@pulumi/okta 4.9.0-alpha.1718431198 → 4.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/adminRoleCustom.d.ts +105 -107
- package/adminRoleCustom.js +3 -5
- package/adminRoleCustom.js.map +1 -1
- package/adminRoleCustomAssignments.d.ts +12 -18
- package/adminRoleCustomAssignments.js +3 -6
- package/adminRoleCustomAssignments.js.map +1 -1
- package/adminRoleTargets.d.ts +14 -16
- package/adminRoleTargets.js +0 -2
- package/adminRoleTargets.js.map +1 -1
- package/app/accessPolicyAssignment.d.ts +23 -2
- package/app/accessPolicyAssignment.js +23 -2
- package/app/accessPolicyAssignment.js.map +1 -1
- package/app/autoLogin.d.ts +63 -97
- package/app/autoLogin.js +3 -37
- package/app/autoLogin.js.map +1 -1
- package/app/basicAuth.d.ts +30 -33
- package/app/basicAuth.js +4 -7
- package/app/basicAuth.js.map +1 -1
- package/app/bookmark.d.ts +30 -33
- package/app/bookmark.js +3 -6
- package/app/bookmark.js.map +1 -1
- package/app/getApp.d.ts +58 -25
- package/app/getApp.js +2 -2
- package/app/getApp.js.map +1 -1
- package/app/getMetadataSaml.d.ts +11 -5
- package/app/getMetadataSaml.js +2 -2
- package/app/getMetadataSaml.js.map +1 -1
- package/app/getOauth.d.ts +62 -34
- package/app/getOauth.js +2 -2
- package/app/getOauth.js.map +1 -1
- package/app/getSaml.d.ts +75 -56
- package/app/getSaml.js +2 -2
- package/app/getSaml.js.map +1 -1
- package/app/groupAssignment.d.ts +23 -9
- package/app/groupAssignment.js +17 -3
- package/app/groupAssignment.js.map +1 -1
- package/app/oauth.d.ts +135 -273
- package/app/oauth.js +6 -60
- package/app/oauth.js.map +1 -1
- package/app/oauthPostLogoutRedirectUri.d.ts +4 -6
- package/app/oauthPostLogoutRedirectUri.js +1 -3
- package/app/oauthPostLogoutRedirectUri.js.map +1 -1
- package/app/oauthRedirectUri.d.ts +4 -6
- package/app/oauthRedirectUri.js +1 -3
- package/app/oauthRedirectUri.js.map +1 -1
- package/app/oauthRoleAssignment.d.ts +4 -29
- package/app/oauthRoleAssignment.js +4 -29
- package/app/oauthRoleAssignment.js.map +1 -1
- package/app/saml.d.ts +161 -289
- package/app/saml.js +6 -152
- package/app/saml.js.map +1 -1
- package/app/securePasswordStore.d.ts +79 -80
- package/app/securePasswordStore.js +6 -7
- package/app/securePasswordStore.js.map +1 -1
- package/app/swa.d.ts +70 -71
- package/app/swa.js +4 -5
- package/app/swa.js.map +1 -1
- package/app/threeField.d.ts +74 -76
- package/app/threeField.js +5 -7
- package/app/threeField.js.map +1 -1
- package/app/user.d.ts +12 -17
- package/app/user.js +0 -2
- package/app/user.js.map +1 -1
- package/appGroupAssignments.d.ts +6 -8
- package/appGroupAssignments.js +3 -5
- package/appGroupAssignments.js.map +1 -1
- package/appOauthApiScope.d.ts +5 -7
- package/appOauthApiScope.js +2 -4
- package/appOauthApiScope.js.map +1 -1
- package/appSamlAppSettings.d.ts +6 -7
- package/appSamlAppSettings.js +3 -4
- package/appSamlAppSettings.js.map +1 -1
- package/appSharedCredentials.d.ts +61 -63
- package/appSharedCredentials.js +4 -6
- package/appSharedCredentials.js.map +1 -1
- package/appSignonPolicy.d.ts +3 -39
- package/appSignonPolicy.js +3 -39
- package/appSignonPolicy.js.map +1 -1
- package/appSignonPolicyRule.d.ts +69 -361
- package/appSignonPolicyRule.js +1 -278
- package/appSignonPolicyRule.js.map +1 -1
- package/appUserBaseSchemaProperty.d.ts +25 -29
- package/appUserBaseSchemaProperty.js +1 -5
- package/appUserBaseSchemaProperty.js.map +1 -1
- package/appUserSchemaProperty.d.ts +51 -41
- package/appUserSchemaProperty.js +0 -2
- package/appUserSchemaProperty.js.map +1 -1
- package/auth/getServer.d.ts +11 -11
- package/auth/getServer.js +2 -2
- package/auth/getServerPolicy.d.ts +15 -9
- package/auth/getServerPolicy.js +2 -2
- package/auth/getServerPolicy.js.map +1 -1
- package/auth/getServerScopes.d.ts +8 -5
- package/auth/getServerScopes.js +2 -2
- package/auth/getServerScopes.js.map +1 -1
- package/auth/server.d.ts +15 -19
- package/auth/server.js +1 -5
- package/auth/server.js.map +1 -1
- package/auth/serverClaim.d.ts +13 -17
- package/auth/serverClaim.js +1 -5
- package/auth/serverClaim.js.map +1 -1
- package/auth/serverPolicy.d.ts +10 -14
- package/auth/serverPolicy.js +1 -5
- package/auth/serverPolicy.js.map +1 -1
- package/auth/serverPolicyClaim.d.ts +50 -66
- package/auth/serverPolicyClaim.js +0 -25
- package/auth/serverPolicyClaim.js.map +1 -1
- package/auth/serverPolicyRule.d.ts +32 -43
- package/auth/serverPolicyRule.js +0 -2
- package/auth/serverPolicyRule.js.map +1 -1
- package/auth/serverScope.d.ts +16 -20
- package/auth/serverScope.js +1 -5
- package/auth/serverScope.js.map +1 -1
- package/authServerClaimDefault.d.ts +10 -25
- package/authServerClaimDefault.js +0 -9
- package/authServerClaimDefault.js.map +1 -1
- package/authServerDefault.d.ts +15 -19
- package/authServerDefault.js +1 -5
- package/authServerDefault.js.map +1 -1
- package/authenticator.d.ts +53 -61
- package/authenticator.js +11 -11
- package/authenticator.js.map +1 -1
- package/behaviour.d.ts +21 -41
- package/behaviour.js +0 -2
- package/behaviour.js.map +1 -1
- package/brand.d.ts +23 -22
- package/brand.js +8 -4
- package/brand.js.map +1 -1
- package/captcha.d.ts +15 -17
- package/captcha.js +3 -5
- package/captcha.js.map +1 -1
- package/captchaOrgWideSettings.d.ts +8 -43
- package/captchaOrgWideSettings.js +2 -37
- package/captchaOrgWideSettings.js.map +1 -1
- package/domain.d.ts +13 -21
- package/domain.js +0 -2
- package/domain.js.map +1 -1
- package/domainCertificate.d.ts +17 -24
- package/domainCertificate.js +2 -9
- package/domainCertificate.js.map +1 -1
- package/domainVerification.d.ts +4 -10
