app

package
v3.23.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 20, 2023 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AutoLogin

type AutoLogin struct {
	pulumi.CustomResourceState

	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrOutput `pulumi:"accessibilitySelfService"`
	// Application notes for admins.
	AdminNote pulumi.StringPtrOutput `pulumi:"adminNote"`
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrOutput `pulumi:"appLinksJson"`
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrOutput `pulumi:"appSettingsJson"`
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrOutput `pulumi:"autoSubmitToolbar"`
	// One of: `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrOutput `pulumi:"credentialsScheme"`
	// Application notes for end users.
	EnduserNote pulumi.StringPtrOutput `pulumi:"enduserNote"`
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayOutput `pulumi:"groups"`
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrOutput `pulumi:"hideIos"`
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrOutput `pulumi:"hideWeb"`
	// The Application's display name.
	Label pulumi.StringOutput `pulumi:"label"`
	Logo pulumi.StringPtrOutput `pulumi:"logo"`
	// Direct link of application logo.
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// Name assigned to the application by Okta.
	Name pulumi.StringOutput `pulumi:"name"`
	// Tells Okta to use an existing application in their application catalog, as opposed to a custom application.
	PreconfiguredApp pulumi.StringPtrOutput `pulumi:"preconfiguredApp"`
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrOutput `pulumi:"revealPassword"`
	// Shared password, required for certain schemes
	SharedPassword pulumi.StringPtrOutput `pulumi:"sharedPassword"`
	// Shared username, required for certain schemes
	SharedUsername pulumi.StringPtrOutput `pulumi:"sharedUsername"`
	// Sign-on mode of the application.
	SignOnMode pulumi.StringOutput `pulumi:"signOnMode"`
	// Redirect URL; if going to the login page URL redirects to another page, then enter that URL here
	SignOnRedirectUrl pulumi.StringPtrOutput `pulumi:"signOnRedirectUrl"`
	// App login page URL
	SignOnUrl pulumi.StringPtrOutput `pulumi:"signOnUrl"`
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrOutput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrOutput `pulumi:"skipUsers"`
	// The status of the application, by default, it is `"ACTIVE"`.
	Status pulumi.StringPtrOutput `pulumi:"status"`
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrOutput `pulumi:"userNameTemplate"`
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrOutput `pulumi:"userNameTemplatePushStatus"`
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrOutput `pulumi:"userNameTemplateSuffix"`
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrOutput `pulumi:"userNameTemplateType"`
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users AutoLoginUserArrayOutput `pulumi:"users"`
}

This resource allows you to create and configure an Auto Login Okta Application.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewAutoLogin(ctx, "example", &app.AutoLoginArgs{
			CredentialsScheme: pulumi.String("EDIT_USERNAME_AND_PASSWORD"),
			Label:             pulumi.String("Example App"),
			RevealPassword:    pulumi.Bool(true),
			SignOnRedirectUrl: pulumi.String("https://example.com"),
			SignOnUrl:         pulumi.String("https://example.com/login.html"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Pre-configured application ```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewAutoLogin(ctx, "example", &app.AutoLoginArgs{
			AppSettingsJson:  pulumi.String("{\n    \"domain\": \"okta\",\n    \"afwOnly\": false\n}\n\n"),
			Label:            pulumi.String("Google Example App"),
			PreconfiguredApp: pulumi.String("google"),
			Status:           pulumi.String("ACTIVE"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Okta Auto Login App can be imported via the Okta ID.

```sh

$ pulumi import okta:app/autoLogin:AutoLogin example <app id>

```

It's also possible to import app without groups or/and users. In this case ID may look like this

```sh

$ pulumi import okta:app/autoLogin:AutoLogin example <app id>/skip_users

```

```sh

$ pulumi import okta:app/autoLogin:AutoLogin example <app id>/skip_users/skip_groups

```

```sh

$ pulumi import okta:app/autoLogin:AutoLogin example <app id>/skip_groups

```

func GetAutoLogin

func GetAutoLogin(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AutoLoginState, opts ...pulumi.ResourceOption) (*AutoLogin, error)

GetAutoLogin gets an existing AutoLogin resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAutoLogin

func NewAutoLogin(ctx *pulumi.Context,
	name string, args *AutoLoginArgs, opts ...pulumi.ResourceOption) (*AutoLogin, error)

NewAutoLogin registers a new resource with the given unique name, arguments, and options.

func (*AutoLogin) ElementType

func (*AutoLogin) ElementType() reflect.Type

func (*AutoLogin) ToAutoLoginOutput

func (i *AutoLogin) ToAutoLoginOutput() AutoLoginOutput

func (*AutoLogin) ToAutoLoginOutputWithContext

func (i *AutoLogin) ToAutoLoginOutputWithContext(ctx context.Context) AutoLoginOutput

type AutoLoginArgs

type AutoLoginArgs struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// One of: `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The Application's display name.
	Label pulumi.StringInput
	Logo pulumi.StringPtrInput
	// Tells Okta to use an existing application in their application catalog, as opposed to a custom application.
	PreconfiguredApp pulumi.StringPtrInput
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrInput
	// Shared password, required for certain schemes
	SharedPassword pulumi.StringPtrInput
	// Shared username, required for certain schemes
	SharedUsername pulumi.StringPtrInput
	// Redirect URL; if going to the login page URL redirects to another page, then enter that URL here
	SignOnRedirectUrl pulumi.StringPtrInput
	// App login page URL
	SignOnUrl pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// The status of the application, by default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users AutoLoginUserArrayInput
}

