@pulumi/okta 4.9.0-alpha.1718431198 → 4.9.0-alpha.1718755579
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/adminRoleCustom.d.ts +105 -107
- package/adminRoleCustom.js +3 -5
- package/adminRoleCustom.js.map +1 -1
- package/adminRoleCustomAssignments.d.ts +12 -18
- package/adminRoleCustomAssignments.js +3 -6
- package/adminRoleCustomAssignments.js.map +1 -1
- package/adminRoleTargets.d.ts +14 -16
- package/adminRoleTargets.js +0 -2
- package/adminRoleTargets.js.map +1 -1
- package/app/accessPolicyAssignment.d.ts +23 -2
- package/app/accessPolicyAssignment.js +23 -2
- package/app/accessPolicyAssignment.js.map +1 -1
- package/app/autoLogin.d.ts +63 -97
- package/app/autoLogin.js +3 -37
- package/app/autoLogin.js.map +1 -1
- package/app/basicAuth.d.ts +30 -33
- package/app/basicAuth.js +4 -7
- package/app/basicAuth.js.map +1 -1
- package/app/bookmark.d.ts +30 -33
- package/app/bookmark.js +3 -6
- package/app/bookmark.js.map +1 -1
- package/app/getApp.d.ts +58 -25
- package/app/getApp.js +2 -2
- package/app/getApp.js.map +1 -1
- package/app/getMetadataSaml.d.ts +11 -5
- package/app/getMetadataSaml.js +2 -2
- package/app/getMetadataSaml.js.map +1 -1
- package/app/getOauth.d.ts +62 -34
- package/app/getOauth.js +2 -2
- package/app/getOauth.js.map +1 -1
- package/app/getSaml.d.ts +75 -56
- package/app/getSaml.js +2 -2
- package/app/getSaml.js.map +1 -1
- package/app/groupAssignment.d.ts +23 -9
- package/app/groupAssignment.js +17 -3
- package/app/groupAssignment.js.map +1 -1
- package/app/oauth.d.ts +135 -273
- package/app/oauth.js +6 -60
- package/app/oauth.js.map +1 -1
- package/app/oauthPostLogoutRedirectUri.d.ts +4 -6
- package/app/oauthPostLogoutRedirectUri.js +1 -3
- package/app/oauthPostLogoutRedirectUri.js.map +1 -1
- package/app/oauthRedirectUri.d.ts +4 -6
- package/app/oauthRedirectUri.js +1 -3
- package/app/oauthRedirectUri.js.map +1 -1
- package/app/oauthRoleAssignment.d.ts +4 -29
- package/app/oauthRoleAssignment.js +4 -29
- package/app/oauthRoleAssignment.js.map +1 -1
- package/app/saml.d.ts +161 -289
- package/app/saml.js +6 -152
- package/app/saml.js.map +1 -1
- package/app/securePasswordStore.d.ts +79 -80
- package/app/securePasswordStore.js +6 -7
- package/app/securePasswordStore.js.map +1 -1
- package/app/swa.d.ts +70 -71
- package/app/swa.js +4 -5
- package/app/swa.js.map +1 -1
- package/app/threeField.d.ts +74 -76
- package/app/threeField.js +5 -7
- package/app/threeField.js.map +1 -1
- package/app/user.d.ts +12 -17
- package/app/user.js +0 -2
- package/app/user.js.map +1 -1
- package/appGroupAssignments.d.ts +6 -8
- package/appGroupAssignments.js +3 -5
- package/appGroupAssignments.js.map +1 -1
- package/appOauthApiScope.d.ts +5 -7
- package/appOauthApiScope.js +2 -4
- package/appOauthApiScope.js.map +1 -1
- package/appSamlAppSettings.d.ts +6 -7
- package/appSamlAppSettings.js +3 -4
- package/appSamlAppSettings.js.map +1 -1
- package/appSharedCredentials.d.ts +61 -63
- package/appSharedCredentials.js +4 -6
- package/appSharedCredentials.js.map +1 -1
- package/appSignonPolicy.d.ts +3 -39
- package/appSignonPolicy.js +3 -39
- package/appSignonPolicy.js.map +1 -1
- package/appSignonPolicyRule.d.ts +69 -361
- package/appSignonPolicyRule.js +1 -278
- package/appSignonPolicyRule.js.map +1 -1
- package/appUserBaseSchemaProperty.d.ts +25 -29
- package/appUserBaseSchemaProperty.js +1 -5
- package/appUserBaseSchemaProperty.js.map +1 -1
- package/appUserSchemaProperty.d.ts +51 -41
- package/appUserSchemaProperty.js +0 -2
- package/appUserSchemaProperty.js.map +1 -1
- package/auth/getServer.d.ts +11 -11
- package/auth/getServer.js +2 -2
- package/auth/getServerPolicy.d.ts +15 -9
- package/auth/getServerPolicy.js +2 -2
- package/auth/getServerPolicy.js.map +1 -1
- package/auth/getServerScopes.d.ts +8 -5
- package/auth/getServerScopes.js +2 -2
- package/auth/getServerScopes.js.map +1 -1
- package/auth/server.d.ts +15 -19
- package/auth/server.js +1 -5
- package/auth/server.js.map +1 -1
- package/auth/serverClaim.d.ts +13 -17
- package/auth/serverClaim.js +1 -5
- package/auth/serverClaim.js.map +1 -1
- package/auth/serverPolicy.d.ts +10 -14
- package/auth/serverPolicy.js +1 -5
- package/auth/serverPolicy.js.map +1 -1
- package/auth/serverPolicyClaim.d.ts +50 -66
- package/auth/serverPolicyClaim.js +0 -25
- package/auth/serverPolicyClaim.js.map +1 -1
- package/auth/serverPolicyRule.d.ts +32 -43
- package/auth/serverPolicyRule.js +0 -2
- package/auth/serverPolicyRule.js.map +1 -1
- package/auth/serverScope.d.ts +16 -20
- package/auth/serverScope.js +1 -5
- package/auth/serverScope.js.map +1 -1
- package/authServerClaimDefault.d.ts +10 -25
- package/authServerClaimDefault.js +0 -9
- package/authServerClaimDefault.js.map +1 -1
- package/authServerDefault.d.ts +15 -19
- package/authServerDefault.js +1 -5
- package/authServerDefault.js.map +1 -1
- package/authenticator.d.ts +53 -61
- package/authenticator.js +11 -11
- package/authenticator.js.map +1 -1
- package/behaviour.d.ts +21 -41
- package/behaviour.js +0 -2
- package/behaviour.js.map +1 -1
- package/brand.d.ts +23 -22
- package/brand.js +8 -4
- package/brand.js.map +1 -1
- package/captcha.d.ts +15 -17
- package/captcha.js +3 -5
- package/captcha.js.map +1 -1
- package/captchaOrgWideSettings.d.ts +8 -43
