@pulumi/okta 4.9.0-alpha.1718431198 → 4.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/adminRoleCustom.d.ts +105 -107
- package/adminRoleCustom.js +3 -5
- package/adminRoleCustom.js.map +1 -1
- package/adminRoleCustomAssignments.d.ts +12 -18
- package/adminRoleCustomAssignments.js +3 -6
- package/adminRoleCustomAssignments.js.map +1 -1
- package/adminRoleTargets.d.ts +14 -16
- package/adminRoleTargets.js +0 -2
- package/adminRoleTargets.js.map +1 -1
- package/app/accessPolicyAssignment.d.ts +23 -2
- package/app/accessPolicyAssignment.js +23 -2
- package/app/accessPolicyAssignment.js.map +1 -1
- package/app/autoLogin.d.ts +63 -97
- package/app/autoLogin.js +3 -37
- package/app/autoLogin.js.map +1 -1
- package/app/basicAuth.d.ts +30 -33
- package/app/basicAuth.js +4 -7
- package/app/basicAuth.js.map +1 -1
- package/app/bookmark.d.ts +30 -33
- package/app/bookmark.js +3 -6
- package/app/bookmark.js.map +1 -1
- package/app/getApp.d.ts +58 -25
- package/app/getApp.js +2 -2
- package/app/getApp.js.map +1 -1
- package/app/getMetadataSaml.d.ts +11 -5
- package/app/getMetadataSaml.js +2 -2
- package/app/getMetadataSaml.js.map +1 -1
- package/app/getOauth.d.ts +62 -34
- package/app/getOauth.js +2 -2
- package/app/getOauth.js.map +1 -1
- package/app/getSaml.d.ts +75 -56
- package/app/getSaml.js +2 -2
- package/app/getSaml.js.map +1 -1
- package/app/groupAssignment.d.ts +23 -9
- package/app/groupAssignment.js +17 -3
- package/app/groupAssignment.js.map +1 -1
- package/app/oauth.d.ts +135 -273
- package/app/oauth.js +6 -60
- package/app/oauth.js.map +1 -1
- package/app/oauthPostLogoutRedirectUri.d.ts +4 -6
- package/app/oauthPostLogoutRedirectUri.js +1 -3
- package/app/oauthPostLogoutRedirectUri.js.map +1 -1
- package/app/oauthRedirectUri.d.ts +4 -6
- package/app/oauthRedirectUri.js +1 -3
- package/app/oauthRedirectUri.js.map +1 -1
- package/app/oauthRoleAssignment.d.ts +4 -29
- package/app/oauthRoleAssignment.js +4 -29
- package/app/oauthRoleAssignment.js.map +1 -1
- package/app/saml.d.ts +161 -289
- package/app/saml.js +6 -152
- package/app/saml.js.map +1 -1
- package/app/securePasswordStore.d.ts +79 -80
- package/app/securePasswordStore.js +6 -7
- package/app/securePasswordStore.js.map +1 -1
- package/app/swa.d.ts +70 -71
- package/app/swa.js +4 -5
- package/app/swa.js.map +1 -1
- package/app/threeField.d.ts +74 -76
- package/app/threeField.js +5 -7
- package/app/threeField.js.map +1 -1
- package/app/user.d.ts +12 -17
- package/app/user.js +0 -2
- package/app/user.js.map +1 -1
- package/appGroupAssignments.d.ts +6 -8
- package/appGroupAssignments.js +3 -5
- package/appGroupAssignments.js.map +1 -1
- package/appOauthApiScope.d.ts +5 -7
- package/appOauthApiScope.js +2 -4
- package/appOauthApiScope.js.map +1 -1
- package/appSamlAppSettings.d.ts +6 -7
- package/appSamlAppSettings.js +3 -4
- package/appSamlAppSettings.js.map +1 -1
- package/appSharedCredentials.d.ts +61 -63
- package/appSharedCredentials.js +4 -6
- package/appSharedCredentials.js.map +1 -1
- package/appSignonPolicy.d.ts +3 -39
- package/appSignonPolicy.js +3 -39
- package/appSignonPolicy.js.map +1 -1
- package/appSignonPolicyRule.d.ts +69 -361
- package/appSignonPolicyRule.js +1 -278
- package/appSignonPolicyRule.js.map +1 -1
- package/appUserBaseSchemaProperty.d.ts +25 -29
- package/appUserBaseSchemaProperty.js +1 -5
- package/appUserBaseSchemaProperty.js.map +1 -1
- package/appUserSchemaProperty.d.ts +51 -41
- package/appUserSchemaProperty.js +0 -2
- package/appUserSchemaProperty.js.map +1 -1
- package/auth/getServer.d.ts +11 -11
- package/auth/getServer.js +2 -2
- package/auth/getServerPolicy.d.ts +15 -9
- package/auth/getServerPolicy.js +2 -2
- package/auth/getServerPolicy.js.map +1 -1
- package/auth/getServerScopes.d.ts +8 -5
- package/auth/getServerScopes.js +2 -2
- package/auth/getServerScopes.js.map +1 -1
- package/auth/server.d.ts +15 -19
- package/auth/server.js +1 -5
- package/auth/server.js.map +1 -1
- package/auth/serverClaim.d.ts +13 -17
- package/auth/serverClaim.js +1 -5
- package/auth/serverClaim.js.map +1 -1
- package/auth/serverPolicy.d.ts +10 -14
- package/auth/serverPolicy.js +1 -5
- package/auth/serverPolicy.js.map +1 -1
- package/auth/serverPolicyClaim.d.ts +50 -66
- package/auth/serverPolicyClaim.js +0 -25
- package/auth/serverPolicyClaim.js.map +1 -1
- package/auth/serverPolicyRule.d.ts +32 -43
- package/auth/serverPolicyRule.js +0 -2
- package/auth/serverPolicyRule.js.map +1 -1
- package/auth/serverScope.d.ts +16 -20
- package/auth/serverScope.js +1 -5
- package/auth/serverScope.js.map +1 -1
- package/authServerClaimDefault.d.ts +10 -25
- package/authServerClaimDefault.js +0 -9
