You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/dyn/verifiedaccess_v2.challenge.html
+48-44
Original file line number
Diff line number
Diff line change
@@ -135,66 +135,70 @@ <h3>Method Details</h3>
135
135
An object of the form:
136
136
137
137
{ # Result message for VerifiedAccess.VerifyChallengeResponse.
138
-
"attestedDeviceId": "A String", # Attested device ID (ADID).
139
-
"customerId": "A String", # Unique customer id that this device belongs to, as defined by the Google Admin SDK at https://developers.google.com/admin-sdk/directory/v1/guides/manage-customers
140
-
"deviceEnrollmentId": "A String", # Device enrollment id for ChromeOS devices.
141
-
"devicePermanentId": "A String", # Device permanent id is returned in this field (for the machine response only).
142
-
"deviceSignal": "A String", # Deprecated. Device signal in json string representation. Prefer using `device_signals` instead.
143
-
"deviceSignals": { # The device signals as reported by Chrome. Unless otherwise specified, signals are available on all platforms. # Device signals.
144
-
"allowScreenLock": True or False, # Value of the AllowScreenLock policy on the device. See https://chromeenterprise.google/policies/?policy=AllowScreenLock for more details. Available on ChromeOS only.
145
-
"browserVersion": "A String", # Current version of the Chrome browser which generated this set of signals. Example value: "107.0.5286.0".
146
-
"builtInDnsClientEnabled": True or False, # Whether Chrome's built-in DNS client is used. The OS DNS client is otherwise used. This value may be controlled by an enterprise policy: https://chromeenterprise.google/policies/#BuiltInDnsClientEnabled.
147
-
"chromeRemoteDesktopAppBlocked": True or False, # Whether access to the Chrome Remote Desktop application is blocked via a policy.
148
-
"crowdStrikeAgent": { # Properties of the CrowdStrike agent installed on a device. # Crowdstrike agent properties installed on the device, if any. Available on Windows and MacOS only.
149
-
"agentId": "A String", # The Agent ID of the Crowdstrike agent.
150
-
"customerId": "A String", # The Customer ID to which the agent belongs to.
138
+
"attestedDeviceId": "A String", # Output only. Attested device ID (ADID).
139
+
"customerId": "A String", # Output only. Unique customer id that this device belongs to, as defined by the Google Admin SDK at https://developers.google.com/admin-sdk/directory/v1/guides/manage-customers
140
+
"deviceEnrollmentId": "A String", # Output only. Device enrollment id for ChromeOS devices.
141
+
"devicePermanentId": "A String", # Output only. Device permanent id is returned in this field (for the machine response only).
142
+
"deviceSignal": "A String", # Output only. Deprecated. Device signal in json string representation. Prefer using `device_signals` instead.
143
+
"deviceSignals": { # The device signals as reported by Chrome. Unless otherwise specified, signals are available on all platforms. # Output only. Device signals.
144
+
"allowScreenLock": True or False, # Output only. Value of the AllowScreenLock policy on the device. See https://chromeenterprise.google/policies/?policy=AllowScreenLock for more details. Available on ChromeOS only.
145
+
"antivirus": { # Antivirus information on a device. # Output only. Information about Antivirus software on the device. Available on Windows only.
146
+
"state": "A String", # Output only. The state of the antivirus on the device. Introduced in Chrome M136.
151
147
},
152
-
"deviceAffiliationIds": [ # Affiliation IDs of the organizations that are affiliated with the organization that is currently managing the device. When the sets of device and profile affiliation IDs overlap, it means that the organizations managing the device and user are affiliated. To learn more about user affiliation, visit https://support.google.com/chrome/a/answer/12801245?ref_topic=9027936.
148
+
"browserVersion": "A String", # Output only. Current version of the Chrome browser which generated this set of signals. Example value: "107.0.5286.0".
149
+
"builtInDnsClientEnabled": True or False, # Output only. Whether Chrome's built-in DNS client is used. The OS DNS client is otherwise used. This value may be controlled by an enterprise policy: https://chromeenterprise.google/policies/#BuiltInDnsClientEnabled.
150
+
"chromeRemoteDesktopAppBlocked": True or False, # Output only. Whether access to the Chrome Remote Desktop application is blocked via a policy.
151
+
"crowdStrikeAgent": { # Properties of the CrowdStrike agent installed on a device. # Output only. Crowdstrike agent properties installed on the device, if any. Available on Windows and MacOS only.
152
+
"agentId": "A String", # Output only. The Agent ID of the Crowdstrike agent.
153
+
"customerId": "A String", # Output only. The Customer ID to which the agent belongs to.
