@pulumi/okta 4.4.0 → 4.4.1

package/policy/signon.d.ts

@@ -1,30 +1,4 @@
 import * as pulumi from "@pulumi/pulumi";
-/**
- * Creates a Sign On Policy.
- *
- * This resource allows you to create and configure a Sign On Policy.
- *
- * ## Example Usage
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as okta from "@pulumi/okta";
- *
- * const example = new okta.policy.Signon("example", {
- *     description: "Example",
- *     groupsIncludeds: [data.okta_group.everyone.id],
- *     status: "ACTIVE",
- * });
- * ```
- *
- * ## Import
- *
- * A Sign On Policy can be imported via the Okta ID.
- *
- * ```sh
- *  $ pulumi import okta:policy/signon:Signon example <policy id>
- * ```
- */
 export declare class Signon extends pulumi.CustomResource {
     /**
      * Get an existing Signon resource's state with the given name, ID, and optional extra
@@ -42,23 +16,23 @@ export declare class Signon extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is Signon;
     /**
-     * Policy Description.
+     * Policy Description
      */
     readonly description: pulumi.Output<string | undefined>;
     /**
-     * List of Group IDs to Include.
+     * List of Group IDs to Include
      */
     readonly groupsIncludeds: pulumi.Output<string[] | undefined>;
     /**
-     * Policy Name.
+     * Policy Name
      */
     readonly name: pulumi.Output<string>;
     /**
-     * Priority of the policy.
+     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
      */
     readonly priority: pulumi.Output<number | undefined>;
     /**
-     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
+     * Policy Status: ACTIVE or INACTIVE.
      */
     readonly status: pulumi.Output<string | undefined>;
     /**
@@ -75,23 +49,23 @@ export declare class Signon extends pulumi.CustomResource {
  */
 export interface SignonState {
     /**
-     * Policy Description.
+     * Policy Description
      */
     description?: pulumi.Input<string>;
     /**
-     * List of Group IDs to Include.
+     * List of Group IDs to Include
      */
     groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * Policy Name.
+     * Policy Name
      */
     name?: pulumi.Input<string>;
     /**
-     * Priority of the policy.
+     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
      */
     priority?: pulumi.Input<number>;
     /**
-     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
+     * Policy Status: ACTIVE or INACTIVE.
      */
     status?: pulumi.Input<string>;
 }
@@ -100,23 +74,23 @@ export interface SignonState {
  */
 export interface SignonArgs {
     /**
-     * Policy Description.
+     * Policy Description
      */
     description?: pulumi.Input<string>;
     /**
-     * List of Group IDs to Include.
+     * List of Group IDs to Include
      */
     groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * Policy Name.
+     * Policy Name
      */
     name?: pulumi.Input<string>;
     /**
-     * Priority of the policy.
+     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
      */
     priority?: pulumi.Input<number>;
     /**
-     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
+     * Policy Status: ACTIVE or INACTIVE.
      */
     status?: pulumi.Input<string>;
 }

package/policy/signon.js

@@ -5,32 +5,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Signon = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
-/**
- * Creates a Sign On Policy.
- *
- * This resource allows you to create and configure a Sign On Policy.
- *
- * ## Example Usage
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as okta from "@pulumi/okta";
- *
- * const example = new okta.policy.Signon("example", {
- *     description: "Example",
- *     groupsIncludeds: [data.okta_group.everyone.id],
- *     status: "ACTIVE",
- * });
- * ```
- *
- * ## Import
- *
- * A Sign On Policy can be imported via the Okta ID.
- *
- * ```sh
- *  $ pulumi import okta:policy/signon:Signon example <policy id>
- * ```
- */
 class Signon extends pulumi.CustomResource {
     /**
      * Get an existing Signon resource's state with the given name, ID, and optional extra

package/policy/signon.js.map

@@ -1 +1 @@
-{"version":3,"file":"signon.js","sourceRoot":"","sources":["../../policy/signon.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AA7EL,wBA8EC;AAhEG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}
+{"version":3,"file":"signon.js","sourceRoot":"","sources":["../../policy/signon.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AA7EL,wBA8EC;AAhEG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}