- package/authServerClaimDefault.js.map +1 -1
- package/authServerDefault.d.ts +15 -19
- package/authServerDefault.js +1 -5
- package/authServerDefault.js.map +1 -1
- package/authenticator.d.ts +53 -61
- package/authenticator.js +11 -11
- package/authenticator.js.map +1 -1
- package/behaviour.d.ts +21 -41
- package/behaviour.js +0 -2
- package/behaviour.js.map +1 -1
- package/brand.d.ts +23 -22
- package/brand.js +8 -4
- package/brand.js.map +1 -1
- package/captcha.d.ts +15 -17
- package/captcha.js +3 -5
- package/captcha.js.map +1 -1
- package/captchaOrgWideSettings.d.ts +8 -43
- package/captchaOrgWideSettings.js +2 -37
- package/captchaOrgWideSettings.js.map +1 -1
- package/domain.d.ts +13 -21
- package/domain.js +0 -2
- package/domain.js.map +1 -1
- package/domainCertificate.d.ts +17 -24
- package/domainCertificate.js +2 -9
- package/domainCertificate.js.map +1 -1
- package/domainVerification.d.ts +4 -10
- package/domainVerification.js +1 -7
- package/domainVerification.js.map +1 -1
- package/emailCustomization.d.ts +38 -222
- package/emailCustomization.js +29 -33
- package/emailCustomization.js.map +1 -1
- package/emailDomain.d.ts +4 -8
- package/emailDomain.js +0 -4
- package/emailDomain.js.map +1 -1
- package/emailDomainVerification.d.ts +3 -7
- package/emailDomainVerification.js +0 -4
- package/emailDomainVerification.js.map +1 -1
- package/emailSender.d.ts +15 -17
- package/emailSender.js +2 -4
- package/emailSender.js.map +1 -1
- package/emailSenderVerification.d.ts +5 -9
- package/emailSenderVerification.js +2 -6
- package/emailSenderVerification.js.map +1 -1
- package/eventHook.d.ts +16 -11
- package/eventHook.js +1 -5
- package/eventHook.js.map +1 -1
- package/eventHookVerification.d.ts +4 -10
- package/eventHookVerification.js +1 -7
- package/eventHookVerification.js.map +1 -1
- package/factor/factor.d.ts +4 -9
- package/factor/factor.js +1 -3
- package/factor/factor.js.map +1 -1
- package/factorTotp.d.ts +12 -21
- package/factorTotp.js +3 -3
- package/factorTotp.js.map +1 -1
- package/getAppGroupAssignments.d.ts +6 -6
- package/getAppGroupAssignments.js +2 -2
- package/getAppSignonPolicy.d.ts +16 -6
- package/getAppSignonPolicy.js +8 -4
- package/getAppSignonPolicy.js.map +1 -1
- package/getAppUserAssignments.d.ts +6 -6
- package/getAppUserAssignments.js +2 -2
- package/getAuthServerClaim.d.ts +15 -12
- package/getAuthServerClaim.js +2 -2
- package/getAuthServerClaim.js.map +1 -1
- package/getAuthServerClaims.d.ts +8 -5
- package/getAuthServerClaims.js +2 -2
- package/getAuthServerClaims.js.map +1 -1
- package/getAuthenticator.d.ts +24 -26
- package/getAuthenticator.js +14 -22
- package/getAuthenticator.js.map +1 -1
- package/getBehaviour.d.ts +6 -8
- package/getBehaviour.js +2 -2
- package/getBehaviour.js.map +1 -1
- package/getBehaviours.d.ts +7 -7
- package/getBehaviours.js +2 -2
- package/getBrand.d.ts +9 -6
- package/getBrand.js +2 -2
- package/getBrand.js.map +1 -1
- package/getBrands.d.ts +2 -2
- package/getBrands.js +2 -2
- package/getDomain.d.ts +11 -14
- package/getDomain.js +2 -8
- package/getDomain.js.map +1 -1
- package/getEmailCustomization.d.ts +14 -9
- package/getEmailCustomization.js +2 -6
- package/getEmailCustomization.js.map +1 -1
- package/getEmailCustomizations.d.ts +11 -9
- package/getEmailCustomizations.js +2 -6
- package/getEmailCustomizations.js.map +1 -1
- package/getGroups.d.ts +11 -25
- package/getGroups.js +2 -2
- package/getGroups.js.map +1 -1
- package/getLogStream.d.ts +8 -39
- package/getLogStream.js +2 -24
- package/getLogStream.js.map +1 -1
- package/getNetworkZone.d.ts +12 -12
- package/getNetworkZone.js +2 -2
- package/getOrgMetadata.d.ts +0 -22
- package/getOrgMetadata.js +0 -22
- package/getOrgMetadata.js.map +1 -1
- package/getRoleSubscription.d.ts +13 -35
- package/getRoleSubscription.js +2 -2
- package/getRoleSubscription.js.map +1 -1
- package/getTemplate.d.ts +10 -8
- package/getTemplate.js +2 -6
- package/getTemplate.js.map +1 -1
- package/getTemplates.d.ts +6 -7
- package/getTemplates.js +2 -6
- package/getTemplates.js.map +1 -1
- package/getTheme.d.ts +14 -12
- package/getTheme.js +2 -6
- package/getTheme.js.map +1 -1
- package/getThemes.d.ts +6 -7
- package/getThemes.js +2 -6
- package/getThemes.js.map +1 -1
- package/getTrustedOrigins.d.ts +7 -4
- package/getTrustedOrigins.js +2 -2
- package/getTrustedOrigins.js.map +1 -1
- package/getUserSecurityQuestions.d.ts +4 -8
- package/getUserSecurityQuestions.js +0 -4
- package/getUserSecurityQuestions.js.map +1 -1
- package/group/getEveryoneGroup.d.ts +10 -5
- package/group/getEveryoneGroup.js +4 -2