- package/captchaOrgWideSettings.js +2 -37
- package/captchaOrgWideSettings.js.map +1 -1
- package/domain.d.ts +13 -21
- package/domain.js +0 -2
- package/domain.js.map +1 -1
- package/domainCertificate.d.ts +17 -24
- package/domainCertificate.js +2 -9
- package/domainCertificate.js.map +1 -1
- package/domainVerification.d.ts +4 -10
- package/domainVerification.js +1 -7
- package/domainVerification.js.map +1 -1
- package/emailCustomization.d.ts +38 -222
- package/emailCustomization.js +29 -33
- package/emailCustomization.js.map +1 -1
- package/emailDomain.d.ts +4 -8
- package/emailDomain.js +0 -4
- package/emailDomain.js.map +1 -1
- package/emailDomainVerification.d.ts +3 -7
- package/emailDomainVerification.js +0 -4
- package/emailDomainVerification.js.map +1 -1
- package/emailSender.d.ts +15 -17
- package/emailSender.js +2 -4
- package/emailSender.js.map +1 -1
- package/emailSenderVerification.d.ts +5 -9
- package/emailSenderVerification.js +2 -6
- package/emailSenderVerification.js.map +1 -1
- package/eventHook.d.ts +16 -11
- package/eventHook.js +1 -5
- package/eventHook.js.map +1 -1
- package/eventHookVerification.d.ts +4 -10
- package/eventHookVerification.js +1 -7
- package/eventHookVerification.js.map +1 -1
- package/factor/factor.d.ts +4 -9
- package/factor/factor.js +1 -3
- package/factor/factor.js.map +1 -1
- package/factorTotp.d.ts +12 -21
- package/factorTotp.js +3 -3
- package/factorTotp.js.map +1 -1
- package/getAppGroupAssignments.d.ts +6 -6
- package/getAppGroupAssignments.js +2 -2
- package/getAppSignonPolicy.d.ts +16 -6
- package/getAppSignonPolicy.js +8 -4
- package/getAppSignonPolicy.js.map +1 -1
- package/getAppUserAssignments.d.ts +6 -6
- package/getAppUserAssignments.js +2 -2
- package/getAuthServerClaim.d.ts +15 -12
- package/getAuthServerClaim.js +2 -2
- package/getAuthServerClaim.js.map +1 -1
- package/getAuthServerClaims.d.ts +8 -5
- package/getAuthServerClaims.js +2 -2
- package/getAuthServerClaims.js.map +1 -1
- package/getAuthenticator.d.ts +24 -26
- package/getAuthenticator.js +14 -22
- package/getAuthenticator.js.map +1 -1
- package/getBehaviour.d.ts +6 -8
- package/getBehaviour.js +2 -2
- package/getBehaviour.js.map +1 -1
- package/getBehaviours.d.ts +7 -7
- package/getBehaviours.js +2 -2
- package/getBrand.d.ts +9 -6
- package/getBrand.js +2 -2
- package/getBrand.js.map +1 -1
- package/getBrands.d.ts +2 -2
- package/getBrands.js +2 -2
- package/getDomain.d.ts +11 -14
- package/getDomain.js +2 -8
- package/getDomain.js.map +1 -1
- package/getEmailCustomization.d.ts +14 -9
- package/getEmailCustomization.js +2 -6
- package/getEmailCustomization.js.map +1 -1
- package/getEmailCustomizations.d.ts +11 -9
- package/getEmailCustomizations.js +2 -6
- package/getEmailCustomizations.js.map +1 -1
- package/getGroups.d.ts +11 -25
- package/getGroups.js +2 -2
- package/getGroups.js.map +1 -1
- package/getLogStream.d.ts +8 -39
- package/getLogStream.js +2 -24
- package/getLogStream.js.map +1 -1
- package/getNetworkZone.d.ts +12 -12
- package/getNetworkZone.js +2 -2
- package/getOrgMetadata.d.ts +0 -22
- package/getOrgMetadata.js +0 -22
- package/getOrgMetadata.js.map +1 -1
- package/getRoleSubscription.d.ts +13 -35
- package/getRoleSubscription.js +2 -2
- package/getRoleSubscription.js.map +1 -1
- package/getTemplate.d.ts +10 -8
- package/getTemplate.js +2 -6
- package/getTemplate.js.map +1 -1
- package/getTemplates.d.ts +6 -7
- package/getTemplates.js +2 -6
- package/getTemplates.js.map +1 -1
- package/getTheme.d.ts +14 -12
- package/getTheme.js +2 -6
- package/getTheme.js.map +1 -1
- package/getThemes.d.ts +6 -7
- package/getThemes.js +2 -6
- package/getThemes.js.map +1 -1
- package/getTrustedOrigins.d.ts +7 -4
- package/getTrustedOrigins.js +2 -2
- package/getTrustedOrigins.js.map +1 -1
- package/getUserSecurityQuestions.d.ts +4 -8
- package/getUserSecurityQuestions.js +0 -4
- package/getUserSecurityQuestions.js.map +1 -1
- package/group/getEveryoneGroup.d.ts +10 -5
- package/group/getEveryoneGroup.js +4 -2
- package/group/getEveryoneGroup.js.map +1 -1
- package/group/getGroup.d.ts +17 -26
- package/group/getGroup.js +2 -2
- package/group/getGroup.js.map +1 -1
- package/group/getRule.d.ts +9 -9
- package/group/getRule.js +2 -2
- package/group/group.d.ts +4 -36
- package/group/group.js +1 -33
- package/group/group.js.map +1 -1
- package/group/role.d.ts +37 -81
- package/group/role.js +1 -6
- package/group/role.js.map +1 -1
- package/group/rule.d.ts +12 -20
- package/group/rule.js +0 -2
- package/group/rule.js.map +1 -1
- package/groupMemberships.d.ts +8 -10
- package/groupMemberships.js +2 -4
- package/groupMemberships.js.map +1 -1
- package/groupSchemaProperty.d.ts +57 -59
- package/groupSchemaProperty.js +0 -2
- package/groupSchemaProperty.js.map +1 -1
- package/idp/getMetadataSaml.d.ts +9 -6
- package/idp/getMetadataSaml.js +2 -2
- package/idp/getMetadataSaml.js.map +1 -1
- package/idp/getOidc.d.ts +9 -9
- package/idp/getOidc.js +2 -2
- package/idp/getSaml.d.ts +16 -13
- package/idp/getSaml.js +2 -2
- package/idp/getSaml.js.map +1 -1
- package/idp/getSocial.d.ts +8 -2
- package/idp/getSocial.js +2 -2
- package/idp/getSocial.js.map +1 -1
- package/idp/oidc.d.ts +70 -62
- package/idp/oidc.js +3 -5
- package/idp/oidc.js.map +1 -1
- package/idp/saml.d.ts +64 -86
