PyPI - pulumi-snowflake - Versions diffs - 0.50.2a1709892015__py3-none-any.whl → 1.2.0a1736835738__py3-none-any.whl - Mend

pulumi-snowflake 0.50.2a1709892015py3-none-any.whl → 1.2.0a1736835738py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-snowflake might be problematic. Click here for more details.

Files changed (182) hide show

pulumi_snowflake/__init__.py +224 -172
pulumi_snowflake/_inputs.py +52854 -1662
pulumi_snowflake/_utilities.py +41 -5
pulumi_snowflake/account.py +188 -214
pulumi_snowflake/account_authentication_policy_attachment.py +149 -0
pulumi_snowflake/account_parameter.py +21 -44
pulumi_snowflake/account_password_policy_attachment.py +7 -28
pulumi_snowflake/account_role.py +250 -0
pulumi_snowflake/alert.py +38 -43
pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +704 -0
pulumi_snowflake/api_authentication_integration_with_client_credentials.py +657 -0
pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +692 -0
pulumi_snowflake/api_integration.py +35 -50
pulumi_snowflake/authentication_policy.py +622 -0
pulumi_snowflake/config/__init__.pyi +76 -99
pulumi_snowflake/config/outputs.py +5 -0
pulumi_snowflake/config/vars.py +93 -124
pulumi_snowflake/cortex_search_service.py +596 -0
pulumi_snowflake/database.py +819 -209
pulumi_snowflake/database_role.py +81 -40
pulumi_snowflake/dynamic_table.py +44 -47
pulumi_snowflake/email_notification_integration.py +35 -26
pulumi_snowflake/{unsafe_execute.py → execute.py} +36 -139
pulumi_snowflake/external_function.py +54 -71
pulumi_snowflake/external_oauth_integration.py +593 -538
pulumi_snowflake/external_table.py +67 -86
pulumi_snowflake/external_volume.py +382 -0
pulumi_snowflake/failover_group.py +59 -96
pulumi_snowflake/file_format.py +33 -24
pulumi_snowflake/function_java.py +1211 -0
pulumi_snowflake/function_javascript.py +882 -0
pulumi_snowflake/function_python.py +1212 -0
pulumi_snowflake/function_scala.py +1212 -0
pulumi_snowflake/function_sql.py +835 -0
pulumi_snowflake/get_account_roles.py +129 -0
pulumi_snowflake/get_accounts.py +53 -22
pulumi_snowflake/get_alerts.py +22 -5
pulumi_snowflake/get_connections.py +109 -0
pulumi_snowflake/get_cortex_search_services.py +216 -0
pulumi_snowflake/get_current_account.py +24 -9
pulumi_snowflake/get_current_role.py +14 -7
pulumi_snowflake/get_database.py +25 -5
pulumi_snowflake/get_database_role.py +162 -0
pulumi_snowflake/get_database_roles.py +79 -43
pulumi_snowflake/get_databases.py +91 -69
pulumi_snowflake/get_dynamic_tables.py +36 -19
pulumi_snowflake/get_external_functions.py +28 -5
pulumi_snowflake/get_external_tables.py +28 -5
pulumi_snowflake/get_failover_groups.py +18 -7
pulumi_snowflake/get_file_formats.py +28 -5
pulumi_snowflake/get_functions.py +28 -5
pulumi_snowflake/get_grants.py +207 -80
pulumi_snowflake/get_masking_policies.py +91 -47
pulumi_snowflake/get_materialized_views.py +28 -5
pulumi_snowflake/get_network_policies.py +129 -0
pulumi_snowflake/get_parameters.py +38 -11
pulumi_snowflake/get_pipes.py +28 -5
pulumi_snowflake/get_procedures.py +28 -5
pulumi_snowflake/get_resource_monitors.py +37 -20
pulumi_snowflake/get_row_access_policies.py +91 -47
pulumi_snowflake/get_schemas.py +145 -37
pulumi_snowflake/get_secrets.py +200 -0
pulumi_snowflake/get_security_integrations.py +129 -0
pulumi_snowflake/get_sequences.py +28 -5
pulumi_snowflake/get_shares.py +18 -5
pulumi_snowflake/get_stages.py +28 -5
pulumi_snowflake/get_storage_integrations.py +16 -5
pulumi_snowflake/get_streamlits.py +170 -0
pulumi_snowflake/get_streams.py +114 -50
pulumi_snowflake/get_system_generate_scim_access_token.py +18 -5
pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +32 -7
pulumi_snowflake/get_system_get_private_link_config.py +121 -6
pulumi_snowflake/get_system_get_snowflake_platform_info.py +15 -7
pulumi_snowflake/get_tables.py +28 -5
pulumi_snowflake/get_tags.py +130 -0
pulumi_snowflake/get_tasks.py +134 -50
pulumi_snowflake/get_users.py +116 -40
pulumi_snowflake/get_views.py +114 -50
pulumi_snowflake/get_warehouses.py +79 -22
pulumi_snowflake/grant_account_role.py +28 -61
pulumi_snowflake/grant_application_role.py +257 -0
pulumi_snowflake/grant_database_role.py +35 -108
pulumi_snowflake/grant_ownership.py +382 -0
pulumi_snowflake/grant_privileges_to_account_role.py +42 -78
pulumi_snowflake/grant_privileges_to_database_role.py +37 -223
pulumi_snowflake/grant_privileges_to_share.py +96 -44
pulumi_snowflake/legacy_service_user.py +3670 -0
pulumi_snowflake/managed_account.py +42 -9
pulumi_snowflake/masking_policy.py +213 -306
pulumi_snowflake/materialized_view.py +62 -67
pulumi_snowflake/network_policy.py +217 -57
pulumi_snowflake/network_policy_attachment.py +7 -32
pulumi_snowflake/network_rule.py +473 -0
pulumi_snowflake/notification_integration.py +51 -82
pulumi_snowflake/oauth_integration_for_custom_clients.py +906 -0
pulumi_snowflake/{oauth_integration.py → oauth_integration_for_partner_applications.py} +191 -188
pulumi_snowflake/object_parameter.py +12 -99
pulumi_snowflake/outputs.py +49200 -2928
pulumi_snowflake/password_policy.py +41 -28
pulumi_snowflake/pipe.py +33 -0
pulumi_snowflake/primary_connection.py +330 -0
pulumi_snowflake/procedure_java.py +1273 -0
pulumi_snowflake/procedure_javascript.py +895 -0
pulumi_snowflake/procedure_python.py +1226 -0
pulumi_snowflake/procedure_scala.py +1273 -0
pulumi_snowflake/procedure_sql.py +895 -0
pulumi_snowflake/provider.py +378 -613
pulumi_snowflake/pulumi-plugin.json +2 -1
pulumi_snowflake/resource_monitor.py +118 -323
pulumi_snowflake/row_access_policy.py +200 -145
pulumi_snowflake/{saml_integration.py → saml2_integration.py} +356 -295
pulumi_snowflake/schema.py +949 -174
pulumi_snowflake/scim_integration.py +286 -105
pulumi_snowflake/secondary_connection.py +339 -0
pulumi_snowflake/secondary_database.py +1080 -0
pulumi_snowflake/secret_with_authorization_code_grant.py +548 -0
pulumi_snowflake/secret_with_basic_authentication.py +500 -0
pulumi_snowflake/secret_with_client_credentials.py +511 -0
pulumi_snowflake/secret_with_generic_string.py +452 -0
pulumi_snowflake/sequence.py +9 -30
pulumi_snowflake/service_user.py +3585 -0
pulumi_snowflake/share.py +35 -26
pulumi_snowflake/shared_database.py +939 -0
pulumi_snowflake/stage.py +95 -80
pulumi_snowflake/storage_integration.py +48 -2
pulumi_snowflake/stream_on_directory_table.py +517 -0
pulumi_snowflake/stream_on_external_table.py +632 -0
pulumi_snowflake/stream_on_table.py +666 -0
pulumi_snowflake/stream_on_view.py +666 -0
pulumi_snowflake/streamlit.py +671 -0
pulumi_snowflake/table.py +86 -93
pulumi_snowflake/table_column_masking_policy_application.py +7 -14
pulumi_snowflake/table_constraint.py +29 -168
pulumi_snowflake/tag.py +142 -70
pulumi_snowflake/tag_association.py +40 -211
pulumi_snowflake/task.py +3048 -414