The set of arguments for constructing a AutoLogin resource.

func (AutoLoginArgs) ElementType

func (AutoLoginArgs) ElementType() reflect.Type

type AutoLoginArray

type AutoLoginArray []AutoLoginInput

func (AutoLoginArray) ElementType

func (AutoLoginArray) ElementType() reflect.Type

func (AutoLoginArray) ToAutoLoginArrayOutput

func (i AutoLoginArray) ToAutoLoginArrayOutput() AutoLoginArrayOutput

func (AutoLoginArray) ToAutoLoginArrayOutputWithContext

func (i AutoLoginArray) ToAutoLoginArrayOutputWithContext(ctx context.Context) AutoLoginArrayOutput

type AutoLoginArrayInput

type AutoLoginArrayInput interface {
	pulumi.Input

	ToAutoLoginArrayOutput() AutoLoginArrayOutput
	ToAutoLoginArrayOutputWithContext(context.Context) AutoLoginArrayOutput
}

AutoLoginArrayInput is an input type that accepts AutoLoginArray and AutoLoginArrayOutput values. You can construct a concrete instance of `AutoLoginArrayInput` via:

AutoLoginArray{ AutoLoginArgs{...} }

type AutoLoginArrayOutput

type AutoLoginArrayOutput struct{ *pulumi.OutputState }

func (AutoLoginArrayOutput) ElementType

func (AutoLoginArrayOutput) ElementType() reflect.Type

func (AutoLoginArrayOutput) Index

func (AutoLoginArrayOutput) ToAutoLoginArrayOutput

func (o AutoLoginArrayOutput) ToAutoLoginArrayOutput() AutoLoginArrayOutput

func (AutoLoginArrayOutput) ToAutoLoginArrayOutputWithContext

func (o AutoLoginArrayOutput) ToAutoLoginArrayOutputWithContext(ctx context.Context) AutoLoginArrayOutput

type AutoLoginInput

type AutoLoginInput interface {
	pulumi.Input

	ToAutoLoginOutput() AutoLoginOutput
	ToAutoLoginOutputWithContext(ctx context.Context) AutoLoginOutput
}

type AutoLoginMap

type AutoLoginMap map[string]AutoLoginInput

func (AutoLoginMap) ElementType

func (AutoLoginMap) ElementType() reflect.Type

func (AutoLoginMap) ToAutoLoginMapOutput

func (i AutoLoginMap) ToAutoLoginMapOutput() AutoLoginMapOutput

func (AutoLoginMap) ToAutoLoginMapOutputWithContext

func (i AutoLoginMap) ToAutoLoginMapOutputWithContext(ctx context.Context) AutoLoginMapOutput

type AutoLoginMapInput

type AutoLoginMapInput interface {
	pulumi.Input

	ToAutoLoginMapOutput() AutoLoginMapOutput
	ToAutoLoginMapOutputWithContext(context.Context) AutoLoginMapOutput
}

AutoLoginMapInput is an input type that accepts AutoLoginMap and AutoLoginMapOutput values. You can construct a concrete instance of `AutoLoginMapInput` via:

AutoLoginMap{ "key": AutoLoginArgs{...} }

type AutoLoginMapOutput

type AutoLoginMapOutput struct{ *pulumi.OutputState }

func (AutoLoginMapOutput) ElementType

func (AutoLoginMapOutput) ElementType() reflect.Type

func (AutoLoginMapOutput) MapIndex

func (AutoLoginMapOutput) ToAutoLoginMapOutput

func (o AutoLoginMapOutput) ToAutoLoginMapOutput() AutoLoginMapOutput

func (AutoLoginMapOutput) ToAutoLoginMapOutputWithContext

func (o AutoLoginMapOutput) ToAutoLoginMapOutputWithContext(ctx context.Context) AutoLoginMapOutput

type AutoLoginOutput

type AutoLoginOutput struct{ *pulumi.OutputState }

func (AutoLoginOutput) AccessibilityErrorRedirectUrl added in v3.9.0

func (o AutoLoginOutput) AccessibilityErrorRedirectUrl() pulumi.StringPtrOutput

Custom error page URL.

func (AutoLoginOutput) AccessibilityLoginRedirectUrl added in v3.9.0

func (o AutoLoginOutput) AccessibilityLoginRedirectUrl() pulumi.StringPtrOutput

Custom login page for this application.

func (AutoLoginOutput) AccessibilitySelfService added in v3.9.0

func (o AutoLoginOutput) AccessibilitySelfService() pulumi.BoolPtrOutput

Enable self-service. By default, it is `false`.

