No IDM does not do any finger printing functions today. It can determine a user or device based on Kerberos snooping, MAC oui or LLDP and can then do policies based on the identity.
If you are using Kerberos snooping, I believe the most you can get is the NetBIOS hostname. However, others might know more about this. (from ethernet)