pulumi_snowflake/user.py +3351 -380
pulumi_snowflake/user_authentication_policy_attachment.py +197 -0
pulumi_snowflake/user_password_policy_attachment.py +7 -6
pulumi_snowflake/user_public_keys.py +5 -0
pulumi_snowflake/view.py +466 -211
pulumi_snowflake/warehouse.py +184 -164
{pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/METADATA +7 -6
pulumi_snowflake-1.2.0a1736835738.dist-info/RECORD +148 -0
{pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/WHEEL +1 -1
pulumi_snowflake/account_grant.py +0 -339
pulumi_snowflake/database_grant.py +0 -491
pulumi_snowflake/external_table_grant.py +0 -686
pulumi_snowflake/failover_group_grant.py +0 -388
pulumi_snowflake/file_format_grant.py +0 -631
pulumi_snowflake/function.py +0 -868
pulumi_snowflake/function_grant.py +0 -741
pulumi_snowflake/get_role.py +0 -117
pulumi_snowflake/get_roles.py +0 -116
pulumi_snowflake/grant_privileges_to_role.py +0 -667
pulumi_snowflake/integration_grant.py +0 -436
pulumi_snowflake/masking_policy_grant.py +0 -538
pulumi_snowflake/materialized_view_grant.py +0 -685
pulumi_snowflake/pipe_grant.py +0 -583
pulumi_snowflake/procedure.py +0 -883
pulumi_snowflake/procedure_grant.py +0 -741
pulumi_snowflake/resource_monitor_grant.py +0 -383
pulumi_snowflake/role.py +0 -269
pulumi_snowflake/role_grants.py +0 -348
pulumi_snowflake/role_ownership_grant.py +0 -334
pulumi_snowflake/row_access_policy_grant.py +0 -536
pulumi_snowflake/schema_grant.py +0 -643
pulumi_snowflake/sequence_grant.py +0 -631
pulumi_snowflake/session_parameter.py +0 -328
pulumi_snowflake/stage_grant.py +0 -631
pulumi_snowflake/stream.py +0 -610
pulumi_snowflake/stream_grant.py +0 -631
pulumi_snowflake/table_grant.py +0 -673
pulumi_snowflake/tag_grant.py +0 -528
pulumi_snowflake/tag_masking_policy_association.py +0 -210
pulumi_snowflake/task_grant.py +0 -631
pulumi_snowflake/user_grant.py +0 -390
pulumi_snowflake/user_ownership_grant.py +0 -286
pulumi_snowflake/view_grant.py +0 -701
pulumi_snowflake/warehouse_grant.py +0 -436
pulumi_snowflake-0.50.2a1709892015.dist-info/RECORD +0 -136
{pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/top_level.txt +0 -0

pulumi_snowflake/{saml_integration.py → saml2_integration.py} RENAMED Viewed

@@ -4,53 +4,70 @@
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from . import _utilities
+from . import outputs
+from ._inputs import *
-__all__ = ['SamlIntegrationArgs', 'SamlIntegration']
+__all__ = ['Saml2IntegrationArgs', 'Saml2Integration']
 @pulumi.input_type
-class SamlIntegrationArgs:
+class Saml2IntegrationArgs:
     def __init__(__self__, *,
                  saml2_issuer: pulumi.Input[str],
                  saml2_provider: pulumi.Input[str],
                  saml2_sso_url: pulumi.Input[str],
                  saml2_x509_cert: pulumi.Input[str],
-                 enabled: Optional[pulumi.Input[bool]] = None,
+                 allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 comment: Optional[pulumi.Input[str]] = None,
+                 enabled: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 saml2_enable_sp_initiated: Optional[pulumi.Input[bool]] = None,
-                 saml2_force_authn: Optional[pulumi.Input[bool]] = None,
+                 saml2_enable_sp_initiated: Optional[pulumi.Input[str]] = None,
+                 saml2_force_authn: Optional[pulumi.Input[str]] = None,
                  saml2_post_logout_redirect_url: Optional[pulumi.Input[str]] = None,
                  saml2_requested_nameid_format: Optional[pulumi.Input[str]] = None,
-                 saml2_sign_request: Optional[pulumi.Input[bool]] = None,
+                 saml2_sign_request: Optional[pulumi.Input[str]] = None,
                  saml2_snowflake_acs_url: Optional[pulumi.Input[str]] = None,
                  saml2_snowflake_issuer_url: Optional[pulumi.Input[str]] = None,
-                 saml2_snowflake_x509_cert: Optional[pulumi.Input[str]] = None,
                  saml2_sp_initiated_login_page_label: Optional[pulumi.Input[str]] = None):
         """
-        The set of arguments for constructing a SamlIntegration resource.
+        The set of arguments for constructing a Saml2Integration resource.
         :param pulumi.Input[str] saml2_issuer: The string containing the IdP EntityID / Issuer.
-        :param pulumi.Input[str] saml2_provider: The string describing the IdP. One of the following: OKTA, ADFS, Custom.
+        :param pulumi.Input[str] saml2_provider: The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
         :param pulumi.Input[str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
         :param pulumi.Input[str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
-        :param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
-        :param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
-        :param pulumi.Input[bool] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in WIth button on the login page.  FALSE: does not display the Log in With button on the login page.
-        :param pulumi.Input[bool] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        :param pulumi.Input[str] comment: Specifies a comment for the integration.
+        :param pulumi.Input[str] enabled: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         :param pulumi.Input[str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
-        :param pulumi.Input[str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. If a value is not specified, Snowflake sends the urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress value in the authentication request to the IdP. NameID must be one of the following values: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified, urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName, urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName, urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos, urn:oasis:names:tc:SAML:2.0:nameid-format:persistent, urn:oasis:names:tc:SAML:2.0:nameid-format:transient .
-        :param pulumi.Input[bool] saml2_sign_request: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed.
-        :param pulumi.Input[str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Default: https://\\n\\n.\\n\\n.snowflakecomputing.com/fed/login
-        :param pulumi.Input[str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use.
-        :param pulumi.Input[str] saml2_snowflake_x509_cert: The Base64 encoded self-signed certificate generated by Snowflake for use with Encrypting SAML Assertions and Signed SAML Requests. You must have at least one of these features (encrypted SAML assertions or signed SAML responses) enabled in your Snowflake account to access the certificate value.
-        :param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page.