- package/group/getEveryoneGroup.js.map +1 -1
- package/group/getGroup.d.ts +17 -26
- package/group/getGroup.js +2 -2
- package/group/getGroup.js.map +1 -1
- package/group/getRule.d.ts +9 -9
- package/group/getRule.js +2 -2
- package/group/group.d.ts +4 -36
- package/group/group.js +1 -33
- package/group/group.js.map +1 -1
- package/group/role.d.ts +37 -81
- package/group/role.js +1 -6
- package/group/role.js.map +1 -1
- package/group/rule.d.ts +12 -20
- package/group/rule.js +0 -2
- package/group/rule.js.map +1 -1
- package/groupMemberships.d.ts +8 -10
- package/groupMemberships.js +2 -4
- package/groupMemberships.js.map +1 -1
- package/groupSchemaProperty.d.ts +57 -59
- package/groupSchemaProperty.js +0 -2
- package/groupSchemaProperty.js.map +1 -1
- package/idp/getMetadataSaml.d.ts +9 -6
- package/idp/getMetadataSaml.js +2 -2
- package/idp/getMetadataSaml.js.map +1 -1
- package/idp/getOidc.d.ts +9 -9
- package/idp/getOidc.js +2 -2
- package/idp/getSaml.d.ts +16 -13
- package/idp/getSaml.js +2 -2
- package/idp/getSaml.js.map +1 -1
- package/idp/getSocial.d.ts +8 -2
- package/idp/getSocial.js +2 -2
- package/idp/getSocial.js.map +1 -1
- package/idp/oidc.d.ts +70 -62
- package/idp/oidc.js +3 -5
- package/idp/oidc.js.map +1 -1
- package/idp/saml.d.ts +64 -86
- package/idp/saml.js +1 -5
- package/idp/saml.js.map +1 -1
- package/idp/samlKey.d.ts +3 -5
- package/idp/samlKey.js +0 -2
- package/idp/samlKey.js.map +1 -1
- package/idp/social.d.ts +99 -69
- package/idp/social.js +11 -5
- package/idp/social.js.map +1 -1
- package/inline/hook.d.ts +4 -26
- package/inline/hook.js +1 -5
- package/inline/hook.js.map +1 -1
- package/linkDefinition.d.ts +2 -3
- package/linkDefinition.js +2 -3
- package/linkDefinition.js.map +1 -1
- package/linkValue.d.ts +7 -9
- package/linkValue.js +1 -3
- package/linkValue.js.map +1 -1
- package/logStream.d.ts +32 -27
- package/logStream.js +23 -9
- package/logStream.js.map +1 -1
- package/network/zone.d.ts +25 -66
- package/network/zone.js +1 -39
- package/network/zone.js.map +1 -1
- package/orgConfiguration.d.ts +4 -9
- package/orgConfiguration.js +1 -3
- package/orgConfiguration.js.map +1 -1
- package/orgSupport.d.ts +4 -7
- package/orgSupport.js +1 -4
- package/orgSupport.js.map +1 -1
- package/package.json +3 -3
- package/policy/getDefaultPolicy.d.ts +9 -7
- package/policy/getDefaultPolicy.js +6 -2
- package/policy/getDefaultPolicy.js.map +1 -1
- package/policy/getPolicy.d.ts +11 -26
- package/policy/getPolicy.js +2 -2
- package/policy/getPolicy.js.map +1 -1
- package/policy/mfa.d.ts +18 -220
- package/policy/mfa.js +0 -10
- package/policy/mfa.js.map +1 -1
- package/policy/password.d.ts +91 -95
- package/policy/password.js +1 -5
- package/policy/password.js.map +1 -1
- package/policy/ruleIdpDiscovery.d.ts +111 -93
- package/policy/ruleIdpDiscovery.js +48 -57
- package/policy/ruleIdpDiscovery.js.map +1 -1
- package/policy/ruleMfa.d.ts +40 -30
- package/policy/ruleMfa.js +1 -3
- package/policy/ruleMfa.js.map +1 -1
- package/policy/rulePassword.d.ts +34 -38
- package/policy/rulePassword.js +1 -5
- package/policy/rulePassword.js.map +1 -1
- package/policy/ruleSignon.d.ts +94 -85
- package/policy/ruleSignon.js +1 -4
- package/policy/ruleSignon.js.map +1 -1
- package/policy/signon.d.ts +16 -20
- package/policy/signon.js +1 -5
- package/policy/signon.js.map +1 -1
- package/policyMfaDefault.d.ts +15 -214
- package/policyMfaDefault.js +2 -9
- package/policyMfaDefault.js.map +1 -1
- package/policyPasswordDefault.d.ts +85 -101
- package/policyPasswordDefault.js +1 -5
- package/policyPasswordDefault.js.map +1 -1
- package/policyProfileEnrollment.d.ts +8 -9
- package/policyProfileEnrollment.js +2 -3
- package/policyProfileEnrollment.js.map +1 -1
- package/policyProfileEnrollmentApps.d.ts +8 -11
- package/policyProfileEnrollmentApps.js +3 -6
- package/policyProfileEnrollmentApps.js.map +1 -1
- package/policyRuleProfileEnrollment.d.ts +42 -31
- package/policyRuleProfileEnrollment.js +2 -3
- package/policyRuleProfileEnrollment.js.map +1 -1
- package/profile/mapping.d.ts +19 -34
- package/profile/mapping.js +4 -4
- package/profile/mapping.js.map +1 -1
- package/rateLimiting.d.ts +8 -17
- package/rateLimiting.js +2 -5
- package/rateLimiting.js.map +1 -1
- package/resourceSet.d.ts +18 -26
- package/resourceSet.js +9 -14
- package/resourceSet.js.map +1 -1
- package/roleSubscription.d.ts +35 -86
- package/roleSubscription.js +2 -2
- package/roleSubscription.js.map +1 -1
- package/securityNotificationEmails.d.ts +4 -7
- package/securityNotificationEmails.js +4 -7
- package/securityNotificationEmails.js.map +1 -1
- package/templateSms.d.ts +4 -8
- package/templateSms.js +1 -5
