@pulumi/okta 6.0.0-alpha.1759992240 → 6.0.0-alpha.1768025445

package/types/input.d.ts

@@ -1,5 +1,25 @@
 import * as pulumi from "@pulumi/pulumi";
 import * as inputs from "../types/input";
+export interface ApiServiceIntegrationGrantedScope {
+    /**
+     * The scope of the API service integration
+     */
+    scope: pulumi.Input<string>;
+}
+export interface ApiTokenNetwork {
+    /**
+     * The connection type of the Network Condition.
+     */
+    connection?: pulumi.Input<string>;
+    /**
+     * The IP address the excluded zone.
+     */
+    excludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The IP address the included zone.
+     */
+    includes?: pulumi.Input<pulumi.Input<string>[]>;
+}
 export interface AppGroupAssignmentsGroup {
     /**
      * A group to associate with the application
@@ -503,6 +523,46 @@ export interface FeatureStage {
     state: pulumi.Input<string>;
     value: pulumi.Input<string>;
 }
+export interface GetApiServiceIntegrationGrantedScope {
+    /**
+     * The scope of the API service integration granted.
+     */
+    scope?: string;
+}
+export interface GetApiServiceIntegrationGrantedScopeArgs {
+    /**
+     * The scope of the API service integration granted.
+     */
+    scope?: pulumi.Input<string>;
+}
+export interface GetApiTokenNetwork {
+    /**
+     * The connection type of the Network Condition.
+     */
+    connection?: string;
+    /**
+     * The IP address the excluded zone.
+     */
+    excludes?: string[];
+    /**
+     * The IP address the included zone.
+     */
+    includes?: string[];
+}
+export interface GetApiTokenNetworkArgs {
+    /**
+     * The connection type of the Network Condition.
+     */
+    connection?: pulumi.Input<string>;
+    /**
+     * The IP address the excluded zone.
+     */
+    excludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The IP address the included zone.
+     */
+    includes?: pulumi.Input<pulumi.Input<string>[]>;
+}
 export interface GetCampaignNotificationSettings {
     notifyReviewPeriodEnd?: boolean;
     notifyReviewerAtCampaignEnd?: boolean;
@@ -1115,6 +1175,150 @@ export interface GetDeviceAssurancePolicyThirdPartySignalProviderDtcOsVersion {
 export interface GetDeviceAssurancePolicyThirdPartySignalProviderDtcOsVersionArgs {
     minimum: pulumi.Input<string>;
 }
+export interface GetDeviceProfile {
+    /**
+     * The disk encryption type of the device.
+     */
+    diskEncryptionType?: string;
+    /**
+     * The display name of the device.
+     */
+    displayName?: string;
+    /**
+     * The International Mobile Equipment Identity (IMEI) of the device.
+     */
+    imei?: string;
+    /**
+     * Indicates if the device is jailbroken or rooted. Only applicable to IOS and ANDROID platforms.
+     */
+    integrityJailBreak?: boolean;
+    /**
+     * The manufacturer of the device.
+     */
+    manufacturer?: string;
+    /**
+     * The Mobile Equipment Identifier (MEID) of the device.
+     */
+    meid?: string;
+    /**
+     * The model of the device.
+     */
+    model?: string;
+    /**
+     * The OS version of the device.
+     */
+    osVersion?: string;
+    /**
+     * The platform of the device.
+     */
+    platform?: string;
+    /**
+     * Indicates if the device is registered at Okta.
+     */
+    registered?: boolean;
+    /**
+     * Indicates if secure hardware is present on the device.
+     */
+    secureHardwarePresent?: boolean;
+    /**
+     * The serial number of the device.
+     */
+    serialNumber?: string;
+    /**
+     * The Security Identifier (SID) of the device.
+     */
+    sid?: string;
+    /**
+     * Windows Trusted Platform Module hash value.
+     */
+    tpmPublicKeyHash?: string;
+    /**
+     * MacOS Unique device identifier of the device.
+     */
+    udid?: string;
+}
+export interface GetDeviceProfileArgs {
+    /**
+     * The disk encryption type of the device.
+     */
+    diskEncryptionType?: pulumi.Input<string>;
+    /**
+     * The display name of the device.
+     */
+    displayName?: pulumi.Input<string>;
+    /**
+     * The International Mobile Equipment Identity (IMEI) of the device.
+     */
+    imei?: pulumi.Input<string>;
+    /**
+     * Indicates if the device is jailbroken or rooted. Only applicable to IOS and ANDROID platforms.
+     */
+    integrityJailBreak?: pulumi.Input<boolean>;
+    /**
+     * The manufacturer of the device.
+     */
+    manufacturer?: pulumi.Input<string>;
+    /**
+     * The Mobile Equipment Identifier (MEID) of the device.
