic Auth against the API.

• Password - The password for your SureMDM console login, used for Basic Auth.

• API Key - The API Key for your SureMDM account, sent in the ApiKey header. Found under Settings > Account Settings > Account Management in the SureMDM console.

• Base URL - The base URL for the SureMDM API. Defaults to https://suremdm.42gears.com for cloud deployments. For on-premises deployments, use your tenant URL (for example, https://{tenant}.{country}.suremdm.io).

Click Create once all values are provided to finalize the integration.

Next steps

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.

Authorization

Permissions

IAM permissions that must be granted to the integration principal for data ingestion.

Show Permissions (1)

• API Access

Endpoints

API endpoints that the integration makes requests to.

Show Endpoints (4)

• api/v2/devicegrid
• api/v2/group/gethomegroupdetails
• api/v2/group/{customerid}/getAll
• api/v2/installedapp/android/{DeviceId}/device/{Limit}/{Offset}/{Search}/{Sort}/{Order}/{Platform}

Documentation Links

Links to provider documentation relevant to setup and configuration.

Show Documentation Links (1)

• https://developer.42gears.com/suremdm/api/v2/specs/suremdmapi.yaml

Per-Step Breakdown

Detailed authorization requirements for each ingestion step.

Show all steps (2)

Step	Permissions	Endpoints
Fetch Devices	API Access	api/v2/devicegrid
Fetch Installed Applications	API Access	api/v2/installedapp/android/{DeviceId}/device/{Limit}/{Offset}/{Search}/{Sort}/{Order}/{Platform}

Data Model

Entities

The following entities are created:

Resources	Entity _type	Entity _class
Account	suremdm_account	Account
Device	suremdm_device	Device, Host
Device Group	suremdm_group	Group
Installed Application	suremdm_application	Application

Relationships

The following relationships are created:

Source Entity _type	Relationship _class	Target Entity _type
suremdm_account	HAS	suremdm_group
suremdm_account	HAS	suremdm_device
suremdm_device	INSTALLED	suremdm_application
suremdm_group	HAS	suremdm_group
suremdm_group	HAS	suremdm_device

Types

Suremdm Account

suremdm_account inherits from Account

---

Suremdm Application

suremdm_application inherits from Application

Property	Type	Description	Specifications
appSize	string | null	Reported on-device size of the application.
appType	string | null	Whether the application is a system app or an installed (user) app.
packageId	string | null	Package/application identifier assigned by SureMDM (e.g. the Android package name).
version	string | null	Version of the installed application.

---

Suremdm Device

suremdm_device inherits from Device, Host

Property	Type	Description	Specifications
afwProfile	string | null	Android for Work (AFW) profile applied to the device.
afwStatus	number | null	Android for Work (AFW) enrollment status code.
agentVersion	string | null	Version of the SureMDM agent installed on the device.
androidId	string | null	Android ID of the device.
availablePhysicalMemory	number | null	Available physical memory (RAM) on the device, in bytes.
batteryHealth	string | null	Reported battery health of the device.
batteryLevel	number | null	Battery charge remaining on the device, as a percentage.
batteryState	string | null	Current battery state of the device (e.g. charging, discharging).
connectionStatus	string | null	Connection status of the device with SureMDM (e.g. Online, Offline).
cpuUsage	number | null	Current CPU usage of the device, as a percentage.
customerId	string | null	Identifier of the SureMDM customer/account the device belongs to.
dataUsage	number | null	Cellular data usage reported by the device.
deviceApprovedStatus	number | null	Approval status code of the device in SureMDM.
deviceUserId	string | null	Identifier of the user assigned to the device.
deviceUserName	string | null	Name of the user assigned to the device.
groupPath	string | null	Full path of the group the device belongs to within the group hierarchy.
imei	string | null	Primary IMEI of the device.
imei2	string | null	Secondary IMEI of the device (dual-SIM devices).
ipAddress	string | null	Public/primary IP address reported by the device.
isBluetoothEnabled	boolean | null	Indicates whether Bluetooth is enabled on the device.
isEnrolled	boolean | null	Indicates whether the device is enrolled in SureMDM.
isGpsEnabled	boolean | null	Indicates whether GPS/location is enabled on the device.
isTrackingEnabled	boolean | null	Indicates whether location tracking is enabled for the device.
knoxStatus	string | null	Samsung Knox container status of the device.
lastCheckedInOn	number | null	Timestamp (ms since epoch) when the device last checked in with SureMDM.
localIpAddress	string | null	Local/private IP address reported by the device.
macAddress	string | null	MAC address of the device.
memoryStorageAvailable	number | null	Available internal storage on the device, in bytes.
networkType	string | null	Type of network the device is connected to (e.g. WiFi, Mobile).
operator	string | null	Mobile network operator/carrier for the device.
osBuildNumber	string | null	Operating system build number reported by the device.
phoneRoaming	string | null	Indicates whether the device is roaming.
phoneSignal	number | null	Cellular signal strength reported by the device.
platformType	string | null	The raw platform type reported by SureMDM (e.g. Android, iOS, Windows).
realDeviceName	string | null	Hardware/real device name as reported by the device.
releaseVersion	string | null	Operating system release version reported by the device.
rootStatus	string | null	Indicates whether the device is rooted/jailbroken.
securityPatchedOn	number | null	Timestamp (ms since epoch) of the latest security patch applied to the device.
simSerialNumber	string | null	SIM serial number (ICCID) of the device.
storageMemoryTotal	number | null	Total internal storage capacity of the device, in bytes.
temperature	number | null	Current device temperature reading.
totalPhysicalMemory	number | null	Total physical memory (RAM) of the device, in bytes.
wifiSignal	number | null	Wi-Fi signal strength reported by the device.
wifiSSID	string | null	SSID of the Wi-Fi network the device is connected to.

---

Suremdm Group

suremdm_group inherits from Group

Property	Type	Description	Specifications
defaultJobsCount	number | null	Number of default jobs associated with the group.
deviceNameRule	string | null	The device naming rule applied to devices in the group, null if none.
groupId *	string	The unique group identifier assigned by SureMDM.
groupPath	string | null	Full path of the group within the group hierarchy (e.g. Home/Devices/Site1).
groupType	number | null	The type of the group (e.g. 0 for a normal group).

---

Release Notes