- package/templateSms.js.map +1 -1
- package/theme.d.ts +46 -46
- package/theme.js +2 -2
- package/threatInsightSettings.d.ts +7 -27
- package/threatInsightSettings.js +1 -3
- package/threatInsightSettings.js.map +1 -1
- package/trustedorigin/origin.d.ts +13 -17
- package/trustedorigin/origin.js +1 -5
- package/trustedorigin/origin.js.map +1 -1
- package/types/input.d.ts +65 -162
- package/types/output.d.ts +75 -275
- package/user/getUser.d.ts +32 -104
- package/user/getUser.js +2 -2
- package/user/getUser.js.map +1 -1
- package/user/getUserProfileMappingSource.d.ts +9 -7
- package/user/getUserProfileMappingSource.js +6 -4
- package/user/getUserProfileMappingSource.js.map +1 -1
- package/user/getUserType.d.ts +7 -7
- package/user/getUserType.js +2 -2
- package/user/getUsers.d.ts +95 -37
- package/user/getUsers.js +64 -24
- package/user/getUsers.js.map +1 -1
- package/user/user.d.ts +160 -209
- package/user/user.js +43 -65
- package/user/user.js.map +1 -1
- package/user/userType.d.ts +1 -5
- package/user/userType.js +1 -5
- package/user/userType.js.map +1 -1
- package/userAdminRoles.d.ts +10 -17
- package/userAdminRoles.js +1 -5
- package/userAdminRoles.js.map +1 -1
- package/userBaseSchemaProperty.d.ts +26 -34
- package/userBaseSchemaProperty.js +2 -10
- package/userBaseSchemaProperty.js.map +1 -1
- package/userFactorQuestion.d.ts +1 -5
- package/userFactorQuestion.js +1 -5
- package/userFactorQuestion.js.map +1 -1
- package/userGroupMemberships.d.ts +3 -3
- package/userSchemaProperty.d.ts +57 -56
- package/userSchemaProperty.js +0 -8
- package/userSchemaProperty.js.map +1 -1
package/policyMfaDefault.d.ts
CHANGED
|
@@ -1,12 +1,9 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
3
|
* Configures default MFA Policy.
|
|
4
|
-
*
|
|
5
4
|
* This resource allows you to configure default MFA Policy.
|
|
6
|
-
*
|
|
7
|
-
*
|
|
8
|
-
*
|
|
9
|
-
* > Unless Org Feature Flag `ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT` is ***disabled*** `oktaPassword` or `oktaEmail` must be present and its `enroll` value set to `REQUIRED`. Contact support to have this feature flag ***disabled***.
|
|
5
|
+
* > Requires Org Feature Flag 'OKTA_MFA_POLICY'. Contact support to have this feature flag ***enabled***.
|
|
6
|
+
* Unless Org Feature Flag 'ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT' is ***disabled*** 'okta_password' or 'okta_email' must be present and its 'enroll' value set to 'REQUIRED'. Contact support to have this feature flag ***disabled***.
|
|
10
7
|
*
|
|
11
8
|
* ## Example Usage
|
|
12
9
|
*
|
|
@@ -34,12 +31,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
34
31
|
* });
|
|
35
32
|
* ```
|
|
36
33
|
*
|
|
37
|
-
* > If the `okta.PolicyMfaDefault` is used in conjunction with `okta.policy.Mfa` resources, ensure to use a `dependsOn` attribute for the default policy to ensure that all other policies are created/updated first such that the `priority` field can be appropriately computed on the first plan/apply.
|
|
38
|
-
*
|
|
39
34
|
* ## Import
|
|
40
35
|
*
|
|
41
|
-
* Default MFA Policy can be imported without providing Okta ID.
|
|
42
|
-
*
|
|
43
36
|
* ```sh
|
|
44
37
|
* $ pulumi import okta:index/policyMfaDefault:PolicyMfaDefault example .
|
|
45
38
|
* ```
|
|
@@ -61,153 +54,89 @@ export declare class PolicyMfaDefault extends pulumi.CustomResource {
|
|
|
61
54
|
*/
|
|
62
55
|
static isInstance(obj: any): obj is PolicyMfaDefault;
|
|
63
56
|
/**
|
|
64
|
-
*
|
|
57
|
+
* Default group ID (always included)
|
|
65
58
|
*/
|
|
66
59
|
readonly defaultIncludedGroupId: pulumi.Output<string>;
|
|
67
60
|
/**
|
|
68
|
-
* Default policy description
|
|
61
|
+
* Default policy description
|
|
69
62
|
*/
|
|
70
63
|
readonly description: pulumi.Output<string>;
|
|
71
|
-
/**
|
|
72
|
-
* DUO MFA policy settings (✓ Classic, ✓ OIE).
|
|
73
|
-
*/
|
|
74
64
|
readonly duo: pulumi.Output<{
|
|
75
65
|
[key: string]: string;
|
|
76
66
|
} | undefined>;
|
|
77
|
-
/**
|
|
78
|
-
* External IDP MFA policy settings (✓ OIE).
|
|
79
|
-
*/
|
|
80
67
|
readonly externalIdp: pulumi.Output<{
|
|
81
68
|
[key: string]: string;
|
|
82
69
|
} | undefined>;
|
|
83
|
-
/**
|
|
84
|
-
* Fido U2F MFA policy settings (✓ Classic).
|
|
85
|
-
*/
|
|
86
70
|
readonly fidoU2f: pulumi.Output<{
|
|
87
71
|
[key: string]: string;
|
|
88
72
|
} | undefined>;
|
|
89
|
-
/**
|
|
90
|
-
* Fido Web Authn MFA policy settings (✓ Classic).
|
|
91
|
-
*/
|
|
92
73
|
readonly fidoWebauthn: pulumi.Output<{
|
|
93
74
|
[key: string]: string;
|
|
94
75
|
} | undefined>;
|
|
95
|
-
/**
|
|
96
|
-
* Google OTP MFA policy settings (✓ Classic, ✓ OIE).