+     */
+    meid?: pulumi.Input<string>;
+    /**
+     * The model of the device.
+     */
+    model?: pulumi.Input<string>;
+    /**
+     * The OS version of the device.
+     */
+    osVersion?: pulumi.Input<string>;
+    /**
+     * The platform of the device.
+     */
+    platform?: pulumi.Input<string>;
+    /**
+     * Indicates if the device is registered at Okta.
+     */
+    registered?: pulumi.Input<boolean>;
+    /**
+     * Indicates if secure hardware is present on the device.
+     */
+    secureHardwarePresent?: pulumi.Input<boolean>;
+    /**
+     * The serial number of the device.
+     */
+    serialNumber?: pulumi.Input<string>;
+    /**
+     * The Security Identifier (SID) of the device.
+     */
+    sid?: pulumi.Input<string>;
+    /**
+     * Windows Trusted Platform Module hash value.
+     */
+    tpmPublicKeyHash?: pulumi.Input<string>;
+    /**
+     * MacOS Unique device identifier of the device.
+     */
+    udid?: pulumi.Input<string>;
+}
+export interface GetDeviceResourceDisplayName {
+    /**
+     * Indicates if the resource display name is sensitive.
+     */
+    sensitive?: boolean;
+    /**
+     * The value of the resource display name.
+     */
+    value?: string;
+}
+export interface GetDeviceResourceDisplayNameArgs {
+    /**
+     * Indicates if the resource display name is sensitive.
+     */
+    sensitive?: pulumi.Input<boolean>;
+    /**
+     * The value of the resource display name.
+     */
+    value?: pulumi.Input<string>;
+}
 export interface GetEndUserMyRequestsRequested {
     /**
      * ID of the access scope
@@ -1761,16 +1965,84 @@ export interface GetPrincipalEntitlementsTargetPrincipalArgs {
     externalId: pulumi.Input<string>;
     type: pulumi.Input<string>;
 }
+export interface GetPushProviderConfiguration {
+    apnsConfiguration?: inputs.GetPushProviderConfigurationApnsConfiguration;
+    fcmConfiguration?: inputs.GetPushProviderConfigurationFcmConfiguration;
+}
+export interface GetPushProviderConfigurationArgs {
+    apnsConfiguration?: pulumi.Input<inputs.GetPushProviderConfigurationApnsConfigurationArgs>;
+    fcmConfiguration?: pulumi.Input<inputs.GetPushProviderConfigurationFcmConfigurationArgs>;
+}
+export interface GetPushProviderConfigurationApnsConfiguration {
+    /**
+     * File name for Admin Console display.
+     */
+    fileName?: string;
+    /**
+     * 10-character Key ID obtained from the Apple developer account. Required for APNS provider type.
+     */
+    keyId?: string;
+    /**
+     * 10-character Team ID used to develop the iOS app. Required for APNS provider type.
+     */
+    teamId?: string;
+}
+export interface GetPushProviderConfigurationApnsConfigurationArgs {
+    /**
+     * File name for Admin Console display.
+     */
+    fileName?: pulumi.Input<string>;
+    /**
+     * 10-character Key ID obtained from the Apple developer account. Required for APNS provider type.
+     */
+    keyId?: pulumi.Input<string>;
+    /**
+     * 10-character Team ID used to develop the iOS app. Required for APNS provider type.
+     */
+    teamId?: pulumi.Input<string>;
+}
+export interface GetPushProviderConfigurationFcmConfiguration {
+    /**
+     * JSON containing the private service account key and service account details. Required for FCM provider type.
+     */
+    serviceAccountJson?: inputs.GetPushProviderConfigurationFcmConfigurationServiceAccountJson;
+}
+export interface GetPushProviderConfigurationFcmConfigurationArgs {
+    /**
+     * JSON containing the private service account key and service account details. Required for FCM provider type.
+     */
+    serviceAccountJson?: pulumi.Input<inputs.GetPushProviderConfigurationFcmConfigurationServiceAccountJsonArgs>;
+}
+export interface GetPushProviderConfigurationFcmConfigurationServiceAccountJson {
+    /**
+     * File name for Admin Console display.
+     */
+    fileName?: string;
+    /**
+     * The project ID.
+     */
+    projectId?: string;
+}
+export interface GetPushProviderConfigurationFcmConfigurationServiceAccountJsonArgs {
+    /**
+     * File name for Admin Console display.
+     */
+    fileName?: pulumi.Input<string>;
+    /**
+     * The project ID.
+     */
+    projectId?: pulumi.Input<string>;
+}
 export interface GetRequestConditionAccessScopeSettings {
     /**
-     * List of groups/entitlement bundles.