- package/idp/saml.js +1 -5
- package/idp/saml.js.map +1 -1
- package/idp/samlKey.d.ts +3 -5
- package/idp/samlKey.js +0 -2
- package/idp/samlKey.js.map +1 -1
- package/idp/social.d.ts +99 -69
- package/idp/social.js +11 -5
- package/idp/social.js.map +1 -1
- package/inline/hook.d.ts +4 -26
- package/inline/hook.js +1 -5
- package/inline/hook.js.map +1 -1
- package/linkDefinition.d.ts +2 -3
- package/linkDefinition.js +2 -3
- package/linkDefinition.js.map +1 -1
- package/linkValue.d.ts +7 -9
- package/linkValue.js +1 -3
- package/linkValue.js.map +1 -1
- package/logStream.d.ts +32 -27
- package/logStream.js +23 -9
- package/logStream.js.map +1 -1
- package/network/zone.d.ts +25 -66
- package/network/zone.js +1 -39
- package/network/zone.js.map +1 -1
- package/orgConfiguration.d.ts +4 -9
- package/orgConfiguration.js +1 -3
- package/orgConfiguration.js.map +1 -1
- package/orgSupport.d.ts +4 -7
- package/orgSupport.js +1 -4
- package/orgSupport.js.map +1 -1
- package/package.json +3 -3
- package/policy/getDefaultPolicy.d.ts +9 -7
- package/policy/getDefaultPolicy.js +6 -2
- package/policy/getDefaultPolicy.js.map +1 -1
- package/policy/getPolicy.d.ts +11 -26
- package/policy/getPolicy.js +2 -2
- package/policy/getPolicy.js.map +1 -1
- package/policy/mfa.d.ts +18 -220
- package/policy/mfa.js +0 -10
- package/policy/mfa.js.map +1 -1
- package/policy/password.d.ts +91 -95
- package/policy/password.js +1 -5
- package/policy/password.js.map +1 -1
- package/policy/ruleIdpDiscovery.d.ts +111 -93
- package/policy/ruleIdpDiscovery.js +48 -57
- package/policy/ruleIdpDiscovery.js.map +1 -1
- package/policy/ruleMfa.d.ts +40 -30
- package/policy/ruleMfa.js +1 -3
- package/policy/ruleMfa.js.map +1 -1
- package/policy/rulePassword.d.ts +34 -38
- package/policy/rulePassword.js +1 -5
- package/policy/rulePassword.js.map +1 -1
- package/policy/ruleSignon.d.ts +94 -85
- package/policy/ruleSignon.js +1 -4
- package/policy/ruleSignon.js.map +1 -1
- package/policy/signon.d.ts +16 -20
- package/policy/signon.js +1 -5
- package/policy/signon.js.map +1 -1
- package/policyMfaDefault.d.ts +15 -214
- package/policyMfaDefault.js +2 -9
- package/policyMfaDefault.js.map +1 -1
- package/policyPasswordDefault.d.ts +85 -101
- package/policyPasswordDefault.js +1 -5
- package/policyPasswordDefault.js.map +1 -1
- package/policyProfileEnrollment.d.ts +8 -9
- package/policyProfileEnrollment.js +2 -3
- package/policyProfileEnrollment.js.map +1 -1
- package/policyProfileEnrollmentApps.d.ts +8 -11
- package/policyProfileEnrollmentApps.js +3 -6
- package/policyProfileEnrollmentApps.js.map +1 -1
- package/policyRuleProfileEnrollment.d.ts +42 -31
- package/policyRuleProfileEnrollment.js +2 -3
- package/policyRuleProfileEnrollment.js.map +1 -1
- package/profile/mapping.d.ts +19 -34
- package/profile/mapping.js +4 -4
- package/profile/mapping.js.map +1 -1
- package/rateLimiting.d.ts +8 -17
- package/rateLimiting.js +2 -5
- package/rateLimiting.js.map +1 -1
- package/resourceSet.d.ts +18 -26
- package/resourceSet.js +9 -14
- package/resourceSet.js.map +1 -1
- package/roleSubscription.d.ts +35 -86
- package/roleSubscription.js +2 -2
- package/roleSubscription.js.map +1 -1
- package/securityNotificationEmails.d.ts +4 -7
- package/securityNotificationEmails.js +4 -7
- package/securityNotificationEmails.js.map +1 -1
- package/templateSms.d.ts +4 -8
- package/templateSms.js +1 -5
- package/templateSms.js.map +1 -1
- package/theme.d.ts +46 -46
- package/theme.js +2 -2
- package/threatInsightSettings.d.ts +7 -27
- package/threatInsightSettings.js +1 -3
- package/threatInsightSettings.js.map +1 -1
- package/trustedorigin/origin.d.ts +13 -17
- package/trustedorigin/origin.js +1 -5
- package/trustedorigin/origin.js.map +1 -1
- package/types/input.d.ts +65 -162
- package/types/output.d.ts +75 -275
- package/user/getUser.d.ts +32 -104
- package/user/getUser.js +2 -2
- package/user/getUser.js.map +1 -1
- package/user/getUserProfileMappingSource.d.ts +9 -7
- package/user/getUserProfileMappingSource.js +6 -4
- package/user/getUserProfileMappingSource.js.map +1 -1
- package/user/getUserType.d.ts +7 -7
- package/user/getUserType.js +2 -2
- package/user/getUsers.d.ts +95 -37
- package/user/getUsers.js +64 -24
- package/user/getUsers.js.map +1 -1
- package/user/user.d.ts +160 -209
- package/user/user.js +43 -65
- package/user/user.js.map +1 -1
- package/user/userType.d.ts +1 -5
- package/user/userType.js +1 -5
- package/user/userType.js.map +1 -1
- package/userAdminRoles.d.ts +10 -17
- package/userAdminRoles.js +1 -5
- package/userAdminRoles.js.map +1 -1
- package/userBaseSchemaProperty.d.ts +26 -34
- package/userBaseSchemaProperty.js +2 -10
- package/userBaseSchemaProperty.js.map +1 -1
- package/userFactorQuestion.d.ts +1 -5
- package/userFactorQuestion.js +1 -5
- package/userFactorQuestion.js.map +1 -1
- package/userGroupMemberships.d.ts +3 -3
- package/userSchemaProperty.d.ts +57 -56
- package/userSchemaProperty.js +0 -8
- package/userSchemaProperty.js.map +1 -1
package/appSignonPolicyRule.js
CHANGED
|
@@ -6,287 +6,10 @@ exports.AppSignonPolicyRule = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
-
* > **WARNING:** This feature is only available as a part of the Identity Engine. Contact support for further information.
