@pulumi/okta 4.9.0-alpha.1718431198 → 4.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/adminRoleCustom.d.ts +105 -107
- package/adminRoleCustom.js +3 -5
- package/adminRoleCustom.js.map +1 -1
- package/adminRoleCustomAssignments.d.ts +12 -18
- package/adminRoleCustomAssignments.js +3 -6
- package/adminRoleCustomAssignments.js.map +1 -1
- package/adminRoleTargets.d.ts +14 -16
- package/adminRoleTargets.js +0 -2
- package/adminRoleTargets.js.map +1 -1
- package/app/accessPolicyAssignment.d.ts +23 -2
- package/app/accessPolicyAssignment.js +23 -2
- package/app/accessPolicyAssignment.js.map +1 -1
- package/app/autoLogin.d.ts +63 -97
- package/app/autoLogin.js +3 -37
- package/app/autoLogin.js.map +1 -1
- package/app/basicAuth.d.ts +30 -33
- package/app/basicAuth.js +4 -7
- package/app/basicAuth.js.map +1 -1
- package/app/bookmark.d.ts +30 -33
- package/app/bookmark.js +3 -6
- package/app/bookmark.js.map +1 -1
- package/app/getApp.d.ts +58 -25
- package/app/getApp.js +2 -2
- package/app/getApp.js.map +1 -1
- package/app/getMetadataSaml.d.ts +11 -5
- package/app/getMetadataSaml.js +2 -2
- package/app/getMetadataSaml.js.map +1 -1
- package/app/getOauth.d.ts +62 -34
- package/app/getOauth.js +2 -2
- package/app/getOauth.js.map +1 -1
- package/app/getSaml.d.ts +75 -56
- package/app/getSaml.js +2 -2
- package/app/getSaml.js.map +1 -1
- package/app/groupAssignment.d.ts +23 -9
- package/app/groupAssignment.js +17 -3
- package/app/groupAssignment.js.map +1 -1
- package/app/oauth.d.ts +135 -273
- package/app/oauth.js +6 -60
- package/app/oauth.js.map +1 -1
- package/app/oauthPostLogoutRedirectUri.d.ts +4 -6
- package/app/oauthPostLogoutRedirectUri.js +1 -3
- package/app/oauthPostLogoutRedirectUri.js.map +1 -1
- package/app/oauthRedirectUri.d.ts +4 -6
- package/app/oauthRedirectUri.js +1 -3
- package/app/oauthRedirectUri.js.map +1 -1
- package/app/oauthRoleAssignment.d.ts +4 -29
- package/app/oauthRoleAssignment.js +4 -29
- package/app/oauthRoleAssignment.js.map +1 -1
- package/app/saml.d.ts +161 -289
- package/app/saml.js +6 -152
- package/app/saml.js.map +1 -1
- package/app/securePasswordStore.d.ts +79 -80
- package/app/securePasswordStore.js +6 -7
- package/app/securePasswordStore.js.map +1 -1
- package/app/swa.d.ts +70 -71
- package/app/swa.js +4 -5
- package/app/swa.js.map +1 -1
- package/app/threeField.d.ts +74 -76
- package/app/threeField.js +5 -7
- package/app/threeField.js.map +1 -1
- package/app/user.d.ts +12 -17
- package/app/user.js +0 -2
- package/app/user.js.map +1 -1
- package/appGroupAssignments.d.ts +6 -8
- package/appGroupAssignments.js +3 -5
- package/appGroupAssignments.js.map +1 -1
- package/appOauthApiScope.d.ts +5 -7
- package/appOauthApiScope.js +2 -4
- package/appOauthApiScope.js.map +1 -1
- package/appSamlAppSettings.d.ts +6 -7
- package/appSamlAppSettings.js +3 -4
- package/appSamlAppSettings.js.map +1 -1
- package/appSharedCredentials.d.ts +61 -63
- package/appSharedCredentials.js +4 -6
- package/appSharedCredentials.js.map +1 -1
- package/appSignonPolicy.d.ts +3 -39
- package/appSignonPolicy.js +3 -39
- package/appSignonPolicy.js.map +1 -1
- package/appSignonPolicyRule.d.ts +69 -361
- package/appSignonPolicyRule.js +1 -278
- package/appSignonPolicyRule.js.map +1 -1
- package/appUserBaseSchemaProperty.d.ts +25 -29
- package/appUserBaseSchemaProperty.js +1 -5
- package/appUserBaseSchemaProperty.js.map +1 -1
- package/appUserSchemaProperty.d.ts +51 -41
- package/appUserSchemaProperty.js +0 -2
- package/appUserSchemaProperty.js.map +1 -1
- package/auth/getServer.d.ts +11 -11
- package/auth/getServer.js +2 -2
- package/auth/getServerPolicy.d.ts +15 -9
- package/auth/getServerPolicy.js +2 -2
- package/auth/getServerPolicy.js.map +1 -1
- package/auth/getServerScopes.d.ts +8 -5
- package/auth/getServerScopes.js +2 -2
- package/auth/getServerScopes.js.map +1 -1
- package/auth/server.d.ts +15 -19
- package/auth/server.js +1 -5
- package/auth/server.js.map +1 -1
- package/auth/serverClaim.d.ts +13 -17
- package/auth/serverClaim.js +1 -5
- package/auth/serverClaim.js.map +1 -1
- package/auth/serverPolicy.d.ts +10 -14
- package/auth/serverPolicy.js +1 -5
- package/auth/serverPolicy.js.map +1 -1
- package/auth/serverPolicyClaim.d.ts +50 -66
- package/auth/serverPolicyClaim.js +0 -25
- package/auth/serverPolicyClaim.js.map +1 -1
- package/auth/serverPolicyRule.d.ts +32 -43
- package/auth/serverPolicyRule.js +0 -2
- package/auth/serverPolicyRule.js.map +1 -1
- package/auth/serverScope.d.ts +16 -20
- package/auth/serverScope.js +1 -5
- package/auth/serverScope.js.map +1 -1
- package/authServerClaimDefault.d.ts +10 -25
- package/authServerClaimDefault.js +0 -9
- package/authServerClaimDefault.js.map +1 -1
- package/authServerDefault.d.ts +15 -19
- package/authServerDefault.js +1 -5
- package/authServerDefault.js.map +1 -1
- package/authenticator.d.ts +53 -61
- package/authenticator.js +11 -11
- package/authenticator.js.map +1 -1
- package/behaviour.d.ts +21 -41
- package/behaviour.js +0 -2
- package/behaviour.js.map +1 -1
- package/brand.d.ts +23 -22
- package/brand.js +8 -4
- package/brand.js.map +1 -1
- package/captcha.d.ts +15 -17
- package/captcha.js +3 -5
- package/captcha.js.map +1 -1
- package/captchaOrgWideSettings.d.ts +8 -43
