@pulumi/okta 6.2.0-alpha.1765348084 → 6.2.0-alpha.1765479032

package/types/output.d.ts

@@ -1,4 +1,24 @@
 import * as outputs from "../types/output";
+export interface ApiServiceIntegrationGrantedScope {
+    /**
+     * The scope of the API service integration
+     */
+    scope: string;
+}
+export interface ApiTokenNetwork {
+    /**
+     * The connection type of the Network Condition.
+     */
+    connection?: string;
+    /**
+     * The IP address the excluded zone.
+     */
+    excludes: string[];
+    /**
+     * The IP address the included zone.
+     */
+    includes: string[];
+}
 export interface AppGroupAssignmentsGroup {
     /**
      * A group to associate with the application
@@ -502,6 +522,26 @@ export interface FeatureStage {
     state: string;
     value: string;
 }
+export interface GetApiServiceIntegrationGrantedScope {
+    /**
+     * The scope of the API service integration granted.
+     */
+    scope: string;
+}
+export interface GetApiTokenNetwork {
+    /**
+     * The connection type of the Network Condition.
+     */
+    connection: string;
+    /**
+     * The IP address the excluded zone.
+     */
+    excludes: string[];
+    /**
+     * The IP address the included zone.
+     */
+    includes: string[];
+}
 export interface GetAppsApp {
     adminNote: string;
     created: string;
@@ -934,6 +974,78 @@ export interface GetDeviceAssurancePolicyThirdPartySignalProviderDtcBrowserVersi
 export interface GetDeviceAssurancePolicyThirdPartySignalProviderDtcOsVersion {
     minimum: string;
 }
+export interface GetDeviceProfile {
+    /**
+     * The disk encryption type of the device.
+     */
+    diskEncryptionType: string;
+    /**
+     * The display name of the device.
+     */
+    displayName: string;
+    /**
+     * The International Mobile Equipment Identity (IMEI) of the device.
+     */
+    imei: string;
+    /**
+     * Indicates if the device is jailbroken or rooted. Only applicable to IOS and ANDROID platforms.
+     */
+    integrityJailBreak: boolean;
+    /**
+     * The manufacturer of the device.
+     */
+    manufacturer: string;
+    /**
+     * The Mobile Equipment Identifier (MEID) of the device.
+     */
+    meid: string;
+    /**
+     * The model of the device.
+     */
+    model: string;
+    /**
+     * The OS version of the device.
+     */
+    osVersion: string;
+    /**
+     * The platform of the device.
+     */
+    platform: string;
+    /**
+     * Indicates if the device is registered at Okta.
+     */
+    registered: boolean;
+    /**
+     * Indicates if secure hardware is present on the device.
+     */
+    secureHardwarePresent: boolean;
+    /**
+     * The serial number of the device.
+     */
+    serialNumber: string;
+    /**
+     * The Security Identifier (SID) of the device.
+     */
+    sid: string;
+    /**
+     * Windows Trusted Platform Module hash value.
+     */
+    tpmPublicKeyHash: string;
+    /**
+     * MacOS Unique device identifier of the device.
+     */
+    udid: string;
+}
+export interface GetDeviceResourceDisplayName {
+    /**
+     * Indicates if the resource display name is sensitive.
+     */
+    sensitive: boolean;
+    /**
+     * The value of the resource display name.
+     */
+    value: string;
+}
 export interface GetDomainDnsRecord {
     /**
      * TXT record expiration
@@ -1339,6 +1451,40 @@ export interface GetPrincipalEntitlementsTargetPrincipal {
     externalId: string;
     type: string;
 }
+export interface GetPushProviderConfiguration {
+    apnsConfiguration?: outputs.GetPushProviderConfigurationApnsConfiguration;
+    fcmConfiguration?: outputs.GetPushProviderConfigurationFcmConfiguration;
+}
+export interface GetPushProviderConfigurationApnsConfiguration {
+    /**
+     * File name for Admin Console display.
