@pulumi/okta 4.4.0 → 4.4.1

package/policy/mfa.d.ts

@@ -1,53 +1,4 @@
 import * as pulumi from "@pulumi/pulumi";
-/**
- * Creates an MFA Policy.
- *
- * This resource allows you to create and configure an MFA Policy.
- *
- * > Requires Org Feature Flag `OKTA_MFA_POLICY`. Contact support to have this feature flag ***enabled***.
- *
- * > Unless Org Feature Flag `ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT` is ***disabled*** `oktaPassword` or `oktaEmail` must be present and its `enroll` value set to `REQUIRED`. Contact support to have this feature flag ***disabled***.
- *
- * ## Example Usage
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as okta from "@pulumi/okta";
- *
- * const classicExample = new okta.policy.Mfa("classicExample", {
- *     description: "Example MFA policy using Okta Classic engine with factors.",
- *     groupsIncludeds: [data.okta_group.everyone.id],
- *     isOie: false,
- *     oktaOtp: {
- *         enroll: "REQUIRED",
- *     },
- *     oktaPassword: {
- *         enroll: "REQUIRED",
- *     },
- *     status: "ACTIVE",
- * });
- * const oieExample = new okta.policy.Mfa("oieExample", {
- *     description: "Example MFA policy that uses Okta Identity Engine (OIE) with authenticators",
- *     groupsIncludeds: [data.okta_group.everyone.id],
- *     isOie: true,
- *     oktaPassword: {
- *         enroll: "REQUIRED",
- *     },
- *     oktaVerify: {
- *         enroll: "REQUIRED",
- *     },
- *     status: "ACTIVE",
- * });
- * ```
- *
- * ## Import
- *
- * An MFA Policy can be imported via the Okta ID.
- *
- * ```sh
- *  $ pulumi import okta:policy/mfa:Mfa example <policy id>
- * ```
- */
 export declare class Mfa extends pulumi.CustomResource {
     /**
      * Get an existing Mfa resource's state with the given name, ID, and optional extra
@@ -65,153 +16,89 @@ export declare class Mfa extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is Mfa;
     /**
-     * Policy Description.
+     * Policy Description
      */
     readonly description: pulumi.Output<string | undefined>;
-    /**
-     * DUO MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly duo: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * External IDP MFA policy settings (✓ OIE).
-     */
     readonly externalIdp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Fido U2F MFA policy settings (✓ Classic).
-     */
     readonly fidoU2f: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Fido Web Authn MFA policy settings (✓ Classic).
-     */
     readonly fidoWebauthn: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly googleOtp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * List of Group IDs to Include.
+     * List of Group IDs to Include
      */
     readonly groupsIncludeds: pulumi.Output<string[] | undefined>;
-    /**
-     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
-     */
     readonly hotp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
-     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
+     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
      */
     readonly isOie: pulumi.Output<boolean | undefined>;
     /**
-     * Policy Name.
+     * Policy Name
      */
     readonly name: pulumi.Output<string>;
-    /**
-     * Okta Call MFA policy settings (✓ Classic).
-     */
     readonly oktaCall: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly oktaEmail: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
-     */
     readonly oktaOtp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly oktaPassword: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Push MFA policy settings (✓ Classic).
-     */
     readonly oktaPush: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Question MFA policy settings (✓ Classic).
-     */
     readonly oktaQuestion: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta SMS MFA policy settings (✓ Classic).
-     */
     readonly oktaSms: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Verify MFA policy settings (✓ OIE).
-     */
     readonly oktaVerify: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * On-Prem MFA MFA policy settings (✓ OIE).
-     */
     readonly onpremMfa: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Phone Number MFA policy settings (✓ OIE).
-     */
     readonly phoneNumber: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Priority of the policy.
+     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
      */
     readonly priority: pulumi.Output<number | undefined>;
-    /**
-     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly rsaToken: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Security Question MFA policy settings (✓ OIE).
-     */
     readonly securityQuestion: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
+     * Policy Status: ACTIVE or INACTIVE.
      */
     readonly status: pulumi.Output<string | undefined>;
-    /**
-     * Symantec VIP MFA policy settings (✓ Classic).
-     */
     readonly symantecVip: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
-     */
     readonly webauthn: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly yubikeyToken: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
@@ -229,153 +116,89 @@ export declare class Mfa extends pulumi.CustomResource {
  */
 export interface MfaState {
     /**
-     * Policy Description.
+     * Policy Description
      */
     description?: pulumi.Input<string>;
-    /**
-     * DUO MFA policy settings (✓ Classic, ✓ OIE).
-     */
     duo?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * External IDP MFA policy settings (✓ OIE).
-     */
     externalIdp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Fido U2F MFA policy settings (✓ Classic).
-     */