func (AutoLoginOutput) AdminNote added in v3.9.0

func (o AutoLoginOutput) AdminNote() pulumi.StringPtrOutput

Application notes for admins.

func (AutoLoginOutput) AppLinksJson added in v3.9.0

func (o AutoLoginOutput) AppLinksJson() pulumi.StringPtrOutput

Displays specific appLinks for the app. The value for each application link should be boolean.

func (AutoLoginOutput) AppSettingsJson added in v3.9.0

func (o AutoLoginOutput) AppSettingsJson() pulumi.StringPtrOutput

Application settings in JSON format.

func (AutoLoginOutput) AutoSubmitToolbar added in v3.9.0

func (o AutoLoginOutput) AutoSubmitToolbar() pulumi.BoolPtrOutput

Display auto submit toolbar.

func (AutoLoginOutput) CredentialsScheme added in v3.9.0

func (o AutoLoginOutput) CredentialsScheme() pulumi.StringPtrOutput

One of: `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.

func (AutoLoginOutput) ElementType

func (AutoLoginOutput) ElementType() reflect.Type

func (AutoLoginOutput) EnduserNote added in v3.9.0

func (o AutoLoginOutput) EnduserNote() pulumi.StringPtrOutput

Application notes for end users.

func (AutoLoginOutput) Groups deprecated added in v3.9.0

Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.

Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.

func (AutoLoginOutput) HideIos added in v3.9.0

func (o AutoLoginOutput) HideIos() pulumi.BoolPtrOutput

Do not display application icon on mobile app.

func (AutoLoginOutput) HideWeb added in v3.9.0

func (o AutoLoginOutput) HideWeb() pulumi.BoolPtrOutput

Do not display application icon to users.

func (AutoLoginOutput) Label added in v3.9.0

The Application's display name.

Local file path to the logo. The file must be in PNG, JPG, or GIF format, and less than 1 MB in size.

func (AutoLoginOutput) LogoUrl added in v3.9.0

func (o AutoLoginOutput) LogoUrl() pulumi.StringOutput

Direct link of application logo.

func (AutoLoginOutput) Name added in v3.9.0

Name assigned to the application by Okta.

func (AutoLoginOutput) PreconfiguredApp added in v3.9.0

func (o AutoLoginOutput) PreconfiguredApp() pulumi.StringPtrOutput

Tells Okta to use an existing application in their application catalog, as opposed to a custom application.

func (AutoLoginOutput) RevealPassword added in v3.9.0

func (o AutoLoginOutput) RevealPassword() pulumi.BoolPtrOutput

Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.

func (AutoLoginOutput) SharedPassword added in v3.9.0

func (o AutoLoginOutput) SharedPassword() pulumi.StringPtrOutput

Shared password, required for certain schemes

func (AutoLoginOutput) SharedUsername added in v3.9.0

func (o AutoLoginOutput) SharedUsername() pulumi.StringPtrOutput

Shared username, required for certain schemes

func (AutoLoginOutput) SignOnMode added in v3.9.0

func (o AutoLoginOutput) SignOnMode() pulumi.StringOutput

Sign-on mode of the application.

func (AutoLoginOutput) SignOnRedirectUrl added in v3.9.0

func (o AutoLoginOutput) SignOnRedirectUrl() pulumi.StringPtrOutput

Redirect URL; if going to the login page URL redirects to another page, then enter that URL here

func (AutoLoginOutput) SignOnUrl added in v3.9.0

func (o AutoLoginOutput) SignOnUrl() pulumi.StringPtrOutput

App login page URL

func (AutoLoginOutput) SkipGroups added in v3.9.0

func (o AutoLoginOutput) SkipGroups() pulumi.BoolPtrOutput

Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.

func (AutoLoginOutput) SkipUsers added in v3.9.0

func (o AutoLoginOutput) SkipUsers() pulumi.BoolPtrOutput

Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.

func (AutoLoginOutput) Status added in v3.9.0

The status of the application, by default, it is `"ACTIVE"`.

func (AutoLoginOutput) ToAutoLoginOutput

func (o AutoLoginOutput) ToAutoLoginOutput() AutoLoginOutput

func (AutoLoginOutput) ToAutoLoginOutputWithContext

func (o AutoLoginOutput) ToAutoLoginOutputWithContext(ctx context.Context) AutoLoginOutput

func (AutoLoginOutput) UserNameTemplate added in v3.9.0

func (o AutoLoginOutput) UserNameTemplate() pulumi.StringPtrOutput

Username template. Default: `"${source.login}"`

func (AutoLoginOutput) UserNameTemplatePushStatus added in v3.9.0

func (o AutoLoginOutput) UserNameTemplatePushStatus() pulumi.StringPtrOutput

Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.

func (AutoLoginOutput) UserNameTemplateSuffix added in v3.9.0

func (o AutoLoginOutput) UserNameTemplateSuffix() pulumi.StringPtrOutput

Username template suffix.

func (AutoLoginOutput) UserNameTemplateType added in v3.9.0

func (o AutoLoginOutput) UserNameTemplateType() pulumi.StringPtrOutput

Username template type. Default: `"BUILT_IN"`.

func (AutoLoginOutput) Users deprecated added in v3.9.0

The users assigned to the application. See `app.User` for a more flexible approach.

Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.

type AutoLoginState

type AutoLoginState struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// One of: `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The Application's display name.
	Label pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// Direct link of application logo.
	LogoUrl pulumi.StringPtrInput
	// Name assigned to the application by Okta.
	Name pulumi.StringPtrInput
	// Tells Okta to use an existing application in their application catalog, as opposed to a custom application.
	PreconfiguredApp pulumi.StringPtrInput
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrInput
	// Shared password, required for certain schemes
	SharedPassword pulumi.StringPtrInput
	// Shared username, required for certain schemes
	SharedUsername pulumi.StringPtrInput
	// Sign-on mode of the application.
	SignOnMode pulumi.StringPtrInput
	// Redirect URL; if going to the login page URL redirects to another page, then enter that URL here
	SignOnRedirectUrl pulumi.StringPtrInput
	// App login page URL
	SignOnUrl pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// The status of the application, by default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users AutoLoginUserArrayInput
}

func (AutoLoginState) ElementType

func (AutoLoginState) ElementType() reflect.Type

type AutoLoginUser

type AutoLoginUser struct {
	Id       *string `pulumi:"id"`
	Password *string `pulumi:"password"`
	Scope    *string `pulumi:"scope"`
	Username *string `pulumi:"username"`
}

type AutoLoginUserArgs

type AutoLoginUserArgs struct {
	Id       pulumi.StringPtrInput `pulumi:"id"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Scope    pulumi.StringPtrInput `pulumi:"scope"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (AutoLoginUserArgs) ElementType

func (AutoLoginUserArgs) ElementType() reflect.Type

func (AutoLoginUserArgs) ToAutoLoginUserOutput

func (i AutoLoginUserArgs) ToAutoLoginUserOutput() AutoLoginUserOutput

func (AutoLoginUserArgs) ToAutoLoginUserOutputWithContext

func (i AutoLoginUserArgs) ToAutoLoginUserOutputWithContext(ctx context.Context) AutoLoginUserOutput

type AutoLoginUserArray

type AutoLoginUserArray []AutoLoginUserInput

func (AutoLoginUserArray) ElementType

func (AutoLoginUserArray) ElementType() reflect.Type

func (AutoLoginUserArray) ToAutoLoginUserArrayOutput

func (i AutoLoginUserArray) ToAutoLoginUserArrayOutput() AutoLoginUserArrayOutput

func (AutoLoginUserArray) ToAutoLoginUserArrayOutputWithContext

func (i AutoLoginUserArray) ToAutoLoginUserArrayOutputWithContext(ctx context.Context) AutoLoginUserArrayOutput

type AutoLoginUserArrayInput

type AutoLoginUserArrayInput interface {
	pulumi.Input

	ToAutoLoginUserArrayOutput() AutoLoginUserArrayOutput
	ToAutoLoginUserArrayOutputWithContext(context.Context) AutoLoginUserArrayOutput
}

AutoLoginUserArrayInput is an input type that accepts AutoLoginUserArray and AutoLoginUserArrayOutput values. You can construct a concrete instance of `AutoLoginUserArrayInput` via:

AutoLoginUserArray{ AutoLoginUserArgs{...} }

type AutoLoginUserArrayOutput

type AutoLoginUserArrayOutput struct{ *pulumi.OutputState }

func (AutoLoginUserArrayOutput) ElementType

func (AutoLoginUserArrayOutput) ElementType() reflect.Type

func (AutoLoginUserArrayOutput) Index

func (AutoLoginUserArrayOutput) ToAutoLoginUserArrayOutput

func (o AutoLoginUserArrayOutput) ToAutoLoginUserArrayOutput() AutoLoginUserArrayOutput

func (AutoLoginUserArrayOutput) ToAutoLoginUserArrayOutputWithContext

func (o AutoLoginUserArrayOutput) ToAutoLoginUserArrayOutputWithContext(ctx context.Context) AutoLoginUserArrayOutput

type AutoLoginUserInput

type AutoLoginUserInput interface {
	pulumi.Input

	ToAutoLoginUserOutput() AutoLoginUserOutput
	ToAutoLoginUserOutputWithContext(context.Context) AutoLoginUserOutput
}

AutoLoginUserInput is an input type that accepts AutoLoginUserArgs and AutoLoginUserOutput values. You can construct a concrete instance of `AutoLoginUserInput` via:

AutoLoginUserArgs{...}

type AutoLoginUserOutput

type AutoLoginUserOutput struct{ *pulumi.OutputState }

func (AutoLoginUserOutput) ElementType

func (AutoLoginUserOutput) ElementType() reflect.Type

func (AutoLoginUserOutput) Id

func (AutoLoginUserOutput) Password

func (AutoLoginUserOutput) Scope

func (AutoLoginUserOutput) ToAutoLoginUserOutput

func (o AutoLoginUserOutput) ToAutoLoginUserOutput() AutoLoginUserOutput

func (AutoLoginUserOutput) ToAutoLoginUserOutputWithContext

func (o AutoLoginUserOutput) ToAutoLoginUserOutputWithContext(ctx context.Context) AutoLoginUserOutput

func (AutoLoginUserOutput) Username

type BasicAuth

type BasicAuth struct {
	pulumi.CustomResourceState

	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrOutput `pulumi:"accessibilitySelfService"`
	// Application notes for admins.
	AdminNote pulumi.StringPtrOutput `pulumi:"adminNote"`
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrOutput `pulumi:"appLinksJson"`
	// The URL of the authenticating site for this app.
	AuthUrl pulumi.StringOutput `pulumi:"authUrl"`
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrOutput `pulumi:"autoSubmitToolbar"`
	// Application notes for end users.
	EnduserNote pulumi.StringPtrOutput `pulumi:"enduserNote"`
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayOutput `pulumi:"groups"`
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrOutput `pulumi:"hideIos"`
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrOutput `pulumi:"hideWeb"`
	// The Application's display name.
	Label pulumi.StringOutput `pulumi:"label"`
	Logo pulumi.StringPtrOutput `pulumi:"logo"`
	// Direct link of application logo.
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// Name of the app.
	Name pulumi.StringOutput `pulumi:"name"`
	// Sign on mode of application.
	SignOnMode pulumi.StringOutput `pulumi:"signOnMode"`
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrOutput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrOutput `pulumi:"skipUsers"`
	// Status of application. (`"ACTIVE"` or `"INACTIVE"`).
	Status pulumi.StringPtrOutput `pulumi:"status"`
	// The URL of the sign-in page for this app.
	Url pulumi.StringOutput `pulumi:"url"`
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users BasicAuthUserArrayOutput `pulumi:"users"`
}

This resource allows you to create and configure a Basic Auth Application.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewBasicAuth(ctx, "example", &app.BasicAuthArgs{
			AuthUrl: pulumi.String("https://example.com/auth.html"),
			Label:   pulumi.String("Example"),
			Url:     pulumi.String("https://example.com/login.html"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

A Basic Auth App can be imported via the Okta ID.

```sh

$ pulumi import okta:app/basicAuth:BasicAuth example <app id>

```

It's also possible to import app without groups or/and users. In this case ID may look like this

```sh

$ pulumi import okta:app/basicAuth:BasicAuth example <app id>/skip_users

```

```sh

$ pulumi import okta:app/basicAuth:BasicAuth example <app id>/skip_users/skip_groups

```

```sh

$ pulumi import okta:app/basicAuth:BasicAuth example <app id>/skip_groups

```

func GetBasicAuth

func GetBasicAuth(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BasicAuthState, opts ...pulumi.ResourceOption) (*BasicAuth, error)

GetBasicAuth gets an existing BasicAuth resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBasicAuth

func NewBasicAuth(ctx *pulumi.Context,
	name string, args *BasicAuthArgs, opts ...pulumi.ResourceOption) (*BasicAuth, error)

NewBasicAuth registers a new resource with the given unique name, arguments, and options.

func (*BasicAuth) ElementType

func (*BasicAuth) ElementType() reflect.Type

func (*BasicAuth) ToBasicAuthOutput

func (i *BasicAuth) ToBasicAuthOutput() BasicAuthOutput

func (*BasicAuth) ToBasicAuthOutputWithContext

func (i *BasicAuth) ToBasicAuthOutputWithContext(ctx context.Context) BasicAuthOutput

type BasicAuthArgs

type BasicAuthArgs struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// The URL of the authenticating site for this app.
	AuthUrl pulumi.StringInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The Application's display name.
	Label pulumi.StringInput
	Logo pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. (`"ACTIVE"` or `"INACTIVE"`).
	Status pulumi.StringPtrInput
	// The URL of the sign-in page for this app.
	Url pulumi.StringInput
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users BasicAuthUserArrayInput
}

The set of arguments for constructing a BasicAuth resource.

func (BasicAuthArgs) ElementType

func (BasicAuthArgs) ElementType() reflect.Type

type BasicAuthArray

type BasicAuthArray []BasicAuthInput

func (BasicAuthArray) ElementType

func (BasicAuthArray) ElementType() reflect.Type

func (BasicAuthArray) ToBasicAuthArrayOutput

func (i BasicAuthArray) ToBasicAuthArrayOutput() BasicAuthArrayOutput

func (BasicAuthArray) ToBasicAuthArrayOutputWithContext

func (i BasicAuthArray) ToBasicAuthArrayOutputWithContext(ctx context.Context) BasicAuthArrayOutput

type BasicAuthArrayInput

type BasicAuthArrayInput interface {
	pulumi.Input

	ToBasicAuthArrayOutput() BasicAuthArrayOutput
	ToBasicAuthArrayOutputWithContext(context.Context) BasicAuthArrayOutput
}

BasicAuthArrayInput is an input type that accepts BasicAuthArray and BasicAuthArrayOutput values. You can construct a concrete instance of `BasicAuthArrayInput` via:

BasicAuthArray{ BasicAuthArgs{...} }

type BasicAuthArrayOutput

type BasicAuthArrayOutput struct{ *pulumi.OutputState }

func (BasicAuthArrayOutput) ElementType

func (BasicAuthArrayOutput) ElementType() reflect.Type

func (BasicAuthArrayOutput) Index

func (BasicAuthArrayOutput) ToBasicAuthArrayOutput

func (o BasicAuthArrayOutput) ToBasicAuthArrayOutput() BasicAuthArrayOutput

func (BasicAuthArrayOutput) ToBasicAuthArrayOutputWithContext

func (o BasicAuthArrayOutput) ToBasicAuthArrayOutputWithContext(ctx context.Context) BasicAuthArrayOutput

type BasicAuthInput

type BasicAuthInput interface {
	pulumi.Input

	ToBasicAuthOutput() BasicAuthOutput
	ToBasicAuthOutputWithContext(ctx context.Context) BasicAuthOutput
}

type BasicAuthMap

type BasicAuthMap map[string]BasicAuthInput

func (BasicAuthMap) ElementType

func (BasicAuthMap) ElementType() reflect.Type

func (BasicAuthMap) ToBasicAuthMapOutput

func (i BasicAuthMap) ToBasicAuthMapOutput() BasicAuthMapOutput

func (BasicAuthMap) ToBasicAuthMapOutputWithContext

func (i BasicAuthMap) ToBasicAuthMapOutputWithContext(ctx context.Context) BasicAuthMapOutput

type BasicAuthMapInput

type BasicAuthMapInput interface {
	pulumi.Input

	ToBasicAuthMapOutput() BasicAuthMapOutput
	ToBasicAuthMapOutputWithContext(context.Context) BasicAuthMapOutput
}

BasicAuthMapInput is an input type that accepts BasicAuthMap and BasicAuthMapOutput values. You can construct a concrete instance of `BasicAuthMapInput` via:

BasicAuthMap{ "key": BasicAuthArgs{...} }

type BasicAuthMapOutput

type BasicAuthMapOutput struct{ *pulumi.OutputState }

func (BasicAuthMapOutput) ElementType

func (BasicAuthMapOutput) ElementType() reflect.Type

func (BasicAuthMapOutput) MapIndex

func (BasicAuthMapOutput) ToBasicAuthMapOutput

func (o BasicAuthMapOutput) ToBasicAuthMapOutput() BasicAuthMapOutput

func (BasicAuthMapOutput) ToBasicAuthMapOutputWithContext

func (o BasicAuthMapOutput) ToBasicAuthMapOutputWithContext(ctx context.Context) BasicAuthMapOutput

type BasicAuthOutput

type BasicAuthOutput struct{ *pulumi.OutputState }

func (BasicAuthOutput) AccessibilityErrorRedirectUrl added in v3.9.0

func (o BasicAuthOutput) AccessibilityErrorRedirectUrl() pulumi.StringPtrOutput

Custom error page URL.

func (BasicAuthOutput) AccessibilityLoginRedirectUrl added in v3.9.0

func (o BasicAuthOutput) AccessibilityLoginRedirectUrl() pulumi.StringPtrOutput

Custom login page for this application.

func (BasicAuthOutput) AccessibilitySelfService added in v3.9.0

func (o BasicAuthOutput) AccessibilitySelfService() pulumi.BoolPtrOutput

Enable self-service. By default, it is `false`.

func (BasicAuthOutput) AdminNote added in v3.9.0

func (o BasicAuthOutput) AdminNote() pulumi.StringPtrOutput

Application notes for admins.

func (BasicAuthOutput) AppLinksJson added in v3.9.0

func (o BasicAuthOutput) AppLinksJson() pulumi.StringPtrOutput

Displays specific appLinks for the app. The value for each application link should be boolean.

func (BasicAuthOutput) AuthUrl added in v3.9.0

func (o BasicAuthOutput) AuthUrl() pulumi.StringOutput

The URL of the authenticating site for this app.

func (BasicAuthOutput) AutoSubmitToolbar added in v3.9.0

func (o BasicAuthOutput) AutoSubmitToolbar() pulumi.BoolPtrOutput

Display auto submit toolbar.

func (BasicAuthOutput) ElementType

func (BasicAuthOutput) ElementType() reflect.Type

func (BasicAuthOutput) EnduserNote added in v3.9.0

func (o BasicAuthOutput) EnduserNote() pulumi.StringPtrOutput

Application notes for end users.

func (BasicAuthOutput) Groups deprecated added in v3.9.0

Groups associated with the application.

Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.

func (BasicAuthOutput) HideIos added in v3.9.0

func (o BasicAuthOutput) HideIos() pulumi.BoolPtrOutput

Do not display application icon on mobile app.

func (BasicAuthOutput) HideWeb added in v3.9.0

func (o BasicAuthOutput) HideWeb() pulumi.BoolPtrOutput

Do not display application icon to users.

func (BasicAuthOutput) Label added in v3.9.0

The Application's display name.