- package/domainVerification.js +1 -7
- package/domainVerification.js.map +1 -1
- package/emailCustomization.d.ts +38 -222
- package/emailCustomization.js +29 -33
- package/emailCustomization.js.map +1 -1
- package/emailDomain.d.ts +4 -8
- package/emailDomain.js +0 -4
- package/emailDomain.js.map +1 -1
- package/emailDomainVerification.d.ts +3 -7
- package/emailDomainVerification.js +0 -4
- package/emailDomainVerification.js.map +1 -1
- package/emailSender.d.ts +15 -17
- package/emailSender.js +2 -4
- package/emailSender.js.map +1 -1
- package/emailSenderVerification.d.ts +5 -9
- package/emailSenderVerification.js +2 -6
- package/emailSenderVerification.js.map +1 -1
- package/eventHook.d.ts +16 -11
- package/eventHook.js +1 -5
- package/eventHook.js.map +1 -1
- package/eventHookVerification.d.ts +4 -10
- package/eventHookVerification.js +1 -7
- package/eventHookVerification.js.map +1 -1
- package/factor/factor.d.ts +4 -9
- package/factor/factor.js +1 -3
- package/factor/factor.js.map +1 -1
- package/factorTotp.d.ts +12 -21
- package/factorTotp.js +3 -3
- package/factorTotp.js.map +1 -1
- package/getAppGroupAssignments.d.ts +6 -6
- package/getAppGroupAssignments.js +2 -2
- package/getAppSignonPolicy.d.ts +16 -6
- package/getAppSignonPolicy.js +8 -4
- package/getAppSignonPolicy.js.map +1 -1
- package/getAppUserAssignments.d.ts +6 -6
- package/getAppUserAssignments.js +2 -2
- package/getAuthServerClaim.d.ts +15 -12
- package/getAuthServerClaim.js +2 -2
- package/getAuthServerClaim.js.map +1 -1
- package/getAuthServerClaims.d.ts +8 -5
- package/getAuthServerClaims.js +2 -2
- package/getAuthServerClaims.js.map +1 -1
- package/getAuthenticator.d.ts +24 -26
- package/getAuthenticator.js +14 -22
- package/getAuthenticator.js.map +1 -1
- package/getBehaviour.d.ts +6 -8
- package/getBehaviour.js +2 -2
- package/getBehaviour.js.map +1 -1
- package/getBehaviours.d.ts +7 -7
- package/getBehaviours.js +2 -2
- package/getBrand.d.ts +9 -6
- package/getBrand.js +2 -2
- package/getBrand.js.map +1 -1
- package/getBrands.d.ts +2 -2
- package/getBrands.js +2 -2
- package/getDomain.d.ts +11 -14
- package/getDomain.js +2 -8
- package/getDomain.js.map +1 -1
- package/getEmailCustomization.d.ts +14 -9
- package/getEmailCustomization.js +2 -6
- package/getEmailCustomization.js.map +1 -1
- package/getEmailCustomizations.d.ts +11 -9
- package/getEmailCustomizations.js +2 -6
- package/getEmailCustomizations.js.map +1 -1
- package/getGroups.d.ts +11 -25
- package/getGroups.js +2 -2
- package/getGroups.js.map +1 -1
- package/getLogStream.d.ts +8 -39
- package/getLogStream.js +2 -24
- package/getLogStream.js.map +1 -1
- package/getNetworkZone.d.ts +12 -12
- package/getNetworkZone.js +2 -2
- package/getOrgMetadata.d.ts +0 -22
- package/getOrgMetadata.js +0 -22
- package/getOrgMetadata.js.map +1 -1
- package/getRoleSubscription.d.ts +13 -35
- package/getRoleSubscription.js +2 -2
- package/getRoleSubscription.js.map +1 -1
- package/getTemplate.d.ts +10 -8
- package/getTemplate.js +2 -6
- package/getTemplate.js.map +1 -1
- package/getTemplates.d.ts +6 -7
- package/getTemplates.js +2 -6
- package/getTemplates.js.map +1 -1
- package/getTheme.d.ts +14 -12
- package/getTheme.js +2 -6
- package/getTheme.js.map +1 -1
- package/getThemes.d.ts +6 -7
- package/getThemes.js +2 -6
- package/getThemes.js.map +1 -1
- package/getTrustedOrigins.d.ts +7 -4
- package/getTrustedOrigins.js +2 -2
- package/getTrustedOrigins.js.map +1 -1
- package/getUserSecurityQuestions.d.ts +4 -8
- package/getUserSecurityQuestions.js +0 -4
- package/getUserSecurityQuestions.js.map +1 -1
- package/group/getEveryoneGroup.d.ts +10 -5
- package/group/getEveryoneGroup.js +4 -2
- package/group/getEveryoneGroup.js.map +1 -1
- package/group/getGroup.d.ts +17 -26
- package/group/getGroup.js +2 -2
- package/group/getGroup.js.map +1 -1
- package/group/getRule.d.ts +9 -9
- package/group/getRule.js +2 -2
- package/group/group.d.ts +4 -36
- package/group/group.js +1 -33
- package/group/group.js.map +1 -1
- package/group/role.d.ts +37 -81
- package/group/role.js +1 -6
- package/group/role.js.map +1 -1
- package/group/rule.d.ts +12 -20
- package/group/rule.js +0 -2
- package/group/rule.js.map +1 -1
- package/groupMemberships.d.ts +8 -10
- package/groupMemberships.js +2 -4
- package/groupMemberships.js.map +1 -1
- package/groupSchemaProperty.d.ts +57 -59
- package/groupSchemaProperty.js +0 -2
- package/groupSchemaProperty.js.map +1 -1
- package/idp/getMetadataSaml.d.ts +9 -6
- package/idp/getMetadataSaml.js +2 -2
- package/idp/getMetadataSaml.js.map +1 -1
- package/idp/getOidc.d.ts +9 -9
- package/idp/getOidc.js +2 -2
- package/idp/getSaml.d.ts +16 -13
- package/idp/getSaml.js +2 -2
- package/idp/getSaml.js.map +1 -1
- package/idp/getSocial.d.ts +8 -2
- package/idp/getSocial.js +2 -2
- package/idp/getSocial.js.map +1 -1
- package/idp/oidc.d.ts +70 -62
- package/idp/oidc.js +3 -5
- package/idp/oidc.js.map +1 -1
- package/idp/saml.d.ts +64 -86
- package/idp/saml.js +1 -5
- package/idp/saml.js.map +1 -1
- package/idp/samlKey.d.ts +3 -5
- package/idp/samlKey.js +0 -2
- package/idp/samlKey.js.map +1 -1
- package/idp/social.d.ts +99 -69
- package/idp/social.js +11 -5
- package/idp/social.js.map +1 -1
- package/inline/hook.d.ts +4 -26
- package/inline/hook.js +1 -5
- package/inline/hook.js.map +1 -1
- package/linkDefinition.d.ts +2 -3
- package/linkDefinition.js +2 -3
- package/linkDefinition.js.map +1 -1
- package/linkValue.d.ts +7 -9
- package/linkValue.js +1 -3
- package/linkValue.js.map +1 -1
- package/logStream.d.ts +32 -27
- package/logStream.js +23 -9
- package/logStream.js.map +1 -1