|
|
10
|
-
*
|
|
11
|
-
* This resource allows you to create and configure a sign-on policy rule for the application.
|
|
12
|
-
*
|
|
13
|
-
* A default or `Catch-all Rule` sign-on policy rule can be imported and managed as a custom rule.
|
|
14
|
-
* The only difference is that these fields are immutable and can not be managed: `networkConnection`, `networkExcludes`,
|
|
15
|
-
* `networkIncludes`, `platformInclude`, `customExpression`, `deviceIsRegistered`, `deviceIsManaged`, `usersExcluded`,
|
|
16
|
-
* `usersIncluded`, `groupsExcluded`, `groupsIncluded`, `userTypesExcluded` and `userTypesIncluded`.
|
|
17
|
-
*
|
|
18
|
-
* ## Example Usage
|
|
19
|
-
*
|
|
20
|
-
* ### Simple usage
|
|
21
|
-
*
|
|
22
|
-
* ```typescript
|
|
23
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
24
|
-
* import * as okta from "@pulumi/okta";
|
|
25
|
-
*
|
|
26
|
-
* const testSaml = new okta.app.Saml("test", {
|
|
27
|
-
* label: "My App",
|
|
28
|
-
* ssoUrl: "https://google.com",
|
|
29
|
-
* recipient: "https://here.com",
|
|
30
|
-
* destination: "https://its-about-the-journey.com",
|
|
31
|
-
* audience: "https://audience.com",
|
|
32
|
-
* status: "ACTIVE",
|
|
33
|
-
* subjectNameIdTemplate: "${user.userName}",
|
|
34
|
-
* subjectNameIdFormat: "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
|
|
35
|
-
* signatureAlgorithm: "RSA_SHA256",
|
|
36
|
-
* responseSigned: true,
|
|
37
|
-
* digestAlgorithm: "SHA256",
|
|
38
|
-
* honorForceAuthn: false,
|
|
39
|
-
* authnContextClassRef: "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport",
|
|
40
|
-
* });
|
|
41
|
-
* const test = okta.getAppSignonPolicyOutput({
|
|
42
|
-
* appId: testSaml.id,
|
|
43
|
-
* });
|
|
44
|
-
* const testAppSignonPolicyRule = new okta.AppSignonPolicyRule("test", {
|
|
45
|
-
* policyId: test.apply(test => test.id),
|
|
46
|
-
* name: "testAcc_replace_with_uuid",
|
|
47
|
-
* });
|
|
48
|
-
* ```
|
|
49
|
-
*
|
|
50
|
-
* This will create an app sign-on policy rule with the following `THEN` block:
|
|
51
|
-
*
|
|
52
|
-
* ### Rule with Constraints
|
|
53
|
-
*
|
|
54
|
-
* ### Example 1:
|
|
55
|
-
*
|
|
56
|
-
* ```typescript
|
|
57
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
58
|
-
* import * as okta from "@pulumi/okta";
|
|
59
|
-
*
|
|
60
|
-
* const test = new okta.AppSignonPolicyRule("test", {
|
|
61
|
-
* policyId: testOktaAppSignonPolicy.id,
|
|
62
|
-
* name: "testAcc_replace_with_uuid",
|
|
63
|
-
* constraints: [JSON.stringify({
|
|
64
|
-
* knowledge: {
|
|
65
|
-
* types: ["password"],
|
|
66
|
-
* },
|
|
67
|
-
* })],
|
|
68
|
-
* });
|
|
69
|
-
* ```
|
|
70
|
-
*
|
|
71
|
-
* This will create an app sign-on policy rule with the following `THEN` block:
|
|
72
|
-
*
|
|
73
|
-
* ### Example 2:
|
|
74
|
-
*
|
|
75
|
-
* ```typescript
|
|
76
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
77
|
-
* import * as okta from "@pulumi/okta";
|
|
78
|
-
*
|
|
79
|
-
* const test = new okta.AppSignonPolicyRule("test", {
|
|
80
|
-
* policyId: testOktaAppSignonPolicy.id,
|
|
81
|
-
* name: "testAcc_replace_with_uuid",
|
|
82
|
-
* constraints: [JSON.stringify({
|
|
83
|
-
* knowledge: {
|
|
84
|
-
* reauthenticateIn: "PT2H",
|
|
85
|
-
* types: ["password"],
|
|
86
|
-
* },
|
|
87
|
-
* possession: {
|
|
88
|
-
* deviceBound: "REQUIRED",
|
|
89
|
-
* hardwareProtection: "REQUIRED",
|
|
90
|
-
* },
|
|
91
|
-
* })],
|
|
92
|
-
* });
|
|
93
|
-
* ```
|
|
94
|
-
*
|
|
95
|
-
* This will create an app sign-on policy rule with the following `THEN` block:
|
|
96
|
-
*
|
|
97
|
-
* More examples can be
|
|
98
|
-
* found [here](https://developer.okta.com/docs/reference/api/policy/#verification-method-json-examples).