+     */
+    fileName: string;
+    /**
+     * 10-character Key ID obtained from the Apple developer account. Required for APNS provider type.
+     */
+    keyId: string;
+    /**
+     * 10-character Team ID used to develop the iOS app. Required for APNS provider type.
+     */
+    teamId: string;
+}
+export interface GetPushProviderConfigurationFcmConfiguration {
+    /**
+     * JSON containing the private service account key and service account details. Required for FCM provider type.
+     */
+    serviceAccountJson?: outputs.GetPushProviderConfigurationFcmConfigurationServiceAccountJson;
+}
+export interface GetPushProviderConfigurationFcmConfigurationServiceAccountJson {
+    /**
+     * File name for Admin Console display.
+     */
+    fileName: string;
+    /**
+     * The project ID.
+     */
+    projectId: string;
+}
 export interface GetRequestConditionAccessScopeSettings {
     /**
      * Block list of groups/entitlement bundles ids.
@@ -1564,6 +1710,20 @@ export interface GetReviewReviewerProfile {
     login: string;
     status: string;
 }
+export interface GetSecurityEventsProviderSettings {
+    /**
+     * Issuer URL.
+     */
+    issuer: string;
+    /**
+     * The public URL where the JWKS public key is uploaded.
+     */
+    jwksUrl: string;
+    /**
+     * The published well-known URL of the Security Events Provider (the SSF transmitter).
+     */
+    wellKnownUrl: string;
+}
 export interface GetTemplatesEmailTemplate {
     /**
      * Link relations for this object - JSON HAL - Discoverable resources related to the email template
@@ -1749,6 +1909,80 @@ export interface PreviewSigninPageWidgetCustomizations {
     usernameLabel?: string;
     widgetGeneration: string;
 }
+export interface PushProviderConfiguration {
+    apnsConfiguration?: outputs.PushProviderConfigurationApnsConfiguration;
+    fcmConfiguration?: outputs.PushProviderConfigurationFcmConfiguration;
+}
+export interface PushProviderConfigurationApnsConfiguration {
+    /**
+     * File name for Admin Console display.
+     */
+    fileName?: string;
+    /**
+     * 10-character Key ID obtained from the Apple developer account. Required for APNS provider type.
+     */
+    keyId?: string;
+    /**
+     * 10-character Team ID used to develop the iOS app. Required for APNS provider type.
+     */
+    teamId?: string;
+    /**
+     * APNs private authentication token signing key. Required for APNS provider type.
+     */
+    tokenSigningKey?: string;
+}
+export interface PushProviderConfigurationFcmConfiguration {
+    /**
+     * JSON containing the private service account key and service account details. Required for FCM provider type.
+     */
+    serviceAccountJson?: outputs.PushProviderConfigurationFcmConfigurationServiceAccountJson;
+}
+export interface PushProviderConfigurationFcmConfigurationServiceAccountJson {
+    /**
+     * The auth provider x509 cert URL.
+     */
+    authProviderX509CertUrl?: string;
+    /**
+     * The auth URI.
+     */
+    authUri?: string;
+    /**
+     * The client email.
+     */
+    clientEmail?: string;
+    /**
+     * The client ID.
+     */
+    clientId?: string;
+    /**
+     * The client x509 cert URL.
+     */
+    clientX509CertUrl?: string;
+    /**
+     * File name for Admin Console display.
+     */
+    fileName?: string;
+    /**
+     * The private key.
+     */
+    privateKey?: string;
+    /**
+     * The private key ID.
+     */
+    privateKeyId?: string;
+    /**
+     * The project ID.
+     */
+    projectId?: string;
+    /**
+     * The token URI.
+     */
+    tokenUri?: string;
+    /**
+     * The type of the service account.
+     */
+    type?: string;
+}
 export interface RateLimitingUseCaseModeOverrides {
     loginPage?: string;
     oauth2Authorize?: string;
@@ -1892,6 +2126,20 @@ export interface RequestV2RequesterFieldValue {
 export interface RequestV2RequesterFieldValueValue {
     value?: string;
 }
+export interface SecurityEventsProviderSettings {
+    /**
+     * Issuer URL. Maximum length: 700 characters. To be used along with `jwksUrl`.
