@pulumi/okta 6.6.0-alpha.1777359759 → 6.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +3 -3
- package/policy/getRulePassword.d.ts +146 -0
- package/policy/getRulePassword.js +70 -0
- package/policy/getRulePassword.js.map +1 -0
- package/policy/index.d.ts +3 -0
- package/policy/index.js +4 -1
- package/policy/index.js.map +1 -1
- package/policy/rulePassword.d.ts +113 -3
- package/policy/rulePassword.js +58 -0
- package/policy/rulePassword.js.map +1 -1
- package/types/input.d.ts +29 -1
- package/types/output.d.ts +58 -2
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/okta",
|
|
3
|
-
"version": "6.6.0
|
|
4
|
-
"description": "A Pulumi package for creating and managing okta resources.. Based on terraform-provider-okta: version v6.
|
|
3
|
+
"version": "6.6.0",
|
|
4
|
+
"description": "A Pulumi package for creating and managing okta resources.. Based on terraform-provider-okta: version v6.10.0",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
7
7
|
"okta"
|
|
@@ -23,6 +23,6 @@
|
|
|
23
23
|
"pulumi": {
|
|
24
24
|
"resource": true,
|
|
25
25
|
"name": "okta",
|
|
26
|
-
"version": "6.6.0
|
|
26
|
+
"version": "6.6.0"
|
|
27
27
|
}
|
|
28
28
|
}
|
|
@@ -0,0 +1,146 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
import * as outputs from "../types/output";
|
|
3
|
+
/**
|
|
4
|
+
* Get a Password Policy Rule from Okta.
|
|
5
|
+
*
|
|
6
|
+
* ## Example Usage
|
|
7
|
+
*
|
|
8
|
+
* ```typescript
|
|
9
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
10
|
+
* import * as okta from "@pulumi/okta";
|
|
11
|
+
*
|
|
12
|
+
* const password = okta.policy.getDefaultPolicy({
|
|
13
|
+
* type: "PASSWORD",
|
|
14
|
+
* });
|
|
15
|
+
* const exampleRulePassword = new okta.policy.RulePassword("example", {
|
|
16
|
+
* policyId: password.then(password => password.id),
|
|
17
|
+
* name: "My Password Rule",
|
|
18
|
+
* });
|
|
19
|
+
* const example = pulumi.all([password, exampleRulePassword.id]).apply(([password, id]) => okta.policy.getRulePasswordOutput({
|
|
20
|
+
* policyId: password.id,
|
|
21
|
+
* id: id,
|
|
22
|
+
* }));
|
|
23
|
+
* ```
|
|
24
|
+
*/
|
|
25
|
+
export declare function getRulePassword(args: GetRulePasswordArgs, opts?: pulumi.InvokeOptions): Promise<GetRulePasswordResult>;
|
|
26
|
+
/**
|
|
27
|
+
* A collection of arguments for invoking getRulePassword.
|
|
28
|
+
*/
|
|
29
|
+
export interface GetRulePasswordArgs {
|
|
30
|
+
/**
|
|
31
|
+
* The ID of this resource.
|
|
32
|
+
*/
|
|
33
|
+
id: string;
|
|
34
|
+
/**
|
|
35
|
+
* Name of the rule.
|
|
36
|
+
*/
|
|
37
|
+
name?: string;
|
|
38
|
+
/**
|
|
39
|
+
* ID of the Policy owning this rule.
|
|
40
|
+
*/
|
|
41
|
+
policyId: string;
|
|
42
|
+
}
|
|
43
|
+
/**
|
|
44
|
+
* A collection of values returned by getRulePassword.
|
|
45
|
+
*/
|
|
46
|
+
export interface GetRulePasswordResult {
|
|
47
|
+
readonly groupsExcludeds: string[];
|
|
48
|
+
readonly groupsIncludeds: string[];
|
|
49
|
+
/**
|
|
50
|
+
* The ID of this resource.
|
|
51
|
+
*/
|
|
52
|
+
readonly id: string;
|
|
53
|
+
/**
|
|
54
|
+
* Name of the rule.
|
|
55
|
+
*/
|
|
56
|
+
readonly name: string;
|
|
57
|
+
/**
|
|
58
|
+
* Network selection mode: `ANYWHERE`, `ZONE`.
|
|
59
|
+
*/
|
|
60
|
+
readonly networkConnection: string;
|
|
61
|
+
/**
|
|
62
|
+
* Network zones to exclude (when `networkConnection` = `ZONE`).
|
|
63
|
+
*/
|
|
64
|
+
readonly networkExcludes: string[];
|
|
65
|
+
/**
|
|
66
|
+
* Network zones to include (when `networkConnection` = `ZONE`).
|
|
67
|
+
*/
|
|
68
|
+
readonly networkIncludes: string[];
|
|
69
|
+
/**
|
|
70
|
+
* Whether a user is allowed to change their password: `ALLOW` or `DENY`.
|
|
71
|
+
*/
|
|
72
|
+
readonly passwordChange: string;
|
|
73
|
+
/**
|
|
74
|
+
* Whether a user is allowed to reset their password: `ALLOW` or `DENY`.
|
|
75
|
+
*/
|
|
76
|
+
readonly passwordReset: string;
|
|
77
|
+
/**
|
|
78
|
+
* Whether SSPR access is governed by an authentication policy or legacy behavior. Options: `LEGACY`, `AUTH_POLICY`.
|
|
79
|
+
*/
|
|
80
|
+
readonly passwordResetAccessControl: string;
|
|
81
|
+
/**
|
|
82
|
+
* Self-service password reset (SSPR) requirement settings.
|
|
83
|
+
*/
|
|
84
|
+
readonly passwordResetRequirements: outputs.policy.GetRulePasswordPasswordResetRequirement[];
|
|
85
|
+
/**
|
|
86
|
+
* Whether a user is allowed to unlock their account: `ALLOW` or `DENY`.