- package/captchaOrgWideSettings.js +2 -37
- package/captchaOrgWideSettings.js.map +1 -1
- package/domain.d.ts +13 -21
- package/domain.js +0 -2
- package/domain.js.map +1 -1
- package/domainCertificate.d.ts +17 -24
- package/domainCertificate.js +2 -9
- package/domainCertificate.js.map +1 -1
- package/domainVerification.d.ts +4 -10
- package/domainVerification.js +1 -7
- package/domainVerification.js.map +1 -1
- package/emailCustomization.d.ts +38 -222
- package/emailCustomization.js +29 -33
- package/emailCustomization.js.map +1 -1
- package/emailDomain.d.ts +4 -8
- package/emailDomain.js +0 -4
- package/emailDomain.js.map +1 -1
- package/emailDomainVerification.d.ts +3 -7
- package/emailDomainVerification.js +0 -4
- package/emailDomainVerification.js.map +1 -1
- package/emailSender.d.ts +15 -17
- package/emailSender.js +2 -4
- package/emailSender.js.map +1 -1
- package/emailSenderVerification.d.ts +5 -9
- package/emailSenderVerification.js +2 -6
- package/emailSenderVerification.js.map +1 -1
- package/eventHook.d.ts +16 -11
- package/eventHook.js +1 -5
- package/eventHook.js.map +1 -1
- package/eventHookVerification.d.ts +4 -10
- package/eventHookVerification.js +1 -7
- package/eventHookVerification.js.map +1 -1
- package/factor/factor.d.ts +4 -9
- package/factor/factor.js +1 -3
- package/factor/factor.js.map +1 -1
- package/factorTotp.d.ts +12 -21
- package/factorTotp.js +3 -3
- package/factorTotp.js.map +1 -1
- package/getAppGroupAssignments.d.ts +6 -6
- package/getAppGroupAssignments.js +2 -2
- package/getAppSignonPolicy.d.ts +16 -6
- package/getAppSignonPolicy.js +8 -4
- package/getAppSignonPolicy.js.map +1 -1
- package/getAppUserAssignments.d.ts +6 -6
- package/getAppUserAssignments.js +2 -2
- package/getAuthServerClaim.d.ts +15 -12
- package/getAuthServerClaim.js +2 -2
- package/getAuthServerClaim.js.map +1 -1
- package/getAuthServerClaims.d.ts +8 -5
- package/getAuthServerClaims.js +2 -2
- package/getAuthServerClaims.js.map +1 -1
- package/getAuthenticator.d.ts +24 -26
- package/getAuthenticator.js +14 -22
- package/getAuthenticator.js.map +1 -1
- package/getBehaviour.d.ts +6 -8
- package/getBehaviour.js +2 -2
- package/getBehaviour.js.map +1 -1
- package/getBehaviours.d.ts +7 -7
- package/getBehaviours.js +2 -2
- package/getBrand.d.ts +9 -6
- package/getBrand.js +2 -2
- package/getBrand.js.map +1 -1
- package/getBrands.d.ts +2 -2
- package/getBrands.js +2 -2
- package/getDomain.d.ts +11 -14
- package/getDomain.js +2 -8
- package/getDomain.js.map +1 -1
- package/getEmailCustomization.d.ts +14 -9
- package/getEmailCustomization.js +2 -6
- package/getEmailCustomization.js.map +1 -1
- package/getEmailCustomizations.d.ts +11 -9
- package/getEmailCustomizations.js +2 -6
- package/getEmailCustomizations.js.map +1 -1
- package/getGroups.d.ts +11 -25
- package/getGroups.js +2 -2
- package/getGroups.js.map +1 -1
- package/getLogStream.d.ts +8 -39
- package/getLogStream.js +2 -24
- package/getLogStream.js.map +1 -1
- package/getNetworkZone.d.ts +12 -12
- package/getNetworkZone.js +2 -2
- package/getOrgMetadata.d.ts +0 -22
- package/getOrgMetadata.js +0 -22
- package/getOrgMetadata.js.map +1 -1
- package/getRoleSubscription.d.ts +13 -35
- package/getRoleSubscription.js +2 -2
- package/getRoleSubscription.js.map +1 -1
- package/getTemplate.d.ts +10 -8
- package/getTemplate.js +2 -6
- package/getTemplate.js.map +1 -1
- package/getTemplates.d.ts +6 -7
- package/getTemplates.js +2 -6
- package/getTemplates.js.map +1 -1
- package/getTheme.d.ts +14 -12
- package/getTheme.js +2 -6
- package/getTheme.js.map +1 -1
- package/getThemes.d.ts +6 -7
- package/getThemes.js +2 -6
- package/getThemes.js.map +1 -1
- package/getTrustedOrigins.d.ts +7 -4
- package/getTrustedOrigins.js +2 -2
- package/getTrustedOrigins.js.map +1 -1
- package/getUserSecurityQuestions.d.ts +4 -8
- package/getUserSecurityQuestions.js +0 -4
- package/getUserSecurityQuestions.js.map +1 -1
- package/group/getEveryoneGroup.d.ts +10 -5
- package/group/getEveryoneGroup.js +4 -2
- package/group/getEveryoneGroup.js.map +1 -1
- package/group/getGroup.d.ts +17 -26
- package/group/getGroup.js +2 -2
- package/group/getGroup.js.map +1 -1
- package/group/getRule.d.ts +9 -9
- package/group/getRule.js +2 -2
- package/group/group.d.ts +4 -36
- package/group/group.js +1 -33
- package/group/group.js.map +1 -1
- package/group/role.d.ts +37 -81
- package/group/role.js +1 -6
- package/group/role.js.map +1 -1
- package/group/rule.d.ts +12 -20
- package/group/rule.js +0 -2
- package/group/rule.js.map +1 -1
- package/groupMemberships.d.ts +8 -10
- package/groupMemberships.js +2 -4
- package/groupMemberships.js.map +1 -1
- package/groupSchemaProperty.d.ts +57 -59
- package/groupSchemaProperty.js +0 -2
- package/groupSchemaProperty.js.map +1 -1
- package/idp/getMetadataSaml.d.ts +9 -6
- package/idp/getMetadataSaml.js +2 -2
- package/idp/getMetadataSaml.js.map +1 -1
- package/idp/getOidc.d.ts +9 -9
- package/idp/getOidc.js +2 -2
- package/idp/getSaml.d.ts +16 -13
- package/idp/getSaml.js +2 -2
- package/idp/getSaml.js.map +1 -1
- package/idp/getSocial.d.ts +8 -2
- package/idp/getSocial.js +2 -2
- package/idp/getSocial.js.map +1 -1
- package/idp/oidc.d.ts +70 -62