- package/network/zone.d.ts +25 -66
- package/network/zone.js +1 -39
- package/network/zone.js.map +1 -1
- package/orgConfiguration.d.ts +4 -9
- package/orgConfiguration.js +1 -3
- package/orgConfiguration.js.map +1 -1
- package/orgSupport.d.ts +4 -7
- package/orgSupport.js +1 -4
- package/orgSupport.js.map +1 -1
- package/package.json +3 -3
- package/policy/getDefaultPolicy.d.ts +9 -7
- package/policy/getDefaultPolicy.js +6 -2
- package/policy/getDefaultPolicy.js.map +1 -1
- package/policy/getPolicy.d.ts +11 -26
- package/policy/getPolicy.js +2 -2
- package/policy/getPolicy.js.map +1 -1
- package/policy/mfa.d.ts +18 -220
- package/policy/mfa.js +0 -10
- package/policy/mfa.js.map +1 -1
- package/policy/password.d.ts +91 -95
- package/policy/password.js +1 -5
- package/policy/password.js.map +1 -1
- package/policy/ruleIdpDiscovery.d.ts +111 -93
- package/policy/ruleIdpDiscovery.js +48 -57
- package/policy/ruleIdpDiscovery.js.map +1 -1
- package/policy/ruleMfa.d.ts +40 -30
- package/policy/ruleMfa.js +1 -3
- package/policy/ruleMfa.js.map +1 -1
- package/policy/rulePassword.d.ts +34 -38
- package/policy/rulePassword.js +1 -5
- package/policy/rulePassword.js.map +1 -1
- package/policy/ruleSignon.d.ts +94 -85
- package/policy/ruleSignon.js +1 -4
- package/policy/ruleSignon.js.map +1 -1
- package/policy/signon.d.ts +16 -20
- package/policy/signon.js +1 -5
- package/policy/signon.js.map +1 -1
- package/policyMfaDefault.d.ts +15 -214
- package/policyMfaDefault.js +2 -9
- package/policyMfaDefault.js.map +1 -1
- package/policyPasswordDefault.d.ts +85 -101
- package/policyPasswordDefault.js +1 -5
- package/policyPasswordDefault.js.map +1 -1
- package/policyProfileEnrollment.d.ts +8 -9
- package/policyProfileEnrollment.js +2 -3
- package/policyProfileEnrollment.js.map +1 -1
- package/policyProfileEnrollmentApps.d.ts +8 -11
- package/policyProfileEnrollmentApps.js +3 -6
- package/policyProfileEnrollmentApps.js.map +1 -1
- package/policyRuleProfileEnrollment.d.ts +42 -31
- package/policyRuleProfileEnrollment.js +2 -3
- package/policyRuleProfileEnrollment.js.map +1 -1
- package/profile/mapping.d.ts +19 -34
- package/profile/mapping.js +4 -4
- package/profile/mapping.js.map +1 -1
- package/rateLimiting.d.ts +8 -17
- package/rateLimiting.js +2 -5
- package/rateLimiting.js.map +1 -1
- package/resourceSet.d.ts +18 -26
- package/resourceSet.js +9 -14
- package/resourceSet.js.map +1 -1
- package/roleSubscription.d.ts +35 -86
- package/roleSubscription.js +2 -2
- package/roleSubscription.js.map +1 -1
- package/securityNotificationEmails.d.ts +4 -7
- package/securityNotificationEmails.js +4 -7
- package/securityNotificationEmails.js.map +1 -1
- package/templateSms.d.ts +4 -8
- package/templateSms.js +1 -5
- package/templateSms.js.map +1 -1
- package/theme.d.ts +46 -46
- package/theme.js +2 -2
- package/threatInsightSettings.d.ts +7 -27
- package/threatInsightSettings.js +1 -3
- package/threatInsightSettings.js.map +1 -1
- package/trustedorigin/origin.d.ts +13 -17
- package/trustedorigin/origin.js +1 -5
- package/trustedorigin/origin.js.map +1 -1
- package/types/input.d.ts +65 -162
- package/types/output.d.ts +75 -275
- package/user/getUser.d.ts +32 -104
- package/user/getUser.js +2 -2
- package/user/getUser.js.map +1 -1
- package/user/getUserProfileMappingSource.d.ts +9 -7
- package/user/getUserProfileMappingSource.js +6 -4
- package/user/getUserProfileMappingSource.js.map +1 -1
- package/user/getUserType.d.ts +7 -7
- package/user/getUserType.js +2 -2
- package/user/getUsers.d.ts +95 -37
- package/user/getUsers.js +64 -24
- package/user/getUsers.js.map +1 -1
- package/user/user.d.ts +160 -209
- package/user/user.js +43 -65
- package/user/user.js.map +1 -1
- package/user/userType.d.ts +1 -5
- package/user/userType.js +1 -5
- package/user/userType.js.map +1 -1
- package/userAdminRoles.d.ts +10 -17
- package/userAdminRoles.js +1 -5
- package/userAdminRoles.js.map +1 -1
- package/userBaseSchemaProperty.d.ts +26 -34
- package/userBaseSchemaProperty.js +2 -10
- package/userBaseSchemaProperty.js.map +1 -1
- package/userFactorQuestion.d.ts +1 -5
- package/userFactorQuestion.js +1 -5
- package/userFactorQuestion.js.map +1 -1
- package/userGroupMemberships.d.ts +3 -3
- package/userSchemaProperty.d.ts +57 -56
- package/userSchemaProperty.js +0 -8
- package/userSchemaProperty.js.map +1 -1
package/authenticator.d.ts
CHANGED
|
@@ -5,11 +5,16 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
5
5
|
* This resource allows you to configure different authenticators.
|
|
6
6
|
*
|
|
7
7
|
* > **Create:** The Okta API has an odd notion of create for authenticators. If
|
|
8
|
-
* the authenticator doesn't exist then a one time
|
|
8
|
+
* the authenticator doesn't exist then a one time 'POST /api/v1/authenticators' to
|
|
9
9
|
* create the authenticator (hard create) will be performed. Thereafter, that
|
|
10
10
|
* authenticator is never deleted, it is only deactivated (soft delete). Therefore,
|
|
11
11
|
* if the authenticator already exists create is just a soft import of an existing
|
|
12
|
-
* authenticator.
|
|
12
|
+
* authenticator. This does not apply to customOtp authenticator. There can be
|
|
13
|
+
* multiple customOtp authenticator. To create new customOtp authenticator, a new
|
|
14
|
+
* name and key = customOtp is required. If an old name is used, it will simply
|
|
15
|
+
* reactivate the old customOtp authenticator
|
|
16
|
+
*
|
|
17
|
+
* > **Update:** customOtp authenticator cannot be updated
|
|
13
18
|
*
|
|
14
19
|
* > **Delete:** Authenticators can not be truly deleted therefore delete is soft.