|
|
99
|
-
*
|
|
100
|
-
* ### Complex example
|
|
101
|
-
*
|
|
102
|
-
* ```typescript
|
|
103
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
104
|
-
* import * as okta from "@pulumi/okta";
|
|
105
|
-
*
|
|
106
|
-
* const testSaml = new okta.app.Saml("test", {
|
|
107
|
-
* label: "testAcc_replace_with_uuid",
|
|
108
|
-
* ssoUrl: "https://google.com",
|
|
109
|
-
* recipient: "https://here.com",
|
|
110
|
-
* destination: "https://its-about-the-journey.com",
|
|
111
|
-
* audience: "https://audience.com",
|
|
112
|
-
* subjectNameIdTemplate: "${user.userName}",
|
|
113
|
-
* subjectNameIdFormat: "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
|
|
114
|
-
* responseSigned: true,
|
|
115
|
-
* signatureAlgorithm: "RSA_SHA256",
|
|
116
|
-
* digestAlgorithm: "SHA256",
|
|
117
|
-
* honorForceAuthn: false,
|
|
118
|
-
* authnContextClassRef: "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport",
|
|
119
|
-
* singleLogoutIssuer: "https://dunshire.okta.com",
|
|
120
|
-
* singleLogoutUrl: "https://dunshire.okta.com/logout",
|
|
121
|
-
* singleLogoutCertificate: `MIIFnDCCA4QCCQDBSLbiON2T1zANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMxDjAMBgNV\x0d
|
|
122
|
-
* BAgMBU1haW5lMRAwDgYDVQQHDAdDYXJpYm91MRcwFQYDVQQKDA5Tbm93bWFrZXJzIEluYzEUMBIG\x0d
|
|
123
|
-
* A1UECwwLRW5naW5lZXJpbmcxDTALBgNVBAMMBFNub3cxIDAeBgkqhkiG9w0BCQEWEWVtYWlsQGV4\x0d
|
|
124
|
-
* YW1wbGUuY29tMB4XDTIwMTIwMzIyNDY0M1oXDTMwMTIwMTIyNDY0M1owgY8xCzAJBgNVBAYTAlVT\x0d
|
|
125
|
-
* MQ4wDAYDVQQIDAVNYWluZTEQMA4GA1UEBwwHQ2FyaWJvdTEXMBUGA1UECgwOU25vd21ha2VycyBJ\x0d
|
|
126
|
-
* bmMxFDASBgNVBAsMC0VuZ2luZWVyaW5nMQ0wCwYDVQQDDARTbm93MSAwHgYJKoZIhvcNAQkBFhFl\x0d
|
|
127
|
-
* bWFpbEBleGFtcGxlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANMmWDjXPdoa\x0d
|
|
128
|
-
* PyzIENqeY9njLan2FqCbQPSestWUUcb6NhDsJVGSQ7XR+ozQA5TaJzbP7cAJUj8vCcbqMZsgOQAu\x0d
|
|
129
|
-
* O/pzYyQEKptLmrGvPn7xkJ1A1xLkp2NY18cpDTeUPueJUoidZ9EJwEuyUZIktzxNNU1pA1lGijiu\x0d
|
|
130
|
-
* 2XNxs9d9JR/hm3tCu9Im8qLVB4JtX80YUa6QtlRjWR/H8a373AYCOASdoB3c57fIPD8ATDNy2w/c\x0d
|
|
131
|
-
* fCVGiyKDMFB+GA/WTsZpOP3iohRp8ltAncSuzypcztb2iE+jijtTsiC9kUA2abAJqqpoCJubNShi\x0d
|
|
132
|
-
* Vff4822czpziS44MV2guC9wANi8u3Uyl5MKsU95j01jzadKRP5S+2f0K+n8n4UoV9fnqZFyuGAKd\x0d
|
|
133
|
-
* CJi9K6NlSAP+TgPe/JP9FOSuxQOHWJfmdLHdJD+evoKi9E55sr5lRFK0xU1Fj5Ld7zjC0pXPhtJf\x0d
|
|
134
|
-
* sgjEZzD433AsHnRzvRT1KSNCPkLYomznZo5n9rWYgCQ8HcytlQDTesmKE+s05E/VSWNtH84XdDrt\x0d
|
|
135
|
-
* ieXwfwhHfaABSu+WjZYxi9CXdFCSvXhsgufUcK4FbYAHl/ga/cJxZc52yFC7Pcq0u9O2BSCjYPdQ\x0d
|
|
136
|
-
* DAHs9dhT1RhwVLM8RmoAzgxyyzau0gxnAlgSBD9FMW6dXqIHIp8yAAg9cRXhYRTNAgMBAAEwDQYJ\x0d
|
|
137
|
-
* KoZIhvcNAQELBQADggIBADofEC1SvG8qa7pmKCjB/E9Sxhk3mvUO9Gq43xzwVb721Ng3VYf4vGU3\x0d
|
|
138
|
-
* wLUwJeLt0wggnj26NJweN5T3q9T8UMxZhHSWvttEU3+S1nArRB0beti716HSlOCDx4wTmBu/D1MG\x0d
|
|
139
|
-
* t/kZYFJw+zuzvAcbYct2pK69AQhD8xAIbQvqADJI7cCK3yRry+aWtppc58P81KYabUlCfFXfhJ9E\x0d
|
|
140
|
-
* P72ffN4jVHpX3lxxYh7FKAdiKbY2FYzjsc7RdgKI1R3iAAZUCGBTvezNzaetGzTUjjl/g1tcVYij\x0d
|
|
141
|
-
* ltH9ZOQBPlUMI88lxUxqgRTerpPmAJH00CACx4JFiZrweLM1trZyy06wNDQgLrqHr3EOagBF/O2h\x0d
|
|
142
|
-
* hfTehNdVr6iq3YhKWBo4/+RL0RCzHMh4u86VbDDnDn4Y6HzLuyIAtBFoikoKM6UHTOa0Pqv2bBr5\x0d
|
|
143
|
-
* wbkRkVUxl9yJJw/HmTCdfnsM9dTOJUKzEglnGF2184Gg+qJDZB6fSf0EAO1F6sTqiSswl+uHQZiy\x0d
|
|
144
|
-
* DaZzyU7Gg5seKOZ20zTRaX3Ihj9Zij/ORnrARE7eM/usKMECp+7syUwAUKxDCZkGiUdskmOhhBGL\x0d
|
|
145
|
-
* JtbyK3F2UvoJoLsm3pIcvMak9KwMjSTGJB47ABUP1+w+zGcNk0D5Co3IJ6QekiLfWJyQ+kKsWLKt\x0d
|
|
146
|
-
* zOYQQatrnBagM7MI2/T4\x0d
|
|
147
|
-
* `,
|
|
148
|
-
* attributeStatements: [{
|
|
149
|
-
* type: "GROUP",
|
|
150
|
-
* name: "groups",
|
|
151
|
-
* filterType: "REGEX",
|
|
152
|
-
* filterValue: ".*",
|
|
153
|
-
* }],
|
|
154
|
-
* });
|
|
155
|
-
* const test = okta.getAppSignonPolicyOutput({
|
|
156
|
-
* appId: testSaml.id,
|
|
157
|
-
* });
|
|
158
|
-
* const testUser: okta.user.User[] = [];
|
|
159
|
-
* for (const range = {value: 0}; range.value < 5; range.value++) {
|
|
160
|
-
* testUser.push(new okta.user.User(`test-${range.value}`, {
|
|
161
|
-
* firstName: "TestAcc",
|
|
162
|
-
* lastName: "Smith",