|
|
87
|
+
*/
|
|
88
|
+
readonly passwordUnlock: string;
|
|
89
|
+
/**
|
|
90
|
+
* ID of the Policy owning this rule.
|
|
91
|
+
*/
|
|
92
|
+
readonly policyId: string;
|
|
93
|
+
/**
|
|
94
|
+
* Priority of the rule.
|
|
95
|
+
*/
|
|
96
|
+
readonly priority: number;
|
|
97
|
+
/**
|
|
98
|
+
* Status of the rule: `ACTIVE` or `INACTIVE`.
|
|
99
|
+
*/
|
|
100
|
+
readonly status: string;
|
|
101
|
+
/**
|
|
102
|
+
* User IDs excluded from this rule.
|
|
103
|
+
*/
|
|
104
|
+
readonly usersExcludeds: string[];
|
|
105
|
+
readonly usersIncludeds: string[];
|
|
106
|
+
}
|
|
107
|
+
/**
|
|
108
|
+
* Get a Password Policy Rule from Okta.
|
|
109
|
+
*
|
|
110
|
+
* ## Example Usage
|
|
111
|
+
*
|
|
112
|
+
* ```typescript
|
|
113
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
114
|
+
* import * as okta from "@pulumi/okta";
|
|
115
|
+
*
|
|
116
|
+
* const password = okta.policy.getDefaultPolicy({
|
|
117
|
+
* type: "PASSWORD",
|
|
118
|
+
* });
|
|
119
|
+
* const exampleRulePassword = new okta.policy.RulePassword("example", {
|
|
120
|
+
* policyId: password.then(password => password.id),
|
|
121
|
+
* name: "My Password Rule",
|
|
122
|
+
* });
|
|
123
|
+
* const example = pulumi.all([password, exampleRulePassword.id]).apply(([password, id]) => okta.policy.getRulePasswordOutput({
|
|
124
|
+
* policyId: password.id,
|
|
125
|
+
* id: id,
|
|
126
|
+
* }));
|
|
127
|
+
* ```
|
|
128
|
+
*/
|
|
129
|
+
export declare function getRulePasswordOutput(args: GetRulePasswordOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetRulePasswordResult>;
|
|
130
|
+
/**
|
|
131
|
+
* A collection of arguments for invoking getRulePassword.
|
|
132
|
+
*/
|
|
133
|
+
export interface GetRulePasswordOutputArgs {
|
|
134
|
+
/**
|
|
135
|
+
* The ID of this resource.
|
|
136
|
+
*/
|
|
137
|
+
id: pulumi.Input<string>;
|
|
138
|
+
/**
|
|
139
|
+
* Name of the rule.
|
|
140
|
+
*/
|
|
141
|
+
name?: pulumi.Input<string>;
|
|
142
|
+
/**
|
|
143
|
+
* ID of the Policy owning this rule.
|
|
144
|
+
*/
|
|
145
|
+
policyId: pulumi.Input<string>;
|
|
146
|
+
}
|
|
@@ -0,0 +1,70 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.getRulePasswordOutput = exports.getRulePassword = void 0;
|
|
6
|
+
const pulumi = require("@pulumi/pulumi");
|
|
7
|
+
const utilities = require("../utilities");
|
|
8
|
+
/**
|
|
9
|
+
* Get a Password Policy Rule from Okta.
|
|
10
|
+
*
|
|
11
|
+
* ## Example Usage
|
|
12
|
+
*
|
|
13
|
+
* ```typescript
|
|
14
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
15
|
+
* import * as okta from "@pulumi/okta";
|
|
16
|
+
*
|
|
17
|
+
* const password = okta.policy.getDefaultPolicy({
|
|
18
|
+
* type: "PASSWORD",
|
|
19
|
+
* });
|
|
20
|
+
* const exampleRulePassword = new okta.policy.RulePassword("example", {
|
|
21
|
+
* policyId: password.then(password => password.id),
|
|
22
|
+
* name: "My Password Rule",
|
|
23
|
+
* });
|
|
24
|
+
* const example = pulumi.all([password, exampleRulePassword.id]).apply(([password, id]) => okta.policy.getRulePasswordOutput({
|
|
25
|
+
* policyId: password.id,
|
|
26
|
+
* id: id,
|
|
27
|
+
* }));
|
|
28
|
+
* ```
|
|
29
|
+
*/
|
|
30
|
+
function getRulePassword(args, opts) {
|
|
31
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
|
|
32
|
+
return pulumi.runtime.invoke("okta:policy/getRulePassword:getRulePassword", {
|
|
33
|
+
"id": args.id,
|
|
34
|
+
"name": args.name,
|
|
35
|
+
"policyId": args.policyId,
|
|
36
|
+
}, opts);
|
|
37
|
+
}
|
|
38
|
+
exports.getRulePassword = getRulePassword;
|
|
39
|
+
/**
|
|
40
|
+
* Get a Password Policy Rule from Okta.