- package/idp/oidc.js +3 -5
- package/idp/oidc.js.map +1 -1
- package/idp/saml.d.ts +64 -86
- package/idp/saml.js +1 -5
- package/idp/saml.js.map +1 -1
- package/idp/samlKey.d.ts +3 -5
- package/idp/samlKey.js +0 -2
- package/idp/samlKey.js.map +1 -1
- package/idp/social.d.ts +99 -69
- package/idp/social.js +11 -5
- package/idp/social.js.map +1 -1
- package/inline/hook.d.ts +4 -26
- package/inline/hook.js +1 -5
- package/inline/hook.js.map +1 -1
- package/linkDefinition.d.ts +2 -3
- package/linkDefinition.js +2 -3
- package/linkDefinition.js.map +1 -1
- package/linkValue.d.ts +7 -9
- package/linkValue.js +1 -3
- package/linkValue.js.map +1 -1
- package/logStream.d.ts +32 -27
- package/logStream.js +23 -9
- package/logStream.js.map +1 -1
- package/network/zone.d.ts +25 -66
- package/network/zone.js +1 -39
- package/network/zone.js.map +1 -1
- package/orgConfiguration.d.ts +4 -9
- package/orgConfiguration.js +1 -3
- package/orgConfiguration.js.map +1 -1
- package/orgSupport.d.ts +4 -7
- package/orgSupport.js +1 -4
- package/orgSupport.js.map +1 -1
- package/package.json +3 -3
- package/policy/getDefaultPolicy.d.ts +9 -7
- package/policy/getDefaultPolicy.js +6 -2
- package/policy/getDefaultPolicy.js.map +1 -1
- package/policy/getPolicy.d.ts +11 -26
- package/policy/getPolicy.js +2 -2
- package/policy/getPolicy.js.map +1 -1
- package/policy/mfa.d.ts +18 -220
- package/policy/mfa.js +0 -10
- package/policy/mfa.js.map +1 -1
- package/policy/password.d.ts +91 -95
- package/policy/password.js +1 -5
- package/policy/password.js.map +1 -1
- package/policy/ruleIdpDiscovery.d.ts +111 -93
- package/policy/ruleIdpDiscovery.js +48 -57
- package/policy/ruleIdpDiscovery.js.map +1 -1
- package/policy/ruleMfa.d.ts +40 -30
- package/policy/ruleMfa.js +1 -3
- package/policy/ruleMfa.js.map +1 -1
- package/policy/rulePassword.d.ts +34 -38
- package/policy/rulePassword.js +1 -5
- package/policy/rulePassword.js.map +1 -1
- package/policy/ruleSignon.d.ts +94 -85
- package/policy/ruleSignon.js +1 -4
- package/policy/ruleSignon.js.map +1 -1
- package/policy/signon.d.ts +16 -20
- package/policy/signon.js +1 -5
- package/policy/signon.js.map +1 -1
- package/policyMfaDefault.d.ts +15 -214
- package/policyMfaDefault.js +2 -9
- package/policyMfaDefault.js.map +1 -1
- package/policyPasswordDefault.d.ts +85 -101
- package/policyPasswordDefault.js +1 -5
- package/policyPasswordDefault.js.map +1 -1
- package/policyProfileEnrollment.d.ts +8 -9
- package/policyProfileEnrollment.js +2 -3
- package/policyProfileEnrollment.js.map +1 -1
- package/policyProfileEnrollmentApps.d.ts +8 -11
- package/policyProfileEnrollmentApps.js +3 -6
- package/policyProfileEnrollmentApps.js.map +1 -1
- package/policyRuleProfileEnrollment.d.ts +42 -31
- package/policyRuleProfileEnrollment.js +2 -3
- package/policyRuleProfileEnrollment.js.map +1 -1
- package/profile/mapping.d.ts +19 -34
- package/profile/mapping.js +4 -4
- package/profile/mapping.js.map +1 -1
- package/rateLimiting.d.ts +8 -17
- package/rateLimiting.js +2 -5
- package/rateLimiting.js.map +1 -1
- package/resourceSet.d.ts +18 -26
- package/resourceSet.js +9 -14
- package/resourceSet.js.map +1 -1
- package/roleSubscription.d.ts +35 -86
- package/roleSubscription.js +2 -2
- package/roleSubscription.js.map +1 -1
- package/securityNotificationEmails.d.ts +4 -7
- package/securityNotificationEmails.js +4 -7
- package/securityNotificationEmails.js.map +1 -1
- package/templateSms.d.ts +4 -8
- package/templateSms.js +1 -5
- package/templateSms.js.map +1 -1
- package/theme.d.ts +46 -46
- package/theme.js +2 -2
- package/threatInsightSettings.d.ts +7 -27
- package/threatInsightSettings.js +1 -3
- package/threatInsightSettings.js.map +1 -1
- package/trustedorigin/origin.d.ts +13 -17
- package/trustedorigin/origin.js +1 -5
- package/trustedorigin/origin.js.map +1 -1
- package/types/input.d.ts +65 -162
- package/types/output.d.ts +75 -275
- package/user/getUser.d.ts +32 -104
- package/user/getUser.js +2 -2
- package/user/getUser.js.map +1 -1
- package/user/getUserProfileMappingSource.d.ts +9 -7
- package/user/getUserProfileMappingSource.js +6 -4
- package/user/getUserProfileMappingSource.js.map +1 -1
- package/user/getUserType.d.ts +7 -7
- package/user/getUserType.js +2 -2
- package/user/getUsers.d.ts +95 -37
- package/user/getUsers.js +64 -24
- package/user/getUsers.js.map +1 -1
- package/user/user.d.ts +160 -209
- package/user/user.js +43 -65
- package/user/user.js.map +1 -1
- package/user/userType.d.ts +1 -5
- package/user/userType.js +1 -5
- package/user/userType.js.map +1 -1
- package/userAdminRoles.d.ts +10 -17
- package/userAdminRoles.js +1 -5
- package/userAdminRoles.js.map +1 -1
- package/userBaseSchemaProperty.d.ts +26 -34
- package/userBaseSchemaProperty.js +2 -10
- package/userBaseSchemaProperty.js.map +1 -1
- package/userFactorQuestion.d.ts +1 -5
- package/userFactorQuestion.js +1 -5
- package/userFactorQuestion.js.map +1 -1
- package/userGroupMemberships.d.ts +3 -3
- package/userSchemaProperty.d.ts +57 -56
- package/userSchemaProperty.js +0 -8
- package/userSchemaProperty.js.map +1 -1
package/idp/saml.d.ts
CHANGED
|
@@ -1,8 +1,6 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
* Creates a SAML Identity Provider.