+     * Block list of groups/entitlement bundles ids.
      */
     ids?: inputs.GetRequestConditionAccessScopeSettingsId[];
     type?: string;
 }
 export interface GetRequestConditionAccessScopeSettingsArgs {
     /**
-     * List of groups/entitlement bundles.
+     * Block list of groups/entitlement bundles ids.
      */
     ids?: pulumi.Input<pulumi.Input<inputs.GetRequestConditionAccessScopeSettingsIdArgs>[]>;
     type?: pulumi.Input<string>;
@@ -1789,14 +2061,14 @@ export interface GetRequestConditionAccessScopeSettingsIdArgs {
 }
 export interface GetRequestConditionRequesterSettings {
     /**
-     * List of teams/groups ids.
+     * Block list of teams/groups ids.
      */
     ids?: inputs.GetRequestConditionRequesterSettingsId[];
     type?: string;
 }
 export interface GetRequestConditionRequesterSettingsArgs {
     /**
-     * List of teams/groups ids.
+     * Block list of teams/groups ids.
      */
     ids?: pulumi.Input<pulumi.Input<inputs.GetRequestConditionRequesterSettingsIdArgs>[]>;
     type?: pulumi.Input<string>;
@@ -2211,6 +2483,112 @@ export interface GetReviewReviewerProfileArgs {
     login?: pulumi.Input<string>;
     status?: pulumi.Input<string>;
 }
+export interface GetSecurityEventsProviderSettings {
+    /**
+     * Issuer URL.
+     */
+    issuer?: string;
+    /**
+     * The public URL where the JWKS public key is uploaded.
+     */
+    jwksUrl?: string;
+    /**
+     * The published well-known URL of the Security Events Provider (the SSF transmitter).
+     */
+    wellKnownUrl?: string;
+}
+export interface GetSecurityEventsProviderSettingsArgs {
+    /**
+     * Issuer URL.
+     */
+    issuer?: pulumi.Input<string>;
+    /**
+     * The public URL where the JWKS public key is uploaded.
+     */
+    jwksUrl?: pulumi.Input<string>;
+    /**
+     * The published well-known URL of the Security Events Provider (the SSF transmitter).
+     */
+    wellKnownUrl?: pulumi.Input<string>;
+}
+export interface GetUiSchemaUiSchema {
+    /**
+     * Specifies the button label for the Submit button at the bottom of the enrollment form.
+     */
+    buttonLabel?: string;
+    elements?: inputs.GetUiSchemaUiSchemaElement[];
+    /**
+     * Specifies the label at the top of the enrollment form under the logo.
+     */
+    label?: string;
+    /**
+     * Specifies the type of layout.
+     */
+    type?: string;
+}
+export interface GetUiSchemaUiSchemaArgs {
+    /**
+     * Specifies the button label for the Submit button at the bottom of the enrollment form.
+     */
+    buttonLabel?: pulumi.Input<string>;
+    elements?: pulumi.Input<pulumi.Input<inputs.GetUiSchemaUiSchemaElementArgs>[]>;
+    /**
+     * Specifies the label at the top of the enrollment form under the logo.
+     */
+    label?: pulumi.Input<string>;
+    /**
+     * Specifies the type of layout.
+     */
+    type?: pulumi.Input<string>;
+}
+export interface GetUiSchemaUiSchemaElement {
+    /**
+     * Label name for the UI element.
+     */
+    label?: string;
+    /**
+     * UI Schema element options object.
+     */
+    options?: inputs.GetUiSchemaUiSchemaElementOptions;
+    /**
+     * Specifies the property bound to the input field. It must follow the format #/properties/PROPERTY_NAME where PROPERTY_NAME is a variable name for an attribute in profile editor.
+     */
+    scope?: string;
+    /**
+     * Specifies the relationship between this input element and scope. The Control value specifies that this input controls the value represented by scope.
+     */
+    type?: string;
+}
+export interface GetUiSchemaUiSchemaElementArgs {
+    /**
+     * Label name for the UI element.
+     */
+    label?: pulumi.Input<string>;
+    /**
+     * UI Schema element options object.
+     */
+    options?: pulumi.Input<inputs.GetUiSchemaUiSchemaElementOptionsArgs>;
+    /**
+     * Specifies the property bound to the input field. It must follow the format #/properties/PROPERTY_NAME where PROPERTY_NAME is a variable name for an attribute in profile editor.
+     */
+    scope?: pulumi.Input<string>;
+    /**
+     * Specifies the relationship between this input element and scope. The Control value specifies that this input controls the value represented by scope.
+     */
+    type?: pulumi.Input<string>;
+}
+export interface GetUiSchemaUiSchemaElementOptions {
+    /**
+     * Specifies how the input appears.