|
|
41
|
+
*
|
|
42
|
+
* ## Example Usage
|
|
43
|
+
*
|
|
44
|
+
* ```typescript
|
|
45
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
46
|
+
* import * as okta from "@pulumi/okta";
|
|
47
|
+
*
|
|
48
|
+
* const password = okta.policy.getDefaultPolicy({
|
|
49
|
+
* type: "PASSWORD",
|
|
50
|
+
* });
|
|
51
|
+
* const exampleRulePassword = new okta.policy.RulePassword("example", {
|
|
52
|
+
* policyId: password.then(password => password.id),
|
|
53
|
+
* name: "My Password Rule",
|
|
54
|
+
* });
|
|
55
|
+
* const example = pulumi.all([password, exampleRulePassword.id]).apply(([password, id]) => okta.policy.getRulePasswordOutput({
|
|
56
|
+
* policyId: password.id,
|
|
57
|
+
* id: id,
|
|
58
|
+
* }));
|
|
59
|
+
* ```
|
|
60
|
+
*/
|
|
61
|
+
function getRulePasswordOutput(args, opts) {
|
|
62
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
|
|
63
|
+
return pulumi.runtime.invokeOutput("okta:policy/getRulePassword:getRulePassword", {
|
|
64
|
+
"id": args.id,
|
|
65
|
+
"name": args.name,
|
|
66
|
+
"policyId": args.policyId,
|
|
67
|
+
}, opts);
|
|
68
|
+
}
|
|
69
|
+
exports.getRulePasswordOutput = getRulePasswordOutput;
|
|
70
|
+
//# sourceMappingURL=getRulePassword.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"getRulePassword.js","sourceRoot":"","sources":["../../policy/getRulePassword.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,eAAe,CAAC,IAAyB,EAAE,IAA2B;IAClF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,6CAA6C,EAAE;QACxE,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,0CAOC;AAoFD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,qBAAqB,CAAC,IAA+B,EAAE,IAAiC;IACpG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,6CAA6C,EAAE;QAC9E,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,sDAOC"}
|
package/policy/index.d.ts
CHANGED
|
@@ -19,6 +19,9 @@ export declare const getDefaultPolicyOutput: typeof import("./getDefaultPolicy")
|
|
|
19
19
|
export { GetPolicyArgs, GetPolicyResult, GetPolicyOutputArgs } from "./getPolicy";
|
|
20
20
|
export declare const getPolicy: typeof import("./getPolicy").getPolicy;
|
|
21
21
|
export declare const getPolicyOutput: typeof import("./getPolicy").getPolicyOutput;
|
|
22
|
+
export { GetRulePasswordArgs, GetRulePasswordResult, GetRulePasswordOutputArgs } from "./getRulePassword";
|
|
23
|
+
export declare const getRulePassword: typeof import("./getRulePassword").getRulePassword;
|
|
24
|
+
export declare const getRulePasswordOutput: typeof import("./getRulePassword").getRulePasswordOutput;
|
|
22
25
|
export { MfaArgs, MfaState } from "./mfa";
|
|
23
26
|
export type Mfa = import("./mfa").Mfa;
|
|
24
27
|
export declare const Mfa: typeof import("./mfa").Mfa;
|
package/policy/index.js
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.Signon = exports.RuleSignon = exports.RulePassword = exports.RuleMfa = exports.RuleIdpDiscovery = exports.Password = exports.Mfa = exports.getPolicyOutput = exports.getPolicy = exports.getDefaultPolicyOutput = exports.getDefaultPolicy = exports.DeviceAssuranceWindows = exports.DeviceAssuranceMacos = exports.DeviceAssuranceIos = exports.DeviceAssuranceChromeos = exports.DeviceAssuranceAndroid = void 0;
|
|
5
|
+
exports.Signon = exports.RuleSignon = exports.RulePassword = exports.RuleMfa = exports.RuleIdpDiscovery = exports.Password = exports.Mfa = exports.getRulePasswordOutput = exports.getRulePassword = exports.getPolicyOutput = exports.getPolicy = exports.getDefaultPolicyOutput = exports.getDefaultPolicy = exports.DeviceAssuranceWindows = exports.DeviceAssuranceMacos = exports.DeviceAssuranceIos = exports.DeviceAssuranceChromeos = exports.DeviceAssuranceAndroid = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
exports.DeviceAssuranceAndroid = null;
|
|
@@ -21,6 +21,9 @@ utilities.lazyLoad(exports, ["getDefaultPolicy", "getDefaultPolicyOutput"], () =
|
|
|
21
21
|
exports.getPolicy = null;
|
|
22
22
|
exports.getPolicyOutput = null;
|
|
23
23
|
utilities.lazyLoad(exports, ["getPolicy", "getPolicyOutput"], () => require("./getPolicy"));
|
|
24
|
+
exports.getRulePassword = null;
|
|
25
|
+
exports.getRulePasswordOutput = null;
|
|
26
|
+
utilities.lazyLoad(exports, ["getRulePassword", "getRulePasswordOutput"], () => require("./getRulePassword"));
|
|
24
27
|
exports.Mfa = null;
|
|
25
28
|
utilities.lazyLoad(exports, ["Mfa"], () => require("./mfa"));
|
|
26
29
|
exports.Password = null;
|
package/policy/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../policy/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAItF,QAAA,uBAAuB,GAAuE,IAAW,CAAC;AACvH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAIxF,QAAA,kBAAkB,GAA6D,IAAW,CAAC;AACxG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAI9E,QAAA,oBAAoB,GAAiE,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAIlF,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAGtF,QAAA,gBAAgB,GAAyD,IAAW,CAAC;AACrF,QAAA,sBAAsB,GAA+D,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAGnG,QAAA,SAAS,GAA2C,IAAW,CAAC;AAChE,QAAA,eAAe,GAAiD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,WAAW,EAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../policy/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAItF,QAAA,uBAAuB,GAAuE,IAAW,CAAC;AACvH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAIxF,QAAA,kBAAkB,GAA6D,IAAW,CAAC;AACxG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAI9E,QAAA,oBAAoB,GAAiE,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAIlF,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAGtF,QAAA,gBAAgB,GAAyD,IAAW,CAAC;AACrF,QAAA,sBAAsB,GAA+D,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAGnG,QAAA,SAAS,GAA2C,IAAW,CAAC;AAChE,QAAA,eAAe,GAAiD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,WAAW,EAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAG9E,QAAA,eAAe,GAAuD,IAAW,CAAC;AAClF,QAAA,qBAAqB,GAA6D,IAAW,CAAC;AAC3G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAIhG,QAAA,GAAG,GAA+B,IAAW,CAAC;AAC3D,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAIhD,QAAA,QAAQ,GAAyC,IAAW,CAAC;AAC1E,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAI1D,QAAA,gBAAgB,GAAyD,IAAW,CAAC;AAClG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAI1E,QAAA,OAAO,GAAuC,IAAW,CAAC;AACvE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AAIxD,QAAA,YAAY,GAAiD,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIlE,QAAA,UAAU,GAA6C,IAAW,CAAC;AAChF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAI9D,QAAA,MAAM,GAAqC,IAAW,CAAC;AACpE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;AAGnE,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,2DAA2D;gBAC5D,OAAO,IAAI,8BAAsB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,KAAK,6DAA6D;gBAC9D,OAAO,IAAI,+BAAuB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACrE,KAAK,mDAAmD;gBACpD,OAAO,IAAI,0BAAkB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAChE,KAAK,uDAAuD;gBACxD,OAAO,IAAI,4BAAoB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClE,KAAK,2DAA2D;gBAC5D,OAAO,IAAI,8BAAsB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,KAAK,qBAAqB;gBACtB,OAAO,IAAI,WAAG,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACjD,KAAK,+BAA+B;gBAChC,OAAO,IAAI,gBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtD,KAAK,+CAA+C;gBAChD,OAAO,IAAI,wBAAgB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC9D,KAAK,6BAA6B;gBAC9B,OAAO,IAAI,eAAO,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACrD,KAAK,uCAAuC;gBACxC,OAAO,IAAI,oBAAY,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1D,KAAK,mCAAmC;gBACpC,OAAO,IAAI,kBAAU,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACxD,KAAK,2BAA2B;gBAC5B,OAAO,IAAI,cAAM,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACpD;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAA;AACvF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,gCAAgC,EAAE,OAAO,CAAC,CAAA;AACxF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,2BAA2B,EAAE,OAAO,CAAC,CAAA;AACnF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,6BAA6B,EAAE,OAAO,CAAC,CAAA;AACrF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAA;AACvF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;AACpE,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;AACzE,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA;AACjF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAA;AACxE,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAA;AAC7E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;AAC3E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAA"}
|
package/policy/rulePassword.d.ts
CHANGED
|
@@ -1,7 +1,57 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
import * as inputs from "../types/input";
|
|
3
|
+
import * as outputs from "../types/output";
|
|
2
4
|
/**
|
|
3
5
|
* Creates a Password Policy Rule. This resource allows you to create and configure a Password Policy Rule.
|
|
4
6
|
*
|
|
7
|
+
* ## Example Usage
|
|
8
|
+
*
|
|
9
|
+
* ### AUTH_POLICY access control (delegates SSPR to authentication policy rules)
|
|
10
|
+
*
|
|
11
|
+
* ```typescript
|
|
12
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
13
|
+
* import * as okta from "@pulumi/okta";
|
|
14
|
+
*
|
|
15
|
+
* const exampleAuthPolicy = new okta.policy.RulePassword("example_auth_policy", {
|
|
16
|
+
* policyId: "<policy_id>",
|
|
17
|
+
* name: "example_auth_policy_rule",
|
|
18
|
+
* status: "ACTIVE",
|
|
19
|
+
* passwordChange: "ALLOW",
|
|
20
|
+
* passwordReset: "ALLOW",
|
|
21
|
+
* passwordUnlock: "DENY",
|
|
22
|
+
* passwordResetAccessControl: "AUTH_POLICY",
|
|
23
|
+
* });
|
|
24
|
+
* ```
|
|
25
|
+
*
|
|
26
|
+
* ### LEGACY access control with primary methods and step-up
|
|
27
|
+
*
|
|
28
|
+
* ```typescript
|
|
29
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
30
|
+
* import * as okta from "@pulumi/okta";
|
|
31
|
+
*
|
|
32
|
+
* const exampleLegacy = new okta.policy.RulePassword("example_legacy", {
|
|
33
|
+
* policyId: "<policy_id>",
|
|
34
|
+
* name: "example_legacy_rule",
|
|
35
|
+
* status: "ACTIVE",
|
|
36
|
+
* passwordChange: "ALLOW",
|
|
37
|
+
* passwordReset: "ALLOW",
|
|
38
|
+
* passwordUnlock: "DENY",
|
|
39
|
+
* passwordResetAccessControl: "LEGACY",
|
|
40
|
+
* passwordResetRequirement: {
|
|
41
|
+
* methodConstraints: [{
|
|
42
|
+
* method: "otp",
|
|
43
|
+
* allowedAuthenticators: ["google_otp"],
|
|
44
|
+
* }],
|
|
45
|
+
* primaryMethods: [
|
|
46
|
+
* "otp",
|
|
47
|
+
* "email",
|
|
48
|
+
* ],
|
|
49
|
+
* stepUpEnabled: true,
|
|
50
|
+
* stepUpMethods: ["security_question"],
|
|
51
|
+
* },
|
|
52
|
+
* });
|
|
53
|
+
* ```
|
|
54
|
+
*
|
|
5
55
|
* ## Import
|
|
6
56
|
*
|
|
7
57
|
* ```sh
|
|
@@ -24,12 +74,20 @@ export declare class RulePassword extends pulumi.CustomResource {
|
|
|
24
74
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
25
75
|
*/
|
|
26
76
|
static isInstance(obj: any): obj is RulePassword;
|
|
77
|
+
/**
|
|
78
|
+
* Set of Group IDs to exclude from this rule.
|
|
79
|
+
*/
|
|
80
|
+
readonly groupsExcludeds: pulumi.Output<string[] | undefined>;
|
|
81
|
+
/**
|
|
82
|
+
* Set of Group IDs to include in this rule.