|
|
4
|
-
*
|
|
5
|
-
* This resource allows you to create and configure a SAML Identity Provider.
|
|
3
|
+
* Creates a SAML Identity Provider. This resource allows you to create and configure a SAML Identity Provider.
|
|
6
4
|
*
|
|
7
5
|
* ## Example Usage
|
|
8
6
|
*
|
|
@@ -26,8 +24,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
26
24
|
*
|
|
27
25
|
* ## Import
|
|
28
26
|
*
|
|
29
|
-
* An SAML IdP can be imported via the Okta ID.
|
|
30
|
-
*
|
|
31
27
|
* ```sh
|
|
32
28
|
* $ pulumi import okta:idp/saml:Saml example <idp id>
|
|
33
29
|
* ```
|
|
@@ -49,7 +45,7 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
49
45
|
*/
|
|
50
46
|
static isInstance(obj: any): obj is Saml;
|
|
51
47
|
/**
|
|
52
|
-
* Specifies the account linking action for an IdP user.
|
|
48
|
+
* Specifies the account linking action for an IdP user. Default: `AUTO`
|
|
53
49
|
*/
|
|
54
50
|
readonly accountLinkAction: pulumi.Output<string | undefined>;
|
|
55
51
|
/**
|
|
@@ -58,23 +54,20 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
58
54
|
readonly accountLinkGroupIncludes: pulumi.Output<string[] | undefined>;
|
|
59
55
|
readonly acsBinding: pulumi.Output<string>;
|
|
60
56
|
/**
|
|
61
|
-
* The type of ACS. It can be `
|
|
57
|
+
* The type of ACS. It can be `INSTANCE` or `ORG`. Default: `INSTANCE`
|
|
62
58
|
*/
|
|
63
59
|
readonly acsType: pulumi.Output<string | undefined>;
|
|
64
|
-
/**
|
|
65
|
-
* The audience restriction for the IdP.
|
|
66
|
-
*/
|
|
67
60
|
readonly audience: pulumi.Output<string>;
|
|
68
61
|
/**
|
|
69
|
-
* Action for a previously deprovisioned IdP user during authentication. Can be `
|
|
62
|
+
* Action for a previously deprovisioned IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
|
|
70
63
|
*/
|
|
71
64
|
readonly deprovisionedAction: pulumi.Output<string | undefined>;
|
|
72
65
|
/**
|
|
73
|
-
* Provisioning action for IdP user's group memberships. It can be `
|
|
66
|
+
* Provisioning action for IdP user's group memberships. It can be `NONE`, `SYNC`, `APPEND`, or `ASSIGN`. Default: `NONE`
|
|
74
67
|
*/
|
|
75
68
|
readonly groupsAction: pulumi.Output<string | undefined>;
|
|
76
69
|
/**
|
|
77
|
-
* List of Okta Group IDs to add an IdP user as a member with the `
|
|
70
|
+
* List of Okta Group IDs to add an IdP user as a member with the `ASSIGN` `groupsAction`.
|
|
78
71
|
*/
|
|
79
72
|
readonly groupsAssignments: pulumi.Output<string[] | undefined>;
|
|
80
73
|
/**
|
|
@@ -82,7 +75,7 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
82
75
|
*/
|
|
83
76
|
readonly groupsAttribute: pulumi.Output<string | undefined>;
|
|
84
77
|
/**
|
|
85
|
-
* Whitelist of Okta Group identifiers that are allowed for the `
|
|
78
|
+
* Whitelist of Okta Group identifiers that are allowed for the `APPEND` or `SYNC` `groupsAction`.
|
|
86
79
|
*/
|
|
87
80
|
readonly groupsFilters: pulumi.Output<string[] | undefined>;
|
|
88
81
|
/**
|
|
@@ -90,7 +83,7 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
90
83
|
*/
|
|
91
84
|
readonly issuer: pulumi.Output<string>;
|
|
92
85
|
/**
|
|
93
|
-
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
86
|
+
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
94
87
|
*/
|
|
95
88
|
readonly issuerMode: pulumi.Output<string | undefined>;
|
|
96
89
|
/**
|
|
@@ -102,11 +95,11 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
102
95
|
*/
|
|
103
96
|
readonly maxClockSkew: pulumi.Output<number | undefined>;
|
|
104
97
|
/**
|
|
105
|
-
*
|
|
98
|
+
* Name of the IdP
|
|
106
99
|
*/
|
|
107
100
|
readonly name: pulumi.Output<string>;
|
|
108
101
|
/**
|
|
109
|
-
* The name identifier format to use. By default `
|
|
102
|
+
* The name identifier format to use. By default `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified`.
|
|
110
103
|
*/
|
|
111
104
|
readonly nameFormat: pulumi.Output<string | undefined>;
|
|
112
105
|
/**
|
|
@@ -114,27 +107,27 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
114
107
|
*/
|
|
115
108
|
readonly profileMaster: pulumi.Output<boolean | undefined>;
|
|
116
109
|
/**
|
|
117
|
-
* Provisioning action for an IdP user during authentication.