+     */
+    format?: string;
+}
+export interface GetUiSchemaUiSchemaElementOptionsArgs {
+    /**
+     * Specifies how the input appears.
+     */
+    format?: pulumi.Input<string>;
+}
 export interface GroupSchemaPropertyArrayOneOf {
     /**
      * Value mapping to member of `arrayEnum`
@@ -2306,6 +2684,80 @@ export interface PreviewSigninPageWidgetCustomizations {
     usernameLabel?: pulumi.Input<string>;
     widgetGeneration: pulumi.Input<string>;
 }
+export interface PushProviderConfiguration {
+    apnsConfiguration?: pulumi.Input<inputs.PushProviderConfigurationApnsConfiguration>;
+    fcmConfiguration?: pulumi.Input<inputs.PushProviderConfigurationFcmConfiguration>;
+}
+export interface PushProviderConfigurationApnsConfiguration {
+    /**
+     * File name for Admin Console display.
+     */
+    fileName?: pulumi.Input<string>;
+    /**
+     * 10-character Key ID obtained from the Apple developer account. Required for APNS provider type.
+     */
+    keyId?: pulumi.Input<string>;
+    /**
+     * 10-character Team ID used to develop the iOS app. Required for APNS provider type.
+     */
+    teamId?: pulumi.Input<string>;
+    /**
+     * APNs private authentication token signing key. Required for APNS provider type.
+     */
+    tokenSigningKey?: pulumi.Input<string>;
+}
+export interface PushProviderConfigurationFcmConfiguration {
+    /**
+     * JSON containing the private service account key and service account details. Required for FCM provider type.
+     */
+    serviceAccountJson?: pulumi.Input<inputs.PushProviderConfigurationFcmConfigurationServiceAccountJson>;
+}
+export interface PushProviderConfigurationFcmConfigurationServiceAccountJson {
+    /**
+     * The auth provider x509 cert URL.
+     */
+    authProviderX509CertUrl?: pulumi.Input<string>;
+    /**
+     * The auth URI.
+     */
+    authUri?: pulumi.Input<string>;
+    /**
+     * The client email.
+     */
+    clientEmail?: pulumi.Input<string>;
+    /**
+     * The client ID.
+     */
+    clientId?: pulumi.Input<string>;
+    /**
+     * The client x509 cert URL.
+     */
+    clientX509CertUrl?: pulumi.Input<string>;
+    /**
+     * File name for Admin Console display.
+     */
+    fileName?: pulumi.Input<string>;
+    /**
+     * The private key.
+     */
+    privateKey?: pulumi.Input<string>;
+    /**
+     * The private key ID.
+     */
+    privateKeyId?: pulumi.Input<string>;
+    /**
+     * The project ID.
+     */
+    projectId?: pulumi.Input<string>;
+    /**
+     * The token URI.
+     */
+    tokenUri?: pulumi.Input<string>;
+    /**
+     * The type of the service account.
+     */
+    type?: pulumi.Input<string>;
+}
 export interface RateLimitingUseCaseModeOverrides {
     loginPage?: pulumi.Input<string>;
     oauth2Authorize?: pulumi.Input<string>;
@@ -2320,7 +2772,7 @@ export interface RequestConditionAccessDurationSettings {
 }
 export interface RequestConditionAccessScopeSettings {
     /**
-     * List of groups/entitlement bundles.
+     * Block list of groups/entitlement bundles ids.
      */
     ids?: pulumi.Input<pulumi.Input<inputs.RequestConditionAccessScopeSettingsId>[]>;
     type: pulumi.Input<string>;
@@ -2333,7 +2785,7 @@ export interface RequestConditionAccessScopeSettingsId {
 }
 export interface RequestConditionRequesterSettings {
     /**
-     * List of teams/groups ids.
+     * Block list of teams/groups ids.
      */
     ids?: pulumi.Input<pulumi.Input<inputs.RequestConditionRequesterSettingsId>[]>;
     type: pulumi.Input<string>;
@@ -2426,7 +2878,7 @@ export interface RequestV2RequestedFor {
 }
 export interface RequestV2RequesterFieldValue {
     /**
-     * The ID of a requester field.
+     * Request condition id.
      */
     id?: pulumi.Input<string>;
     /**
@@ -2449,6 +2901,20 @@ export interface RequestV2RequesterFieldValue {
 export interface RequestV2RequesterFieldValueValue {
     value?: pulumi.Input<string>;
 }
+export interface SecurityEventsProviderSettings {
+    /**
+     * Issuer URL. Maximum length: 700 characters. To be used along with `jwksUrl`.
+     */
+    issuer?: pulumi.Input<string>;
+    /**
+     * The public URL where the JWKS public key is uploaded. Maximum length: 1000 characters. To be used along with `issuer`.