|
|
163
|
-
* login: `testAcc_${range.value}@example.com`,
|
|
164
|
-
* email: `testAcc_${range.value}@example.com`,
|
|
165
|
-
* }));
|
|
166
|
-
* }
|
|
167
|
-
* const _this: okta.group.Group[] = [];
|
|
168
|
-
* for (const range = {value: 0}; range.value < 5; range.value++) {
|
|
169
|
-
* _this.push(new okta.group.Group(`this-${range.value}`, {
|
|
170
|
-
* name: `testAcc_${range.value}`,
|
|
171
|
-
* description: `testAcc_${range.value}`,
|
|
172
|
-
* }));
|
|
173
|
-
* }
|
|
174
|
-
* const testUserType = new okta.user.UserType("test", {
|
|
175
|
-
* name: "testAcc_replace_with_uuid",
|
|
176
|
-
* displayName: "Terraform Acceptance Test User Type Updated",
|
|
177
|
-
* description: "Terraform Acceptance Test User Type Updated",
|
|
178
|
-
* });
|
|
179
|
-
* const testZone = new okta.network.Zone("test", {
|
|
180
|
-
* name: "testAcc_replace_with_uuid",
|
|
181
|
-
* type: "IP",
|
|
182
|
-
* gateways: [
|
|
183
|
-
* "1.2.3.4/24",
|
|
184
|
-
* "2.3.4.5-2.3.4.15",
|
|
185
|
-
* ],
|
|
186
|
-
* proxies: [
|
|
187
|
-
* "2.2.3.4/24",
|
|
188
|
-
* "3.3.4.5-3.3.4.15",
|
|
189
|
-
* ],
|
|
190
|
-
* });
|
|
191
|
-
* const default = okta.user.getUserType({
|
|
192
|
-
* name: "user",
|
|
193
|
-
* });
|
|
194
|
-
* const testDeviceAssuranceAndroid = new okta.policy.DeviceAssuranceAndroid("test", {
|
|
195
|
-
* name: "test",
|
|
196
|
-
* osVersion: "12",
|
|
197
|
-
* jailbreak: false,
|
|
198
|
-
* });
|
|
199
|
-
* const testAppSignonPolicyRule = new okta.AppSignonPolicyRule("test", {
|
|
200
|
-
* name: "testAcc_replace_with_uuid",
|
|
201
|
-
* policyId: test.apply(test => test.id),
|
|
202
|
-
* access: "ALLOW",
|
|
203
|
-
* customExpression: "user.status == \"ACTIVE\"",
|
|
204
|
-
* deviceIsManaged: false,
|
|
205
|
-
* deviceIsRegistered: true,
|
|
206
|
-
* factorMode: "2FA",
|
|
207
|
-
* groupsExcludeds: [
|
|
208
|
-
* _this[2].id,
|
|
209
|
-
* _this[3].id,
|
|
210
|
-
* _this[4].id,
|
|
211
|
-
* ],
|
|
212
|
-
* groupsIncludeds: [
|
|
213
|
-
* _this[0].id,
|
|
214
|
-
* _this[1].id,
|
|
215
|
-
* ],
|
|
216
|
-
* deviceAssurancesIncludeds: [testDeviceAssuranceAndroid.id],
|
|
217
|
-
* networkConnection: "ZONE",
|
|
218
|
-
* networkIncludes: [testZone.id],
|
|
219
|
-
* platformIncludes: [
|
|
220
|
-
* {
|
|
221
|
-
* osType: "ANDROID",
|
|
222
|
-
* type: "MOBILE",
|
|
223
|
-
* },
|
|
224
|
-
* {
|
|
225
|
-
* osType: "IOS",
|
|
226
|
-
* type: "MOBILE",
|
|
227
|
-
* },
|
|
228
|
-
* {
|
|
229
|
-
* osType: "MACOS",
|
|
230
|
-
* type: "DESKTOP",
|
|
231
|
-
* },
|
|
232
|
-
* {
|
|
233
|
-
* osType: "OTHER",
|
|
234
|
-
* type: "DESKTOP",
|
|
235
|
-
* },
|
|
236
|
-
* {
|
|
237
|
-
* osType: "OTHER",
|
|
238
|
-
* type: "MOBILE",
|
|
239
|
-
* },
|
|
240
|
-
* {
|
|
241
|
-
* osType: "WINDOWS",
|
|
242
|
-
* type: "DESKTOP",
|
|
243
|
-
* },
|
|
244
|
-
* {
|
|
245
|
-
* osType: "CHROMEOS",
|
|
246
|
-
* type: "DESKTOP",
|
|
247
|
-
* },
|
|
248
|
-
* ],
|
|
249
|
-
* priority: 98,
|
|
250
|
-
* reAuthenticationFrequency: "PT43800H",
|
|
251
|
-
* type: "ASSURANCE",
|
|
252
|
-
* userTypesExcludeds: [testUserType.id],
|
|
253
|
-
* userTypesIncludeds: [_default.then(_default => _default.id)],
|
|
254
|
-
* usersExcludeds: [
|
|
255
|
-
* testUser[2].id,
|
|
256
|
-
* testUser[3].id,
|
|
257
|
-
* testUser[4].id,
|
|
258
|
-
* ],
|
|
259
|
-
* usersIncludeds: [
|
|
260
|
-
* testUser[0].id,
|
|
261
|
-
* testUser[1].id,
|
|
262
|
-
* ],
|
|
263
|
-
* constraints: [
|
|
264
|
-
* JSON.stringify({
|
|
265
|
-
* knowledge: {
|
|
266
|
-
* reauthenticateIn: "PT2H",
|
|
267
|
-
* types: ["password"],
|
|
268
|
-
* },
|
|
269
|
-
* possession: {
|
|
270
|
-
* deviceBound: "REQUIRED",
|
|
271
|
-
* },
|
|
272
|
-
* }),
|
|
273
|
-
* JSON.stringify({
|
|
274
|
-
* possession: {
|
|
275
|
-
* deviceBound: "REQUIRED",
|
|
276
|
-
* hardwareProtection: "REQUIRED",
|
|
277
|
-
* userPresence: "OPTIONAL",
|
|
278
|
-
* },
|
|
279
|
-
* }),
|
|
280
|
-
* ],
|
|
281
|
-
* });
|
|
282
|
-
* ```
|
|
283
|
-
*
|
|
284
9
|
* ## Import
|
|
285
10
|
*
|
|
286
|
-
* Okta app sign-on policy rule can be imported via the Okta ID.