     fidoU2f?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Fido Web Authn MFA policy settings (✓ Classic).
-     */
     fidoWebauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
-     */
     googleOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * List of Group IDs to Include.
+     * List of Group IDs to Include
      */
     groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
-    /**
-     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
-     */
     hotp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
-     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
+     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
      */
     isOie?: pulumi.Input<boolean>;
     /**
-     * Policy Name.
+     * Policy Name
      */
     name?: pulumi.Input<string>;
-    /**
-     * Okta Call MFA policy settings (✓ Classic).
-     */
     oktaCall?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
-     */
     oktaEmail?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
-     */
     oktaOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
-     */
     oktaPassword?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Push MFA policy settings (✓ Classic).
-     */
     oktaPush?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Question MFA policy settings (✓ Classic).
-     */
     oktaQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta SMS MFA policy settings (✓ Classic).
-     */
     oktaSms?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Verify MFA policy settings (✓ OIE).
-     */
     oktaVerify?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * On-Prem MFA MFA policy settings (✓ OIE).
-     */
     onpremMfa?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Phone Number MFA policy settings (✓ OIE).
-     */
     phoneNumber?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Priority of the policy.
+     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
      */
     priority?: pulumi.Input<number>;
-    /**
-     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     rsaToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Security Question MFA policy settings (✓ OIE).
-     */
     securityQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
+     * Policy Status: ACTIVE or INACTIVE.
      */
     status?: pulumi.Input<string>;
-    /**
-     * Symantec VIP MFA policy settings (✓ Classic).
-     */
     symantecVip?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
-     */
     webauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     yubikeyToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
@@ -385,153 +208,89 @@ export interface MfaState {
  */
 export interface MfaArgs {
     /**
-     * Policy Description.
+     * Policy Description
      */
     description?: pulumi.Input<string>;
-    /**
-     * DUO MFA policy settings (✓ Classic, ✓ OIE).
-     */
     duo?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * External IDP MFA policy settings (✓ OIE).
-     */
     externalIdp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Fido U2F MFA policy settings (✓ Classic).
-     */
     fidoU2f?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Fido Web Authn MFA policy settings (✓ Classic).
-     */
     fidoWebauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
-     */
     googleOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * List of Group IDs to Include.
+     * List of Group IDs to Include
      */
     groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
-    /**
-     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
-     */
     hotp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
-     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
+     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
      */
     isOie?: pulumi.Input<boolean>;
     /**
-     * Policy Name.
+     * Policy Name
      */
     name?: pulumi.Input<string>;
-    /**
-     * Okta Call MFA policy settings (✓ Classic).
-     */
     oktaCall?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
-     */
     oktaEmail?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
-     */
     oktaOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
-     */
     oktaPassword?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Push MFA policy settings (✓ Classic).
-     */
     oktaPush?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Question MFA policy settings (✓ Classic).
-     */
     oktaQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta SMS MFA policy settings (✓ Classic).
-     */
     oktaSms?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Verify MFA policy settings (✓ OIE).
-     */
     oktaVerify?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * On-Prem MFA MFA policy settings (✓ OIE).
-     */
     onpremMfa?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Phone Number MFA policy settings (✓ OIE).
-     */
     phoneNumber?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Priority of the policy.
+     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
      */
     priority?: pulumi.Input<number>;
-    /**
-     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     rsaToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Security Question MFA policy settings (✓ OIE).
-     */
     securityQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
+     * Policy Status: ACTIVE or INACTIVE.
      */
     status?: pulumi.Input<string>;
-    /**
-     * Symantec VIP MFA policy settings (✓ Classic).
-     */
     symantecVip?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
-     */
     webauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     yubikeyToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;