+     */
+    jwksUrl?: pulumi.Input<string>;
+    /**
+     * The published well-known URL of the Security Events Provider (the SSF transmitter). Maximum length: 1000 characters.
+     */
+    wellKnownUrl?: pulumi.Input<string>;
+}
 export interface TemplateSmsTranslation {
     /**
      * The language to map the template to.
@@ -2459,31 +2925,588 @@ export interface TemplateSmsTranslation {
      */
     template: pulumi.Input<string>;
 }
-export interface UserSchemaPropertyArrayOneOf {
+export interface UiSchemaUiSchema {
     /**
-     * Value mapping to member of `arrayEnum`
+     * Specifies the button label for the Submit button at the bottom of the enrollment form.
      */
-    const: pulumi.Input<string>;
+    buttonLabel?: pulumi.Input<string>;
+    elements?: pulumi.Input<pulumi.Input<inputs.UiSchemaUiSchemaElement>[]>;
     /**
-     * Display name for the enum value.
+     * Specifies the label at the top of the enrollment form under the logo.
+     */
+    label?: pulumi.Input<string>;
+    /**
+     * Specifies the type of layout.
      */
-    title: pulumi.Input<string>;
-}
-export interface UserSchemaPropertyMasterOverridePriority {
     type?: pulumi.Input<string>;
-    value: pulumi.Input<string>;
 }
-export interface UserSchemaPropertyOneOf {
+export interface UiSchemaUiSchemaElement {
     /**
-     * Enum value
+     * Label name for the UI element.
      */
-    const: pulumi.Input<string>;
+    label?: pulumi.Input<string>;
+    /**
+     * UI Schema element options object.
+     */
+    options?: pulumi.Input<inputs.UiSchemaUiSchemaElementOptions>;
+    /**
+     * Specifies the property bound to the input field. It must follow the format #/properties/PROPERTY_NAME where PROPERTY_NAME is a variable name for an attribute in profile editor.
+     */
+    scope: pulumi.Input<string>;
+    /**
+     * Specifies the relationship between this input element and scope. The Control value specifies that this input controls the value represented by scope.
+     */
+    type?: pulumi.Input<string>;
+}
+export interface UiSchemaUiSchemaElementOptions {
+    /**
+     * Specifies how the input appears.
+     */
+    format?: pulumi.Input<string>;
+}
+export interface UserSchemaPropertyArrayOneOf {
+    /**
+     * Value mapping to member of `arrayEnum`
+     */
+    const: pulumi.Input<string>;
+    /**
+     * Display name for the enum value.
+     */
+    title: pulumi.Input<string>;
+}
+export interface UserSchemaPropertyMasterOverridePriority {
+    type?: pulumi.Input<string>;
+    value: pulumi.Input<string>;
+}
+export interface UserSchemaPropertyOneOf {
+    /**
+     * Enum value
+     */
+    const: pulumi.Input<string>;
     /**
      * Enum title
      */
     title: pulumi.Input<string>;
 }
 export declare namespace app {
+    interface ConnectionProfile {
+        /**
+         * Authentication scheme. Valid values are TOKEN or OAUTH2.
+         */
+        authScheme: pulumi.Input<string>;
+        /**
+         * OAuth2 client ID (required for OAUTH2 auth scheme).
+         */
+        clientId?: pulumi.Input<string>;
+        /**
+         * Additional settings for OAuth2 authentication.
+         */
+        settings?: pulumi.Input<inputs.app.ConnectionProfileSettings>;
+        /**
+         * Signing configuration.
+         */
+        signing?: pulumi.Input<inputs.app.ConnectionProfileSigning>;
+        /**
+         * Authentication token (required for TOKEN auth scheme).
+         */
+        token?: pulumi.Input<string>;
+    }
+    interface ConnectionProfileSettings {
+        /**
+         * Admin password for OAuth2.
+         */
+        adminPassword?: pulumi.Input<string>;
+        /**
+         * Admin username for OAuth2.
+         */
+        adminUsername?: pulumi.Input<string>;
+    }
+    interface ConnectionProfileSigning {
+        /**
+         * Token rotation mode.