|
|
110
|
+
* Provisioning action for an IdP user during authentication. Default: `AUTO`
|
|
118
111
|
*/
|
|
119
112
|
readonly provisioningAction: pulumi.Output<string | undefined>;
|
|
120
113
|
/**
|
|
121
|
-
* The XML digital
|
|
114
|
+
* The XML digital Signature Algorithm used when signing an `AuthnRequest` message. It can be `SHA-256` or `SHA-1`. Default: `SHA-256`
|
|
122
115
|
*/
|
|
123
116
|
readonly requestSignatureAlgorithm: pulumi.Output<string | undefined>;
|
|
124
117
|
/**
|
|
125
|
-
* Specifies whether to digitally sign an AuthnRequest messages to the IdP. It can be `
|
|
118
|
+
* Specifies whether to digitally sign an AuthnRequest messages to the IdP. It can be `REQUEST` or `NONE`. Default: `REQUEST`
|
|
126
119
|
*/
|
|
127
120
|
readonly requestSignatureScope: pulumi.Output<string | undefined>;
|
|
128
121
|
/**
|
|
129
|
-
* The minimum XML digital signature algorithm allowed when verifying a SAMLResponse message or Assertion element. It can be `
|
|
122
|
+
* The minimum XML digital signature algorithm allowed when verifying a `SAMLResponse` message or Assertion element. It can be `SHA-256` or `SHA-1`. Default: `SHA-256`
|
|
130
123
|
*/
|
|
131
124
|
readonly responseSignatureAlgorithm: pulumi.Output<string | undefined>;
|
|
132
125
|
/**
|
|
133
|
-
* Specifies whether to verify a SAMLResponse message or Assertion element XML digital signature. It can be `
|
|
126
|
+
* Specifies whether to verify a `SAMLResponse` message or Assertion element XML digital signature. It can be `RESPONSE`, `ASSERTION`, or `ANY`. Default: `ANY`
|
|
134
127
|
*/
|
|
135
128
|
readonly responseSignatureScope: pulumi.Output<string | undefined>;
|
|
136
129
|
/**
|
|
137
|
-
* The method of making an SSO request. It can be set to `
|
|
130
|
+
* The method of making an SSO request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`. Default: `HTTP-POST`
|
|
138
131
|
*/
|
|
139
132
|
readonly ssoBinding: pulumi.Output<string | undefined>;
|
|
140
133
|
/**
|
|
@@ -146,7 +139,7 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
146
139
|
*/
|
|
147
140
|
readonly ssoUrl: pulumi.Output<string>;
|
|
148
141
|
/**
|
|
149
|
-
*
|
|
142
|
+
* Default to `ACTIVE`
|
|
150
143
|
*/
|
|
151
144
|
readonly status: pulumi.Output<string | undefined>;
|
|
152
145
|
/**
|
|
@@ -154,31 +147,25 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
154
147
|
*/
|
|
155
148
|
readonly subjectFilter: pulumi.Output<string | undefined>;
|
|
156
149
|
/**
|
|
157
|
-
* The name format.
|
|
150
|
+
* The name format.
|
|
158
151
|
*/
|
|
159
152
|
readonly subjectFormats: pulumi.Output<string[] | undefined>;
|
|
160
153
|
/**
|
|
161
|
-
* Okta user profile attribute for matching transformed IdP username. Only for matchType `
|
|
154
|
+
* Okta user profile attribute for matching transformed IdP username. Only for matchType `CUSTOM_ATTRIBUTE`.
|
|
162
155
|
*/
|
|
163
156
|
readonly subjectMatchAttribute: pulumi.Output<string | undefined>;
|
|
164
157
|
/**
|
|
165
|
-
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `
|
|
158
|
+
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `USERNAME`. It can be set to `USERNAME`, `EMAIL`, `USERNAME_OR_EMAIL` or `CUSTOM_ATTRIBUTE`.
|
|
166
159
|
*/
|
|
167
160
|
readonly subjectMatchType: pulumi.Output<string | undefined>;
|
|
168
161
|
/**
|
|
169
|
-
* Action for a previously suspended IdP user during authentication. Can be
|
|
162
|
+
* Action for a previously suspended IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
|
|
170
163
|
*/
|
|
171
164
|
readonly suspendedAction: pulumi.Output<string | undefined>;
|
|
172
|
-
/**
|
|
173
|
-
* Type of the IdP.
|
|
174
|
-
*/
|
|
175
165
|
readonly type: pulumi.Output<string>;
|
|
176
|
-
/**
|
|
177
|
-
* User type ID. Can be used as `targetId` in the `okta.profile.Mapping` resource.
|
|
178
|
-
*/
|
|
179
166
|
readonly userTypeId: pulumi.Output<string>;
|
|
180
167
|
/**
|
|
181
|
-
* Okta EL Expression to generate or transform a unique username for the IdP user.
|
|
168
|
+
* Okta EL Expression to generate or transform a unique username for the IdP user. Default: `idpuser.email`
|
|
182
169
|
*/
|
|
183
170
|
readonly usernameTemplate: pulumi.Output<string | undefined>;
|
|
184
171
|
/**
|
|
@@ -195,7 +182,7 @@ export declare class Saml extends pulumi.CustomResource {
|
|
|
195
182
|
*/
|
|
196
183
|
export interface SamlState {
|
|
197
184
|
/**
|
|
198
|
-
* Specifies the account linking action for an IdP user.
|
|
185
|
+
* Specifies the account linking action for an IdP user. Default: `AUTO`
|
|
199
186
|
*/
|
|
200
187
|
accountLinkAction?: pulumi.Input<string>;
|
|
201
188
|
/**
|
|
@@ -204,23 +191,20 @@ export interface SamlState {
|
|
|
204
191
|
accountLinkGroupIncludes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
205
192
|
acsBinding?: pulumi.Input<string>;
|
|
206
193
|
/**
|
|
207
|
-
* The type of ACS. It can be `
|
|
194
|
+
* The type of ACS. It can be `INSTANCE` or `ORG`. Default: `INSTANCE`
|
|
208
195
|
*/
|
|
209
196
|
acsType?: pulumi.Input<string>;
|
|
210
|
-
/**
|
|
211
|
-
* The audience restriction for the IdP.
|
|
212
|
-
*/
|
|
213
197
|
audience?: pulumi.Input<string>;
|
|
214
198
|
/**
|
|
215
|
-
* Action for a previously deprovisioned IdP user during authentication. Can be `
|
|
199
|
+
* Action for a previously deprovisioned IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
|
|
216
200
|
*/
|
|
217
201
|
deprovisionedAction?: pulumi.Input<string>;
|
|
218
202
|
/**
|
|
219
|
-
* Provisioning action for IdP user's group memberships. It can be `
|
|
203
|
+
* Provisioning action for IdP user's group memberships. It can be `NONE`, `SYNC`, `APPEND`, or `ASSIGN`. Default: `NONE`
|
|
220
204
|
*/
|
|
221
205
|
groupsAction?: pulumi.Input<string>;
|
|
222
206
|
/**
|
|
223
|
-
* List of Okta Group IDs to add an IdP user as a member with the `
|
|
207
|
+
* List of Okta Group IDs to add an IdP user as a member with the `ASSIGN` `groupsAction`.
