@pulumi/okta 4.6.2 → 4.6.3

package/policy/getDefaultPolicy.js

@@ -6,9 +6,7 @@ exports.getDefaultPolicyOutput = exports.getDefaultPolicy = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 /**
- * Use this data source to retrieve a default policy from Okta. This
- * same thing can be achieved using the `okta.policy.getPolicy` with default
- * names, this is simply a shortcut.
+ * Use this data source to retrieve a default policy from Okta. This same thing can be achieved using the `okta.policy.getPolicy` with default names, this is simply a shortcut.
  *
  * ## Example Usage
  *
@@ -29,9 +27,7 @@ function getDefaultPolicy(args, opts) {
 }
 exports.getDefaultPolicy = getDefaultPolicy;
 /**
- * Use this data source to retrieve a default policy from Okta. This
- * same thing can be achieved using the `okta.policy.getPolicy` with default
- * names, this is simply a shortcut.
+ * Use this data source to retrieve a default policy from Okta. This same thing can be achieved using the `okta.policy.getPolicy` with default names, this is simply a shortcut.
  *
  * ## Example Usage
  *

package/policy/getDefaultPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"getDefaultPolicy.js","sourceRoot":"","sources":["../../policy/getDefaultPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,gBAAgB,CAAC,IAA0B,EAAE,IAA2B;IAEpF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,+CAA+C,EAAE;QAC1E,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,4CAMC;AAyBD;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,sBAAsB,CAAC,IAAgC,EAAE,IAA2B;IAChG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC3E,CAAC;AAFD,wDAEC"}
+{"version":3,"file":"getDefaultPolicy.js","sourceRoot":"","sources":["../../policy/getDefaultPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;GAaG;AACH,SAAgB,gBAAgB,CAAC,IAA0B,EAAE,IAA2B;IAEpF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,+CAA+C,EAAE;QAC1E,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,4CAMC;AA0BD;;;;;;;;;;;;;GAaG;AACH,SAAgB,sBAAsB,CAAC,IAAgC,EAAE,IAA2B;IAChG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC3E,CAAC;AAFD,wDAEC"}

package/policy/getPolicy.d.ts

@@ -1,6 +1,6 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * Get a policy from Okta.
+ * Use this data source to retrieve a policy from Okta.
  *
  * ## Example Usage
  *
@@ -20,11 +20,12 @@ export declare function getPolicy(args: GetPolicyArgs, opts?: pulumi.InvokeOptio
  */
 export interface GetPolicyArgs {
     /**
-     * Name of the policy
+     * Name of policy to retrieve.
      */
     name: string;
     /**
-     * Policy type, see https://developer.okta.com/docs/reference/api/policy/#policy-object
+     * Type of policy to retrieve. See https://developer.okta.com/docs/reference/api/policy/#policy-object for valid values. Currently:
+     * - All:
      */
     type: string;
 }
@@ -37,20 +38,17 @@ export interface GetPolicyResult {
      */
     readonly id: string;
     /**
-     * Name of the policy
+     * name of policy.
      */
     readonly name: string;
-    /**
-     * Status of the policy
-     */
     readonly status: string;
     /**
-     * Policy type, see https://developer.okta.com/docs/reference/api/policy/#policy-object
+     * type of policy.
      */
     readonly type: string;
 }
 /**
- * Get a policy from Okta.
+ * Use this data source to retrieve a policy from Okta.
  *
  * ## Example Usage
  *
@@ -70,11 +68,12 @@ export declare function getPolicyOutput(args: GetPolicyOutputArgs, opts?: pulumi
  */
 export interface GetPolicyOutputArgs {
     /**
-     * Name of the policy
+     * Name of policy to retrieve.
      */
     name: pulumi.Input<string>;
     /**
-     * Policy type, see https://developer.okta.com/docs/reference/api/policy/#policy-object
+     * Type of policy to retrieve. See https://developer.okta.com/docs/reference/api/policy/#policy-object for valid values. Currently:
+     * - All:
      */
     type: pulumi.Input<string>;
 }

package/policy/getPolicy.js

@@ -6,7 +6,7 @@ exports.getPolicyOutput = exports.getPolicy = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 /**
- * Get a policy from Okta.
+ * Use this data source to retrieve a policy from Okta.
  *
  * ## Example Usage
  *
@@ -29,7 +29,7 @@ function getPolicy(args, opts) {
 }
 exports.getPolicy = getPolicy;
 /**
- * Get a policy from Okta.
+ * Use this data source to retrieve a policy from Okta.
  *
  * ## Example Usage
  *