Local path to the logo. The file must be in PNG, JPG, or GIF format, and less than 1 MB in size.

func (BasicAuthOutput) LogoUrl added in v3.9.0

func (o BasicAuthOutput) LogoUrl() pulumi.StringOutput

Direct link of application logo.

func (BasicAuthOutput) Name added in v3.9.0

Name of the app.

func (BasicAuthOutput) SignOnMode added in v3.9.0

func (o BasicAuthOutput) SignOnMode() pulumi.StringOutput

Sign on mode of application.

func (BasicAuthOutput) SkipGroups added in v3.9.0

func (o BasicAuthOutput) SkipGroups() pulumi.BoolPtrOutput

Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.

func (BasicAuthOutput) SkipUsers added in v3.9.0

func (o BasicAuthOutput) SkipUsers() pulumi.BoolPtrOutput

Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.

func (BasicAuthOutput) Status added in v3.9.0

Status of application. (`"ACTIVE"` or `"INACTIVE"`).

func (BasicAuthOutput) ToBasicAuthOutput

func (o BasicAuthOutput) ToBasicAuthOutput() BasicAuthOutput

func (BasicAuthOutput) ToBasicAuthOutputWithContext

func (o BasicAuthOutput) ToBasicAuthOutputWithContext(ctx context.Context) BasicAuthOutput

func (BasicAuthOutput) Url added in v3.9.0

The URL of the sign-in page for this app.

func (BasicAuthOutput) Users deprecated added in v3.9.0

Users associated with the application.

Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.

type BasicAuthState

type BasicAuthState struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// The URL of the authenticating site for this app.
	AuthUrl pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The Application's display name.
	Label pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// Direct link of application logo.
	LogoUrl pulumi.StringPtrInput
	// Name of the app.
	Name pulumi.StringPtrInput
	// Sign on mode of application.
	SignOnMode pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. (`"ACTIVE"` or `"INACTIVE"`).
	Status pulumi.StringPtrInput
	// The URL of the sign-in page for this app.
	Url pulumi.StringPtrInput
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users BasicAuthUserArrayInput
}

func (BasicAuthState) ElementType

func (BasicAuthState) ElementType() reflect.Type

type BasicAuthUser

type BasicAuthUser struct {
	// ID of the Application.
	Id       *string `pulumi:"id"`
	Password *string `pulumi:"password"`
	Scope    *string `pulumi:"scope"`
	Username *string `pulumi:"username"`
}

type BasicAuthUserArgs

type BasicAuthUserArgs struct {
	// ID of the Application.
	Id       pulumi.StringPtrInput `pulumi:"id"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Scope    pulumi.StringPtrInput `pulumi:"scope"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (BasicAuthUserArgs) ElementType

func (BasicAuthUserArgs) ElementType() reflect.Type

func (BasicAuthUserArgs) ToBasicAuthUserOutput

func (i BasicAuthUserArgs) ToBasicAuthUserOutput() BasicAuthUserOutput

func (BasicAuthUserArgs) ToBasicAuthUserOutputWithContext

func (i BasicAuthUserArgs) ToBasicAuthUserOutputWithContext(ctx context.Context) BasicAuthUserOutput

type BasicAuthUserArray

type BasicAuthUserArray []BasicAuthUserInput

func (BasicAuthUserArray) ElementType

func (BasicAuthUserArray) ElementType() reflect.Type

func (BasicAuthUserArray) ToBasicAuthUserArrayOutput

func (i BasicAuthUserArray) ToBasicAuthUserArrayOutput() BasicAuthUserArrayOutput

func (BasicAuthUserArray) ToBasicAuthUserArrayOutputWithContext

func (i BasicAuthUserArray) ToBasicAuthUserArrayOutputWithContext(ctx context.Context) BasicAuthUserArrayOutput

type BasicAuthUserArrayInput

type BasicAuthUserArrayInput interface {
	pulumi.Input

	ToBasicAuthUserArrayOutput() BasicAuthUserArrayOutput
	ToBasicAuthUserArrayOutputWithContext(context.Context) BasicAuthUserArrayOutput
}

BasicAuthUserArrayInput is an input type that accepts BasicAuthUserArray and BasicAuthUserArrayOutput values. You can construct a concrete instance of `BasicAuthUserArrayInput` via:

BasicAuthUserArray{ BasicAuthUserArgs{...} }

type BasicAuthUserArrayOutput

type BasicAuthUserArrayOutput struct{ *pulumi.OutputState }

func (BasicAuthUserArrayOutput) ElementType

func (BasicAuthUserArrayOutput) ElementType() reflect.Type

func (BasicAuthUserArrayOutput) Index

func (BasicAuthUserArrayOutput) ToBasicAuthUserArrayOutput

func (o BasicAuthUserArrayOutput) ToBasicAuthUserArrayOutput() BasicAuthUserArrayOutput

func (BasicAuthUserArrayOutput) ToBasicAuthUserArrayOutputWithContext

func (o BasicAuthUserArrayOutput) ToBasicAuthUserArrayOutputWithContext(ctx context.Context) BasicAuthUserArrayOutput

type BasicAuthUserInput

type BasicAuthUserInput interface {
	pulumi.Input

	ToBasicAuthUserOutput() BasicAuthUserOutput
	ToBasicAuthUserOutputWithContext(context.Context) BasicAuthUserOutput
}