+         */
+        rotationMode?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilities {
+        /**
+         * (Optional) Block for create lifecycle settings:
+         */
+        create?: pulumi.Input<inputs.app.FeaturesCapabilitiesCreate>;
+        /**
+         * (Optional) Block for import rules configuration:
+         */
+        importRules?: pulumi.Input<inputs.app.FeaturesCapabilitiesImportRules>;
+        /**
+         * (Optional) Block for import settings configuration:
+         */
+        importSettings?: pulumi.Input<inputs.app.FeaturesCapabilitiesImportSettings>;
+        /**
+         * (Optional) Block for update settings:
+         */
+        update?: pulumi.Input<inputs.app.FeaturesCapabilitiesUpdate>;
+    }
+    interface FeaturesCapabilitiesCreate {
+        /**
+         * (Optional) Block for create lifecycle configuration:
+         */
+        lifecycleCreate?: pulumi.Input<inputs.app.FeaturesCapabilitiesCreateLifecycleCreate>;
+    }
+    interface FeaturesCapabilitiesCreateLifecycleCreate {
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilitiesImportRules {
+        /**
+         * (Optional) Block for user matching and creation rules:
+         */
+        userCreateAndMatch?: pulumi.Input<inputs.app.FeaturesCapabilitiesImportRulesUserCreateAndMatch>;
+    }
+    interface FeaturesCapabilitiesImportRulesUserCreateAndMatch {
+        /**
+         * (Optional) Whether to allow partial matching based on first and last names.
+         */
+        allowPartialMatch?: pulumi.Input<boolean>;
+        /**
+         * (Optional) Whether imported new users are automatically activated.
+         */
+        autoActivateNewUsers?: pulumi.Input<boolean>;
+        /**
+         * (Optional) Whether exact-matched users are automatically confirmed.
+         */
+        autoconfirmExactMatch?: pulumi.Input<boolean>;
+        /**
+         * (Optional) Whether imported new users are automatically confirmed.
+         */
+        autoconfirmNewUsers?: pulumi.Input<boolean>;
+        /**
+         * (Optional) Whether partially matched users are automatically confirmed.
+         */
+        autoconfirmPartialMatch?: pulumi.Input<boolean>;
+        /**
+         * (Optional) Attribute used for exact matching (e.g., `USERNAME`, `EMAIL`).
+         */
+        exactMatchCriteria?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilitiesImportSettings {
+        /**
+         * (Optional) Block for import schedule configuration:
+         */
+        schedule?: pulumi.Input<inputs.app.FeaturesCapabilitiesImportSettingsSchedule>;
+        /**
+         * (Optional) Block for username configuration:
+         */
+        username?: pulumi.Input<inputs.app.FeaturesCapabilitiesImportSettingsUsername>;
+    }
+    interface FeaturesCapabilitiesImportSettingsSchedule {
+        /**
+         * (Optional) Block for full import schedule:
+         */
+        fullImport?: pulumi.Input<inputs.app.FeaturesCapabilitiesImportSettingsScheduleFullImport>;
+        /**
+         * (Optional) Block for incremental import schedule:
+         */
+        incrementalImport?: pulumi.Input<inputs.app.FeaturesCapabilitiesImportSettingsScheduleIncrementalImport>;
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilitiesImportSettingsScheduleFullImport {
+        /**
+         * (Optional) UNIX cron expression for incremental import schedule.
+         */
+        expression?: pulumi.Input<string>;
+        /**
+         * (Optional) IANA timezone name for the schedule.
+         */
+        timezone?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilitiesImportSettingsScheduleIncrementalImport {
+        /**
+         * (Optional) UNIX cron expression for incremental import schedule.
+         */
+        expression?: pulumi.Input<string>;
+        /**
+         * (Optional) IANA timezone name for the schedule.
+         */
+        timezone?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilitiesImportSettingsUsername {
+        /**
+         * (Optional) Okta Expression Language statement for custom username format.
+         */
+        usernameExpression?: pulumi.Input<string>;
+        /**
+         * (Optional) Format for usernames (e.g., `EMAIL`, `CUSTOM`).
+         */
+        usernameFormat?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilitiesUpdate {
+        /**
+         * (Optional) Block for deactivation lifecycle configuration:
+         */
+        lifecycleDeactivate?: pulumi.Input<inputs.app.FeaturesCapabilitiesUpdateLifecycleDeactivate>;
+        /**
+         * (Optional) Block for password synchronization settings:
+         */
+        password?: pulumi.Input<inputs.app.FeaturesCapabilitiesUpdatePassword>;
+        /**
+         * (Optional) Block for profile update settings:
+         */
+        profile?: pulumi.Input<inputs.app.FeaturesCapabilitiesUpdateProfile>;
+    }
+    interface FeaturesCapabilitiesUpdateLifecycleDeactivate {
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilitiesUpdatePassword {
+        /**
+         * (Optional) Determines password change behavior. Valid values are `CHANGE` or `KEEP_EXISTING`.
+         */
+        change?: pulumi.Input<string>;
+        /**
+         * (Optional) Determines password source. Valid values are `OKTA` or `RANDOM`.