package/policy/mfa.js

@@ -5,55 +5,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Mfa = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
-/**
- * Creates an MFA Policy.
- *
- * This resource allows you to create and configure an MFA Policy.
- *
- * > Requires Org Feature Flag `OKTA_MFA_POLICY`. Contact support to have this feature flag ***enabled***.
- *
- * > Unless Org Feature Flag `ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT` is ***disabled*** `oktaPassword` or `oktaEmail` must be present and its `enroll` value set to `REQUIRED`. Contact support to have this feature flag ***disabled***.
- *
- * ## Example Usage
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as okta from "@pulumi/okta";
- *
- * const classicExample = new okta.policy.Mfa("classicExample", {
- *     description: "Example MFA policy using Okta Classic engine with factors.",
- *     groupsIncludeds: [data.okta_group.everyone.id],
- *     isOie: false,
- *     oktaOtp: {
- *         enroll: "REQUIRED",
- *     },
- *     oktaPassword: {
- *         enroll: "REQUIRED",
- *     },
- *     status: "ACTIVE",
- * });
- * const oieExample = new okta.policy.Mfa("oieExample", {
- *     description: "Example MFA policy that uses Okta Identity Engine (OIE) with authenticators",
- *     groupsIncludeds: [data.okta_group.everyone.id],
- *     isOie: true,
- *     oktaPassword: {
- *         enroll: "REQUIRED",
- *     },
- *     oktaVerify: {
- *         enroll: "REQUIRED",
- *     },
- *     status: "ACTIVE",
- * });
- * ```
- *
- * ## Import
- *
- * An MFA Policy can be imported via the Okta ID.
- *
- * ```sh
- *  $ pulumi import okta:policy/mfa:Mfa example <policy id>
- * ```
- */
 class Mfa extends pulumi.CustomResource {
     /**
      * Get an existing Mfa resource's state with the given name, ID, and optional extra

package/policy/mfa.js.map

@@ -1 +1 @@
-{"version":3,"file":"mfa.js","sourceRoot":"","sources":["../../policy/mfa.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAa,GAAI,SAAQ,MAAM,CAAC,cAAc;IAC1C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgB,EAAE,IAAmC;QAC9G,OAAO,IAAI,GAAG,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC;IACpD,CAAC;IAwHD,YAAY,IAAY,EAAE,WAAgC,EAAE,IAAmC;QAC3F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmC,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E;aAAM;YACH,MAAM,IAAI,GAAG,WAAkC,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;;AAlNL,kBAmNC;AArMG,gBAAgB;AACO,gBAAY,GAAG,qBAAqB,CAAC"}
+{"version":3,"file":"mfa.js","sourceRoot":"","sources":["../../policy/mfa.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,GAAI,SAAQ,MAAM,CAAC,cAAc;IAC1C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgB,EAAE,IAAmC;QAC9G,OAAO,IAAI,GAAG,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC;IACpD,CAAC;IAwDD,YAAY,IAAY,EAAE,WAAgC,EAAE,IAAmC;QAC3F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmC,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E;aAAM;YACH,MAAM,IAAI,GAAG,WAAkC,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;;AAlJL,kBAmJC;AArIG,gBAAgB;AACO,gBAAY,GAAG,qBAAqB,CAAC"}