+        :param pulumi.Input[str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
+        :param pulumi.Input[str] saml2_sign_request: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
+        :param pulumi.Input[str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
+        :param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         """
         pulumi.set(__self__, "saml2_issuer", saml2_issuer)
         pulumi.set(__self__, "saml2_provider", saml2_provider)
         pulumi.set(__self__, "saml2_sso_url", saml2_sso_url)
         pulumi.set(__self__, "saml2_x509_cert", saml2_x509_cert)
+        if allowed_email_patterns is not None:
+            pulumi.set(__self__, "allowed_email_patterns", allowed_email_patterns)
+        if allowed_user_domains is not None:
+            pulumi.set(__self__, "allowed_user_domains", allowed_user_domains)
+        if comment is not None:
+            pulumi.set(__self__, "comment", comment)
         if enabled is not None:
             pulumi.set(__self__, "enabled", enabled)
         if name is not None:
@@ -69,8 +86,6 @@ class SamlIntegrationArgs:
             pulumi.set(__self__, "saml2_snowflake_acs_url", saml2_snowflake_acs_url)
         if saml2_snowflake_issuer_url is not None:
             pulumi.set(__self__, "saml2_snowflake_issuer_url", saml2_snowflake_issuer_url)
-        if saml2_snowflake_x509_cert is not None:
-            pulumi.set(__self__, "saml2_snowflake_x509_cert", saml2_snowflake_x509_cert)
         if saml2_sp_initiated_login_page_label is not None:
             pulumi.set(__self__, "saml2_sp_initiated_login_page_label", saml2_sp_initiated_login_page_label)
@@ -90,7 +105,7 @@ class SamlIntegrationArgs:
     @pulumi.getter(name="saml2Provider")
     def saml2_provider(self) -> pulumi.Input[str]:
         """
-        The string describing the IdP. One of the following: OKTA, ADFS, Custom.
+        The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
         """
         return pulumi.get(self, "saml2_provider")
@@ -122,23 +137,59 @@ class SamlIntegrationArgs:
     def saml2_x509_cert(self, value: pulumi.Input[str]):
         pulumi.set(self, "saml2_x509_cert", value)
+    @property
+    @pulumi.getter(name="allowedEmailPatterns")
+    def allowed_email_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        """
+        return pulumi.get(self, "allowed_email_patterns")
+    @allowed_email_patterns.setter
+    def allowed_email_patterns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "allowed_email_patterns", value)
+    @property
+    @pulumi.getter(name="allowedUserDomains")
+    def allowed_user_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        """
+        return pulumi.get(self, "allowed_user_domains")
+    @allowed_user_domains.setter
+    def allowed_user_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "allowed_user_domains", value)
     @property
     @pulumi.getter
-    def enabled(self) -> Optional[pulumi.Input[bool]]:
+    def comment(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies whether this security integration is enabled or disabled.
+        Specifies a comment for the integration.
+        """
+        return pulumi.get(self, "comment")
+    @comment.setter
+    def comment(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "comment", value)
+    @property
+    @pulumi.getter
+    def enabled(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "enabled")
     @enabled.setter
-    def enabled(self, value: Optional[pulumi.Input[bool]]):
+    def enabled(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "enabled", value)
     @property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
+        Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "name")
@@ -148,26 +199,26 @@ class SamlIntegrationArgs:
     @property
     @pulumi.getter(name="saml2EnableSpInitiated")
-    def saml2_enable_sp_initiated(self) -> Optional[pulumi.Input[bool]]:
+    def saml2_enable_sp_initiated(self) -> Optional[pulumi.Input[str]]:
         """
-        The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in WIth button on the login page.  FALSE: does not display the Log in With button on the login page.
+        The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_enable_sp_initiated")
     @saml2_enable_sp_initiated.setter
-    def saml2_enable_sp_initiated(self, value: Optional[pulumi.Input[bool]]):
+    def saml2_enable_sp_initiated(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_enable_sp_initiated", value)
     @property
     @pulumi.getter(name="saml2ForceAuthn")
-    def saml2_force_authn(self) -> Optional[pulumi.Input[bool]]:
+    def saml2_force_authn(self) -> Optional[pulumi.Input[str]]:
         """
-        The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake.
+        The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_force_authn")
     @saml2_force_authn.setter
-    def saml2_force_authn(self, value: Optional[pulumi.Input[bool]]):
+    def saml2_force_authn(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_force_authn", value)
     @property
@@ -186,7 +237,7 @@ class SamlIntegrationArgs:
     @pulumi.getter(name="saml2RequestedNameidFormat")
     def saml2_requested_nameid_format(self) -> Optional[pulumi.Input[str]]:
         """
-        The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. If a value is not specified, Snowflake sends the urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress value in the authentication request to the IdP. NameID must be one of the following values: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified, urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName, urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName, urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos, urn:oasis:names:tc:SAML:2.0:nameid-format:persistent, urn:oasis:names:tc:SAML:2.0:nameid-format:transient .
+        The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
         """
         return pulumi.get(self, "saml2_requested_nameid_format")
@@ -196,21 +247,21 @@ class SamlIntegrationArgs:
     @property
     @pulumi.getter(name="saml2SignRequest")
-    def saml2_sign_request(self) -> Optional[pulumi.Input[bool]]:
+    def saml2_sign_request(self) -> Optional[pulumi.Input[str]]:
         """
-        The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed.
+        The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_sign_request")
     @saml2_sign_request.setter
-    def saml2_sign_request(self, value: Optional[pulumi.Input[bool]]):
+    def saml2_sign_request(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_sign_request", value)
     @property
     @pulumi.getter(name="saml2SnowflakeAcsUrl")
     def saml2_snowflake_acs_url(self) -> Optional[pulumi.Input[str]]:
         """
-        The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Default: https://\\n\\n.\\n\\n.snowflakecomputing.com/fed/login
+        The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
         """
         return pulumi.get(self, "saml2_snowflake_acs_url")
@@ -222,7 +273,7 @@ class SamlIntegrationArgs:
     @pulumi.getter(name="saml2SnowflakeIssuerUrl")
     def saml2_snowflake_issuer_url(self) -> Optional[pulumi.Input[str]]:
         """
-        The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use.
+        The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
         """
         return pulumi.get(self, "saml2_snowflake_issuer_url")
@@ -230,23 +281,11 @@ class SamlIntegrationArgs:
     def saml2_snowflake_issuer_url(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_snowflake_issuer_url", value)
-    @property
-    @pulumi.getter(name="saml2SnowflakeX509Cert")
-    def saml2_snowflake_x509_cert(self) -> Optional[pulumi.Input[str]]:
-        """
-        The Base64 encoded self-signed certificate generated by Snowflake for use with Encrypting SAML Assertions and Signed SAML Requests. You must have at least one of these features (encrypted SAML assertions or signed SAML responses) enabled in your Snowflake account to access the certificate value.
-        """
-        return pulumi.get(self, "saml2_snowflake_x509_cert")
-    @saml2_snowflake_x509_cert.setter
-    def saml2_snowflake_x509_cert(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "saml2_snowflake_x509_cert", value)
     @property
     @pulumi.getter(name="saml2SpInitiatedLoginPageLabel")
     def saml2_sp_initiated_login_page_label(self) -> Optional[pulumi.Input[str]]:
         """
-        The string containing the label to display after the Log In With button on the login page.