|
|
15
20
|
* Delete will attempt to deativate the authenticator. An authenticator can only be
|
|
@@ -28,13 +33,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
28
33
|
* allowedFor: "recovery",
|
|
29
34
|
* }),
|
|
30
35
|
* });
|
|
31
|
-
*
|
|
32
|
-
*
|
|
33
|
-
* ```typescript
|
|
34
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
35
|
-
* import * as okta from "@pulumi/okta";
|
|
36
|
-
*
|
|
37
|
-
* const test = new okta.Authenticator("test", {
|
|
36
|
+
* const otp = new okta.Authenticator("otp", {
|
|
38
37
|
* name: "Custom OTP",
|
|
39
38
|
* key: "custom_otp",
|
|
40
39
|
* status: "ACTIVE",
|
|
@@ -46,13 +45,12 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
46
45
|
* algorithm: "HMacSHA256",
|
|
47
46
|
* passCodeLength: 6,
|
|
48
47
|
* }),
|
|
48
|
+
* legacyIgnoreName: false,
|
|
49
49
|
* });
|
|
50
50
|
* ```
|
|
51
51
|
*
|
|
52
52
|
* ## Import
|
|
53
53
|
*
|
|
54
|
-
* Okta authenticator can be imported via the Okta ID.
|
|
55
|
-
*
|
|
56
54
|
* ```sh
|
|
57
55
|
* $ pulumi import okta:index/authenticator:Authenticator example <authenticator_id>
|
|
58
56
|
* ```
|
|
@@ -74,23 +72,27 @@ export declare class Authenticator extends pulumi.CustomResource {
|
|
|
74
72
|
*/
|
|
75
73
|
static isInstance(obj: any): obj is Authenticator;
|
|
76
74
|
/**
|
|
77
|
-
* A human-readable string that identifies the authenticator. Some authenticators are available by feature flag on the organization. Possible values inclue: `duo`, `externalIdp`, `googleOtp`, `oktaEmail`, `oktaPassword`, `oktaVerify`, `onpremMfa`, `phoneNumber`, `rsaToken`, `securityQuestion`, `webauthn
|
|
75
|
+
* A human-readable string that identifies the authenticator. Some authenticators are available by feature flag on the organization. Possible values inclue: `duo`, `externalIdp`, `googleOtp`, `oktaEmail`, `oktaPassword`, `oktaVerify`, `onpremMfa`, `phoneNumber`, `rsaToken`, `securityQuestion`, `webauthn`
|
|
78
76
|
*/
|
|
79
77
|
readonly key: pulumi.Output<string>;
|
|
80
78
|
/**
|
|
81
|
-
* Name
|
|
79
|
+
* Name does not trigger change detection (legacy behavior)
|
|
80
|
+
*/
|
|
81
|
+
readonly legacyIgnoreName: pulumi.Output<boolean | undefined>;
|
|
82
|
+
/**
|
|
83
|
+
* Display name of the Authenticator
|
|
82
84
|
*/
|
|
83
85
|
readonly name: pulumi.Output<string>;
|
|
84
86
|
/**
|
|
85
|
-
* The RADIUS server port (for example 1812). This is defined when the On-Prem RADIUS server is configured. Used only for authenticators with type `
|
|
87
|
+
* The RADIUS server port (for example 1812). This is defined when the On-Prem RADIUS server is configured. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
86
88
|
*/
|
|
87
89
|
readonly providerAuthPort: pulumi.Output<number | undefined>;
|
|
88
90
|
/**
|
|
89
|
-
* (DUO specific) - The Duo Security API hostname
|
|
91
|
+
* (DUO specific) - The Duo Security API hostname. Conflicts with `providerJson` argument.
|
|
90
92
|
*/
|
|
91
93
|
readonly providerHost: pulumi.Output<string | undefined>;
|
|
92
94
|
/**
|
|
93
|
-
* Server host name or IP address. Default is `
|
|
95
|
+
* Server host name or IP address. Default is `localhost`. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
94
96
|
*/
|
|
95
97
|
readonly providerHostname: pulumi.Output<string | undefined>;
|
|
96
98
|
/**
|
|
@@ -102,13 +104,7 @@ export declare class Authenticator extends pulumi.CustomResource {
|
|
|
102
104
|
*/
|
|
103
105
|
readonly providerIntegrationKey: pulumi.Output<string | undefined>;
|
|
104
106
|
/**
|
|
105
|
-
* Provider JSON allows for expressive provider
|
|
106
|
-
* values. This argument conflicts with the other `providerXxx` arguments. The
|
|
107
|
-
* [Create
|
|
108
|
-
* Provider](https://developer.okta.com/docs/reference/api/authenticators-admin/#request)
|
|
109
|
-
* illustrates detailed provider values for a Duo authenticator. [Provider
|
|
110
|
-
* values](https://developer.okta.com/docs/reference/api/authenticators-admin/#authenticators-administration-api-object)
|
|
111
|
-
* are listed in Okta API.
|
|
107
|
+
* Provider JSON allows for expressive providervalues. This argument conflicts with the other 'provider_xxx' arguments. The [CreateProvider](https://developer.okta.com/docs/reference/api/authenticators-admin/#request) illustrates detailed provider values for a Duo authenticator. [Provider values](https://developer.okta.com/docs/reference/api/authenticators-admin/#authenticators-administration-api-object)are listed in Okta API.
|
|
112
108
|
*/
|
|
113
109
|
readonly providerJson: pulumi.Output<string | undefined>;
|
|
114
110
|
/**
|
|
@@ -116,7 +112,7 @@ export declare class Authenticator extends pulumi.CustomResource {
|
|
|
116
112
|
*/
|
|
117
113
|
readonly providerSecretKey: pulumi.Output<string | undefined>;
|
|
118
114
|
/**
|
|
119
|
-
* An authentication key that must be defined when the RADIUS server is configured, and must be the same on both the RADIUS client and server. Used only for authenticators with type `
|
|
115
|
+
* An authentication key that must be defined when the RADIUS server is configured, and must be the same on both the RADIUS client and server. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
120
116
|
*/
|
|
121
117
|
readonly providerSharedSecret: pulumi.Output<string | undefined>;
|
|
122
118
|
/**
|
|
@@ -124,19 +120,19 @@ export declare class Authenticator extends pulumi.CustomResource {
|
|
|
124
120
|
*/
|
|
125
121
|
readonly providerType: pulumi.Output<string>;
|
|
126
122
|
/**
|
|
127
|
-
* Username template expected by the provider. Used only for authenticators with type `
|
|
123
|
+
* Username template expected by the provider. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
128
124
|
*/
|
|
129
125
|
readonly providerUserNameTemplate: pulumi.Output<string | undefined>;
|
|
130
126
|
/**
|
|
131
|
-
* Settings for the authenticator. The settings JSON contains values based on Authenticator key. It is not used for authenticators with type `
|
|
127
|
+
* Settings for the authenticator. The settings JSON contains values based on Authenticator key. It is not used for authenticators with type `securityKey`
|
|
132
128
|
*/
|
|
133
129
|
readonly settings: pulumi.Output<string | undefined>;
|
|
134
130
|
/**
|
|
135
|
-
*
|
|
131
|
+
* Authenticator status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
136
132
|
*/
|
|
137
133
|
readonly status: pulumi.Output<string | undefined>;
|
|
138
134
|
/**
|
|
139
|
-
*
|
|
135
|
+
* he type of Authenticator. Values include: `password`, `securityQuestion`, `phone`, `email`, `app`, `federated`, and `securityKey`.