+     */
+    issuer?: string;
+    /**
+     * The public URL where the JWKS public key is uploaded. Maximum length: 1000 characters. To be used along with `issuer`.
+     */
+    jwksUrl?: string;
+    /**
+     * The published well-known URL of the Security Events Provider (the SSF transmitter). Maximum length: 1000 characters.
+     */
+    wellKnownUrl?: string;
+}
 export interface TemplateSmsTranslation {
     /**
      * The language to map the template to.
@@ -1927,6 +2175,362 @@ export interface UserSchemaPropertyOneOf {
     title: string;
 }
 export declare namespace app {
+    interface ConnectionProfile {
+        /**
+         * Authentication scheme. Valid values are TOKEN or OAUTH2.
+         */
+        authScheme: string;
+        /**
+         * OAuth2 client ID (required for OAUTH2 auth scheme).
+         */
+        clientId?: string;
+        /**
+         * Additional settings for OAuth2 authentication.
+         */
+        settings?: outputs.app.ConnectionProfileSettings;
+        /**
+         * Signing configuration.
+         */
+        signing?: outputs.app.ConnectionProfileSigning;
+        /**
+         * Authentication token (required for TOKEN auth scheme).
+         */
+        token?: string;
+    }
+    interface ConnectionProfileSettings {
+        /**
+         * Admin password for OAuth2.
+         */
+        adminPassword?: string;
+        /**
+         * Admin username for OAuth2.
+         */
+        adminUsername?: string;
+    }
+    interface ConnectionProfileSigning {
+        /**
+         * Token rotation mode.
+         */
+        rotationMode?: string;
+    }
+    interface FeaturesCapabilities {
+        /**
+         * (Optional) Block for create lifecycle settings:
+         */
+        create?: outputs.app.FeaturesCapabilitiesCreate;
+        /**
+         * (Optional) Block for import rules configuration:
+         */
+        importRules?: outputs.app.FeaturesCapabilitiesImportRules;
+        /**
+         * (Optional) Block for import settings configuration:
+         */
+        importSettings?: outputs.app.FeaturesCapabilitiesImportSettings;
+        /**
+         * (Optional) Block for update settings:
+         */
+        update?: outputs.app.FeaturesCapabilitiesUpdate;
+    }
+    interface FeaturesCapabilitiesCreate {
+        /**
+         * (Optional) Block for create lifecycle configuration:
+         */
+        lifecycleCreate?: outputs.app.FeaturesCapabilitiesCreateLifecycleCreate;
+    }
+    interface FeaturesCapabilitiesCreateLifecycleCreate {
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface FeaturesCapabilitiesImportRules {
+        /**
+         * (Optional) Block for user matching and creation rules:
+         */
+        userCreateAndMatch?: outputs.app.FeaturesCapabilitiesImportRulesUserCreateAndMatch;
+    }
+    interface FeaturesCapabilitiesImportRulesUserCreateAndMatch {
+        /**
+         * (Optional) Whether to allow partial matching based on first and last names.
+         */
+        allowPartialMatch?: boolean;
+        /**
+         * (Optional) Whether imported new users are automatically activated.
+         */
+        autoActivateNewUsers?: boolean;
+        /**
+         * (Optional) Whether exact-matched users are automatically confirmed.
+         */
+        autoconfirmExactMatch?: boolean;
+        /**
+         * (Optional) Whether imported new users are automatically confirmed.
+         */
+        autoconfirmNewUsers?: boolean;
+        /**
+         * (Optional) Whether partially matched users are automatically confirmed.
+         */
+        autoconfirmPartialMatch?: boolean;
+        /**
+         * (Optional) Attribute used for exact matching (e.g., `USERNAME`, `EMAIL`).