|
|
97
|
-
*/
|
|
98
76
|
readonly googleOtp: pulumi.Output<{
|
|
99
77
|
[key: string]: string;
|
|
100
78
|
} | undefined>;
|
|
101
|
-
/**
|
|
102
|
-
* HMAC-based One-Time Password MFA policy settings (✓ Classic).
|
|
103
|
-
*/
|
|
104
79
|
readonly hotp: pulumi.Output<{
|
|
105
80
|
[key: string]: string;
|
|
106
81
|
} | undefined>;
|
|
107
82
|
/**
|
|
108
|
-
*
|
|
109
|
-
* > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
|
|
83
|
+
* Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
|
|
110
84
|
*/
|
|
111
85
|
readonly isOie: pulumi.Output<boolean | undefined>;
|
|
112
86
|
/**
|
|
113
|
-
* Default policy name
|
|
87
|
+
* Default policy name
|
|
114
88
|
*/
|
|
115
89
|
readonly name: pulumi.Output<string>;
|
|
116
|
-
/**
|
|
117
|
-
* Okta Call MFA policy settings (✓ Classic).
|
|
118
|
-
*/
|
|
119
90
|
readonly oktaCall: pulumi.Output<{
|
|
120
91
|
[key: string]: string;
|
|
121
92
|
} | undefined>;
|
|
122
|
-
/**
|
|
123
|
-
* Okta Email MFA policy settings (✓ Classic, ✓ OIE).
|
|
124
|
-
*/
|
|
125
93
|
readonly oktaEmail: pulumi.Output<{
|
|
126
94
|
[key: string]: string;
|
|
127
95
|
} | undefined>;
|
|
128
|
-
/**
|
|
129
|
-
* Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
|
|
130
|
-
*/
|
|
131
96
|
readonly oktaOtp: pulumi.Output<{
|
|
132
97
|
[key: string]: string;
|
|
133
98
|
} | undefined>;
|
|
134
|
-
/**
|
|
135
|
-
* Okta Password MFA policy settings (✓ Classic, ✓ OIE).
|
|
136
|
-
*/
|
|
137
99
|
readonly oktaPassword: pulumi.Output<{
|
|
138
100
|
[key: string]: string;
|
|
139
101
|
} | undefined>;
|
|
140
|
-
/**
|
|
141
|
-
* Okta Push MFA policy settings (✓ Classic).
|
|
142
|
-
*/
|
|
143
102
|
readonly oktaPush: pulumi.Output<{
|
|
144
103
|
[key: string]: string;
|
|
145
104
|
} | undefined>;
|
|
146
|
-
/**
|
|
147
|
-
* Okta Question MFA policy settings (✓ Classic).
|
|
148
|
-
*/
|
|
149
105
|
readonly oktaQuestion: pulumi.Output<{
|
|
150
106
|
[key: string]: string;
|
|
151
107
|
} | undefined>;
|
|
152
|
-
/**
|
|
153
|
-
* Okta SMS MFA policy settings (✓ Classic).
|
|
154
|
-
*/
|
|
155
108
|
readonly oktaSms: pulumi.Output<{
|
|
156
109
|
[key: string]: string;
|
|
157
110
|
} | undefined>;
|
|
158
|
-
/**
|
|
159
|
-
* Okta Verify MFA policy settings (✓ OIE).
|
|
160
|
-
*/
|
|
161
111
|
readonly oktaVerify: pulumi.Output<{
|
|
162
112
|
[key: string]: string;
|
|
163
113
|
} | undefined>;
|
|
164
|
-
/**
|
|
165
|
-
* On-Prem MFA MFA policy settings (✓ OIE).
|
|
166
|
-
*/
|
|
167
114
|
readonly onpremMfa: pulumi.Output<{
|
|
168
115
|
[key: string]: string;
|
|
169
116
|
} | undefined>;
|
|
170
|
-
/**
|
|
171
|
-
* Phone Number MFA policy settings (✓ OIE).
|
|
172
|
-
*/
|
|
173
117
|
readonly phoneNumber: pulumi.Output<{
|
|
174
118
|
[key: string]: string;
|
|
175
119
|
} | undefined>;
|
|
176
120
|
/**
|
|
177
|
-
* Default policy priority
|
|
121
|
+
* Default policy priority
|
|
178
122
|
*/
|
|
179
123
|
readonly priority: pulumi.Output<number>;
|
|
180
|
-
/**
|
|
181
|
-
* RSA Token MFA policy settings (✓ Classic, ✓ OIE).
|
|
182
|
-
*/
|
|
183
124
|
readonly rsaToken: pulumi.Output<{
|
|
184
125
|
[key: string]: string;
|
|
185
126
|
} | undefined>;
|
|
186
|
-
/**
|
|
187
|
-
* Security Question MFA policy settings (✓ OIE).
|
|
188
|
-
*/
|
|
189
127
|
readonly securityQuestion: pulumi.Output<{
|
|
190
128
|
[key: string]: string;
|
|
191
129
|
} | undefined>;
|
|
192
130
|
/**
|
|
193
|
-
* Default policy status
|
|
131
|
+
* Default policy status
|
|
194
132
|
*/
|
|
195
133
|
readonly status: pulumi.Output<string>;
|
|
196
|
-
/**
|
|
197
|
-
* Symantec VIP MFA policy settings (✓ Classic).
|
|
198
|
-
*/
|
|
199
134
|
readonly symantecVip: pulumi.Output<{
|
|
200
135
|
[key: string]: string;
|
|
201
136
|
} | undefined>;
|
|
202
|
-
/**
|
|
203
|
-
* FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
|
|
204
|
-
*/
|
|
205
137
|
readonly webauthn: pulumi.Output<{
|
|
206
138
|
[key: string]: string;
|
|
207
139
|
} | undefined>;
|
|
208
|
-
/**
|
|
209
|
-
* Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
|
|
210
|
-
*/
|
|
211
140
|
readonly yubikeyToken: pulumi.Output<{
|
|
212
141
|
[key: string]: string;
|
|
213
142
|
} | undefined>;
|
|
@@ -225,153 +154,89 @@ export declare class PolicyMfaDefault extends pulumi.CustomResource {
|
|
|
225
154
|
*/
|
|
226
155
|
export interface PolicyMfaDefaultState {
|
|
227
156
|
/**
|
|
228
|
-
*
|
|
157
|
+
* Default group ID (always included)
|
|
229
158
|
*/
|
|
230
159
|
defaultIncludedGroupId?: pulumi.Input<string>;
|
|
231
160
|
/**
|
|
232
|
-
* Default policy description
|
|
161
|
+
* Default policy description
|
|
233
162
|
*/
|
|
234
163
|
description?: pulumi.Input<string>;
|
|
235
|
-
/**
|
|
236
|
-
* DUO MFA policy settings (✓ Classic, ✓ OIE).