+        The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         """
         return pulumi.get(self, "saml2_sp_initiated_login_page_label")
@@ -256,55 +295,65 @@ class SamlIntegrationArgs:
 @pulumi.input_type
-class _SamlIntegrationState:
+class _Saml2IntegrationState:
     def __init__(__self__, *,
-                 created_on: Optional[pulumi.Input[str]] = None,
-                 enabled: Optional[pulumi.Input[bool]] = None,
+                 allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 comment: Optional[pulumi.Input[str]] = None,
+                 describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]]] = None,
+                 enabled: Optional[pulumi.Input[str]] = None,
+                 fully_qualified_name: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 saml2_digest_methods_used: Optional[pulumi.Input[str]] = None,
-                 saml2_enable_sp_initiated: Optional[pulumi.Input[bool]] = None,
-                 saml2_force_authn: Optional[pulumi.Input[bool]] = None,
+                 saml2_enable_sp_initiated: Optional[pulumi.Input[str]] = None,
+                 saml2_force_authn: Optional[pulumi.Input[str]] = None,
                  saml2_issuer: Optional[pulumi.Input[str]] = None,
                  saml2_post_logout_redirect_url: Optional[pulumi.Input[str]] = None,
                  saml2_provider: Optional[pulumi.Input[str]] = None,
                  saml2_requested_nameid_format: Optional[pulumi.Input[str]] = None,
-                 saml2_sign_request: Optional[pulumi.Input[bool]] = None,
-                 saml2_signature_methods_used: Optional[pulumi.Input[str]] = None,
+                 saml2_sign_request: Optional[pulumi.Input[str]] = None,
                  saml2_snowflake_acs_url: Optional[pulumi.Input[str]] = None,
                  saml2_snowflake_issuer_url: Optional[pulumi.Input[str]] = None,
-                 saml2_snowflake_metadata: Optional[pulumi.Input[str]] = None,
-                 saml2_snowflake_x509_cert: Optional[pulumi.Input[str]] = None,
                  saml2_sp_initiated_login_page_label: Optional[pulumi.Input[str]] = None,
                  saml2_sso_url: Optional[pulumi.Input[str]] = None,
-                 saml2_x509_cert: Optional[pulumi.Input[str]] = None):
-        """
-        Input properties used for looking up and filtering SamlIntegration resources.
-        :param pulumi.Input[str] created_on: Date and time when the SAML integration was created.
-        :param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
-        :param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
-        :param pulumi.Input[bool] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in WIth button on the login page.  FALSE: does not display the Log in With button on the login page.
-        :param pulumi.Input[bool] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake.
+                 saml2_x509_cert: Optional[pulumi.Input[str]] = None,
+                 show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationShowOutputArgs']]]] = None):
+        """
+        Input properties used for looking up and filtering Saml2Integration resources.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        :param pulumi.Input[str] comment: Specifies a comment for the integration.
+        :param pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
+        :param pulumi.Input[str] enabled: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        :param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         :param pulumi.Input[str] saml2_issuer: The string containing the IdP EntityID / Issuer.
         :param pulumi.Input[str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
-        :param pulumi.Input[str] saml2_provider: The string describing the IdP. One of the following: OKTA, ADFS, Custom.
-        :param pulumi.Input[str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. If a value is not specified, Snowflake sends the urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress value in the authentication request to the IdP. NameID must be one of the following values: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified, urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName, urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName, urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos, urn:oasis:names:tc:SAML:2.0:nameid-format:persistent, urn:oasis:names:tc:SAML:2.0:nameid-format:transient .
-        :param pulumi.Input[bool] saml2_sign_request: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed.
-        :param pulumi.Input[str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Default: https://\\n\\n.\\n\\n.snowflakecomputing.com/fed/login
-        :param pulumi.Input[str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use.
-        :param pulumi.Input[str] saml2_snowflake_metadata: Metadata created by Snowflake to provide to SAML2 provider.
-        :param pulumi.Input[str] saml2_snowflake_x509_cert: The Base64 encoded self-signed certificate generated by Snowflake for use with Encrypting SAML Assertions and Signed SAML Requests. You must have at least one of these features (encrypted SAML assertions or signed SAML responses) enabled in your Snowflake account to access the certificate value.
-        :param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page.
+        :param pulumi.Input[str] saml2_provider: The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
+        :param pulumi.Input[str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
+        :param pulumi.Input[str] saml2_sign_request: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
+        :param pulumi.Input[str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
+        :param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         :param pulumi.Input[str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
         :param pulumi.Input[str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
-        """
-        if created_on is not None:
-            pulumi.set(__self__, "created_on", created_on)
+        :param pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
+        """
+        if allowed_email_patterns is not None:
+            pulumi.set(__self__, "allowed_email_patterns", allowed_email_patterns)
+        if allowed_user_domains is not None:
+            pulumi.set(__self__, "allowed_user_domains", allowed_user_domains)
+        if comment is not None:
+            pulumi.set(__self__, "comment", comment)
+        if describe_outputs is not None:
+            pulumi.set(__self__, "describe_outputs", describe_outputs)
         if enabled is not None:
             pulumi.set(__self__, "enabled", enabled)
+        if fully_qualified_name is not None:
+            pulumi.set(__self__, "fully_qualified_name", fully_qualified_name)
         if name is not None:
             pulumi.set(__self__, "name", name)
-        if saml2_digest_methods_used is not None:
-            pulumi.set(__self__, "saml2_digest_methods_used", saml2_digest_methods_used)
         if saml2_enable_sp_initiated is not None:
             pulumi.set(__self__, "saml2_enable_sp_initiated", saml2_enable_sp_initiated)
         if saml2_force_authn is not None:
@@ -319,52 +368,96 @@ class _SamlIntegrationState:
             pulumi.set(__self__, "saml2_requested_nameid_format", saml2_requested_nameid_format)
         if saml2_sign_request is not None:
             pulumi.set(__self__, "saml2_sign_request", saml2_sign_request)
-        if saml2_signature_methods_used is not None:
-            pulumi.set(__self__, "saml2_signature_methods_used", saml2_signature_methods_used)
         if saml2_snowflake_acs_url is not None:
             pulumi.set(__self__, "saml2_snowflake_acs_url", saml2_snowflake_acs_url)
         if saml2_snowflake_issuer_url is not None:
             pulumi.set(__self__, "saml2_snowflake_issuer_url", saml2_snowflake_issuer_url)
-        if saml2_snowflake_metadata is not None:
-            pulumi.set(__self__, "saml2_snowflake_metadata", saml2_snowflake_metadata)
-        if saml2_snowflake_x509_cert is not None:
-            pulumi.set(__self__, "saml2_snowflake_x509_cert", saml2_snowflake_x509_cert)
         if saml2_sp_initiated_login_page_label is not None:
             pulumi.set(__self__, "saml2_sp_initiated_login_page_label", saml2_sp_initiated_login_page_label)
         if saml2_sso_url is not None:
             pulumi.set(__self__, "saml2_sso_url", saml2_sso_url)
         if saml2_x509_cert is not None:
             pulumi.set(__self__, "saml2_x509_cert", saml2_x509_cert)
+        if show_outputs is not None:
+            pulumi.set(__self__, "show_outputs", show_outputs)
     @property
-    @pulumi.getter(name="createdOn")
-    def created_on(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="allowedEmailPatterns")
+    def allowed_email_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Date and time when the SAML integration was created.
+        A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         """
-        return pulumi.get(self, "created_on")
+        return pulumi.get(self, "allowed_email_patterns")
-    @created_on.setter
-    def created_on(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "created_on", value)
+    @allowed_email_patterns.setter
+    def allowed_email_patterns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "allowed_email_patterns", value)
+    @property
+    @pulumi.getter(name="allowedUserDomains")
+    def allowed_user_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        """
+        return pulumi.get(self, "allowed_user_domains")
+    @allowed_user_domains.setter
+    def allowed_user_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "allowed_user_domains", value)
     @property
     @pulumi.getter
-    def enabled(self) -> Optional[pulumi.Input[bool]]:
+    def comment(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies whether this security integration is enabled or disabled.
+        Specifies a comment for the integration.