154
+
},
155
+
"deviceAffiliationIds": [ # Output only. Affiliation IDs of the organizations that are affiliated with the organization that is currently managing the device. When the sets of device and profile affiliation IDs overlap, it means that the organizations managing the device and user are affiliated. To learn more about user affiliation, visit https://support.google.com/chrome/a/answer/12801245?ref_topic=9027936.
153
156
"A String",
154
157
],
155
-
"deviceEnrollmentDomain": "A String", # Enrollment domain of the customer which is currently managing the device.
156
-
"deviceManufacturer": "A String", # The name of the device's manufacturer.
157
-
"deviceModel": "A String", # The name of the device's model.
158
-
"diskEncryption": "A String", # The encryption state of the disk. On ChromeOS, the main disk is always ENCRYPTED.
159
-
"displayName": "A String", # The display name of the device, as defined by the user.
158
+
"deviceEnrollmentDomain": "A String", # Output only. Enrollment domain of the customer which is currently managing the device.
159
+
"deviceManufacturer": "A String", # Output only. The name of the device's manufacturer.
160
+
"deviceModel": "A String", # Output only. The name of the device's model.
161
+
"diskEncryption": "A String", # Output only. The encryption state of the disk. On ChromeOS, the main disk is always ENCRYPTED.
162
+
"displayName": "A String", # Output only. The display name of the device, as defined by the user.
160
163
"hostname": "A String", # Hostname of the device.
161
-
"imei": [ # International Mobile Equipment Identity (IMEI) of the device. Available on ChromeOS only.
164
+
"imei": [ # Output only. International Mobile Equipment Identity (IMEI) of the device. Available on ChromeOS only.
162
165
"A String",
163
166
],
164
-
"macAddresses": [ # MAC addresses of the device.
167
+
"macAddresses": [ # Output only. MAC addresses of the device.
165
168
"A String",
166
169
],
167
-
"meid": [ # Mobile Equipment Identifier (MEID) of the device. Available on ChromeOS only.
170
+
"meid": [ # Output only. Mobile Equipment Identifier (MEID) of the device. Available on ChromeOS only.
168
171
"A String",
169
172
],
170
-
"operatingSystem": "A String", # The type of the Operating System currently running on the device.
171
-
"osFirewall": "A String", # The state of the OS level firewall. On ChromeOS, the value will always be ENABLED on regular devices and UNKNOWN on devices in developer mode. Support for MacOS 15 (Sequoia) and later has been introduced in Chrome M131.
172
-
"osVersion": "A String", # The current version of the Operating System. On Windows and linux, the value will also include the security patch information.
173
-
"passwordProtectionWarningTrigger": "A String", # Whether the Password Protection Warning feature is enabled or not. Password protection alerts users when they reuse their protected password on potentially suspicious sites. This setting is controlled by an enterprise policy: https://chromeenterprise.google/policies/#PasswordProtectionWarningTrigger. Note that the policy unset does not have the same effects as having the policy explicitly set to `PASSWORD_PROTECTION_OFF`.
174
-
"profileAffiliationIds": [ # Affiliation IDs of the organizations that are affiliated with the organization that is currently managing the Chrome Profile’s user or ChromeOS user.
173
+
"operatingSystem": "A String", # Output only. The type of the Operating System currently running on the device.
174
+
"osFirewall": "A String", # Output only. The state of the OS level firewall. On ChromeOS, the value will always be ENABLED on regular devices and UNKNOWN on devices in developer mode. Support for MacOS 15 (Sequoia) and later has been introduced in Chrome M131.
175
+
"osVersion": "A String", # Output only. The current version of the Operating System. On Windows and linux, the value will also include the security patch information.
176
+
"passwordProtectionWarningTrigger": "A String", # Output only. Whether the Password Protection Warning feature is enabled or not. Password protection alerts users when they reuse their protected password on potentially suspicious sites. This setting is controlled by an enterprise policy: https://chromeenterprise.google/policies/#PasswordProtectionWarningTrigger. Note that the policy unset does not have the same effects as having the policy explicitly set to `PASSWORD_PROTECTION_OFF`.
177
+
"profileAffiliationIds": [ # Output only. Affiliation IDs of the organizations that are affiliated with the organization that is currently managing the Chrome Profile’s user or ChromeOS user.
175
178
"A String",
176
179
],
177
-
"profileEnrollmentDomain": "A String", # Enrollment domain of the customer which is currently managing the profile.