|
|
224
208
|
*/
|
|
225
209
|
groupsAssignments?: pulumi.Input<pulumi.Input<string>[]>;
|
|
226
210
|
/**
|
|
@@ -228,7 +212,7 @@ export interface SamlState {
|
|
|
228
212
|
*/
|
|
229
213
|
groupsAttribute?: pulumi.Input<string>;
|
|
230
214
|
/**
|
|
231
|
-
* Whitelist of Okta Group identifiers that are allowed for the `
|
|
215
|
+
* Whitelist of Okta Group identifiers that are allowed for the `APPEND` or `SYNC` `groupsAction`.
|
|
232
216
|
*/
|
|
233
217
|
groupsFilters?: pulumi.Input<pulumi.Input<string>[]>;
|
|
234
218
|
/**
|
|
@@ -236,7 +220,7 @@ export interface SamlState {
|
|
|
236
220
|
*/
|
|
237
221
|
issuer?: pulumi.Input<string>;
|
|
238
222
|
/**
|
|
239
|
-
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
223
|
+
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
240
224
|
*/
|
|
241
225
|
issuerMode?: pulumi.Input<string>;
|
|
242
226
|
/**
|
|
@@ -248,11 +232,11 @@ export interface SamlState {
|
|
|
248
232
|
*/
|
|
249
233
|
maxClockSkew?: pulumi.Input<number>;
|
|
250
234
|
/**
|
|
251
|
-
*
|
|
235
|
+
* Name of the IdP
|
|
252
236
|
*/
|
|
253
237
|
name?: pulumi.Input<string>;
|
|
254
238
|
/**
|
|
255
|
-
* The name identifier format to use. By default `
|
|
239
|
+
* The name identifier format to use. By default `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified`.
|
|
256
240
|
*/
|
|
257
241
|
nameFormat?: pulumi.Input<string>;
|
|
258
242
|
/**
|
|
@@ -260,27 +244,27 @@ export interface SamlState {
|
|
|
260
244
|
*/
|
|
261
245
|
profileMaster?: pulumi.Input<boolean>;
|
|
262
246
|
/**
|
|
263
|
-
* Provisioning action for an IdP user during authentication.
|
|
247
|
+
* Provisioning action for an IdP user during authentication. Default: `AUTO`
|
|
264
248
|
*/
|
|
265
249
|
provisioningAction?: pulumi.Input<string>;
|
|
266
250
|
/**
|
|
267
|
-
* The XML digital
|
|
251
|
+
* The XML digital Signature Algorithm used when signing an `AuthnRequest` message. It can be `SHA-256` or `SHA-1`. Default: `SHA-256`
|
|
268
252
|
*/
|
|
269
253
|
requestSignatureAlgorithm?: pulumi.Input<string>;
|
|
270
254
|
/**
|
|
271
|
-
* Specifies whether to digitally sign an AuthnRequest messages to the IdP. It can be `
|
|
255
|
+
* Specifies whether to digitally sign an AuthnRequest messages to the IdP. It can be `REQUEST` or `NONE`. Default: `REQUEST`
|
|
272
256
|
*/
|
|
273
257
|
requestSignatureScope?: pulumi.Input<string>;
|
|
274
258
|
/**
|
|
275
|
-
* The minimum XML digital signature algorithm allowed when verifying a SAMLResponse message or Assertion element. It can be `
|
|
259
|
+
* The minimum XML digital signature algorithm allowed when verifying a `SAMLResponse` message or Assertion element. It can be `SHA-256` or `SHA-1`. Default: `SHA-256`
|
|
276
260
|
*/
|
|
277
261
|
responseSignatureAlgorithm?: pulumi.Input<string>;
|
|
278
262
|
/**
|
|
279
|
-
* Specifies whether to verify a SAMLResponse message or Assertion element XML digital signature. It can be `
|
|
263
|
+
* Specifies whether to verify a `SAMLResponse` message or Assertion element XML digital signature. It can be `RESPONSE`, `ASSERTION`, or `ANY`. Default: `ANY`
|
|
280
264
|
*/
|
|
281
265
|
responseSignatureScope?: pulumi.Input<string>;
|
|
282
266
|
/**
|
|
283
|
-
* The method of making an SSO request. It can be set to `
|
|
267
|
+
* The method of making an SSO request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`. Default: `HTTP-POST`
|
|
284
268
|
*/
|
|
285
269
|
ssoBinding?: pulumi.Input<string>;
|
|
286
270
|
/**
|
|
@@ -292,7 +276,7 @@ export interface SamlState {
|
|
|
292
276
|
*/
|
|
293
277
|
ssoUrl?: pulumi.Input<string>;
|
|
294
278
|
/**
|
|
295
|
-
*
|
|
279
|
+
* Default to `ACTIVE`
|
|
296
280
|
*/
|
|
297
281
|
status?: pulumi.Input<string>;
|
|
298
282
|
/**
|
|
@@ -300,31 +284,25 @@ export interface SamlState {
|
|
|
300
284
|
*/
|
|
301
285
|
subjectFilter?: pulumi.Input<string>;
|
|
302
286
|
/**
|
|
303
|
-
* The name format.
|
|
287
|
+
* The name format.
|
|
304
288
|
*/
|
|
305
289
|
subjectFormats?: pulumi.Input<pulumi.Input<string>[]>;
|
|
306
290
|
/**
|
|
307
|
-
* Okta user profile attribute for matching transformed IdP username. Only for matchType `
|
|
291
|
+
* Okta user profile attribute for matching transformed IdP username. Only for matchType `CUSTOM_ATTRIBUTE`.
|
|
308
292
|
*/
|
|
309
293
|
subjectMatchAttribute?: pulumi.Input<string>;
|
|
310
294
|
/**
|
|
311
|
-
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `
|
|
295
|
+
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `USERNAME`. It can be set to `USERNAME`, `EMAIL`, `USERNAME_OR_EMAIL` or `CUSTOM_ATTRIBUTE`.
|
|
312
296
|
*/
|
|
313
297
|
subjectMatchType?: pulumi.Input<string>;
|
|
314
298
|
/**
|
|
315
|
-
* Action for a previously suspended IdP user during authentication. Can be
|
|
299
|
+
* Action for a previously suspended IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
|
|
316
300
|
*/
|
|
317
301
|
suspendedAction?: pulumi.Input<string>;
|
|
318
|
-
/**
|
|
319
|
-
* Type of the IdP.
|
|
320
|
-
*/
|
|
321
302
|
type?: pulumi.Input<string>;
|
|
322
|
-
/**
|
|
323
|
-
* User type ID. Can be used as `targetId` in the `okta.profile.Mapping` resource.
|
|
324
|
-
*/
|
|
325
303
|
userTypeId?: pulumi.Input<string>;
|
|
326
304
|
/**
|
|
327
|
-
* Okta EL Expression to generate or transform a unique username for the IdP user.