|
|
83
|
+
*/
|
|
84
|
+
readonly groupsIncludeds: pulumi.Output<string[] | undefined>;
|
|
27
85
|
/**
|
|
28
86
|
* Policy Rule Name
|
|
29
87
|
*/
|
|
30
88
|
readonly name: pulumi.Output<string>;
|
|
31
89
|
/**
|
|
32
|
-
* Network selection mode: `ANYWHERE`, `ZONE
|
|
90
|
+
* Network selection mode: `ANYWHERE`, `ZONE`. Default: `ANYWHERE`
|
|
33
91
|
*/
|
|
34
92
|
readonly networkConnection: pulumi.Output<string | undefined>;
|
|
35
93
|
/**
|
|
@@ -48,6 +106,14 @@ export declare class RulePassword extends pulumi.CustomResource {
|
|
|
48
106
|
* Allow or deny a user to reset their password: `ALLOW` or `DENY`. Default: `ALLOW`
|
|
49
107
|
*/
|
|
50
108
|
readonly passwordReset: pulumi.Output<string | undefined>;
|
|
109
|
+
/**
|
|
110
|
+
* Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: `LEGACY`, `AUTH_POLICY`.
|
|
111
|
+
*/
|
|
112
|
+
readonly passwordResetAccessControl: pulumi.Output<string | undefined>;
|
|
113
|
+
/**
|
|
114
|
+
* Self-service password reset (SSPR) requirement settings. Use only when `passwordResetAccessControl = "LEGACY"`.
|
|
115
|
+
*/
|
|
116
|
+
readonly passwordResetRequirement: pulumi.Output<outputs.policy.RulePasswordPasswordResetRequirement | undefined>;
|
|
51
117
|
/**
|
|
52
118
|
* Allow or deny a user to unlock. Default: `DENY`
|
|
53
119
|
*/
|
|
@@ -68,6 +134,10 @@ export declare class RulePassword extends pulumi.CustomResource {
|
|
|
68
134
|
* Set of User IDs to Exclude
|
|
69
135
|
*/
|
|
70
136
|
readonly usersExcludeds: pulumi.Output<string[] | undefined>;
|
|
137
|
+
/**
|
|
138
|
+
* Set of User IDs to include in this rule.
|
|
139
|
+
*/
|
|
140
|
+
readonly usersIncludeds: pulumi.Output<string[] | undefined>;
|
|
71
141
|
/**
|
|
72
142
|
* Create a RulePassword resource with the given unique name, arguments, and options.
|
|
73
143
|
*
|
|
@@ -81,12 +151,20 @@ export declare class RulePassword extends pulumi.CustomResource {
|
|
|
81
151
|
* Input properties used for looking up and filtering RulePassword resources.
|
|
82
152
|
*/
|
|
83
153
|
export interface RulePasswordState {
|
|
154
|
+
/**
|
|
155
|
+
* Set of Group IDs to exclude from this rule.
|
|
156
|
+
*/
|
|
157
|
+
groupsExcludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
158
|
+
/**
|
|
159
|
+
* Set of Group IDs to include in this rule.
|
|
160
|
+
*/
|
|
161
|
+
groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
84
162
|
/**
|
|
85
163
|
* Policy Rule Name
|
|
86
164
|
*/
|
|
87
165
|
name?: pulumi.Input<string>;
|
|
88
166
|
/**
|
|
89
|
-
* Network selection mode: `ANYWHERE`, `ZONE
|
|
167
|
+
* Network selection mode: `ANYWHERE`, `ZONE`. Default: `ANYWHERE`
|
|
90
168
|
*/
|
|
91
169
|
networkConnection?: pulumi.Input<string>;
|
|
92
170
|
/**
|
|
@@ -105,6 +183,14 @@ export interface RulePasswordState {
|
|
|
105
183
|
* Allow or deny a user to reset their password: `ALLOW` or `DENY`. Default: `ALLOW`
|
|
106
184
|
*/
|
|
107
185
|
passwordReset?: pulumi.Input<string>;
|
|
186
|
+
/**
|
|
187
|
+
* Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: `LEGACY`, `AUTH_POLICY`.
|
|
188
|
+
*/
|
|
189
|
+
passwordResetAccessControl?: pulumi.Input<string>;
|
|
190
|
+
/**
|
|
191
|
+
* Self-service password reset (SSPR) requirement settings. Use only when `passwordResetAccessControl = "LEGACY"`.
|
|
192
|
+
*/
|
|
193
|
+
passwordResetRequirement?: pulumi.Input<inputs.policy.RulePasswordPasswordResetRequirement>;
|
|
108
194
|
/**
|
|
109
195
|
* Allow or deny a user to unlock. Default: `DENY`
|
|
110
196
|
*/
|
|
@@ -125,17 +211,29 @@ export interface RulePasswordState {
|
|
|
125
211
|
* Set of User IDs to Exclude
|
|
126
212
|
*/
|
|
127
213
|
usersExcludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
214
|
+
/**
|
|
215
|
+
* Set of User IDs to include in this rule.
|
|
216
|
+
*/
|
|
217
|
+
usersIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
128
218
|
}
|
|
129
219
|
/**
|
|
130
220
|
* The set of arguments for constructing a RulePassword resource.
|
|
131
221
|
*/
|
|
132
222
|
export interface RulePasswordArgs {
|
|
223
|
+
/**
|
|
224
|
+
* Set of Group IDs to exclude from this rule.
|
|
225
|
+
*/
|
|
226
|
+
groupsExcludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
227
|
+
/**
|
|
228
|
+
* Set of Group IDs to include in this rule.