+         */
+        seed?: pulumi.Input<string>;
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface FeaturesCapabilitiesUpdateProfile {
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface GetConnectionProfile {
+        /**
+         * Defines the method of authentication.
+         */
+        authScheme?: string;
+    }
+    interface GetConnectionProfileArgs {
+        /**
+         * Defines the method of authentication.
+         */
+        authScheme?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilities {
+        /**
+         * Block for create lifecycle settings:
+         */
+        create?: inputs.app.GetFeaturesCapabilitiesCreate;
+        /**
+         * Block for import rules configuration:
+         */
+        importRules?: inputs.app.GetFeaturesCapabilitiesImportRules;
+        /**
+         * Block for import settings configuration:
+         */
+        importSettings?: inputs.app.GetFeaturesCapabilitiesImportSettings;
+        /**
+         * Block for update settings:
+         */
+        update?: inputs.app.GetFeaturesCapabilitiesUpdate;
+    }
+    interface GetFeaturesCapabilitiesArgs {
+        /**
+         * Block for create lifecycle settings:
+         */
+        create?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesCreateArgs>;
+        /**
+         * Block for import rules configuration:
+         */
+        importRules?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesImportRulesArgs>;
+        /**
+         * Block for import settings configuration:
+         */
+        importSettings?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesImportSettingsArgs>;
+        /**
+         * Block for update settings:
+         */
+        update?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesUpdateArgs>;
+    }
+    interface GetFeaturesCapabilitiesCreate {
+        /**
+         * Block for create lifecycle configuration:
+         */
+        lifecycleCreate?: inputs.app.GetFeaturesCapabilitiesCreateLifecycleCreate;
+    }
+    interface GetFeaturesCapabilitiesCreateArgs {
+        /**
+         * Block for create lifecycle configuration:
+         */
+        lifecycleCreate?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesCreateLifecycleCreateArgs>;
+    }
+    interface GetFeaturesCapabilitiesCreateLifecycleCreate {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface GetFeaturesCapabilitiesCreateLifecycleCreateArgs {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilitiesImportRules {
+        /**
+         * Block for user matching and creation rules:
+         */
+        userCreateAndMatch?: inputs.app.GetFeaturesCapabilitiesImportRulesUserCreateAndMatch;
+    }
+    interface GetFeaturesCapabilitiesImportRulesArgs {
+        /**
+         * Block for user matching and creation rules:
+         */
+        userCreateAndMatch?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesImportRulesUserCreateAndMatchArgs>;
+    }
+    interface GetFeaturesCapabilitiesImportRulesUserCreateAndMatch {
+        /**
+         * (Boolean) Whether to allow partial matching based on first and last names.
+         */
+        allowPartialMatch?: boolean;
+        /**
+         * (Boolean) Whether imported new users are automatically activated.
+         */
+        autoActivateNewUsers?: boolean;
+        /**
+         * (Boolean) Whether exact-matched users are automatically confirmed.
+         */
+        autoconfirmExactMatch?: boolean;
+        /**
+         * (Boolean) Whether imported new users are automatically confirmed.
+         */
+        autoconfirmNewUsers?: boolean;
+        /**
+         * (Boolean) Whether partially matched users are automatically confirmed.
+         */
+        autoconfirmPartialMatch?: boolean;
+        /**
+         * (String) Attribute used for exact matching (e.g., `USERNAME`, `EMAIL`).
+         */
+        exactMatchCriteria?: string;
+    }
+    interface GetFeaturesCapabilitiesImportRulesUserCreateAndMatchArgs {
+        /**
+         * (Boolean) Whether to allow partial matching based on first and last names.
+         */
+        allowPartialMatch?: pulumi.Input<boolean>;
+        /**
+         * (Boolean) Whether imported new users are automatically activated.
+         */
+        autoActivateNewUsers?: pulumi.Input<boolean>;
+        /**
+         * (Boolean) Whether exact-matched users are automatically confirmed.
+         */
+        autoconfirmExactMatch?: pulumi.Input<boolean>;
+        /**
+         * (Boolean) Whether imported new users are automatically confirmed.
+         */
+        autoconfirmNewUsers?: pulumi.Input<boolean>;
+        /**
+         * (Boolean) Whether partially matched users are automatically confirmed.
+         */
+        autoconfirmPartialMatch?: pulumi.Input<boolean>;
+        /**
+         * (String) Attribute used for exact matching (e.g., `USERNAME`, `EMAIL`).