|
|
305
|
+
* Okta EL Expression to generate or transform a unique username for the IdP user. Default: `idpuser.email`
|
|
328
306
|
*/
|
|
329
307
|
usernameTemplate?: pulumi.Input<string>;
|
|
330
308
|
}
|
|
@@ -333,7 +311,7 @@ export interface SamlState {
|
|
|
333
311
|
*/
|
|
334
312
|
export interface SamlArgs {
|
|
335
313
|
/**
|
|
336
|
-
* Specifies the account linking action for an IdP user.
|
|
314
|
+
* Specifies the account linking action for an IdP user. Default: `AUTO`
|
|
337
315
|
*/
|
|
338
316
|
accountLinkAction?: pulumi.Input<string>;
|
|
339
317
|
/**
|
|
@@ -341,19 +319,19 @@ export interface SamlArgs {
|
|
|
341
319
|
*/
|
|
342
320
|
accountLinkGroupIncludes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
343
321
|
/**
|
|
344
|
-
* The type of ACS. It can be `
|
|
322
|
+
* The type of ACS. It can be `INSTANCE` or `ORG`. Default: `INSTANCE`
|
|
345
323
|
*/
|
|
346
324
|
acsType?: pulumi.Input<string>;
|
|
347
325
|
/**
|
|
348
|
-
* Action for a previously deprovisioned IdP user during authentication. Can be `
|
|
326
|
+
* Action for a previously deprovisioned IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
|
|
349
327
|
*/
|
|
350
328
|
deprovisionedAction?: pulumi.Input<string>;
|
|
351
329
|
/**
|
|
352
|
-
* Provisioning action for IdP user's group memberships. It can be `
|
|
330
|
+
* Provisioning action for IdP user's group memberships. It can be `NONE`, `SYNC`, `APPEND`, or `ASSIGN`. Default: `NONE`
|
|
353
331
|
*/
|
|
354
332
|
groupsAction?: pulumi.Input<string>;
|
|
355
333
|
/**
|
|
356
|
-
* List of Okta Group IDs to add an IdP user as a member with the `
|
|
334
|
+
* List of Okta Group IDs to add an IdP user as a member with the `ASSIGN` `groupsAction`.
|
|
357
335
|
*/
|
|
358
336
|
groupsAssignments?: pulumi.Input<pulumi.Input<string>[]>;
|
|
359
337
|
/**
|
|
@@ -361,7 +339,7 @@ export interface SamlArgs {
|
|
|
361
339
|
*/
|
|
362
340
|
groupsAttribute?: pulumi.Input<string>;
|
|
363
341
|
/**
|
|
364
|
-
* Whitelist of Okta Group identifiers that are allowed for the `
|
|
342
|
+
* Whitelist of Okta Group identifiers that are allowed for the `APPEND` or `SYNC` `groupsAction`.
|
|
365
343
|
*/
|
|
366
344
|
groupsFilters?: pulumi.Input<pulumi.Input<string>[]>;
|
|
367
345
|
/**
|
|
@@ -369,7 +347,7 @@ export interface SamlArgs {
|
|
|
369
347
|
*/
|
|
370
348
|
issuer: pulumi.Input<string>;
|
|
371
349
|
/**
|
|
372
|
-
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
350
|
+
* Indicates whether Okta uses the original Okta org domain URL, or a custom domain URL
|
|
373
351
|
*/
|
|
374
352
|
issuerMode?: pulumi.Input<string>;
|
|
375
353
|
/**
|
|
@@ -381,11 +359,11 @@ export interface SamlArgs {
|
|
|
381
359
|
*/
|
|
382
360
|
maxClockSkew?: pulumi.Input<number>;
|
|
383
361
|
/**
|
|
384
|
-
*
|
|
362
|
+
* Name of the IdP
|
|
385
363
|
*/
|
|
386
364
|
name?: pulumi.Input<string>;
|
|
387
365
|
/**
|
|
388
|
-
* The name identifier format to use. By default `
|
|
366
|
+
* The name identifier format to use. By default `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified`.
|
|
389
367
|
*/
|
|
390
368
|
nameFormat?: pulumi.Input<string>;
|
|
391
369
|
/**
|
|
@@ -393,27 +371,27 @@ export interface SamlArgs {
|
|
|
393
371
|
*/
|
|
394
372
|
profileMaster?: pulumi.Input<boolean>;
|
|
395
373
|
/**
|
|
396
|
-
* Provisioning action for an IdP user during authentication.
|
|
374
|
+
* Provisioning action for an IdP user during authentication. Default: `AUTO`
|
|
397
375
|
*/
|
|
398
376
|
provisioningAction?: pulumi.Input<string>;
|
|
399
377
|
/**
|
|
400
|
-
* The XML digital
|
|
378
|
+
* The XML digital Signature Algorithm used when signing an `AuthnRequest` message. It can be `SHA-256` or `SHA-1`. Default: `SHA-256`
|
|
401
379
|
*/
|
|
402
380
|
requestSignatureAlgorithm?: pulumi.Input<string>;
|
|
403
381
|
/**
|
|
404
|
-
* Specifies whether to digitally sign an AuthnRequest messages to the IdP. It can be `
|
|
382
|
+
* Specifies whether to digitally sign an AuthnRequest messages to the IdP. It can be `REQUEST` or `NONE`. Default: `REQUEST`
|
|
405
383
|
*/
|
|
406
384
|
requestSignatureScope?: pulumi.Input<string>;
|
|
407
385
|
/**
|
|
408
|
-
* The minimum XML digital signature algorithm allowed when verifying a SAMLResponse message or Assertion element. It can be `
|
|
386
|
+
* The minimum XML digital signature algorithm allowed when verifying a `SAMLResponse` message or Assertion element. It can be `SHA-256` or `SHA-1`. Default: `SHA-256`
|
|
409
387
|
*/
|
|
410
388
|
responseSignatureAlgorithm?: pulumi.Input<string>;
|
|
411
389
|
/**
|
|
412
|
-
* Specifies whether to verify a SAMLResponse message or Assertion element XML digital signature. It can be `
|
|
390
|
+
* Specifies whether to verify a `SAMLResponse` message or Assertion element XML digital signature. It can be `RESPONSE`, `ASSERTION`, or `ANY`. Default: `ANY`
|
|
413
391
|
*/
|
|
414
392
|
responseSignatureScope?: pulumi.Input<string>;
|
|
415
393
|
/**
|
|
416
|
-
* The method of making an SSO request. It can be set to `
|
|
394
|
+
* The method of making an SSO request. It can be set to `HTTP-POST` or `HTTP-REDIRECT`. Default: `HTTP-POST`
|
|
417
395
|
*/
|
|
418
396
|
ssoBinding?: pulumi.Input<string>;
|
|
419
397
|
/**
|
|
@@ -425,7 +403,7 @@ export interface SamlArgs {
|
|
|
425
403
|
*/
|
|
426
404
|
ssoUrl: pulumi.Input<string>;
|
|
427
405
|
/**
|
|
428
|
-
*
|
|
406
|
+
* Default to `ACTIVE`
|
|
429
407
|
*/
|
|
430
408
|
status?: pulumi.Input<string>;
|
|
431
409
|
/**
|
|
@@ -433,23 +411,23 @@ export interface SamlArgs {
|
|
|
433
411
|
*/
|
|
434
412
|
subjectFilter?: pulumi.Input<string>;
|
|
435
413
|
/**
|
|
436
|
-
* The name format.