178
-
"realtimeUrlCheckMode": "A String", # Whether Enterprise-grade (i.e. custom) unsafe URL scanning is enabled or not. This setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/#EnterpriseRealTimeUrlCheckMode
179
-
"safeBrowsingProtectionLevel": "A String", # Safe Browsing Protection Level. That setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/#SafeBrowsingProtectionLevel.
180
-
"screenLockSecured": "A String", # The state of the Screen Lock password protection. On ChromeOS, this value will always be ENABLED as there is not way to disable requiring a password or pin when unlocking the device.
181
-
"secureBootMode": "A String", # Whether the device's startup software has its Secure Boot feature enabled. Available on Windows only.
182
-
"serialNumber": "A String", # The serial number of the device. On Windows, this represents the BIOS's serial number. Not available on most Linux distributions.
183
-
"siteIsolationEnabled": True or False, # Whether the Site Isolation (a.k.a Site Per Process) setting is enabled. That setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/#SitePerProcess
180
+
"profileEnrollmentDomain": "A String", # Output only. Enrollment domain of the customer which is currently managing the profile.
181
+
"realtimeUrlCheckMode": "A String", # Output only. Whether Enterprise-grade (i.e. custom) unsafe URL scanning is enabled or not. This setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/#EnterpriseRealTimeUrlCheckMode
182
+
"safeBrowsingProtectionLevel": "A String", # Output only. Safe Browsing Protection Level. That setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/#SafeBrowsingProtectionLevel.
183
+
"screenLockSecured": "A String", # Output only. The state of the Screen Lock password protection. On ChromeOS, this value will always be ENABLED as there is not way to disable requiring a password or pin when unlocking the device.
184
+
"secureBootMode": "A String", # Output only. Whether the device's startup software has its Secure Boot feature enabled. Available on Windows only.
185
+
"serialNumber": "A String", # Output only. The serial number of the device. On Windows, this represents the BIOS's serial number. Not available on most Linux distributions.
186
+
"siteIsolationEnabled": True or False, # Output only. Whether the Site Isolation (a.k.a Site Per Process) setting is enabled. That setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/#SitePerProcess
184
187
"systemDnsServers": [ # List of the addesses of all OS level DNS servers configured in the device's network settings.
185
188
"A String",
186
189
],
187
-
"thirdPartyBlockingEnabled": True or False, # Whether Chrome is blocking third-party software injection or not. This setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/?policy=ThirdPartyBlockingEnabled. Available on Windows only.
188
-
"trigger": "A String", # The trigger which generated this set of signals.
189
-
"windowsMachineDomain": "A String", # Windows domain that the current machine has joined. Available on Windows only.
190
-
"windowsUserDomain": "A String", # Windows domain for the current OS user. Available on Windows only.
190
+
"thirdPartyBlockingEnabled": True or False, # Output only. Whether Chrome is blocking third-party software injection or not. This setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/?policy=ThirdPartyBlockingEnabled. Available on Windows only.
191
+
"trigger": "A String", # Output only. The trigger which generated this set of signals.
192
+
"windowsMachineDomain": "A String", # Output only. Windows domain that the current machine has joined. Available on Windows only.
193
+
"windowsUserDomain": "A String", # Output only. Windows domain for the current OS user. Available on Windows only.
"profileCustomerId": "A String", # Unique customer id that this profile belongs to, as defined by the Google Admin SDK at https://developers.google.com/admin-sdk/directory/v1/guides/manage-customers
"signedPublicKeyAndChallenge": "A String", # Certificate Signing Request (in the SPKAC format, base64 encoded) is returned in this field. This field will be set only if device has included CSR in its challenge response. (the option to include CSR is now available for both user and machine responses)
196
-
"virtualDeviceId": "A String", # Virtual device id of the device. The definition of virtual device id is platform-specific.
197
-
"virtualProfileId": "A String", # The ID of a profile on the device.
"profileCustomerId": "A String", # Output only. Unique customer id that this profile belongs to, as defined by the Google Admin SDK at https://developers.google.com/admin-sdk/directory/v1/guides/manage-customers
"profilePermanentId": "A String", # Output only. The unique server-side ID of a profile on the device.
199
+
"signedPublicKeyAndChallenge": "A String", # Output only. Certificate Signing Request (in the SPKAC format, base64 encoded) is returned in this field. This field will be set only if device has included CSR in its challenge response. (the option to include CSR is now available for both user and machine responses)
200
+
"virtualDeviceId": "A String", # Output only. Virtual device id of the device. The definition of virtual device id is platform-specific.
201
+
"virtualProfileId": "A String", # Output only. The client-provided ID of a profile on the device.
0 commit comments