|
|
140
136
|
*/
|
|
141
137
|
readonly type: pulumi.Output<string>;
|
|
142
138
|
/**
|
|
@@ -153,23 +149,27 @@ export declare class Authenticator extends pulumi.CustomResource {
|
|
|
153
149
|
*/
|
|
154
150
|
export interface AuthenticatorState {
|
|
155
151
|
/**
|
|
156
|
-
* A human-readable string that identifies the authenticator. Some authenticators are available by feature flag on the organization. Possible values inclue: `duo`, `externalIdp`, `googleOtp`, `oktaEmail`, `oktaPassword`, `oktaVerify`, `onpremMfa`, `phoneNumber`, `rsaToken`, `securityQuestion`, `webauthn
|
|
152
|
+
* A human-readable string that identifies the authenticator. Some authenticators are available by feature flag on the organization. Possible values inclue: `duo`, `externalIdp`, `googleOtp`, `oktaEmail`, `oktaPassword`, `oktaVerify`, `onpremMfa`, `phoneNumber`, `rsaToken`, `securityQuestion`, `webauthn`
|
|
157
153
|
*/
|
|
158
154
|
key?: pulumi.Input<string>;
|
|
159
155
|
/**
|
|
160
|
-
* Name
|
|
156
|
+
* Name does not trigger change detection (legacy behavior)
|
|
157
|
+
*/
|
|
158
|
+
legacyIgnoreName?: pulumi.Input<boolean>;
|
|
159
|
+
/**
|
|
160
|
+
* Display name of the Authenticator
|
|
161
161
|
*/
|
|
162
162
|
name?: pulumi.Input<string>;
|
|
163
163
|
/**
|
|
164
|
-
* The RADIUS server port (for example 1812). This is defined when the On-Prem RADIUS server is configured. Used only for authenticators with type `
|
|
164
|
+
* The RADIUS server port (for example 1812). This is defined when the On-Prem RADIUS server is configured. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
165
165
|
*/
|
|
166
166
|
providerAuthPort?: pulumi.Input<number>;
|
|
167
167
|
/**
|
|
168
|
-
* (DUO specific) - The Duo Security API hostname
|
|
168
|
+
* (DUO specific) - The Duo Security API hostname. Conflicts with `providerJson` argument.
|
|
169
169
|
*/
|
|
170
170
|
providerHost?: pulumi.Input<string>;
|
|
171
171
|
/**
|
|
172
|
-
* Server host name or IP address. Default is `
|
|
172
|
+
* Server host name or IP address. Default is `localhost`. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
173
173
|
*/
|
|
174
174
|
providerHostname?: pulumi.Input<string>;
|
|
175
175
|
/**
|
|
@@ -181,13 +181,7 @@ export interface AuthenticatorState {
|
|
|
181
181
|
*/
|
|
182
182
|
providerIntegrationKey?: pulumi.Input<string>;
|
|
183
183
|
/**
|
|
184
|
-
* Provider JSON allows for expressive provider
|
|
185
|
-
* values. This argument conflicts with the other `providerXxx` arguments. The
|
|
186
|
-
* [Create
|
|
187
|
-
* Provider](https://developer.okta.com/docs/reference/api/authenticators-admin/#request)
|
|
188
|
-
* illustrates detailed provider values for a Duo authenticator. [Provider
|
|
189
|
-
* values](https://developer.okta.com/docs/reference/api/authenticators-admin/#authenticators-administration-api-object)
|
|
190
|
-
* are listed in Okta API.
|
|
184
|
+
* Provider JSON allows for expressive providervalues. This argument conflicts with the other 'provider_xxx' arguments. The [CreateProvider](https://developer.okta.com/docs/reference/api/authenticators-admin/#request) illustrates detailed provider values for a Duo authenticator. [Provider values](https://developer.okta.com/docs/reference/api/authenticators-admin/#authenticators-administration-api-object)are listed in Okta API.
|
|
191
185
|
*/
|
|
192
186
|
providerJson?: pulumi.Input<string>;
|
|
193
187
|
/**
|
|
@@ -195,7 +189,7 @@ export interface AuthenticatorState {
|
|
|
195
189
|
*/
|
|
196
190
|
providerSecretKey?: pulumi.Input<string>;
|
|
197
191
|
/**
|
|
198
|
-
* An authentication key that must be defined when the RADIUS server is configured, and must be the same on both the RADIUS client and server. Used only for authenticators with type `
|
|
192
|
+
* An authentication key that must be defined when the RADIUS server is configured, and must be the same on both the RADIUS client and server. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
199
193
|
*/
|
|
200
194
|
providerSharedSecret?: pulumi.Input<string>;
|
|
201
195
|
/**
|
|
@@ -203,19 +197,19 @@ export interface AuthenticatorState {
|
|
|
203
197
|
*/
|
|
204
198
|
providerType?: pulumi.Input<string>;
|
|
205
199
|
/**
|
|
206
|
-
* Username template expected by the provider. Used only for authenticators with type `
|
|
200
|
+
* Username template expected by the provider. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
207
201
|
*/
|
|
208
202
|
providerUserNameTemplate?: pulumi.Input<string>;
|
|
209
203
|
/**
|
|
210
|
-
* Settings for the authenticator. The settings JSON contains values based on Authenticator key. It is not used for authenticators with type `
|
|
204
|
+
* Settings for the authenticator. The settings JSON contains values based on Authenticator key. It is not used for authenticators with type `securityKey`
|
|
211
205
|
*/
|
|
212
206
|
settings?: pulumi.Input<string>;
|
|
213
207
|
/**
|
|
214
|
-
*
|
|
208
|
+
* Authenticator status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
215
209
|
*/
|
|
216
210
|
status?: pulumi.Input<string>;
|
|
217
211
|
/**
|
|
218
|
-
*
|
|
212
|
+
* he type of Authenticator. Values include: `password`, `securityQuestion`, `phone`, `email`, `app`, `federated`, and `securityKey`.