|
|
229
|
+
*/
|
|
230
|
+
groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
133
231
|
/**
|
|
134
232
|
* Policy Rule Name
|
|
135
233
|
*/
|
|
136
234
|
name?: pulumi.Input<string>;
|
|
137
235
|
/**
|
|
138
|
-
* Network selection mode: `ANYWHERE`, `ZONE
|
|
236
|
+
* Network selection mode: `ANYWHERE`, `ZONE`. Default: `ANYWHERE`
|
|
139
237
|
*/
|
|
140
238
|
networkConnection?: pulumi.Input<string>;
|
|
141
239
|
/**
|
|
@@ -154,6 +252,14 @@ export interface RulePasswordArgs {
|
|
|
154
252
|
* Allow or deny a user to reset their password: `ALLOW` or `DENY`. Default: `ALLOW`
|
|
155
253
|
*/
|
|
156
254
|
passwordReset?: pulumi.Input<string>;
|
|
255
|
+
/**
|
|
256
|
+
* Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: `LEGACY`, `AUTH_POLICY`.
|
|
257
|
+
*/
|
|
258
|
+
passwordResetAccessControl?: pulumi.Input<string>;
|
|
259
|
+
/**
|
|
260
|
+
* Self-service password reset (SSPR) requirement settings. Use only when `passwordResetAccessControl = "LEGACY"`.
|
|
261
|
+
*/
|
|
262
|
+
passwordResetRequirement?: pulumi.Input<inputs.policy.RulePasswordPasswordResetRequirement>;
|
|
157
263
|
/**
|
|
158
264
|
* Allow or deny a user to unlock. Default: `DENY`
|
|
159
265
|
*/
|
|
@@ -174,4 +280,8 @@ export interface RulePasswordArgs {
|
|
|
174
280
|
* Set of User IDs to Exclude
|
|
175
281
|
*/
|
|
176
282
|
usersExcludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
283
|
+
/**
|
|
284
|
+
* Set of User IDs to include in this rule.
|
|
285
|
+
*/
|
|
286
|
+
usersIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
177
287
|
}
|
package/policy/rulePassword.js
CHANGED
|
@@ -8,6 +8,54 @@ const utilities = require("../utilities");
|
|
|
8
8
|
/**
|
|
9
9
|
* Creates a Password Policy Rule. This resource allows you to create and configure a Password Policy Rule.
|
|
10
10
|
*
|
|
11
|
+
* ## Example Usage
|
|
12
|
+
*
|
|
13
|
+
* ### AUTH_POLICY access control (delegates SSPR to authentication policy rules)
|
|
14
|
+
*
|
|
15
|
+
* ```typescript
|
|
16
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
17
|
+
* import * as okta from "@pulumi/okta";
|
|
18
|
+
*
|
|
19
|
+
* const exampleAuthPolicy = new okta.policy.RulePassword("example_auth_policy", {
|
|
20
|
+
* policyId: "<policy_id>",
|
|
21
|
+
* name: "example_auth_policy_rule",
|
|
22
|
+
* status: "ACTIVE",
|
|
23
|
+
* passwordChange: "ALLOW",
|
|
24
|
+
* passwordReset: "ALLOW",
|
|
25
|
+
* passwordUnlock: "DENY",
|
|
26
|
+
* passwordResetAccessControl: "AUTH_POLICY",
|
|
27
|
+
* });
|
|
28
|
+
* ```
|
|
29
|
+
*
|
|
30
|
+
* ### LEGACY access control with primary methods and step-up
|
|
31
|
+
*
|
|
32
|
+
* ```typescript
|
|
33
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
34
|
+
* import * as okta from "@pulumi/okta";
|
|
35
|
+
*
|
|
36
|
+
* const exampleLegacy = new okta.policy.RulePassword("example_legacy", {
|
|
37
|
+
* policyId: "<policy_id>",
|
|
38
|
+
* name: "example_legacy_rule",
|
|
39
|
+
* status: "ACTIVE",
|
|
40
|
+
* passwordChange: "ALLOW",
|
|
41
|
+
* passwordReset: "ALLOW",
|
|
42
|
+
* passwordUnlock: "DENY",
|
|
43
|
+
* passwordResetAccessControl: "LEGACY",
|
|
44
|
+
* passwordResetRequirement: {
|
|
45
|
+
* methodConstraints: [{
|
|
46
|
+
* method: "otp",
|
|
47
|
+
* allowedAuthenticators: ["google_otp"],
|
|
48
|
+
* }],
|
|
49
|
+
* primaryMethods: [
|
|
50
|
+
* "otp",
|
|
51
|
+
* "email",
|
|
52
|
+
* ],
|
|
53
|
+
* stepUpEnabled: true,
|
|
54
|
+
* stepUpMethods: ["security_question"],
|
|
55
|
+
* },
|
|
56
|
+
* });
|
|
57
|
+
* ```
|
|
58
|
+
*
|
|
11
59
|
* ## Import
|
|
12
60
|
*
|
|
13
61
|
* ```sh
|
|
@@ -42,31 +90,41 @@ class RulePassword extends pulumi.CustomResource {
|
|
|
42
90
|
opts = opts || {};
|
|
43
91
|
if (opts.id) {
|
|
44
92
|
const state = argsOrState;
|
|
93
|
+
resourceInputs["groupsExcludeds"] = state?.groupsExcludeds;
|
|
94
|
+
resourceInputs["groupsIncludeds"] = state?.groupsIncludeds;
|
|
45
95
|
resourceInputs["name"] = state?.name;
|
|
46
96
|
resourceInputs["networkConnection"] = state?.networkConnection;
|
|
47
97
|
resourceInputs["networkExcludes"] = state?.networkExcludes;
|
|
48
98
|
resourceInputs["networkIncludes"] = state?.networkIncludes;
|
|
49
99
|
resourceInputs["passwordChange"] = state?.passwordChange;
|
|
50
100
|
resourceInputs["passwordReset"] = state?.passwordReset;
|
|
101
|
+
resourceInputs["passwordResetAccessControl"] = state?.passwordResetAccessControl;
|
|
102
|
+
resourceInputs["passwordResetRequirement"] = state?.passwordResetRequirement;
|
|
51
103
|
resourceInputs["passwordUnlock"] = state?.passwordUnlock;