+        """
+        return pulumi.get(self, "comment")
+    @comment.setter
+    def comment(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "comment", value)
+    @property
+    @pulumi.getter(name="describeOutputs")
+    def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]]]:
+        """
+        Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
+        """
+        return pulumi.get(self, "describe_outputs")
+    @describe_outputs.setter
+    def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]]]):
+        pulumi.set(self, "describe_outputs", value)
+    @property
+    @pulumi.getter
+    def enabled(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "enabled")
     @enabled.setter
-    def enabled(self, value: Optional[pulumi.Input[bool]]):
+    def enabled(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "enabled", value)
+    @property
+    @pulumi.getter(name="fullyQualifiedName")
+    def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        """
+        return pulumi.get(self, "fully_qualified_name")
+    @fully_qualified_name.setter
+    def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "fully_qualified_name", value)
     @property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
+        Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "name")
@@ -372,37 +465,28 @@ class _SamlIntegrationState:
     def name(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "name", value)
-    @property
-    @pulumi.getter(name="saml2DigestMethodsUsed")
-    def saml2_digest_methods_used(self) -> Optional[pulumi.Input[str]]:
-        return pulumi.get(self, "saml2_digest_methods_used")
-    @saml2_digest_methods_used.setter
-    def saml2_digest_methods_used(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "saml2_digest_methods_used", value)
     @property
     @pulumi.getter(name="saml2EnableSpInitiated")
-    def saml2_enable_sp_initiated(self) -> Optional[pulumi.Input[bool]]:
+    def saml2_enable_sp_initiated(self) -> Optional[pulumi.Input[str]]:
         """
-        The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in WIth button on the login page.  FALSE: does not display the Log in With button on the login page.
+        The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_enable_sp_initiated")
     @saml2_enable_sp_initiated.setter
-    def saml2_enable_sp_initiated(self, value: Optional[pulumi.Input[bool]]):
+    def saml2_enable_sp_initiated(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_enable_sp_initiated", value)
     @property
     @pulumi.getter(name="saml2ForceAuthn")
-    def saml2_force_authn(self) -> Optional[pulumi.Input[bool]]:
+    def saml2_force_authn(self) -> Optional[pulumi.Input[str]]:
         """
-        The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake.
+        The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_force_authn")
     @saml2_force_authn.setter
-    def saml2_force_authn(self, value: Optional[pulumi.Input[bool]]):
+    def saml2_force_authn(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_force_authn", value)
     @property
@@ -433,7 +517,7 @@ class _SamlIntegrationState:
     @pulumi.getter(name="saml2Provider")
     def saml2_provider(self) -> Optional[pulumi.Input[str]]:
         """
-        The string describing the IdP. One of the following: OKTA, ADFS, Custom.
+        The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
         """
         return pulumi.get(self, "saml2_provider")
@@ -445,7 +529,7 @@ class _SamlIntegrationState:
     @pulumi.getter(name="saml2RequestedNameidFormat")
     def saml2_requested_nameid_format(self) -> Optional[pulumi.Input[str]]:
         """
-        The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. If a value is not specified, Snowflake sends the urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress value in the authentication request to the IdP. NameID must be one of the following values: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified, urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName, urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName, urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos, urn:oasis:names:tc:SAML:2.0:nameid-format:persistent, urn:oasis:names:tc:SAML:2.0:nameid-format:transient .
+        The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
         """
         return pulumi.get(self, "saml2_requested_nameid_format")
@@ -455,30 +539,21 @@ class _SamlIntegrationState:
     @property
     @pulumi.getter(name="saml2SignRequest")
-    def saml2_sign_request(self) -> Optional[pulumi.Input[bool]]:
+    def saml2_sign_request(self) -> Optional[pulumi.Input[str]]:
         """
-        The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed.
+        The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_sign_request")
     @saml2_sign_request.setter
-    def saml2_sign_request(self, value: Optional[pulumi.Input[bool]]):
+    def saml2_sign_request(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_sign_request", value)
-    @property
-    @pulumi.getter(name="saml2SignatureMethodsUsed")
-    def saml2_signature_methods_used(self) -> Optional[pulumi.Input[str]]:
-        return pulumi.get(self, "saml2_signature_methods_used")
-    @saml2_signature_methods_used.setter
-    def saml2_signature_methods_used(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "saml2_signature_methods_used", value)
     @property
     @pulumi.getter(name="saml2SnowflakeAcsUrl")
     def saml2_snowflake_acs_url(self) -> Optional[pulumi.Input[str]]:
         """
-        The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Default: https://\\n\\n.\\n\\n.snowflakecomputing.com/fed/login
+        The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
         """
         return pulumi.get(self, "saml2_snowflake_acs_url")
@@ -490,7 +565,7 @@ class _SamlIntegrationState:
     @pulumi.getter(name="saml2SnowflakeIssuerUrl")
     def saml2_snowflake_issuer_url(self) -> Optional[pulumi.Input[str]]:
         """
-        The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use.
+        The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
         """
         return pulumi.get(self, "saml2_snowflake_issuer_url")
@@ -498,35 +573,11 @@ class _SamlIntegrationState:
     def saml2_snowflake_issuer_url(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_snowflake_issuer_url", value)
-    @property
-    @pulumi.getter(name="saml2SnowflakeMetadata")
-    def saml2_snowflake_metadata(self) -> Optional[pulumi.Input[str]]:
-        """
-        Metadata created by Snowflake to provide to SAML2 provider.
-        """
-        return pulumi.get(self, "saml2_snowflake_metadata")
-    @saml2_snowflake_metadata.setter
-    def saml2_snowflake_metadata(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "saml2_snowflake_metadata", value)
-    @property
-    @pulumi.getter(name="saml2SnowflakeX509Cert")
-    def saml2_snowflake_x509_cert(self) -> Optional[pulumi.Input[str]]:
-        """
-        The Base64 encoded self-signed certificate generated by Snowflake for use with Encrypting SAML Assertions and Signed SAML Requests. You must have at least one of these features (encrypted SAML assertions or signed SAML responses) enabled in your Snowflake account to access the certificate value.
-        """
-        return pulumi.get(self, "saml2_snowflake_x509_cert")
-    @saml2_snowflake_x509_cert.setter
-    def saml2_snowflake_x509_cert(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "saml2_snowflake_x509_cert", value)
     @property
     @pulumi.getter(name="saml2SpInitiatedLoginPageLabel")
     def saml2_sp_initiated_login_page_label(self) -> Optional[pulumi.Input[str]]:
         """
-        The string containing the label to display after the Log In With button on the login page.