|
|
219
213
|
*/
|
|
220
214
|
type?: pulumi.Input<string>;
|
|
221
215
|
}
|
|
@@ -224,23 +218,27 @@ export interface AuthenticatorState {
|
|
|
224
218
|
*/
|
|
225
219
|
export interface AuthenticatorArgs {
|
|
226
220
|
/**
|
|
227
|
-
* A human-readable string that identifies the authenticator. Some authenticators are available by feature flag on the organization. Possible values inclue: `duo`, `externalIdp`, `googleOtp`, `oktaEmail`, `oktaPassword`, `oktaVerify`, `onpremMfa`, `phoneNumber`, `rsaToken`, `securityQuestion`, `webauthn
|
|
221
|
+
* A human-readable string that identifies the authenticator. Some authenticators are available by feature flag on the organization. Possible values inclue: `duo`, `externalIdp`, `googleOtp`, `oktaEmail`, `oktaPassword`, `oktaVerify`, `onpremMfa`, `phoneNumber`, `rsaToken`, `securityQuestion`, `webauthn`
|
|
228
222
|
*/
|
|
229
223
|
key: pulumi.Input<string>;
|
|
230
224
|
/**
|
|
231
|
-
* Name
|
|
225
|
+
* Name does not trigger change detection (legacy behavior)
|
|
226
|
+
*/
|
|
227
|
+
legacyIgnoreName?: pulumi.Input<boolean>;
|
|
228
|
+
/**
|
|
229
|
+
* Display name of the Authenticator
|
|
232
230
|
*/
|
|
233
231
|
name?: pulumi.Input<string>;
|
|
234
232
|
/**
|
|
235
|
-
* The RADIUS server port (for example 1812). This is defined when the On-Prem RADIUS server is configured. Used only for authenticators with type `
|
|
233
|
+
* The RADIUS server port (for example 1812). This is defined when the On-Prem RADIUS server is configured. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
236
234
|
*/
|
|
237
235
|
providerAuthPort?: pulumi.Input<number>;
|
|
238
236
|
/**
|
|
239
|
-
* (DUO specific) - The Duo Security API hostname
|
|
237
|
+
* (DUO specific) - The Duo Security API hostname. Conflicts with `providerJson` argument.
|
|
240
238
|
*/
|
|
241
239
|
providerHost?: pulumi.Input<string>;
|
|
242
240
|
/**
|
|
243
|
-
* Server host name or IP address. Default is `
|
|
241
|
+
* Server host name or IP address. Default is `localhost`. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
244
242
|
*/
|
|
245
243
|
providerHostname?: pulumi.Input<string>;
|
|
246
244
|
/**
|
|
@@ -248,13 +246,7 @@ export interface AuthenticatorArgs {
|
|
|
248
246
|
*/
|
|
249
247
|
providerIntegrationKey?: pulumi.Input<string>;
|
|
250
248
|
/**
|
|
251
|
-
* Provider JSON allows for expressive provider
|
|
252
|
-
* values. This argument conflicts with the other `providerXxx` arguments. The
|
|
253
|
-
* [Create
|
|
254
|
-
* Provider](https://developer.okta.com/docs/reference/api/authenticators-admin/#request)
|
|
255
|
-
* illustrates detailed provider values for a Duo authenticator. [Provider
|
|
256
|
-
* values](https://developer.okta.com/docs/reference/api/authenticators-admin/#authenticators-administration-api-object)
|
|
257
|
-
* are listed in Okta API.
|
|
249
|
+
* Provider JSON allows for expressive providervalues. This argument conflicts with the other 'provider_xxx' arguments. The [CreateProvider](https://developer.okta.com/docs/reference/api/authenticators-admin/#request) illustrates detailed provider values for a Duo authenticator. [Provider values](https://developer.okta.com/docs/reference/api/authenticators-admin/#authenticators-administration-api-object)are listed in Okta API.
|
|
258
250
|
*/
|
|
259
251
|
providerJson?: pulumi.Input<string>;
|
|
260
252
|
/**
|
|
@@ -262,19 +254,19 @@ export interface AuthenticatorArgs {
|
|
|
262
254
|
*/
|
|
263
255
|
providerSecretKey?: pulumi.Input<string>;
|
|
264
256
|
/**
|
|
265
|
-
* An authentication key that must be defined when the RADIUS server is configured, and must be the same on both the RADIUS client and server. Used only for authenticators with type `
|
|
257
|
+
* An authentication key that must be defined when the RADIUS server is configured, and must be the same on both the RADIUS client and server. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
266
258
|
*/
|
|
267
259
|
providerSharedSecret?: pulumi.Input<string>;
|
|
268
260
|
/**
|
|
269
|
-
* Username template expected by the provider. Used only for authenticators with type `
|
|
261
|
+
* Username template expected by the provider. Used only for authenticators with type `securityKey`. Conflicts with `providerJson` argument.
|
|
270
262
|
*/
|
|
271
263
|
providerUserNameTemplate?: pulumi.Input<string>;
|
|
272
264
|
/**
|
|
273
|
-
* Settings for the authenticator. The settings JSON contains values based on Authenticator key. It is not used for authenticators with type `
|
|
265
|
+
* Settings for the authenticator. The settings JSON contains values based on Authenticator key. It is not used for authenticators with type `securityKey`
|
|
274
266
|
*/
|
|
275
267
|
settings?: pulumi.Input<string>;
|
|
276
268
|
/**
|
|
277
|
-
*
|
|
269
|
+
* Authenticator status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
278
270
|
*/
|
|
279
271
|
status?: pulumi.Input<string>;
|
|
280
272
|
}
|
package/authenticator.js
CHANGED
|
@@ -11,11 +11,16 @@ const utilities = require("./utilities");
|
|
|
11
11
|
* This resource allows you to configure different authenticators.
|
|
12
12
|
*
|
|
13
13
|
* > **Create:** The Okta API has an odd notion of create for authenticators. If
|
|
14
|
-
* the authenticator doesn't exist then a one time
|
|
14
|
+
* the authenticator doesn't exist then a one time 'POST /api/v1/authenticators' to
|
|
15
15
|
* create the authenticator (hard create) will be performed. Thereafter, that
|
|
16
16
|
* authenticator is never deleted, it is only deactivated (soft delete). Therefore,
|
|
17
17
|
* if the authenticator already exists create is just a soft import of an existing
|
|
18
|
-
* authenticator.
|
|
18
|
+
* authenticator. This does not apply to customOtp authenticator. There can be
|
|
19
|
+
* multiple customOtp authenticator. To create new customOtp authenticator, a new
|
|
20
|
+
* name and key = customOtp is required. If an old name is used, it will simply
|
|
21
|
+
* reactivate the old customOtp authenticator
|
|
22
|
+
*
|
|
23
|
+
* > **Update:** customOtp authenticator cannot be updated
|
|
19
24
|
*
|
|
20
25
|
* > **Delete:** Authenticators can not be truly deleted therefore delete is soft.
|
|
21
26
|
* Delete will attempt to deativate the authenticator. An authenticator can only be
|
|
@@ -34,13 +39,7 @@ const utilities = require("./utilities");
|
|
|
34
39
|
* allowedFor: "recovery",
|
|
35
40
|
* }),
|
|
36
41
|
* });
|
|
37
|
-
*
|
|
38
|
-
*
|
|
39
|
-
* ```typescript
|
|
40
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
41
|
-
* import * as okta from "@pulumi/okta";
|
|
42
|
-
*
|
|
43
|
-
* const test = new okta.Authenticator("test", {
|
|
42
|
+
* const otp = new okta.Authenticator("otp", {
|
|
44
43
|
* name: "Custom OTP",
|
|
45
44
|
* key: "custom_otp",
|
|
46
45
|
* status: "ACTIVE",
|
|
@@ -52,13 +51,12 @@ const utilities = require("./utilities");
|
|
|
52
51
|
* algorithm: "HMacSHA256",
|
|
53
52
|
* passCodeLength: 6,
|
|
54
53
|
* }),
|
|
54
|
+
* legacyIgnoreName: false,
|
|
55
55
|
* });
|
|
56
56
|
* ```
|
|
57
57
|
*
|
|
58
58
|
* ## Import
|
|
59
59
|
*
|
|
60
|
-
* Okta authenticator can be imported via the Okta ID.