+         */
+        exactMatchCriteria?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilitiesImportSettings {
+        /**
+         * Block for import schedule configuration:
+         */
+        schedule?: inputs.app.GetFeaturesCapabilitiesImportSettingsSchedule;
+        /**
+         * Block for username configuration:
+         */
+        username?: inputs.app.GetFeaturesCapabilitiesImportSettingsUsername;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsArgs {
+        /**
+         * Block for import schedule configuration:
+         */
+        schedule?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesImportSettingsScheduleArgs>;
+        /**
+         * Block for username configuration:
+         */
+        username?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesImportSettingsUsernameArgs>;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsSchedule {
+        /**
+         * Block for full import schedule:
+         */
+        fullImport?: inputs.app.GetFeaturesCapabilitiesImportSettingsScheduleFullImport;
+        /**
+         * Block for incremental import schedule:
+         */
+        incrementalImport?: inputs.app.GetFeaturesCapabilitiesImportSettingsScheduleIncrementalImport;
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsScheduleArgs {
+        /**
+         * Block for full import schedule:
+         */
+        fullImport?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesImportSettingsScheduleFullImportArgs>;
+        /**
+         * Block for incremental import schedule:
+         */
+        incrementalImport?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesImportSettingsScheduleIncrementalImportArgs>;
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsScheduleFullImport {
+        /**
+         * (String) UNIX cron expression for incremental import schedule.
+         */
+        expression?: string;
+        /**
+         * (String) IANA timezone name for the schedule.
+         */
+        timezone?: string;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsScheduleFullImportArgs {
+        /**
+         * (String) UNIX cron expression for incremental import schedule.
+         */
+        expression?: pulumi.Input<string>;
+        /**
+         * (String) IANA timezone name for the schedule.
+         */
+        timezone?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsScheduleIncrementalImport {
+        /**
+         * (String) UNIX cron expression for incremental import schedule.
+         */
+        expression?: string;
+        /**
+         * (String) IANA timezone name for the schedule.
+         */
+        timezone?: string;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsScheduleIncrementalImportArgs {
+        /**
+         * (String) UNIX cron expression for incremental import schedule.
+         */
+        expression?: pulumi.Input<string>;
+        /**
+         * (String) IANA timezone name for the schedule.
+         */
+        timezone?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsUsername {
+        /**
+         * (String) Okta Expression Language statement for custom username format.
+         */
+        usernameExpression?: string;
+        /**
+         * (String) Format for usernames (e.g., `EMAIL`, `CUSTOM`).
+         */
+        usernameFormat?: string;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsUsernameArgs {
+        /**
+         * (String) Okta Expression Language statement for custom username format.
+         */
+        usernameExpression?: pulumi.Input<string>;
+        /**
+         * (String) Format for usernames (e.g., `EMAIL`, `CUSTOM`).
+         */
+        usernameFormat?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilitiesUpdate {
+        /**
+         * Block for deactivation lifecycle configuration:
+         */
+        lifecycleDeactivate?: inputs.app.GetFeaturesCapabilitiesUpdateLifecycleDeactivate;
+        /**
+         * Block for password synchronization settings:
+         */
+        password?: inputs.app.GetFeaturesCapabilitiesUpdatePassword;
+        /**
+         * Block for profile update settings:
+         */
+        profile?: inputs.app.GetFeaturesCapabilitiesUpdateProfile;
+    }
+    interface GetFeaturesCapabilitiesUpdateArgs {
+        /**
+         * Block for deactivation lifecycle configuration:
+         */
+        lifecycleDeactivate?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesUpdateLifecycleDeactivateArgs>;
+        /**
+         * Block for password synchronization settings:
+         */
+        password?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesUpdatePasswordArgs>;
+        /**
+         * Block for profile update settings:
+         */
+        profile?: pulumi.Input<inputs.app.GetFeaturesCapabilitiesUpdateProfileArgs>;
+    }
+    interface GetFeaturesCapabilitiesUpdateLifecycleDeactivate {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface GetFeaturesCapabilitiesUpdateLifecycleDeactivateArgs {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilitiesUpdatePassword {
+        /**
+         * (String) Determines password change behavior. Valid values are `CHANGE` or `KEEP_EXISTING`.
+         */
+        change?: string;
+        /**
+         * (String) Determines password source. Valid values are `OKTA` or `RANDOM`.
+         */
+        seed?: string;
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface GetFeaturesCapabilitiesUpdatePasswordArgs {
+        /**
+         * (String) Determines password change behavior. Valid values are `CHANGE` or `KEEP_EXISTING`.
+         */
+        change?: pulumi.Input<string>;
+        /**
+         * (String) Determines password source. Valid values are `OKTA` or `RANDOM`.
+         */
+        seed?: pulumi.Input<string>;
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
+    interface GetFeaturesCapabilitiesUpdateProfile {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface GetFeaturesCapabilitiesUpdateProfileArgs {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: pulumi.Input<string>;
+    }
     interface OAuthGroupsClaim {
         /**
          * Groups claim filter. Can only be set if type is FILTER.