> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/aws-entities/aws-sso-group.md).

# SSO Group

### AWS SSO Group Fields

| Field            | Type   | Possible Operators                                             | Description                                                                                                                    |
| ---------------- | ------ | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| Guid             | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of the GUID of the selected Scan and the SSO group's unique ID.                      |
| FSName           | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the DisplayName and the Identity Store ID.                                |
| DisplayName      | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The group's display name.                                                                                                      |
| Description      | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The group description, if one is set.                                                                                          |
| GroupId          | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The Identity Store group identifier assigned by AWS.                                                                           |
| IdentityStoreId  | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The identity store the group belongs to (e.g., `d-1234567890`).                                                                |
| AccountId        | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The account that hosts the Identity Center instance the group belongs to.                                                      |
| ExternalId       | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The identifier assigned by the upstream identity provider, carried over by SCIM provisioning.                                  |
| ExternalIdIssuer | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The identity store that issued the External ID, as an ARN.                                                                     |
| AWSTier          | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Privilege tier of the group based on the effective permissions its members inherit. Higher values indicate greater privilege.  |
| ExposurePoint    | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | A numerical value indicating the level of exposure based on how many other entities can reach this group through attack paths. |
| risk             | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the group calculated based on vulnerability counts and severities.                                           |