|
|
287
|
-
*
|
|
288
11
|
* ```sh
|
|
289
|
-
* $ pulumi import okta:index/appSignonPolicyRule:AppSignonPolicyRule example <policy_id>/<rule_id>
|
|
12
|
+
* $ pulumi import okta:index/appSignonPolicyRule:AppSignonPolicyRule example <policy_id>/<rule_id>
|
|
290
13
|
* ```
|
|
291
14
|
*/
|
|
292
15
|
class AppSignonPolicyRule extends pulumi.CustomResource {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"appSignonPolicyRule.js","sourceRoot":"","sources":["../appSignonPolicyRule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"appSignonPolicyRule.js","sourceRoot":"","sources":["../appSignonPolicyRule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;GAMG;AACH,MAAa,mBAAoB,SAAQ,MAAM,CAAC,cAAc;IAC1D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgC,EAAE,IAAmC;QAC9H,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,mBAAmB,CAAC,YAAY,CAAC;IACpE,CAAC;IAgHD,YAAY,IAAY,EAAE,WAAgE,EAAE,IAAmC;QAC3H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmD,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/E;aAAM;YACH,MAAM,IAAI,GAAG,WAAkD,CAAC;YAChE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;;AA3ML,kDA4MC;AA9LG,gBAAgB;AACO,gCAAY,GAAG,oDAAoD,CAAC"}
|
|
@@ -1,8 +1,6 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
* Manages an Application User Base Schema property.
|
|
4
|
-
*
|
|
5
|
-
* This resource allows you to configure a base app user schema property.
|
|
3
|
+
* Manages an Application User Base Schema property. This resource allows you to configure a base app user schema property.
|
|
6
4
|
*
|
|
7
5
|
* ## Example Usage
|
|
8
6
|
*
|
|
@@ -21,8 +19,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
21
19
|
*
|
|
22
20
|
* ## Import
|
|
23
21
|
*
|
|
24
|
-
* App user base schema property can be imported via the property index and app id.
|
|
25
|
-
*
|
|
26
22
|
* ```sh
|
|
27
23
|
* $ pulumi import okta:index/appUserBaseSchemaProperty:AppUserBaseSchemaProperty example <app id>/<property name>
|
|
28
24
|
* ```
|
|
@@ -48,35 +44,35 @@ export declare class AppUserBaseSchemaProperty extends pulumi.CustomResource {
|
|
|
48
44
|
*/
|
|
49
45
|
readonly appId: pulumi.Output<string>;
|
|
50
46
|
/**
|
|
51
|
-
*
|
|
47
|
+
* Subschema unique string identifier
|
|
52
48
|
*/
|
|
53
49
|
readonly index: pulumi.Output<string>;
|
|
54
50
|
/**
|
|
55
|
-
* Master priority for the user schema property. It can be set to `
|
|
51
|
+
* Master priority for the user schema property. It can be set to `PROFILE_MASTER` or `OKTA`. Default: `PROFILE_MASTER`
|
|
56
52
|
*/
|
|
57
53
|
readonly master: pulumi.Output<string | undefined>;
|
|
58
54
|
/**
|
|
59
|
-
* The validation pattern to use for the subschema
|
|
55
|
+
* The validation pattern to use for the subschema. Must be in form of '.+', or '[\n\n]+' if present.'
|
|
60
56
|
*/
|
|
61
57
|
readonly pattern: pulumi.Output<string | undefined>;
|
|
62
58
|
/**
|
|
63
|
-
* Access control permissions for the property. It can be set to `
|
|
59
|
+
* Access control permissions for the property. It can be set to `READ_WRITE`, `READ_ONLY`, `HIDE`. Default: `READ_ONLY`
|
|
64
60
|
*/
|
|
65
61
|
readonly permissions: pulumi.Output<string | undefined>;
|
|
66
62
|
/**
|
|
67
|
-
* Whether the
|
|
63
|
+
* Whether the subschema is required
|
|
68
64
|
*/
|
|
69
65
|
readonly required: pulumi.Output<boolean | undefined>;
|
|
70
66
|
/**
|
|
71
|
-
*
|
|
67
|
+
* Subschema title (display name)
|
|
72
68
|
*/
|
|
73
69
|
readonly title: pulumi.Output<string>;
|
|
74
70
|
/**
|
|
75
|
-
* The type of the schema property. It can be `
|
|
71
|
+
* The type of the schema property. It can be `string`, `boolean`, `number`, `integer`, `array`, or `object`
|
|
76
72
|
*/
|
|
77
73
|
readonly type: pulumi.Output<string>;
|
|
78
74
|
/**
|
|
79
|
-
* User type ID. By default, it is `
|
|
75
|
+
* User type ID. By default, it is `default`
|
|
80
76
|
*/
|
|
81
77
|
readonly userType: pulumi.Output<string | undefined>;
|
|
82
78
|
/**
|
|
@@ -97,35 +93,35 @@ export interface AppUserBaseSchemaPropertyState {
|
|
|
97
93
|
*/
|
|
98
94
|
appId?: pulumi.Input<string>;
|
|
99
95
|
/**
|
|
100
|
-
*
|
|
96
|
+
* Subschema unique string identifier
|
|
101
97
|
*/
|
|
102
98
|
index?: pulumi.Input<string>;
|
|
103
99
|
/**
|
|
104
|
-
* Master priority for the user schema property. It can be set to `
|
|
100
|
+
* Master priority for the user schema property. It can be set to `PROFILE_MASTER` or `OKTA`. Default: `PROFILE_MASTER`
|
|
105
101
|
*/
|
|
106
102
|
master?: pulumi.Input<string>;
|
|
107
103
|
/**
|
|
108
|
-
* The validation pattern to use for the subschema
|
|
104
|
+
* The validation pattern to use for the subschema. Must be in form of '.+', or '[\n\n]+' if present.'