|
|
61
|
-
*
|
|
62
60
|
* ```sh
|
|
63
61
|
* $ pulumi import okta:index/authenticator:Authenticator example <authenticator_id>
|
|
64
62
|
* ```
|
|
@@ -92,6 +90,7 @@ class Authenticator extends pulumi.CustomResource {
|
|
|
92
90
|
if (opts.id) {
|
|
93
91
|
const state = argsOrState;
|
|
94
92
|
resourceInputs["key"] = state ? state.key : undefined;
|
|
93
|
+
resourceInputs["legacyIgnoreName"] = state ? state.legacyIgnoreName : undefined;
|
|
95
94
|
resourceInputs["name"] = state ? state.name : undefined;
|
|
96
95
|
resourceInputs["providerAuthPort"] = state ? state.providerAuthPort : undefined;
|
|
97
96
|
resourceInputs["providerHost"] = state ? state.providerHost : undefined;
|
|
@@ -113,6 +112,7 @@ class Authenticator extends pulumi.CustomResource {
|
|
|
113
112
|
throw new Error("Missing required property 'key'");
|
|
114
113
|
}
|
|
115
114
|
resourceInputs["key"] = args ? args.key : undefined;
|
|
115
|
+
resourceInputs["legacyIgnoreName"] = args ? args.legacyIgnoreName : undefined;
|
|
116
116
|
resourceInputs["name"] = args ? args.name : undefined;
|
|
117
117
|
resourceInputs["providerAuthPort"] = args ? args.providerAuthPort : undefined;
|
|
118
118
|
resourceInputs["providerHost"] = args ? args.providerHost : undefined;
|
package/authenticator.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authenticator.js","sourceRoot":"","sources":["../authenticator.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"authenticator.js","sourceRoot":"","sources":["../authenticator.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAa,aAAc,SAAQ,MAAM,CAAC,cAAc;IACpD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0B,EAAE,IAAmC;QACxH,OAAO,IAAI,aAAa,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACpE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC;IAC9D,CAAC;IA2ED,YAAY,IAAY,EAAE,WAAoD,EAAE,IAAmC;QAC/G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6C,CAAC;YAC5D,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAA4C,CAAC;YAC1D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;aACtD;YACD,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,sBAAsB,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,oBAAoB,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3H,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACzE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;;AApJL,sCAqJC;AAvIG,gBAAgB;AACO,0BAAY,GAAG,wCAAwC,CAAC"}
|
package/behaviour.d.ts
CHANGED
|
@@ -40,8 +40,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
40
40
|
*
|
|
41
41
|
* ## Import
|
|
42
42
|
*
|
|
43
|
-
* Behavior can be imported via the Okta ID.
|
|
44
|
-
*
|
|
45
43
|
* ```sh
|
|
46
44
|
* $ pulumi import okta:index/behaviour:Behaviour example <behavior id>
|
|
47
45
|
* ```
|
|
@@ -63,37 +61,31 @@ export declare class Behaviour extends pulumi.CustomResource {
|
|
|
63
61
|
*/
|
|
64
62
|
static isInstance(obj: any): obj is Behaviour;
|
|
65
63
|
/**
|
|
66
|
-
* Determines the method and level of detail used to evaluate the behavior.
|
|
67
|
-
* Required for `"ANOMALOUS_LOCATION"` behavior type. Can be set to `"LAT_LONG"`, `"CITY"`, `"COUNTRY"`
|
|
68
|
-
* or `"SUBDIVISION"`.
|
|
64
|
+
* Determines the method and level of detail used to evaluate the behavior. Required for `ANOMALOUS_LOCATION` behavior type. Can be set to `LAT_LONG`, `CITY`, `COUNTRY` or `SUBDIVISION`.
|
|
69
65
|
*/
|
|
70
66
|
readonly locationGranularityType: pulumi.Output<string | undefined>;
|
|
71
67
|
/**
|
|
72
|
-
* Name of the behavior
|
|
68
|
+
* Name of the behavior
|
|
73
69
|
*/
|
|
74
70
|
readonly name: pulumi.Output<string>;
|
|
75
71
|
/**
|
|
76
|
-
* The number of recent authentications used to evaluate the behavior. Required
|
|
77
|
-
* for `"ANOMALOUS_LOCATION"`, `"ANOMALOUS_DEVICE"` and `"ANOMALOUS_IP"` behavior types.
|
|
72
|
+
* The number of recent authentications used to evaluate the behavior. Required for `ANOMALOUS_LOCATION`, `ANOMALOUS_DEVICE` and `ANOMALOUS_IP` behavior types.
|
|
78
73
|
*/
|
|
79
74
|
readonly numberOfAuthentications: pulumi.Output<number | undefined>;
|
|
80
75
|
/**
|
|
81
|
-
* Radius from location (in kilometers). Should be at least 5. Required
|
|
82
|
-
* when `locationGranularityType` is set to `"LAT_LONG"`.
|
|
76
|
+
* Radius from location (in kilometers). Should be at least 5. Required when `locationGranularityType` is set to `LAT_LONG`.
|
|
83
77
|
*/
|
|
84
78
|
readonly radiusFromLocation: pulumi.Output<number | undefined>;
|
|
85
79
|
/**
|
|
86
|
-
*
|
|
80
|
+
* Behavior status: ACTIVE or INACTIVE. Default: `ACTIVE`
|
|
87
81
|
*/
|
|
88
82
|
readonly status: pulumi.Output<string | undefined>;
|
|
89
83
|
/**
|
|
90
|
-
* Type of the behavior. Can be set to `
|
|
91
|
-
* or `"VELOCITY"`. Resource will be recreated when the type changes.
|
|
84
|
+
* Type of the behavior. Can be set to `ANOMALOUS_LOCATION`, `ANOMALOUS_DEVICE`, `ANOMALOUS_IP` or `VELOCITY`. Resource will be recreated when the type changes.e
|
|
92
85
|
*/
|
|
93
86
|
readonly type: pulumi.Output<string>;
|
|
94
87
|
/**
|
|
95
|
-
* Velocity (in kilometers per hour). Should be at least 1. Required for `
|
|
96
|
-
* type.
|
|
88
|
+
* Velocity (in kilometers per hour). Should be at least 1. Required for `VELOCITY` behavior
|
|
97
89
|
*/
|
|
98
90
|
readonly velocity: pulumi.Output<number | undefined>;
|
|
99
91
|
/**
|
|
@@ -110,37 +102,31 @@ export declare class Behaviour extends pulumi.CustomResource {
|
|
|
110
102
|
*/
|
|
111
103
|
export interface BehaviourState {
|
|
112
104
|
/**
|
|
113
|
-
* Determines the method and level of detail used to evaluate the behavior.