|
|
237
|
-
*/
|
|
238
164
|
duo?: pulumi.Input<{
|
|
239
165
|
[key: string]: pulumi.Input<string>;
|
|
240
166
|
}>;
|
|
241
|
-
/**
|
|
242
|
-
* External IDP MFA policy settings (✓ OIE).
|
|
243
|
-
*/
|
|
244
167
|
externalIdp?: pulumi.Input<{
|
|
245
168
|
[key: string]: pulumi.Input<string>;
|
|
246
169
|
}>;
|
|
247
|
-
/**
|
|
248
|
-
* Fido U2F MFA policy settings (✓ Classic).
|
|
249
|
-
*/
|
|
250
170
|
fidoU2f?: pulumi.Input<{
|
|
251
171
|
[key: string]: pulumi.Input<string>;
|
|
252
172
|
}>;
|
|
253
|
-
/**
|
|
254
|
-
* Fido Web Authn MFA policy settings (✓ Classic).
|
|
255
|
-
*/
|
|
256
173
|
fidoWebauthn?: pulumi.Input<{
|
|
257
174
|
[key: string]: pulumi.Input<string>;
|
|
258
175
|
}>;
|
|
259
|
-
/**
|
|
260
|
-
* Google OTP MFA policy settings (✓ Classic, ✓ OIE).
|
|
261
|
-
*/
|
|
262
176
|
googleOtp?: pulumi.Input<{
|
|
263
177
|
[key: string]: pulumi.Input<string>;
|
|
264
178
|
}>;
|
|
265
|
-
/**
|
|
266
|
-
* HMAC-based One-Time Password MFA policy settings (✓ Classic).
|
|
267
|
-
*/
|
|
268
179
|
hotp?: pulumi.Input<{
|
|
269
180
|
[key: string]: pulumi.Input<string>;
|
|
270
181
|
}>;
|
|
271
182
|
/**
|
|
272
|
-
*
|
|
273
|
-
* > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
|
|
183
|
+
* Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
|
|
274
184
|
*/
|
|
275
185
|
isOie?: pulumi.Input<boolean>;
|
|
276
186
|
/**
|
|
277
|
-
* Default policy name
|
|
187
|
+
* Default policy name
|
|
278
188
|
*/
|
|
279
189
|
name?: pulumi.Input<string>;
|
|
280
|
-
/**
|
|
281
|
-
* Okta Call MFA policy settings (✓ Classic).
|
|
282
|
-
*/
|
|
283
190
|
oktaCall?: pulumi.Input<{
|
|
284
191
|
[key: string]: pulumi.Input<string>;
|
|
285
192
|
}>;
|
|
286
|
-
/**
|
|
287
|
-
* Okta Email MFA policy settings (✓ Classic, ✓ OIE).
|
|
288
|
-
*/
|
|
289
193
|
oktaEmail?: pulumi.Input<{
|
|
290
194
|
[key: string]: pulumi.Input<string>;
|
|
291
195
|
}>;
|
|
292
|
-
/**
|
|
293
|
-
* Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
|
|
294
|
-
*/
|
|
295
196
|
oktaOtp?: pulumi.Input<{
|
|
296
197
|
[key: string]: pulumi.Input<string>;
|
|
297
198
|
}>;
|
|
298
|
-
/**
|
|
299
|
-
* Okta Password MFA policy settings (✓ Classic, ✓ OIE).
|
|
300
|
-
*/
|
|
301
199
|
oktaPassword?: pulumi.Input<{
|
|
302
200
|
[key: string]: pulumi.Input<string>;
|
|
303
201
|
}>;
|
|
304
|
-
/**
|
|
305
|
-
* Okta Push MFA policy settings (✓ Classic).
|
|
306
|
-
*/
|
|
307
202
|
oktaPush?: pulumi.Input<{
|
|
308
203
|
[key: string]: pulumi.Input<string>;
|
|
309
204
|
}>;
|
|
310
|
-
/**
|
|
311
|
-
* Okta Question MFA policy settings (✓ Classic).
|
|
312
|
-
*/
|
|
313
205
|
oktaQuestion?: pulumi.Input<{
|
|
314
206
|
[key: string]: pulumi.Input<string>;
|
|
315
207
|
}>;
|
|
316
|
-
/**
|
|
317
|
-
* Okta SMS MFA policy settings (✓ Classic).
|
|
318
|
-
*/
|
|
319
208
|
oktaSms?: pulumi.Input<{
|
|
320
209
|
[key: string]: pulumi.Input<string>;
|
|
321
210
|
}>;
|
|
322
|
-
/**
|
|
323
|
-
* Okta Verify MFA policy settings (✓ OIE).
|
|
324
|
-
*/
|
|
325
211
|
oktaVerify?: pulumi.Input<{
|
|
326
212
|
[key: string]: pulumi.Input<string>;
|
|
327
213
|
}>;
|
|
328
|
-
/**
|
|
329
|
-
* On-Prem MFA MFA policy settings (✓ OIE).
|
|
330
|
-
*/
|
|
331
214
|
onpremMfa?: pulumi.Input<{
|
|
332
215
|
[key: string]: pulumi.Input<string>;
|
|
333
216
|
}>;
|
|
334
|
-
/**
|
|
335
|
-
* Phone Number MFA policy settings (✓ OIE).