+         */
+        exactMatchCriteria?: string;
+    }
+    interface FeaturesCapabilitiesImportSettings {
+        /**
+         * (Optional) Block for import schedule configuration:
+         */
+        schedule?: outputs.app.FeaturesCapabilitiesImportSettingsSchedule;
+        /**
+         * (Optional) Block for username configuration:
+         */
+        username?: outputs.app.FeaturesCapabilitiesImportSettingsUsername;
+    }
+    interface FeaturesCapabilitiesImportSettingsSchedule {
+        /**
+         * (Optional) Block for full import schedule:
+         */
+        fullImport?: outputs.app.FeaturesCapabilitiesImportSettingsScheduleFullImport;
+        /**
+         * (Optional) Block for incremental import schedule:
+         */
+        incrementalImport?: outputs.app.FeaturesCapabilitiesImportSettingsScheduleIncrementalImport;
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface FeaturesCapabilitiesImportSettingsScheduleFullImport {
+        /**
+         * (Optional) UNIX cron expression for incremental import schedule.
+         */
+        expression?: string;
+        /**
+         * (Optional) IANA timezone name for the schedule.
+         */
+        timezone?: string;
+    }
+    interface FeaturesCapabilitiesImportSettingsScheduleIncrementalImport {
+        /**
+         * (Optional) UNIX cron expression for incremental import schedule.
+         */
+        expression?: string;
+        /**
+         * (Optional) IANA timezone name for the schedule.
+         */
+        timezone?: string;
+    }
+    interface FeaturesCapabilitiesImportSettingsUsername {
+        /**
+         * (Optional) Okta Expression Language statement for custom username format.
+         */
+        usernameExpression?: string;
+        /**
+         * (Optional) Format for usernames (e.g., `EMAIL`, `CUSTOM`).
+         */
+        usernameFormat?: string;
+    }
+    interface FeaturesCapabilitiesUpdate {
+        /**
+         * (Optional) Block for deactivation lifecycle configuration:
+         */
+        lifecycleDeactivate?: outputs.app.FeaturesCapabilitiesUpdateLifecycleDeactivate;
+        /**
+         * (Optional) Block for password synchronization settings:
+         */
+        password?: outputs.app.FeaturesCapabilitiesUpdatePassword;
+        /**
+         * (Optional) Block for profile update settings:
+         */
+        profile?: outputs.app.FeaturesCapabilitiesUpdateProfile;
+    }
+    interface FeaturesCapabilitiesUpdateLifecycleDeactivate {
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface FeaturesCapabilitiesUpdatePassword {
+        /**
+         * (Optional) Determines password change behavior. Valid values are `CHANGE` or `KEEP_EXISTING`.
+         */
+        change?: string;
+        /**
+         * (Optional) Determines password source. Valid values are `OKTA` or `RANDOM`.
+         */
+        seed?: string;
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface FeaturesCapabilitiesUpdateProfile {
+        /**
+         * The status of the feature. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status?: string;
+    }
+    interface GetConnectionProfile {
+        /**
+         * Defines the method of authentication.
+         */
+        authScheme: string;
+    }
+    interface GetFeaturesCapabilities {
+        /**
+         * Block for create lifecycle settings:
+         */
+        create?: outputs.app.GetFeaturesCapabilitiesCreate;
+        /**
+         * Block for import rules configuration:
+         */
+        importRules?: outputs.app.GetFeaturesCapabilitiesImportRules;
+        /**
+         * Block for import settings configuration:
+         */
+        importSettings?: outputs.app.GetFeaturesCapabilitiesImportSettings;
+        /**
+         * Block for update settings:
+         */
+        update?: outputs.app.GetFeaturesCapabilitiesUpdate;
+    }
+    interface GetFeaturesCapabilitiesCreate {
+        /**
+         * Block for create lifecycle configuration:
+         */
+        lifecycleCreate?: outputs.app.GetFeaturesCapabilitiesCreateLifecycleCreate;
+    }
+    interface GetFeaturesCapabilitiesCreateLifecycleCreate {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status: string;
+    }
+    interface GetFeaturesCapabilitiesImportRules {
+        /**
+         * Block for user matching and creation rules:
+         */
+        userCreateAndMatch?: outputs.app.GetFeaturesCapabilitiesImportRulesUserCreateAndMatch;
+    }
+    interface GetFeaturesCapabilitiesImportRulesUserCreateAndMatch {
+        /**
+         * (Boolean) Whether to allow partial matching based on first and last names.