package/policy/getPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"getPolicy.js","sourceRoot":"","sources":["../../policy/getPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;GAcG;AACH,SAAgB,SAAS,CAAC,IAAmB,EAAE,IAA2B;IAEtE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iCAAiC,EAAE;QAC5D,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,8BAOC;AAqCD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,eAAe,CAAC,IAAyB,EAAE,IAA2B;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,CAAC;AAFD,0CAEC"}
+{"version":3,"file":"getPolicy.js","sourceRoot":"","sources":["../../policy/getPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;GAcG;AACH,SAAgB,SAAS,CAAC,IAAmB,EAAE,IAA2B;IAEtE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iCAAiC,EAAE;QAC5D,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,8BAOC;AAmCD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,eAAe,CAAC,IAAyB,EAAE,IAA2B;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,CAAC;AAFD,0CAEC"}

package/policy/mfa.d.ts

@@ -1,4 +1,53 @@
 import * as pulumi from "@pulumi/pulumi";
+/**
+ * Creates an MFA Policy.
+ *
+ * This resource allows you to create and configure an MFA Policy.
+ *
+ * > Requires Org Feature Flag `OKTA_MFA_POLICY`. Contact support to have this feature flag ***enabled***.
+ *
+ * > Unless Org Feature Flag `ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT` is ***disabled*** `oktaPassword` or `oktaEmail` must be present and its `enroll` value set to `REQUIRED`. Contact support to have this feature flag ***disabled***.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const classicExample = new okta.policy.Mfa("classicExample", {
+ *     description: "Example MFA policy using Okta Classic engine with factors.",
+ *     groupsIncludeds: [data.okta_group.everyone.id],
+ *     isOie: false,
+ *     oktaOtp: {
+ *         enroll: "REQUIRED",
+ *     },
+ *     oktaPassword: {
+ *         enroll: "REQUIRED",
+ *     },
+ *     status: "ACTIVE",
+ * });
+ * const oieExample = new okta.policy.Mfa("oieExample", {
+ *     description: "Example MFA policy that uses Okta Identity Engine (OIE) with authenticators",
+ *     groupsIncludeds: [data.okta_group.everyone.id],
+ *     isOie: true,
+ *     oktaPassword: {
+ *         enroll: "REQUIRED",
+ *     },
+ *     oktaVerify: {
+ *         enroll: "REQUIRED",
+ *     },
+ *     status: "ACTIVE",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * An MFA Policy can be imported via the Okta ID.
+ *
+ * ```sh
+ *  $ pulumi import okta:policy/mfa:Mfa example <policy id>
+ * ```
+ */
 export declare class Mfa extends pulumi.CustomResource {
     /**
      * Get an existing Mfa resource's state with the given name, ID, and optional extra
@@ -16,89 +65,153 @@ export declare class Mfa extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is Mfa;
     /**
-     * Policy Description
+     * Policy Description.
      */
     readonly description: pulumi.Output<string | undefined>;
+    /**
+     * DUO MFA policy settings (✓ Classic, ✓ OIE).
+     */
     readonly duo: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * External IDP MFA policy settings (✓ OIE).
+     */
     readonly externalIdp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Fido U2F MFA policy settings (✓ Classic).
+     */
     readonly fidoU2f: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Fido Web Authn MFA policy settings (✓ Classic).
+     */
     readonly fidoWebauthn: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
+     */
     readonly googleOtp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * List of Group IDs to Include
+     * List of Group IDs to Include.
      */
     readonly groupsIncludeds: pulumi.Output<string[] | undefined>;
+    /**
+     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
+     */
     readonly hotp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
+     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
+     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
      */
     readonly isOie: pulumi.Output<boolean | undefined>;
     /**
-     * Policy Name
+     * Policy Name.
      */
     readonly name: pulumi.Output<string>;
+    /**
+     * Okta Call MFA policy settings (✓ Classic).
+     */
     readonly oktaCall: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
+     */
     readonly oktaEmail: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
+     */
     readonly oktaOtp: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
+     */
     readonly oktaPassword: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Okta Push MFA policy settings (✓ Classic).
+     */
     readonly oktaPush: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Okta Question MFA policy settings (✓ Classic).
+     */
     readonly oktaQuestion: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Okta SMS MFA policy settings (✓ Classic).
+     */
     readonly oktaSms: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Okta Verify MFA policy settings (✓ OIE).
+     */
     readonly oktaVerify: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * On-Prem MFA MFA policy settings (✓ OIE).
+     */
     readonly onpremMfa: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Phone Number MFA policy settings (✓ OIE).
+     */
     readonly phoneNumber: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
+     * Priority of the policy.
      */
     readonly priority: pulumi.Output<number | undefined>;
+    /**
+     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
+     */
     readonly rsaToken: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Security Question MFA policy settings (✓ OIE).
+     */
     readonly securityQuestion: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * Policy Status: ACTIVE or INACTIVE.
+     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
      */
     readonly status: pulumi.Output<string | undefined>;
+    /**
+     * Symantec VIP MFA policy settings (✓ Classic).
+     */
     readonly symantecVip: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
+     */
     readonly webauthn: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
+    /**
+     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
+     */
     readonly yubikeyToken: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
@@ -116,89 +229,153 @@ export declare class Mfa extends pulumi.CustomResource {
  */
 export interface MfaState {
     /**
-     * Policy Description