|
|
336
|
-
*/
|
|
337
217
|
phoneNumber?: pulumi.Input<{
|
|
338
218
|
[key: string]: pulumi.Input<string>;
|
|
339
219
|
}>;
|
|
340
220
|
/**
|
|
341
|
-
* Default policy priority
|
|
221
|
+
* Default policy priority
|
|
342
222
|
*/
|
|
343
223
|
priority?: pulumi.Input<number>;
|
|
344
|
-
/**
|
|
345
|
-
* RSA Token MFA policy settings (✓ Classic, ✓ OIE).
|
|
346
|
-
*/
|
|
347
224
|
rsaToken?: pulumi.Input<{
|
|
348
225
|
[key: string]: pulumi.Input<string>;
|
|
349
226
|
}>;
|
|
350
|
-
/**
|
|
351
|
-
* Security Question MFA policy settings (✓ OIE).
|
|
352
|
-
*/
|
|
353
227
|
securityQuestion?: pulumi.Input<{
|
|
354
228
|
[key: string]: pulumi.Input<string>;
|
|
355
229
|
}>;
|
|
356
230
|
/**
|
|
357
|
-
* Default policy status
|
|
231
|
+
* Default policy status
|
|
358
232
|
*/
|
|
359
233
|
status?: pulumi.Input<string>;
|
|
360
|
-
/**
|
|
361
|
-
* Symantec VIP MFA policy settings (✓ Classic).
|
|
362
|
-
*/
|
|
363
234
|
symantecVip?: pulumi.Input<{
|
|
364
235
|
[key: string]: pulumi.Input<string>;
|
|
365
236
|
}>;
|
|
366
|
-
/**
|
|
367
|
-
* FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
|
|
368
|
-
*/
|
|
369
237
|
webauthn?: pulumi.Input<{
|
|
370
238
|
[key: string]: pulumi.Input<string>;
|
|
371
239
|
}>;
|
|
372
|
-
/**
|
|
373
|
-
* Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
|
|
374
|
-
*/
|
|
375
240
|
yubikeyToken?: pulumi.Input<{
|
|
376
241
|
[key: string]: pulumi.Input<string>;
|
|
377
242
|
}>;
|
|
@@ -380,134 +245,70 @@ export interface PolicyMfaDefaultState {
|
|
|
380
245
|
* The set of arguments for constructing a PolicyMfaDefault resource.
|
|
381
246
|
*/
|
|
382
247
|
export interface PolicyMfaDefaultArgs {
|
|
383
|
-
/**
|
|
384
|
-
* DUO MFA policy settings (✓ Classic, ✓ OIE).
|
|
385
|
-
*/
|
|
386
248
|
duo?: pulumi.Input<{
|
|
387
249
|
[key: string]: pulumi.Input<string>;
|
|
388
250
|
}>;
|
|
389
|
-
/**
|
|
390
|
-
* External IDP MFA policy settings (✓ OIE).
|
|
391
|
-
*/
|
|
392
251
|
externalIdp?: pulumi.Input<{
|
|
393
252
|
[key: string]: pulumi.Input<string>;
|
|
394
253
|
}>;
|
|
395
|
-
/**
|
|
396
|
-
* Fido U2F MFA policy settings (✓ Classic).
|
|
397
|
-
*/
|
|
398
254
|
fidoU2f?: pulumi.Input<{
|
|
399
255
|
[key: string]: pulumi.Input<string>;
|
|
400
256
|
}>;
|
|
401
|
-
/**
|
|
402
|
-
* Fido Web Authn MFA policy settings (✓ Classic).
|
|
403
|
-
*/
|
|
404
257
|
fidoWebauthn?: pulumi.Input<{
|
|
405
258
|
[key: string]: pulumi.Input<string>;
|
|
406
259
|
}>;
|
|
407
|
-
/**
|
|
408
|
-
* Google OTP MFA policy settings (✓ Classic, ✓ OIE).
|
|
409
|
-
*/
|
|
410
260
|
googleOtp?: pulumi.Input<{
|
|
411
261
|
[key: string]: pulumi.Input<string>;
|
|
412
262
|
}>;
|
|
413
|
-
/**
|
|
414
|
-
* HMAC-based One-Time Password MFA policy settings (✓ Classic).
|
|
415
|
-
*/
|
|
416
263
|
hotp?: pulumi.Input<{
|
|
417
264
|
[key: string]: pulumi.Input<string>;
|
|
418
265
|
}>;
|
|
419
266
|
/**
|
|
420
|
-
*
|
|
421
|
-
* > **WARNING:** Tenant must have the Okta Identity Engine enabled in order to use this feature.
|
|
267
|
+
* Is the policy using Okta Identity Engine (OIE) with authenticators instead of factors?
|
|
422
268
|
*/
|
|
423
269
|
isOie?: pulumi.Input<boolean>;
|
|
424
|
-
/**
|
|
425
|
-
* Okta Call MFA policy settings (✓ Classic).
|
|
426
|
-
*/
|
|
427
270
|
oktaCall?: pulumi.Input<{
|
|
428
271
|
[key: string]: pulumi.Input<string>;
|
|
429
272
|
}>;
|
|
430
|
-
/**
|
|
431
|
-
* Okta Email MFA policy settings (✓ Classic, ✓ OIE).
|
|
432
|
-
*/
|
|
433
273
|
oktaEmail?: pulumi.Input<{
|
|
434
274
|
[key: string]: pulumi.Input<string>;
|
|
435
275
|
}>;
|
|
436
|
-
/**
|
|
437
|
-
* Okta OTP (via the Okta Verify app) MFA policy settings (✓ Classic).
|
|
438
|
-
*/
|
|
439
276
|
oktaOtp?: pulumi.Input<{
|
|
440
277
|
[key: string]: pulumi.Input<string>;
|
|
441
278
|
}>;
|
|
442
|
-
/**
|
|
443
|
-
* Okta Password MFA policy settings (✓ Classic, ✓ OIE).