|
|
109
105
|
*/
|
|
110
106
|
pattern?: pulumi.Input<string>;
|
|
111
107
|
/**
|
|
112
|
-
* Access control permissions for the property. It can be set to `
|
|
108
|
+
* Access control permissions for the property. It can be set to `READ_WRITE`, `READ_ONLY`, `HIDE`. Default: `READ_ONLY`
|
|
113
109
|
*/
|
|
114
110
|
permissions?: pulumi.Input<string>;
|
|
115
111
|
/**
|
|
116
|
-
* Whether the
|
|
112
|
+
* Whether the subschema is required
|
|
117
113
|
*/
|
|
118
114
|
required?: pulumi.Input<boolean>;
|
|
119
115
|
/**
|
|
120
|
-
*
|
|
116
|
+
* Subschema title (display name)
|
|
121
117
|
*/
|
|
122
118
|
title?: pulumi.Input<string>;
|
|
123
119
|
/**
|
|
124
|
-
* The type of the schema property. It can be `
|
|
120
|
+
* The type of the schema property. It can be `string`, `boolean`, `number`, `integer`, `array`, or `object`
|
|
125
121
|
*/
|
|
126
122
|
type?: pulumi.Input<string>;
|
|
127
123
|
/**
|
|
128
|
-
* User type ID. By default, it is `
|
|
124
|
+
* User type ID. By default, it is `default`
|
|
129
125
|
*/
|
|
130
126
|
userType?: pulumi.Input<string>;
|
|
131
127
|
}
|
|
@@ -138,35 +134,35 @@ export interface AppUserBaseSchemaPropertyArgs {
|
|
|
138
134
|
*/
|
|
139
135
|
appId: pulumi.Input<string>;
|
|
140
136
|
/**
|
|
141
|
-
*
|
|
137
|
+
* Subschema unique string identifier
|
|
142
138
|
*/
|
|
143
139
|
index: pulumi.Input<string>;
|
|
144
140
|
/**
|
|
145
|
-
* Master priority for the user schema property. It can be set to `
|
|
141
|
+
* Master priority for the user schema property. It can be set to `PROFILE_MASTER` or `OKTA`. Default: `PROFILE_MASTER`
|
|
146
142
|
*/
|
|
147
143
|
master?: pulumi.Input<string>;
|
|
148
144
|
/**
|
|
149
|
-
* The validation pattern to use for the subschema
|
|
145
|
+
* The validation pattern to use for the subschema. Must be in form of '.+', or '[\n\n]+' if present.'
|
|
150
146
|
*/
|
|
151
147
|
pattern?: pulumi.Input<string>;
|
|
152
148
|
/**
|
|
153
|
-
* Access control permissions for the property. It can be set to `
|
|
149
|
+
* Access control permissions for the property. It can be set to `READ_WRITE`, `READ_ONLY`, `HIDE`. Default: `READ_ONLY`
|
|
154
150
|
*/
|
|
155
151
|
permissions?: pulumi.Input<string>;
|
|
156
152
|
/**
|
|
157
|
-
* Whether the
|
|
153
|
+
* Whether the subschema is required
|
|
158
154
|
*/
|
|
159
155
|
required?: pulumi.Input<boolean>;
|
|
160
156
|
/**
|
|
161
|
-
*
|
|
157
|
+
* Subschema title (display name)
|
|
162
158
|
*/
|
|
163
159
|
title: pulumi.Input<string>;
|
|
164
160
|
/**
|
|
165
|
-
* The type of the schema property. It can be `
|
|
161
|
+
* The type of the schema property. It can be `string`, `boolean`, `number`, `integer`, `array`, or `object`
|
|
166
162
|
*/
|
|
167
163
|
type: pulumi.Input<string>;
|
|
168
164
|
/**
|
|
169
|
-
* User type ID. By default, it is `
|
|
165
|
+
* User type ID. By default, it is `default`
|
|
170
166
|
*/
|
|
171
167
|
userType?: pulumi.Input<string>;
|
|
172
168
|
}
|
|
@@ -6,9 +6,7 @@ exports.AppUserBaseSchemaProperty = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
-
* Manages an Application User Base Schema property.
|
|
10
|
-
*
|
|
11
|
-
* This resource allows you to configure a base app user schema property.
|
|
9
|
+
* Manages an Application User Base Schema property. This resource allows you to configure a base app user schema property.
|
|
12
10
|
*
|
|
13
11
|
* ## Example Usage
|
|
14
12
|
*
|
|
@@ -27,8 +25,6 @@ const utilities = require("./utilities");
|
|
|
27
25
|
*
|
|
28
26
|
* ## Import
|
|
29
27
|
*
|
|
30
|
-
* App user base schema property can be imported via the property index and app id.
|
|
31
|
-
*
|
|
32
28
|
* ```sh
|
|
33
29
|
* $ pulumi import okta:index/appUserBaseSchemaProperty:AppUserBaseSchemaProperty example <app id>/<property name>
|
|
34
30
|
* ```
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"appUserBaseSchemaProperty.js","sourceRoot":"","sources":["../appUserBaseSchemaProperty.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"appUserBaseSchemaProperty.js","sourceRoot":"","sources":["../appUserBaseSchemaProperty.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,yBAA0B,SAAQ,MAAM,CAAC,cAAc;IAChE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsC,EAAE,IAAmC;QACpI,OAAO,IAAI,yBAAyB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC1E,CAAC;IA+CD,YAAY,IAAY,EAAE,WAA4E,EAAE,IAAmC;QACvI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyD,CAAC;YACxE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAAwD,CAAC;YACtE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,yBAAyB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9E,CAAC;;AAjHL,8DAkHC;AApGG,gBAAgB;AACO,sCAAY,GAAG,gEAAgE,CAAC"}
|