+     * Policy Description.
      */
     description?: pulumi.Input<string>;
+    /**
+     * DUO MFA policy settings (✓ Classic, ✓ OIE).
+     */
     duo?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * External IDP MFA policy settings (✓ OIE).
+     */
     externalIdp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Fido U2F MFA policy settings (✓ Classic).
+     */
     fidoU2f?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Fido Web Authn MFA policy settings (✓ Classic).
+     */
     fidoWebauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
+     */
     googleOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * List of Group IDs to Include
+     * List of Group IDs to Include.
      */
     groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
+     */
     hotp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
+     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
+     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
      */
     isOie?: pulumi.Input<boolean>;
     /**
-     * Policy Name
+     * Policy Name.
      */
     name?: pulumi.Input<string>;
+    /**
+     * Okta Call MFA policy settings (✓ Classic).
+     */
     oktaCall?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
+     */
     oktaEmail?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
+     */
     oktaOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
+     */
     oktaPassword?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Push MFA policy settings (✓ Classic).
+     */
     oktaPush?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Question MFA policy settings (✓ Classic).
+     */
     oktaQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta SMS MFA policy settings (✓ Classic).
+     */
     oktaSms?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Verify MFA policy settings (✓ OIE).
+     */
     oktaVerify?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * On-Prem MFA MFA policy settings (✓ OIE).
+     */
     onpremMfa?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Phone Number MFA policy settings (✓ OIE).
+     */
     phoneNumber?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
+     * Priority of the policy.
      */
     priority?: pulumi.Input<number>;
+    /**
+     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
+     */
     rsaToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Security Question MFA policy settings (✓ OIE).
+     */
     securityQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Policy Status: ACTIVE or INACTIVE.
+     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
      */
     status?: pulumi.Input<string>;
+    /**
+     * Symantec VIP MFA policy settings (✓ Classic).
+     */
     symantecVip?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
+     */
     webauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
+     */
     yubikeyToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
@@ -208,89 +385,153 @@ export interface MfaState {
  */
 export interface MfaArgs {
     /**
-     * Policy Description
+     * Policy Description.
      */
     description?: pulumi.Input<string>;
+    /**
+     * DUO MFA policy settings (✓ Classic, ✓ OIE).
+     */
     duo?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * External IDP MFA policy settings (✓ OIE).
+     */
     externalIdp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Fido U2F MFA policy settings (✓ Classic).
+     */
     fidoU2f?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Fido Web Authn MFA policy settings (✓ Classic).
+     */
     fidoWebauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Google OTP MFA policy settings (✓ Classic, ✓ OIE).
+     */
     googleOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * List of Group IDs to Include
+     * List of Group IDs to Include.
      */
     groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * HMAC-based One-Time Password MFA policy settings (✓ Classic).
+     */
     hotp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
+     * Boolean that specifies whether to use the newer Okta Identity Engine (OIE) with policy authenticators instead of the classic engine with Factors. This value determines which of the following policy factor settings can be configured. (Default = `false`)
+     * > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
      */
     isOie?: pulumi.Input<boolean>;
     /**
-     * Policy Name
+     * Policy Name.
      */
     name?: pulumi.Input<string>;
+    /**
+     * Okta Call MFA policy settings (✓ Classic).
+     */
     oktaCall?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Email MFA policy settings (✓ Classic, ✓ OIE).
+     */
     oktaEmail?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
+     */
     oktaOtp?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Password MFA policy settings (✓ Classic, ✓ OIE).
+     */
     oktaPassword?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Push MFA policy settings (✓ Classic).
+     */
     oktaPush?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Question MFA policy settings (✓ Classic).
+     */
     oktaQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta SMS MFA policy settings (✓ Classic).
+     */
     oktaSms?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Okta Verify MFA policy settings (✓ OIE).
+     */
     oktaVerify?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * On-Prem MFA MFA policy settings (✓ OIE).
+     */
     onpremMfa?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Phone Number MFA policy settings (✓ OIE).
+     */
     phoneNumber?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
+     * Priority of the policy.
      */
     priority?: pulumi.Input<number>;
+    /**
+     * RSA Token MFA policy settings (✓ Classic, ✓ OIE).
+     */
     rsaToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Security Question MFA policy settings (✓ OIE).
+     */
     securityQuestion?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Policy Status: ACTIVE or INACTIVE.
+     * Policy Status: `"ACTIVE"` or `"INACTIVE"`.
      */
     status?: pulumi.Input<string>;
+    /**
+     * Symantec VIP MFA policy settings (✓ Classic).
+     */
     symantecVip?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
+     */
     webauthn?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
+     */
     yubikeyToken?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;