|
|
444
|
-
*/
|
|
445
279
|
oktaPassword?: pulumi.Input<{
|
|
446
280
|
[key: string]: pulumi.Input<string>;
|
|
447
281
|
}>;
|
|
448
|
-
/**
|
|
449
|
-
* Okta Push MFA policy settings (✓ Classic).
|
|
450
|
-
*/
|
|
451
282
|
oktaPush?: pulumi.Input<{
|
|
452
283
|
[key: string]: pulumi.Input<string>;
|
|
453
284
|
}>;
|
|
454
|
-
/**
|
|
455
|
-
* Okta Question MFA policy settings (✓ Classic).
|
|
456
|
-
*/
|
|
457
285
|
oktaQuestion?: pulumi.Input<{
|
|
458
286
|
[key: string]: pulumi.Input<string>;
|
|
459
287
|
}>;
|
|
460
|
-
/**
|
|
461
|
-
* Okta SMS MFA policy settings (✓ Classic).
|
|
462
|
-
*/
|
|
463
288
|
oktaSms?: pulumi.Input<{
|
|
464
289
|
[key: string]: pulumi.Input<string>;
|
|
465
290
|
}>;
|
|
466
|
-
/**
|
|
467
|
-
* Okta Verify MFA policy settings (✓ OIE).
|
|
468
|
-
*/
|
|
469
291
|
oktaVerify?: pulumi.Input<{
|
|
470
292
|
[key: string]: pulumi.Input<string>;
|
|
471
293
|
}>;
|
|
472
|
-
/**
|
|
473
|
-
* On-Prem MFA MFA policy settings (✓ OIE).
|
|
474
|
-
*/
|
|
475
294
|
onpremMfa?: pulumi.Input<{
|
|
476
295
|
[key: string]: pulumi.Input<string>;
|
|
477
296
|
}>;
|
|
478
|
-
/**
|
|
479
|
-
* Phone Number MFA policy settings (✓ OIE).
|
|
480
|
-
*/
|
|
481
297
|
phoneNumber?: pulumi.Input<{
|
|
482
298
|
[key: string]: pulumi.Input<string>;
|
|
483
299
|
}>;
|
|
484
|
-
/**
|
|
485
|
-
* RSA Token MFA policy settings (✓ Classic, ✓ OIE).
|
|
486
|
-
*/
|
|
487
300
|
rsaToken?: pulumi.Input<{
|
|
488
301
|
[key: string]: pulumi.Input<string>;
|
|
489
302
|
}>;
|
|
490
|
-
/**
|
|
491
|
-
* Security Question MFA policy settings (✓ OIE).
|
|
492
|
-
*/
|
|
493
303
|
securityQuestion?: pulumi.Input<{
|
|
494
304
|
[key: string]: pulumi.Input<string>;
|
|
495
305
|
}>;
|
|
496
|
-
/**
|
|
497
|
-
* Symantec VIP MFA policy settings (✓ Classic).
|
|
498
|
-
*/
|
|
499
306
|
symantecVip?: pulumi.Input<{
|
|
500
307
|
[key: string]: pulumi.Input<string>;
|
|
501
308
|
}>;
|
|
502
|
-
/**
|
|
503
|
-
* FIDO2 (WebAuthn) MFA policy settings (✓ OIE).
|
|
504
|
-
*/
|
|
505
309
|
webauthn?: pulumi.Input<{
|
|
506
310
|
[key: string]: pulumi.Input<string>;
|
|
507
311
|
}>;
|
|
508
|
-
/**
|
|
509
|
-
* Yubikey Token MFA policy settings (✓ Classic, ✓ OIE).
|
|
510
|
-
*/
|
|
511
312
|
yubikeyToken?: pulumi.Input<{
|
|
512
313
|
[key: string]: pulumi.Input<string>;
|
|
513
314
|
}>;
|
package/policyMfaDefault.js
CHANGED
|
@@ -7,12 +7,9 @@ const pulumi = require("@pulumi/pulumi");
|
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
9
|
* Configures default MFA Policy.
|
|
10
|
-
*
|
|
11
10
|
* This resource allows you to configure default MFA Policy.
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
* > Unless Org Feature Flag `ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT` is ***disabled*** `oktaPassword` or `oktaEmail` must be present and its `enroll` value set to `REQUIRED`. Contact support to have this feature flag ***disabled***.
|
|
11
|
+
* > Requires Org Feature Flag 'OKTA_MFA_POLICY'. Contact support to have this feature flag ***enabled***.
|
|
12
|
+
* Unless Org Feature Flag 'ENG_ENABLE_OPTIONAL_PASSWORD_ENROLLMENT' is ***disabled*** 'okta_password' or 'okta_email' must be present and its 'enroll' value set to 'REQUIRED'. Contact support to have this feature flag ***disabled***.
|
|
16
13
|
*
|
|
17
14
|
* ## Example Usage
|
|
18
15
|
*
|
|
@@ -40,12 +37,8 @@ const utilities = require("./utilities");
|
|
|
40
37
|
* });
|
|
41
38
|
* ```
|
|
42
39
|
*
|
|
43
|
-
* > If the `okta.PolicyMfaDefault` is used in conjunction with `okta.policy.Mfa` resources, ensure to use a `dependsOn` attribute for the default policy to ensure that all other policies are created/updated first such that the `priority` field can be appropriately computed on the first plan/apply.
|
|
44
|
-
*
|
|
45
40
|
* ## Import
|
|
46
41
|
*
|
|
47
|
-
* Default MFA Policy can be imported without providing Okta ID.
|
|
48
|
-
*
|
|
49
42
|
* ```sh
|
|
50
43
|
* $ pulumi import okta:index/policyMfaDefault:PolicyMfaDefault example .
|
|
51
44
|
* ```
|
package/policyMfaDefault.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policyMfaDefault.js","sourceRoot":"","sources":["../policyMfaDefault.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"policyMfaDefault.js","sourceRoot":"","sources":["../policyMfaDefault.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IAwDD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7D,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AAlJL,4CAmJC;AArIG,gBAAgB;AACO,6BAAY,GAAG,8CAA8C,CAAC"}
|