package/policyMfaDefault.d.ts

@@ -1,49 +1,4 @@
 import * as pulumi from "@pulumi/pulumi";
-/**
- * Configures default MFA Policy.
- *
- * This resource allows you to configure default MFA Policy.
- *
- * > Requires Org Feature Flag `OKTA_MFA_POLICY`. Contact support to have this feature flag ***enabled***.
- *
- * > Unless Org Feature Flag `ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT` is ***disabled*** `oktaPassword` or `oktaEmail` must be present and its `enroll` value set to `REQUIRED`. Contact support to have this feature flag ***disabled***.
- *
- * ## Example Usage
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as okta from "@pulumi/okta";
- *
- * const classicExample = new okta.PolicyMfaDefault("classicExample", {
- *     isOie: false,
- *     oktaOtp: {
- *         enroll: "REQUIRED",
- *     },
- *     oktaPassword: {
- *         enroll: "REQUIRED",
- *     },
- * });
- * const oieExample = new okta.PolicyMfaDefault("oieExample", {
- *     isOie: true,
- *     oktaPassword: {
- *         enroll: "REQUIRED",
- *     },
- *     oktaVerify: {
- *         enroll: "REQUIRED",
- *     },
- * });
- * ```
- *
- * > If the `okta.PolicyMfaDefault` is used in conjunction with `okta.policy.Mfa` resources, ensure to use a `dependsOn` attribute for the default policy to ensure that all other policies are created/updated first such that the `priority` field can be appropriately computed on the first plan/apply.
- *
- * ## Import
- *
- * Default MFA Policy can be imported without providing Okta ID.
- *
- * ```sh
- *  $ pulumi import okta:index/policyMfaDefault:PolicyMfaDefault example .
- * ```
- */
 export declare class PolicyMfaDefault extends pulumi.CustomResource {
     /**
      * Get an existing PolicyMfaDefault resource's state with the given name, ID, and optional extra
@@ -61,153 +16,89 @@ export declare class PolicyMfaDefault extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is PolicyMfaDefault;
     /**
-     * ID of the default Okta group.
+     * Default group ID (always included)
      */
     readonly defaultIncludedGroupId: pulumi.Output<string>;
     /**
-     * Default policy description.
+     * Default policy description
      */
     readonly description: pulumi.Output<string>;
-    /**
-     * DUO MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly duo: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * External IDP MFA policy settings (✓ OIE).
-     */
     readonly externalIdp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Fido U2F MFA policy settings (✓ Classic).
-     */
     readonly fidoU2f: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Fido Web Authn MFA policy settings (✓ Classic).
-     */
     readonly fidoWebauthn: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly googleOtp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
-     */
     readonly hotp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
-     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
+     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
      */
     readonly isOie: pulumi.Output<boolean | undefined>;
     /**
-     * Default policy name.
+     * Default policy name
      */
     readonly name: pulumi.Output<string>;
-    /**
-     * Okta Call MFA policy settings (✓ Classic).
-     */
     readonly oktaCall: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly oktaEmail: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
-     */
     readonly oktaOtp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly oktaPassword: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Push MFA policy settings (✓ Classic).
-     */
     readonly oktaPush: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Question MFA policy settings (✓ Classic).
-     */
     readonly oktaQuestion: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta SMS MFA policy settings (✓ Classic).
-     */
     readonly oktaSms: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Okta Verify MFA policy settings (✓ OIE).
-     */
     readonly oktaVerify: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * On-Prem MFA MFA policy settings (✓ OIE).
-     */
     readonly onpremMfa: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Phone Number MFA policy settings (✓ OIE).
-     */
     readonly phoneNumber: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Default policy priority.
+     * Default policy priority
      */
     readonly priority: pulumi.Output<number>;
-    /**
-     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly rsaToken: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Security Question MFA policy settings (✓ OIE).
-     */
     readonly securityQuestion: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Default policy status.
+     * Default policy status
      */
     readonly status: pulumi.Output<string>;
-    /**
-     * Symantec VIP MFA policy settings (✓ Classic).
-     */
     readonly symantecVip: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
-     */
     readonly webauthn: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
-    /**
-     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     readonly yubikeyToken: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
@@ -225,153 +116,89 @@ export declare class PolicyMfaDefault extends pulumi.CustomResource {
  */
 export interface PolicyMfaDefaultState {
     /**
-     * ID of the default Okta group.
+     * Default group ID (always included)
      */