+         */
+        allowPartialMatch: boolean;
+        /**
+         * (Boolean) Whether imported new users are automatically activated.
+         */
+        autoActivateNewUsers: boolean;
+        /**
+         * (Boolean) Whether exact-matched users are automatically confirmed.
+         */
+        autoconfirmExactMatch: boolean;
+        /**
+         * (Boolean) Whether imported new users are automatically confirmed.
+         */
+        autoconfirmNewUsers: boolean;
+        /**
+         * (Boolean) Whether partially matched users are automatically confirmed.
+         */
+        autoconfirmPartialMatch: boolean;
+        /**
+         * (String) Attribute used for exact matching (e.g., `USERNAME`, `EMAIL`).
+         */
+        exactMatchCriteria: string;
+    }
+    interface GetFeaturesCapabilitiesImportSettings {
+        /**
+         * Block for import schedule configuration:
+         */
+        schedule?: outputs.app.GetFeaturesCapabilitiesImportSettingsSchedule;
+        /**
+         * Block for username configuration:
+         */
+        username?: outputs.app.GetFeaturesCapabilitiesImportSettingsUsername;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsSchedule {
+        /**
+         * Block for full import schedule:
+         */
+        fullImport?: outputs.app.GetFeaturesCapabilitiesImportSettingsScheduleFullImport;
+        /**
+         * Block for incremental import schedule:
+         */
+        incrementalImport?: outputs.app.GetFeaturesCapabilitiesImportSettingsScheduleIncrementalImport;
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status: string;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsScheduleFullImport {
+        /**
+         * (String) UNIX cron expression for incremental import schedule.
+         */
+        expression: string;
+        /**
+         * (String) IANA timezone name for the schedule.
+         */
+        timezone: string;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsScheduleIncrementalImport {
+        /**
+         * (String) UNIX cron expression for incremental import schedule.
+         */
+        expression: string;
+        /**
+         * (String) IANA timezone name for the schedule.
+         */
+        timezone: string;
+    }
+    interface GetFeaturesCapabilitiesImportSettingsUsername {
+        /**
+         * (String) Okta Expression Language statement for custom username format.
+         */
+        usernameExpression: string;
+        /**
+         * (String) Format for usernames (e.g., `EMAIL`, `CUSTOM`).
+         */
+        usernameFormat: string;
+    }
+    interface GetFeaturesCapabilitiesUpdate {
+        /**
+         * Block for deactivation lifecycle configuration:
+         */
+        lifecycleDeactivate?: outputs.app.GetFeaturesCapabilitiesUpdateLifecycleDeactivate;
+        /**
+         * Block for password synchronization settings:
+         */
+        password?: outputs.app.GetFeaturesCapabilitiesUpdatePassword;
+        /**
+         * Block for profile update settings:
+         */
+        profile?: outputs.app.GetFeaturesCapabilitiesUpdateProfile;
+    }
+    interface GetFeaturesCapabilitiesUpdateLifecycleDeactivate {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status: string;
+    }
+    interface GetFeaturesCapabilitiesUpdatePassword {
+        /**
+         * (String) Determines password change behavior. Valid values are `CHANGE` or `KEEP_EXISTING`.
+         */
+        change: string;
+        /**
+         * (String) Determines password source. Valid values are `OKTA` or `RANDOM`.
+         */
+        seed: string;
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status: string;
+    }
+    interface GetFeaturesCapabilitiesUpdateProfile {
+        /**
+         * (String) Status of the import schedule. Valid values are `ENABLED` or `DISABLED`.
+         */
+        status: string;
+    }
     interface GetSamlAttributeStatement {
         /**
          * Type of group attribute filter