|
|
414
|
+
* The name format.
|
|
437
415
|
*/
|
|
438
416
|
subjectFormats?: pulumi.Input<pulumi.Input<string>[]>;
|
|
439
417
|
/**
|
|
440
|
-
* Okta user profile attribute for matching transformed IdP username. Only for matchType `
|
|
418
|
+
* Okta user profile attribute for matching transformed IdP username. Only for matchType `CUSTOM_ATTRIBUTE`.
|
|
441
419
|
*/
|
|
442
420
|
subjectMatchAttribute?: pulumi.Input<string>;
|
|
443
421
|
/**
|
|
444
|
-
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `
|
|
422
|
+
* Determines the Okta user profile attribute match conditions for account linking and authentication of the transformed IdP username. By default, it is set to `USERNAME`. It can be set to `USERNAME`, `EMAIL`, `USERNAME_OR_EMAIL` or `CUSTOM_ATTRIBUTE`.
|
|
445
423
|
*/
|
|
446
424
|
subjectMatchType?: pulumi.Input<string>;
|
|
447
425
|
/**
|
|
448
|
-
* Action for a previously suspended IdP user during authentication. Can be
|
|
426
|
+
* Action for a previously suspended IdP user during authentication. Can be `NONE` or `REACTIVATE`. Default: `NONE`
|
|
449
427
|
*/
|
|
450
428
|
suspendedAction?: pulumi.Input<string>;
|
|
451
429
|
/**
|
|
452
|
-
* Okta EL Expression to generate or transform a unique username for the IdP user.
|
|
430
|
+
* Okta EL Expression to generate or transform a unique username for the IdP user. Default: `idpuser.email`
|
|
453
431
|
*/
|
|
454
432
|
usernameTemplate?: pulumi.Input<string>;
|
|
455
433
|
}
|
package/idp/saml.js
CHANGED
|
@@ -6,9 +6,7 @@ exports.Saml = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
* Creates a SAML Identity Provider.
|
|
10
|
-
*
|
|
11
|
-
* This resource allows you to create and configure a SAML Identity Provider.
|
|
9
|
+
* Creates a SAML Identity Provider. This resource allows you to create and configure a SAML Identity Provider.
|
|
12
10
|
*
|
|
13
11
|
* ## Example Usage
|
|
14
12
|
*
|
|
@@ -32,8 +30,6 @@ const utilities = require("../utilities");
|
|
|
32
30
|
*
|
|
33
31
|
* ## Import
|
|
34
32
|
*
|
|
35
|
-
* An SAML IdP can be imported via the Okta ID.
|
|
36
|
-
*
|
|
37
33
|
* ```sh
|
|
38
34
|
* $ pulumi import okta:idp/saml:Saml example <idp id>
|
|
39
35
|
* ```
|
package/idp/saml.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"saml.js","sourceRoot":"","sources":["../../idp/saml.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"saml.js","sourceRoot":"","sources":["../../idp/saml.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAuID,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;aACtD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAxPL,oBAyPC;AA3OG,gBAAgB;AACO,iBAAY,GAAG,oBAAoB,CAAC"}
|
package/idp/samlKey.d.ts
CHANGED
|
@@ -24,8 +24,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
24
24
|
*
|
|
25
25
|
* ## Import
|
|
26
26
|
*
|
|
27
|
-
* A SAML IdP Signing Key can be imported via the key id.
|
|
28
|
-
*
|
|
29
27
|
* ```sh
|
|
30
28
|
* $ pulumi import okta:idp/samlKey:SamlKey example <key id>
|
|
31
29
|
* ```
|
|
@@ -67,7 +65,7 @@ export declare class SamlKey extends pulumi.CustomResource {
|
|
|
67
65
|
*/
|
|
68
66
|
readonly use: pulumi.Output<string>;
|
|
69
67
|
/**
|
|
70
|
-
* base64-encoded X.509 certificate chain with DER encoding
|
|
68
|
+
* base64-encoded X.509 certificate chain with DER encoding
|
|
71
69
|
*/
|
|
72
70
|
readonly x5cs: pulumi.Output<string[]>;
|
|
73
71
|
/**
|
|
@@ -108,7 +106,7 @@ export interface SamlKeyState {
|
|
|
108
106
|
*/
|
|
109
107
|
use?: pulumi.Input<string>;
|
|
110
108
|
/**
|
|
111
|
-
* base64-encoded X.509 certificate chain with DER encoding
|
|
109
|
+
* base64-encoded X.509 certificate chain with DER encoding
|
|
112
110
|
*/
|
|
113
111
|
x5cs?: pulumi.Input<pulumi.Input<string>[]>;
|
|
114
112
|
/**
|
|
@@ -121,7 +119,7 @@ export interface SamlKeyState {
|
|
|
121
119
|
*/
|
|
122
120
|
export interface SamlKeyArgs {
|
|
123
121
|
/**
|
|
124
|
-
* base64-encoded X.509 certificate chain with DER encoding
|
|
122
|
+
* base64-encoded X.509 certificate chain with DER encoding
|
|
125
123
|
*/
|
|
126
124
|
x5cs: pulumi.Input<pulumi.Input<string>[]>;
|
|
127
125
|
}
|
package/idp/samlKey.js
CHANGED
package/idp/samlKey.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"samlKey.js","sourceRoot":"","sources":["../../idp/samlKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"samlKey.js","sourceRoot":"","sources":["../../idp/samlKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAC9C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;IAuCD,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;;AA5FL,0BA6FC;AA/EG,gBAAgB;AACO,oBAAY,GAAG,0BAA0B,CAAC"}
|