+        The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         """
         return pulumi.get(self, "saml2_sp_initiated_login_page_label")
@@ -558,64 +609,66 @@ class _SamlIntegrationState:
     def saml2_x509_cert(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "saml2_x509_cert", value)
+    @property
+    @pulumi.getter(name="showOutputs")
+    def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationShowOutputArgs']]]]:
+        """
+        Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
+        """
+        return pulumi.get(self, "show_outputs")
+    @show_outputs.setter
+    def show_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationShowOutputArgs']]]]):
+        pulumi.set(self, "show_outputs", value)
-class SamlIntegration(pulumi.CustomResource):
+class Saml2Integration(pulumi.CustomResource):
     @overload
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 enabled: Optional[pulumi.Input[bool]] = None,
+                 allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 comment: Optional[pulumi.Input[str]] = None,
+                 enabled: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 saml2_enable_sp_initiated: Optional[pulumi.Input[bool]] = None,
-                 saml2_force_authn: Optional[pulumi.Input[bool]] = None,
+                 saml2_enable_sp_initiated: Optional[pulumi.Input[str]] = None,
+                 saml2_force_authn: Optional[pulumi.Input[str]] = None,
                  saml2_issuer: Optional[pulumi.Input[str]] = None,
                  saml2_post_logout_redirect_url: Optional[pulumi.Input[str]] = None,
                  saml2_provider: Optional[pulumi.Input[str]] = None,
                  saml2_requested_nameid_format: Optional[pulumi.Input[str]] = None,
-                 saml2_sign_request: Optional[pulumi.Input[bool]] = None,
+                 saml2_sign_request: Optional[pulumi.Input[str]] = None,
                  saml2_snowflake_acs_url: Optional[pulumi.Input[str]] = None,
                  saml2_snowflake_issuer_url: Optional[pulumi.Input[str]] = None,
-                 saml2_snowflake_x509_cert: Optional[pulumi.Input[str]] = None,
                  saml2_sp_initiated_login_page_label: Optional[pulumi.Input[str]] = None,
                  saml2_sso_url: Optional[pulumi.Input[str]] = None,
                  saml2_x509_cert: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
-        ## Example Usage
-        ```python
-        import pulumi
-        import pulumi_snowflake as snowflake
-        saml_integration = snowflake.SamlIntegration("samlIntegration",
-            enabled=True,
-            saml2_issuer="test_issuer",
-            saml2_provider="CUSTOM",
-            saml2_sso_url="https://testsamlissuer.com",
-            saml2_x509_cert="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")
-        ```
         ## Import
         ```sh
-         $ pulumi import snowflake:index/samlIntegration:SamlIntegration example name
+        $ pulumi import snowflake:index/saml2Integration:Saml2Integration example '"<integration_name>"'
         ```
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
-        :param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
-        :param pulumi.Input[bool] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in WIth button on the login page.  FALSE: does not display the Log in With button on the login page.
-        :param pulumi.Input[bool] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        :param pulumi.Input[str] comment: Specifies a comment for the integration.
+        :param pulumi.Input[str] enabled: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         :param pulumi.Input[str] saml2_issuer: The string containing the IdP EntityID / Issuer.
         :param pulumi.Input[str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
-        :param pulumi.Input[str] saml2_provider: The string describing the IdP. One of the following: OKTA, ADFS, Custom.
-        :param pulumi.Input[str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. If a value is not specified, Snowflake sends the urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress value in the authentication request to the IdP. NameID must be one of the following values: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified, urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName, urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName, urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos, urn:oasis:names:tc:SAML:2.0:nameid-format:persistent, urn:oasis:names:tc:SAML:2.0:nameid-format:transient .
-        :param pulumi.Input[bool] saml2_sign_request: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed.
-        :param pulumi.Input[str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Default: https://\\n\\n.\\n\\n.snowflakecomputing.com/fed/login
-        :param pulumi.Input[str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use.
-        :param pulumi.Input[str] saml2_snowflake_x509_cert: The Base64 encoded self-signed certificate generated by Snowflake for use with Encrypting SAML Assertions and Signed SAML Requests. You must have at least one of these features (encrypted SAML assertions or signed SAML responses) enabled in your Snowflake account to access the certificate value.
-        :param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page.
+        :param pulumi.Input[str] saml2_provider: The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
+        :param pulumi.Input[str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
+        :param pulumi.Input[str] saml2_sign_request: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
+        :param pulumi.Input[str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
+        :param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         :param pulumi.Input[str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
         :param pulumi.Input[str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
         """
@@ -623,36 +676,22 @@ class SamlIntegration(pulumi.CustomResource):
     @overload
     def __init__(__self__,
                  resource_name: str,
-                 args: SamlIntegrationArgs,
+                 args: Saml2IntegrationArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        ## Example Usage
-        ```python
-        import pulumi
-        import pulumi_snowflake as snowflake
-        saml_integration = snowflake.SamlIntegration("samlIntegration",
-            enabled=True,
-            saml2_issuer="test_issuer",
-            saml2_provider="CUSTOM",
-            saml2_sso_url="https://testsamlissuer.com",
-            saml2_x509_cert="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")
-        ```
         ## Import
         ```sh
-         $ pulumi import snowflake:index/samlIntegration:SamlIntegration example name
+        $ pulumi import snowflake:index/saml2Integration:Saml2Integration example '"<integration_name>"'
         ```
         :param str resource_name: The name of the resource.
-        :param SamlIntegrationArgs args: The arguments to use to populate this resource's properties.
+        :param Saml2IntegrationArgs args: The arguments to use to populate this resource's properties.
         :param pulumi.ResourceOptions opts: Options for the resource.
         """
         ...
     def __init__(__self__, resource_name: str, *args, **kwargs):
-        resource_args, opts = _utilities.get_resource_args_opts(SamlIntegrationArgs, pulumi.ResourceOptions, *args, **kwargs)
+        resource_args, opts = _utilities.get_resource_args_opts(Saml2IntegrationArgs, pulumi.ResourceOptions, *args, **kwargs)
         if resource_args is not None:
             __self__._internal_init(resource_name, opts, **resource_args.__dict__)
         else:
@@ -661,18 +700,20 @@ class SamlIntegration(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 enabled: Optional[pulumi.Input[bool]] = None,
+                 allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 comment: Optional[pulumi.Input[str]] = None,
+                 enabled: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 saml2_enable_sp_initiated: Optional[pulumi.Input[bool]] = None,
-                 saml2_force_authn: Optional[pulumi.Input[bool]] = None,
+                 saml2_enable_sp_initiated: Optional[pulumi.Input[str]] = None,
+                 saml2_force_authn: Optional[pulumi.Input[str]] = None,
                  saml2_issuer: Optional[pulumi.Input[str]] = None,
                  saml2_post_logout_redirect_url: Optional[pulumi.Input[str]] = None,
                  saml2_provider: Optional[pulumi.Input[str]] = None,
                  saml2_requested_nameid_format: Optional[pulumi.Input[str]] = None,
-                 saml2_sign_request: Optional[pulumi.Input[bool]] = None,
+                 saml2_sign_request: Optional[pulumi.Input[str]] = None,
                  saml2_snowflake_acs_url: Optional[pulumi.Input[str]] = None,
                  saml2_snowflake_issuer_url: Optional[pulumi.Input[str]] = None,
-                 saml2_snowflake_x509_cert: Optional[pulumi.Input[str]] = None,
                  saml2_sp_initiated_login_page_label: Optional[pulumi.Input[str]] = None,
                  saml2_sso_url: Optional[pulumi.Input[str]] = None,
                  saml2_x509_cert: Optional[pulumi.Input[str]] = None,
@@ -683,8 +724,11 @@ class SamlIntegration(pulumi.CustomResource):
         if opts.id is None:
             if __props__ is not None:
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
-            __props__ = SamlIntegrationArgs.__new__(SamlIntegrationArgs)
+            __props__ = Saml2IntegrationArgs.__new__(Saml2IntegrationArgs)
+            __props__.__dict__["allowed_email_patterns"] = allowed_email_patterns
+            __props__.__dict__["allowed_user_domains"] = allowed_user_domains
+            __props__.__dict__["comment"] = comment
             __props__.__dict__["enabled"] = enabled
             __props__.__dict__["name"] = name
             __props__.__dict__["saml2_enable_sp_initiated"] = saml2_enable_sp_initiated