|
|
114
|
-
* Required for `"ANOMALOUS_LOCATION"` behavior type. Can be set to `"LAT_LONG"`, `"CITY"`, `"COUNTRY"`
|
|
115
|
-
* or `"SUBDIVISION"`.
|
|
105
|
+
* Determines the method and level of detail used to evaluate the behavior. Required for `ANOMALOUS_LOCATION` behavior type. Can be set to `LAT_LONG`, `CITY`, `COUNTRY` or `SUBDIVISION`.
|
|
116
106
|
*/
|
|
117
107
|
locationGranularityType?: pulumi.Input<string>;
|
|
118
108
|
/**
|
|
119
|
-
* Name of the behavior
|
|
109
|
+
* Name of the behavior
|
|
120
110
|
*/
|
|
121
111
|
name?: pulumi.Input<string>;
|
|
122
112
|
/**
|
|
123
|
-
* The number of recent authentications used to evaluate the behavior. Required
|
|
124
|
-
* for `"ANOMALOUS_LOCATION"`, `"ANOMALOUS_DEVICE"` and `"ANOMALOUS_IP"` behavior types.
|
|
113
|
+
* The number of recent authentications used to evaluate the behavior. Required for `ANOMALOUS_LOCATION`, `ANOMALOUS_DEVICE` and `ANOMALOUS_IP` behavior types.
|
|
125
114
|
*/
|
|
126
115
|
numberOfAuthentications?: pulumi.Input<number>;
|
|
127
116
|
/**
|
|
128
|
-
* Radius from location (in kilometers). Should be at least 5. Required
|
|
129
|
-
* when `locationGranularityType` is set to `"LAT_LONG"`.
|
|
117
|
+
* Radius from location (in kilometers). Should be at least 5. Required when `locationGranularityType` is set to `LAT_LONG`.
|
|
130
118
|
*/
|
|
131
119
|
radiusFromLocation?: pulumi.Input<number>;
|
|
132
120
|
/**
|
|
133
|
-
*
|
|
121
|
+
* Behavior status: ACTIVE or INACTIVE. Default: `ACTIVE`
|
|
134
122
|
*/
|
|
135
123
|
status?: pulumi.Input<string>;
|
|
136
124
|
/**
|
|
137
|
-
* Type of the behavior. Can be set to `
|
|
138
|
-
* or `"VELOCITY"`. Resource will be recreated when the type changes.
|
|
125
|
+
* Type of the behavior. Can be set to `ANOMALOUS_LOCATION`, `ANOMALOUS_DEVICE`, `ANOMALOUS_IP` or `VELOCITY`. Resource will be recreated when the type changes.e
|
|
139
126
|
*/
|
|
140
127
|
type?: pulumi.Input<string>;
|
|
141
128
|
/**
|
|
142
|
-
* Velocity (in kilometers per hour). Should be at least 1. Required for `
|
|
143
|
-
* type.
|
|
129
|
+
* Velocity (in kilometers per hour). Should be at least 1. Required for `VELOCITY` behavior
|
|
144
130
|
*/
|
|
145
131
|
velocity?: pulumi.Input<number>;
|
|
146
132
|
}
|
|
@@ -149,37 +135,31 @@ export interface BehaviourState {
|
|
|
149
135
|
*/
|
|
150
136
|
export interface BehaviourArgs {
|
|
151
137
|
/**
|
|
152
|
-
* Determines the method and level of detail used to evaluate the behavior.
|
|
153
|
-
* Required for `"ANOMALOUS_LOCATION"` behavior type. Can be set to `"LAT_LONG"`, `"CITY"`, `"COUNTRY"`
|
|
154
|
-
* or `"SUBDIVISION"`.
|
|
138
|
+
* Determines the method and level of detail used to evaluate the behavior. Required for `ANOMALOUS_LOCATION` behavior type. Can be set to `LAT_LONG`, `CITY`, `COUNTRY` or `SUBDIVISION`.
|
|
155
139
|
*/
|
|
156
140
|
locationGranularityType?: pulumi.Input<string>;
|
|
157
141
|
/**
|
|
158
|
-
* Name of the behavior
|
|
142
|
+
* Name of the behavior
|
|
159
143
|
*/
|
|
160
144
|
name?: pulumi.Input<string>;
|
|
161
145
|
/**
|
|
162
|
-
* The number of recent authentications used to evaluate the behavior. Required
|
|
163
|
-
* for `"ANOMALOUS_LOCATION"`, `"ANOMALOUS_DEVICE"` and `"ANOMALOUS_IP"` behavior types.
|
|
146
|
+
* The number of recent authentications used to evaluate the behavior. Required for `ANOMALOUS_LOCATION`, `ANOMALOUS_DEVICE` and `ANOMALOUS_IP` behavior types.
|
|
164
147
|
*/
|
|
165
148
|
numberOfAuthentications?: pulumi.Input<number>;
|
|
166
149
|
/**
|
|
167
|
-
* Radius from location (in kilometers). Should be at least 5. Required
|
|
168
|
-
* when `locationGranularityType` is set to `"LAT_LONG"`.
|
|
150
|
+
* Radius from location (in kilometers). Should be at least 5. Required when `locationGranularityType` is set to `LAT_LONG`.
|
|
169
151
|
*/
|
|
170
152
|
radiusFromLocation?: pulumi.Input<number>;
|
|
171
153
|
/**
|
|
172
|
-
*
|
|
154
|
+
* Behavior status: ACTIVE or INACTIVE. Default: `ACTIVE`
|
|
173
155
|
*/
|
|
174
156
|
status?: pulumi.Input<string>;
|
|
175
157
|
/**
|
|
176
|
-
* Type of the behavior. Can be set to `
|
|
177
|
-
* or `"VELOCITY"`. Resource will be recreated when the type changes.
|
|
158
|
+
* Type of the behavior. Can be set to `ANOMALOUS_LOCATION`, `ANOMALOUS_DEVICE`, `ANOMALOUS_IP` or `VELOCITY`. Resource will be recreated when the type changes.e
|
|
178
159
|
*/
|
|
179
160
|
type: pulumi.Input<string>;
|
|
180
161
|
/**
|
|
181
|
-
* Velocity (in kilometers per hour). Should be at least 1. Required for `
|
|
182
|
-
* type.
|
|
162
|
+
* Velocity (in kilometers per hour). Should be at least 1. Required for `VELOCITY` behavior
|
|
183
163
|
*/
|
|
184
164
|
velocity?: pulumi.Input<number>;
|
|
185
165
|
}
|
package/behaviour.js
CHANGED
package/behaviour.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"behaviour.js","sourceRoot":"","sources":["../behaviour.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"behaviour.js","sourceRoot":"","sources":["../behaviour.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAa,SAAU,SAAQ,MAAM,CAAC,cAAc;IAChD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsB,EAAE,IAAmC;QACpH,OAAO,IAAI,SAAS,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,YAAY,CAAC;IAC1D,CAAC;IAuCD,YAAY,IAAY,EAAE,WAA4C,EAAE,IAAmC;QACvG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyC,CAAC;YACxD,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAAwC,CAAC;YACtD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;;AA5FL,8BA6FC;AA/EG,gBAAgB;AACO,sBAAY,GAAG,gCAAgC,CAAC"}
|