     defaultIncludedGroupId?: pulumi.Input<string>;
     /**
-     * Default policy description.
+     * Default policy description
      */
     description?: pulumi.Input<string>;
-    /**
-     * DUO MFA policy settings (✓ Classic, ✓ OIE).
-     */
     duo?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * External IDP MFA policy settings (✓ OIE).
-     */
     externalIdp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Fido U2F MFA policy settings (✓ Classic).
-     */
     fidoU2f?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Fido Web Authn MFA policy settings (✓ Classic).
-     */
     fidoWebauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
-     */
     googleOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
-     */
     hotp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
-     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
+     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
      */
     isOie?: pulumi.Input<boolean>;
     /**
-     * Default policy name.
+     * Default policy name
      */
     name?: pulumi.Input<string>;
-    /**
-     * Okta Call MFA policy settings (✓ Classic).
-     */
     oktaCall?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
-     */
     oktaEmail?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
-     */
     oktaOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
-     */
     oktaPassword?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Push MFA policy settings (✓ Classic).
-     */
     oktaPush?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Question MFA policy settings (✓ Classic).
-     */
     oktaQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta SMS MFA policy settings (✓ Classic).
-     */
     oktaSms?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Verify MFA policy settings (✓ OIE).
-     */
     oktaVerify?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * On-Prem MFA MFA policy settings (✓ OIE).
-     */
     onpremMfa?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Phone Number MFA policy settings (✓ OIE).
-     */
     phoneNumber?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Default policy priority.
+     * Default policy priority
      */
     priority?: pulumi.Input<number>;
-    /**
-     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     rsaToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Security Question MFA policy settings (✓ OIE).
-     */
     securityQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Default policy status.
+     * Default policy status
      */
     status?: pulumi.Input<string>;
-    /**
-     * Symantec VIP MFA policy settings (✓ Classic).
-     */
     symantecVip?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
-     */
     webauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     yubikeyToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
@@ -380,134 +207,70 @@ export interface PolicyMfaDefaultState {
  * The set of arguments for constructing a PolicyMfaDefault resource.
  */
 export interface PolicyMfaDefaultArgs {
-    /**
-     * DUO MFA policy settings (✓ Classic, ✓ OIE).
-     */
     duo?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * External IDP MFA policy settings (✓ OIE).
-     */
     externalIdp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Fido U2F MFA policy settings (✓ Classic).
-     */
     fidoU2f?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Fido Web Authn MFA policy settings (✓ Classic).
-     */
     fidoWebauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
-     */
     googleOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
-     */
     hotp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
-     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
+     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
      */
     isOie?: pulumi.Input<boolean>;
-    /**
-     * Okta Call MFA policy settings (✓ Classic).
-     */
     oktaCall?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
-     */
     oktaEmail?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
-     */
     oktaOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
-     */
     oktaPassword?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Push MFA policy settings (✓ Classic).
-     */
     oktaPush?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Question MFA policy settings (✓ Classic).
-     */
     oktaQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta SMS MFA policy settings (✓ Classic).
-     */
     oktaSms?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Okta Verify MFA policy settings (✓ OIE).
-     */
     oktaVerify?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * On-Prem MFA MFA policy settings (✓ OIE).
-     */
     onpremMfa?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Phone Number MFA policy settings (✓ OIE).
-     */
     phoneNumber?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     rsaToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Security Question MFA policy settings (✓ OIE).
-     */
     securityQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Symantec VIP MFA policy settings (✓ Classic).
-     */
     symantecVip?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
-     */
     webauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
-    /**
-     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
-     */
     yubikeyToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;