|
|
52
104
|
resourceInputs["policyId"] = state?.policyId;
|
|
53
105
|
resourceInputs["priority"] = state?.priority;
|
|
54
106
|
resourceInputs["status"] = state?.status;
|
|
55
107
|
resourceInputs["usersExcludeds"] = state?.usersExcludeds;
|
|
108
|
+
resourceInputs["usersIncludeds"] = state?.usersIncludeds;
|
|
56
109
|
}
|
|
57
110
|
else {
|
|
58
111
|
const args = argsOrState;
|
|
112
|
+
resourceInputs["groupsExcludeds"] = args?.groupsExcludeds;
|
|
113
|
+
resourceInputs["groupsIncludeds"] = args?.groupsIncludeds;
|
|
59
114
|
resourceInputs["name"] = args?.name;
|
|
60
115
|
resourceInputs["networkConnection"] = args?.networkConnection;
|
|
61
116
|
resourceInputs["networkExcludes"] = args?.networkExcludes;
|
|
62
117
|
resourceInputs["networkIncludes"] = args?.networkIncludes;
|
|
63
118
|
resourceInputs["passwordChange"] = args?.passwordChange;
|
|
64
119
|
resourceInputs["passwordReset"] = args?.passwordReset;
|
|
120
|
+
resourceInputs["passwordResetAccessControl"] = args?.passwordResetAccessControl;
|
|
121
|
+
resourceInputs["passwordResetRequirement"] = args?.passwordResetRequirement;
|
|
65
122
|
resourceInputs["passwordUnlock"] = args?.passwordUnlock;
|
|
66
123
|
resourceInputs["policyId"] = args?.policyId;
|
|
67
124
|
resourceInputs["priority"] = args?.priority;
|
|
68
125
|
resourceInputs["status"] = args?.status;
|
|
69
126
|
resourceInputs["usersExcludeds"] = args?.usersExcludeds;
|
|
127
|
+
resourceInputs["usersIncludeds"] = args?.usersIncludeds;
|
|
70
128
|
}
|
|
71
129
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
72
130
|
super(RulePassword.__pulumiType, name, resourceInputs, opts);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rulePassword.js","sourceRoot":"","sources":["../../policy/rulePassword.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;
|
|
1
|
+
{"version":3,"file":"rulePassword.js","sourceRoot":"","sources":["../../policy/rulePassword.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IA2ED,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;SAC5D;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AA/IL,oCAgJC;AAlIG,gBAAgB;AACO,yBAAY,GAAG,uCAAuC,CAAC"}
|
package/types/input.d.ts
CHANGED
|
@@ -3933,7 +3933,7 @@ export declare namespace app {
|
|
|
3933
3933
|
}
|
|
3934
3934
|
interface SignonPolicyRulesRulePlatformInclude {
|
|
3935
3935
|
/**
|
|
3936
|
-
* Custom OS expression for advanced matching.
|
|
3936
|
+
* Custom OS expression for advanced matching. Required by the API when osType is OTHER (leave empty or omit to match any OTHER OS). The API normalizes empty and wildcard values to null on read; the provider preserves "" in state.
|
|
3937
3937
|
*/
|
|
3938
3938
|
osExpression?: pulumi.Input<string>;
|
|
3939
3939
|
/**
|
|
@@ -4009,6 +4009,34 @@ export declare namespace policy {
|
|
|
4009
4009
|
name?: pulumi.Input<string>;
|
|
4010
4010
|
type: pulumi.Input<string>;
|
|
4011
4011
|
}
|
|
4012
|
+
interface RulePasswordPasswordResetRequirement {
|
|
4013
|
+
/**
|
|
4014
|
+
* Constraints on the values specified in the `primaryMethods` set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The `otp` method requires a constraint.
|
|
4015
|
+
*/
|
|
4016
|
+
methodConstraints?: pulumi.Input<pulumi.Input<inputs.policy.RulePasswordPasswordResetRequirementMethodConstraint>[]>;
|
|
4017
|
+
/**
|
|
4018
|
+
* Authenticator methods allowed for the initial authentication step of password recovery. Method `otp` requires a constraint limiting it to a Google authenticator. Options: `otp`, `push`, `sms`, `email`, `voice`.
|
|
4019
|
+
*/
|
|
4020
|
+
primaryMethods?: pulumi.Input<pulumi.Input<string>[]>;
|
|
4021
|
+
/**
|
|
4022
|
+
* Whether a secondary authenticator is required for password reset (`stepUp.required`). The following are three valid configurations: `required=false`, `required=true` with no methods to use any SSO authenticator, and `required=true` with `securityQuestion` as the method. Default: `false`.
|
|
4023
|
+
*/
|
|
4024
|
+
stepUpEnabled?: pulumi.Input<boolean>;
|
|
4025
|
+
/**
|
|
4026
|
+
* Authenticator methods required for the secondary authentication step of password recovery. Specify only when `stepUpEnabled = true` and `securityQuestion` is permitted for the secondary authentication. Items value: `securityQuestion`.
|
|
4027
|
+
*/
|
|
4028
|
+
stepUpMethods?: pulumi.Input<pulumi.Input<string>[]>;
|
|
4029
|
+
}
|
|
4030
|
+
interface RulePasswordPasswordResetRequirementMethodConstraint {
|
|
4031
|
+
/**
|
|
4032
|
+
* Keys of the authenticators allowed for this method (e.g. `googleOtp`).