@@ -700,7 +744,6 @@ class SamlIntegration(pulumi.CustomResource):
             __props__.__dict__["saml2_sign_request"] = saml2_sign_request
             __props__.__dict__["saml2_snowflake_acs_url"] = saml2_snowflake_acs_url
             __props__.__dict__["saml2_snowflake_issuer_url"] = saml2_snowflake_issuer_url
-            __props__.__dict__["saml2_snowflake_x509_cert"] = saml2_snowflake_x509_cert
             __props__.__dict__["saml2_sp_initiated_login_page_label"] = saml2_sp_initiated_login_page_label
             if saml2_sso_url is None and not opts.urn:
                 raise TypeError("Missing required property 'saml2_sso_url'")
@@ -708,12 +751,11 @@ class SamlIntegration(pulumi.CustomResource):
             if saml2_x509_cert is None and not opts.urn:
                 raise TypeError("Missing required property 'saml2_x509_cert'")
             __props__.__dict__["saml2_x509_cert"] = saml2_x509_cert
-            __props__.__dict__["created_on"] = None
-            __props__.__dict__["saml2_digest_methods_used"] = None
-            __props__.__dict__["saml2_signature_methods_used"] = None
-            __props__.__dict__["saml2_snowflake_metadata"] = None
-        super(SamlIntegration, __self__).__init__(
-            'snowflake:index/samlIntegration:SamlIntegration',
+            __props__.__dict__["describe_outputs"] = None
+            __props__.__dict__["fully_qualified_name"] = None
+            __props__.__dict__["show_outputs"] = None
+        super(Saml2Integration, __self__).__init__(
+            'snowflake:index/saml2Integration:Saml2Integration',
             resource_name,
             __props__,
             opts)
@@ -722,58 +764,65 @@ class SamlIntegration(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            created_on: Optional[pulumi.Input[str]] = None,
-            enabled: Optional[pulumi.Input[bool]] = None,
+            allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            comment: Optional[pulumi.Input[str]] = None,
+            describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['Saml2IntegrationDescribeOutputArgs', 'Saml2IntegrationDescribeOutputArgsDict']]]]] = None,
+            enabled: Optional[pulumi.Input[str]] = None,
+            fully_qualified_name: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
-            saml2_digest_methods_used: Optional[pulumi.Input[str]] = None,
-            saml2_enable_sp_initiated: Optional[pulumi.Input[bool]] = None,
-            saml2_force_authn: Optional[pulumi.Input[bool]] = None,
+            saml2_enable_sp_initiated: Optional[pulumi.Input[str]] = None,
+            saml2_force_authn: Optional[pulumi.Input[str]] = None,
             saml2_issuer: Optional[pulumi.Input[str]] = None,
             saml2_post_logout_redirect_url: Optional[pulumi.Input[str]] = None,
             saml2_provider: Optional[pulumi.Input[str]] = None,
             saml2_requested_nameid_format: Optional[pulumi.Input[str]] = None,
-            saml2_sign_request: Optional[pulumi.Input[bool]] = None,
-            saml2_signature_methods_used: Optional[pulumi.Input[str]] = None,
+            saml2_sign_request: Optional[pulumi.Input[str]] = None,
             saml2_snowflake_acs_url: Optional[pulumi.Input[str]] = None,
             saml2_snowflake_issuer_url: Optional[pulumi.Input[str]] = None,
-            saml2_snowflake_metadata: Optional[pulumi.Input[str]] = None,
-            saml2_snowflake_x509_cert: Optional[pulumi.Input[str]] = None,
             saml2_sp_initiated_login_page_label: Optional[pulumi.Input[str]] = None,
             saml2_sso_url: Optional[pulumi.Input[str]] = None,
-            saml2_x509_cert: Optional[pulumi.Input[str]] = None) -> 'SamlIntegration':
+            saml2_x509_cert: Optional[pulumi.Input[str]] = None,
+            show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['Saml2IntegrationShowOutputArgs', 'Saml2IntegrationShowOutputArgsDict']]]]] = None) -> 'Saml2Integration':
         """
-        Get an existing SamlIntegration resource's state with the given name, id, and optional extra
+        Get an existing Saml2Integration resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[str] created_on: Date and time when the SAML integration was created.
-        :param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
-        :param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
-        :param pulumi.Input[bool] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in WIth button on the login page.  FALSE: does not display the Log in With button on the login page.
-        :param pulumi.Input[bool] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        :param pulumi.Input[str] comment: Specifies a comment for the integration.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['Saml2IntegrationDescribeOutputArgs', 'Saml2IntegrationDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
+        :param pulumi.Input[str] enabled: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        :param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         :param pulumi.Input[str] saml2_issuer: The string containing the IdP EntityID / Issuer.
         :param pulumi.Input[str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
-        :param pulumi.Input[str] saml2_provider: The string describing the IdP. One of the following: OKTA, ADFS, Custom.
-        :param pulumi.Input[str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. If a value is not specified, Snowflake sends the urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress value in the authentication request to the IdP. NameID must be one of the following values: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified, urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName, urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName, urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos, urn:oasis:names:tc:SAML:2.0:nameid-format:persistent, urn:oasis:names:tc:SAML:2.0:nameid-format:transient .
-        :param pulumi.Input[bool] saml2_sign_request: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed.
-        :param pulumi.Input[str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Default: https://\\n\\n.\\n\\n.snowflakecomputing.com/fed/login
-        :param pulumi.Input[str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use.
-        :param pulumi.Input[str] saml2_snowflake_metadata: Metadata created by Snowflake to provide to SAML2 provider.
-        :param pulumi.Input[str] saml2_snowflake_x509_cert: The Base64 encoded self-signed certificate generated by Snowflake for use with Encrypting SAML Assertions and Signed SAML Requests. You must have at least one of these features (encrypted SAML assertions or signed SAML responses) enabled in your Snowflake account to access the certificate value.
-        :param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page.
+        :param pulumi.Input[str] saml2_provider: The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
+        :param pulumi.Input[str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
+        :param pulumi.Input[str] saml2_sign_request: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
+        :param pulumi.Input[str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
+        :param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         :param pulumi.Input[str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
         :param pulumi.Input[str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['Saml2IntegrationShowOutputArgs', 'Saml2IntegrationShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
-        __props__ = _SamlIntegrationState.__new__(_SamlIntegrationState)
+        __props__ = _Saml2IntegrationState.__new__(_Saml2IntegrationState)
-        __props__.__dict__["created_on"] = created_on
+        __props__.__dict__["allowed_email_patterns"] = allowed_email_patterns
+        __props__.__dict__["allowed_user_domains"] = allowed_user_domains
+        __props__.__dict__["comment"] = comment
+        __props__.__dict__["describe_outputs"] = describe_outputs
         __props__.__dict__["enabled"] = enabled
+        __props__.__dict__["fully_qualified_name"] = fully_qualified_name
         __props__.__dict__["name"] = name
-        __props__.__dict__["saml2_digest_methods_used"] = saml2_digest_methods_used
         __props__.__dict__["saml2_enable_sp_initiated"] = saml2_enable_sp_initiated
         __props__.__dict__["saml2_force_authn"] = saml2_force_authn
         __props__.__dict__["saml2_issuer"] = saml2_issuer
@@ -781,58 +830,83 @@ class SamlIntegration(pulumi.CustomResource):
         __props__.__dict__["saml2_provider"] = saml2_provider
         __props__.__dict__["saml2_requested_nameid_format"] = saml2_requested_nameid_format
         __props__.__dict__["saml2_sign_request"] = saml2_sign_request
-        __props__.__dict__["saml2_signature_methods_used"] = saml2_signature_methods_used
         __props__.__dict__["saml2_snowflake_acs_url"] = saml2_snowflake_acs_url
         __props__.__dict__["saml2_snowflake_issuer_url"] = saml2_snowflake_issuer_url
-        __props__.__dict__["saml2_snowflake_metadata"] = saml2_snowflake_metadata
-        __props__.__dict__["saml2_snowflake_x509_cert"] = saml2_snowflake_x509_cert
         __props__.__dict__["saml2_sp_initiated_login_page_label"] = saml2_sp_initiated_login_page_label
         __props__.__dict__["saml2_sso_url"] = saml2_sso_url
         __props__.__dict__["saml2_x509_cert"] = saml2_x509_cert
-        return SamlIntegration(resource_name, opts=opts, __props__=__props__)
+        __props__.__dict__["show_outputs"] = show_outputs
+        return Saml2Integration(resource_name, opts=opts, __props__=__props__)
     @property
-    @pulumi.getter(name="createdOn")
-    def created_on(self) -> pulumi.Output[str]:
+    @pulumi.getter(name="allowedEmailPatterns")
+    def allowed_email_patterns(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        Date and time when the SAML integration was created.
+        A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         """
-        return pulumi.get(self, "created_on")
+        return pulumi.get(self, "allowed_email_patterns")
+    @property
+    @pulumi.getter(name="allowedUserDomains")
+    def allowed_user_domains(self) -> pulumi.Output[Optional[Sequence[str]]]:
+        """
+        A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
+        """
+        return pulumi.get(self, "allowed_user_domains")
     @property
     @pulumi.getter
-    def enabled(self) -> pulumi.Output[Optional[bool]]:
+    def comment(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies whether this security integration is enabled or disabled.
+        Specifies a comment for the integration.
+        """
+        return pulumi.get(self, "comment")
+    @property
+    @pulumi.getter(name="describeOutputs")
+    def describe_outputs(self) -> pulumi.Output[Sequence['outputs.Saml2IntegrationDescribeOutput']]:
+        """
+        Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
+        """
+        return pulumi.get(self, "describe_outputs")
+    @property
+    @pulumi.getter
+    def enabled(self) -> pulumi.Output[Optional[str]]:
+        """
+        Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "enabled")
+    @property
+    @pulumi.getter(name="fullyQualifiedName")
+    def fully_qualified_name(self) -> pulumi.Output[str]:
+        """
+        Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        """
+        return pulumi.get(self, "fully_qualified_name")
     @property
     @pulumi.getter
     def name(self) -> pulumi.Output[str]:
         """
-        Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
+        Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "name")
-    @property
-    @pulumi.getter(name="saml2DigestMethodsUsed")
-    def saml2_digest_methods_used(self) -> pulumi.Output[str]:
-        return pulumi.get(self, "saml2_digest_methods_used")
     @property
     @pulumi.getter(name="saml2EnableSpInitiated")
-    def saml2_enable_sp_initiated(self) -> pulumi.Output[Optional[bool]]:
+    def saml2_enable_sp_initiated(self) -> pulumi.Output[Optional[str]]:
         """
-        The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in WIth button on the login page.  FALSE: does not display the Log in With button on the login page.
+        The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_enable_sp_initiated")
     @property
     @pulumi.getter(name="saml2ForceAuthn")
-    def saml2_force_authn(self) -> pulumi.Output[Optional[bool]]:
+    def saml2_force_authn(self) -> pulumi.Output[Optional[str]]:
         """
-        The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake.
+        The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_force_authn")
@@ -856,7 +930,7 @@ class SamlIntegration(pulumi.CustomResource):
     @pulumi.getter(name="saml2Provider")
     def saml2_provider(self) -> pulumi.Output[str]:
         """
-        The string describing the IdP. One of the following: OKTA, ADFS, Custom.
+        The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
         """
         return pulumi.get(self, "saml2_provider")
@@ -864,60 +938,39 @@ class SamlIntegration(pulumi.CustomResource):
     @pulumi.getter(name="saml2RequestedNameidFormat")
     def saml2_requested_nameid_format(self) -> pulumi.Output[Optional[str]]:
         """
-        The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. If a value is not specified, Snowflake sends the urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress value in the authentication request to the IdP. NameID must be one of the following values: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified, urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName, urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName, urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos, urn:oasis:names:tc:SAML:2.0:nameid-format:persistent, urn:oasis:names:tc:SAML:2.0:nameid-format:transient .
+        The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
         """
         return pulumi.get(self, "saml2_requested_nameid_format")
     @property
     @pulumi.getter(name="saml2SignRequest")
-    def saml2_sign_request(self) -> pulumi.Output[Optional[bool]]:
+    def saml2_sign_request(self) -> pulumi.Output[Optional[str]]:
         """
-        The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed.
+        The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "saml2_sign_request")
-    @property
-    @pulumi.getter(name="saml2SignatureMethodsUsed")
-    def saml2_signature_methods_used(self) -> pulumi.Output[str]:
-        return pulumi.get(self, "saml2_signature_methods_used")
     @property
     @pulumi.getter(name="saml2SnowflakeAcsUrl")
-    def saml2_snowflake_acs_url(self) -> pulumi.Output[str]:
+    def saml2_snowflake_acs_url(self) -> pulumi.Output[Optional[str]]:
         """
-        The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Default: https://\\n\\n.\\n\\n.snowflakecomputing.com/fed/login
+        The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
         """
         return pulumi.get(self, "saml2_snowflake_acs_url")
     @property
     @pulumi.getter(name="saml2SnowflakeIssuerUrl")
-    def saml2_snowflake_issuer_url(self) -> pulumi.Output[str]:
+    def saml2_snowflake_issuer_url(self) -> pulumi.Output[Optional[str]]:
         """
-        The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use.
+        The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
         """
         return pulumi.get(self, "saml2_snowflake_issuer_url")
-    @property
-    @pulumi.getter(name="saml2SnowflakeMetadata")
-    def saml2_snowflake_metadata(self) -> pulumi.Output[str]:
-        """
-        Metadata created by Snowflake to provide to SAML2 provider.
-        """
-        return pulumi.get(self, "saml2_snowflake_metadata")
-    @property
-    @pulumi.getter(name="saml2SnowflakeX509Cert")
-    def saml2_snowflake_x509_cert(self) -> pulumi.Output[str]:
-        """
-        The Base64 encoded self-signed certificate generated by Snowflake for use with Encrypting SAML Assertions and Signed SAML Requests. You must have at least one of these features (encrypted SAML assertions or signed SAML responses) enabled in your Snowflake account to access the certificate value.
-        """
-        return pulumi.get(self, "saml2_snowflake_x509_cert")
     @property
     @pulumi.getter(name="saml2SpInitiatedLoginPageLabel")
     def saml2_sp_initiated_login_page_label(self) -> pulumi.Output[Optional[str]]:
         """
-        The string containing the label to display after the Log In With button on the login page.
+        The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
         """
         return pulumi.get(self, "saml2_sp_initiated_login_page_label")
@@ -937,3 +990,11 @@ class SamlIntegration(pulumi.CustomResource):
         """
         return pulumi.get(self, "saml2_x509_cert")
+    @property
+    @pulumi.getter(name="showOutputs")
+    def show_outputs(self) -> pulumi.Output[Sequence['outputs.Saml2IntegrationShowOutput']]:
+        """
+        Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
+        """
+        return pulumi.get(self, "show_outputs")

pulumi-snowflake 0.50.2a1709892015__py3-none-any.whl → 1.2.0a1736835738__py3-none-any.whl

Potentially problematic release.

pulumi-snowflake 0.50.2a1709892015py3-none-any.whl → 1.2.0a1736835738py3-none-any.whl