|
|
4033
|
+
*/
|
|
4034
|
+
allowedAuthenticators?: pulumi.Input<pulumi.Input<string>[]>;
|
|
4035
|
+
/**
|
|
4036
|
+
* The method to constrain (e.g. `otp`).
|
|
4037
|
+
*/
|
|
4038
|
+
method: pulumi.Input<string>;
|
|
4039
|
+
}
|
|
4012
4040
|
interface RuleSignonFactorSequence {
|
|
4013
4041
|
/**
|
|
4014
4042
|
* Type of a Factor
|
package/types/output.d.ts
CHANGED
|
@@ -3010,9 +3010,9 @@ export declare namespace app {
|
|
|
3010
3010
|
}
|
|
3011
3011
|
interface SignonPolicyRulesRulePlatformInclude {
|
|
3012
3012
|
/**
|
|
3013
|
-
* Custom OS expression for advanced matching.
|
|
3013
|
+
* Custom OS expression for advanced matching. Required by the API when osType is OTHER (leave empty or omit to match any OTHER OS). The API normalizes empty and wildcard values to null on read; the provider preserves "" in state.
|
|
3014
3014
|
*/
|
|
3015
|
-
osExpression
|
|
3015
|
+
osExpression: string;
|
|
3016
3016
|
/**
|
|
3017
3017
|
* OS type: ANY, IOS, ANDROID, WINDOWS, OSX, MACOS, CHROMEOS, or OTHER.
|
|
3018
3018
|
*/
|
|
@@ -3082,6 +3082,34 @@ export declare namespace inline {
|
|
|
3082
3082
|
}
|
|
3083
3083
|
}
|
|
3084
3084
|
export declare namespace policy {
|
|
3085
|
+
interface GetRulePasswordPasswordResetRequirement {
|
|
3086
|
+
/**
|
|
3087
|
+
* Constraints on the values specified in `primaryMethods`.
|
|
3088
|
+
*/
|
|
3089
|
+
methodConstraints: outputs.policy.GetRulePasswordPasswordResetRequirementMethodConstraint[];
|
|
3090
|
+
/**
|
|
3091
|
+
* Authenticator methods allowed for the initial authentication step of password recovery.
|
|
3092
|
+
*/
|
|
3093
|
+
primaryMethods: string[];
|
|
3094
|
+
/**
|
|
3095
|
+
* Whether a secondary authenticator is required for password reset.
|
|
3096
|
+
*/
|
|
3097
|
+
stepUpEnabled: boolean;
|
|
3098
|
+
/**
|
|
3099
|
+
* Authenticator methods required for the secondary authentication step of password recovery. Items value: `securityQuestion`.
|
|
3100
|
+
*/
|
|
3101
|
+
stepUpMethods: string[];
|
|
3102
|
+
}
|
|
3103
|
+
interface GetRulePasswordPasswordResetRequirementMethodConstraint {
|
|
3104
|
+
/**
|
|
3105
|
+
* Keys of the authenticators allowed for this method (e.g. `googleOtp`).
|
|
3106
|
+
*/
|
|
3107
|
+
allowedAuthenticators: string[];
|
|
3108
|
+
/**
|
|
3109
|
+
* The method to constrain (e.g. `otp`).
|
|
3110
|
+
*/
|
|
3111
|
+
method: string;
|
|
3112
|
+
}
|
|
3085
3113
|
interface RuleIdpDiscoveryAppExclude {
|
|
3086
3114
|
id?: string;
|
|
3087
3115
|
name?: string;
|
|
@@ -3124,6 +3152,34 @@ export declare namespace policy {
|
|
|
3124
3152
|
name?: string;
|
|
3125
3153
|
type: string;
|
|
3126
3154
|
}
|
|
3155
|
+
interface RulePasswordPasswordResetRequirement {
|
|
3156
|
+
/**
|
|
3157
|
+
* Constraints on the values specified in the `primaryMethods` set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The `otp` method requires a constraint.
|
|
3158
|
+
*/
|
|
3159
|
+
methodConstraints?: outputs.policy.RulePasswordPasswordResetRequirementMethodConstraint[];
|
|
3160
|
+
/**
|
|
3161
|
+
* Authenticator methods allowed for the initial authentication step of password recovery. Method `otp` requires a constraint limiting it to a Google authenticator. Options: `otp`, `push`, `sms`, `email`, `voice`.
|
|
3162
|
+
*/
|
|
3163
|
+
primaryMethods?: string[];
|
|
3164
|
+
/**
|
|
3165
|
+
* Whether a secondary authenticator is required for password reset (`stepUp.required`). The following are three valid configurations: `required=false`, `required=true` with no methods to use any SSO authenticator, and `required=true` with `securityQuestion` as the method. Default: `false`.
|
|
3166
|
+
*/
|
|
3167
|
+
stepUpEnabled?: boolean;
|
|
3168
|
+
/**
|
|
3169
|
+
* Authenticator methods required for the secondary authentication step of password recovery. Specify only when `stepUpEnabled = true` and `securityQuestion` is permitted for the secondary authentication. Items value: `securityQuestion`.
|
|
3170
|
+
*/
|
|
3171
|
+
stepUpMethods?: string[];
|
|
3172
|
+
}
|
|
3173
|
+
interface RulePasswordPasswordResetRequirementMethodConstraint {
|
|
3174
|
+
/**
|
|
3175
|
+
* Keys of the authenticators allowed for this method (e.g. `googleOtp`).
|
|
3176
|
+
*/
|
|
3177
|
+
allowedAuthenticators?: string[];
|
|
3178
|
+
/**
|
|
3179
|
+
* The method to constrain (e.g. `otp`).
|
|
3180
|
+
*/
|
|
3181
|
+
method: string;
|
|
3182
|
+
}
|
|
3127
3183
|
interface RuleSignonFactorSequence {
|
|
3128
3184
|
/**
|
|
3129
3185
|
* Type of a Factor
|