BasicAuthUserInput is an input type that accepts BasicAuthUserArgs and BasicAuthUserOutput values. You can construct a concrete instance of `BasicAuthUserInput` via:

BasicAuthUserArgs{...}

type BasicAuthUserOutput

type BasicAuthUserOutput struct{ *pulumi.OutputState }

func (BasicAuthUserOutput) ElementType

func (BasicAuthUserOutput) ElementType() reflect.Type

func (BasicAuthUserOutput) Id

ID of the Application.

func (BasicAuthUserOutput) Password

func (BasicAuthUserOutput) Scope

func (BasicAuthUserOutput) ToBasicAuthUserOutput

func (o BasicAuthUserOutput) ToBasicAuthUserOutput() BasicAuthUserOutput

func (BasicAuthUserOutput) ToBasicAuthUserOutputWithContext

func (o BasicAuthUserOutput) ToBasicAuthUserOutputWithContext(ctx context.Context) BasicAuthUserOutput

func (BasicAuthUserOutput) Username

type Bookmark

type Bookmark struct {
	pulumi.CustomResourceState

	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrOutput `pulumi:"accessibilitySelfService"`
	// Application notes for admins.
	AdminNote pulumi.StringPtrOutput `pulumi:"adminNote"`
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrOutput `pulumi:"appLinksJson"`
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrOutput `pulumi:"authenticationPolicy"`
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrOutput `pulumi:"autoSubmitToolbar"`
	// Application notes for end users.
	EnduserNote pulumi.StringPtrOutput `pulumi:"enduserNote"`
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayOutput `pulumi:"groups"`
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrOutput `pulumi:"hideIos"`
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrOutput `pulumi:"hideWeb"`
	// The Application's display name.
	Label pulumi.StringOutput `pulumi:"label"`
	Logo pulumi.StringPtrOutput `pulumi:"logo"`
	// Direct link of application logo.
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// Name of the app.
	Name pulumi.StringOutput `pulumi:"name"`
	// Would you like Okta to add an integration for this app?
	RequestIntegration pulumi.BoolPtrOutput `pulumi:"requestIntegration"`
	// Sign on mode of application.
	SignOnMode pulumi.StringOutput `pulumi:"signOnMode"`
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrOutput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrOutput `pulumi:"skipUsers"`
	// Status of application. (`"ACTIVE"` or `"INACTIVE"`).
	Status pulumi.StringPtrOutput `pulumi:"status"`
	// The URL of the bookmark.
	Url pulumi.StringOutput `pulumi:"url"`
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users BookmarkUserArrayOutput `pulumi:"users"`
}

This resource allows you to create and configure a Bookmark Application.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewBookmark(ctx, "example", &app.BookmarkArgs{
			Label: pulumi.String("Example"),
			Url:   pulumi.String("https://example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

A Bookmark App can be imported via the Okta ID.

```sh

$ pulumi import okta:app/bookmark:Bookmark example <app id>

```

It's also possible to import app without groups or/and users. In this case ID may look like this

```sh

$ pulumi import okta:app/bookmark:Bookmark example <app id>/skip_users

```

```sh

$ pulumi import okta:app/bookmark:Bookmark example <app id>/skip_users/skip_groups

```

```sh

$ pulumi import okta:app/bookmark:Bookmark example <app id>/skip_groups

```

func GetBookmark

func GetBookmark(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BookmarkState, opts ...pulumi.ResourceOption) (*Bookmark, error)

GetBookmark gets an existing Bookmark resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBookmark

func NewBookmark(ctx *pulumi.Context,
	name string, args *BookmarkArgs, opts ...pulumi.ResourceOption) (*Bookmark, error)

NewBookmark registers a new resource with the given unique name, arguments, and options.

func (*Bookmark) ElementType

func (*Bookmark) ElementType() reflect.Type

func (*Bookmark) ToBookmarkOutput

func (i *Bookmark) ToBookmarkOutput() BookmarkOutput

func (*Bookmark) ToBookmarkOutputWithContext

func (i *Bookmark) ToBookmarkOutputWithContext(ctx context.Context) BookmarkOutput

type BookmarkArgs

type BookmarkArgs struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The Application's display name.
	Label pulumi.StringInput
	Logo pulumi.StringPtrInput
	// Would you like Okta to add an integration for this app?
	RequestIntegration pulumi.BoolPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. (`"ACTIVE"` or `"INACTIVE"`).
	Status pulumi.StringPtrInput
	// The URL of the bookmark.
	Url pulumi.StringInput
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users BookmarkUserArrayInput
}

The set of arguments for constructing a Bookmark resource.

func (BookmarkArgs) ElementType

func (BookmarkArgs) ElementType() reflect.Type

type BookmarkArray

type BookmarkArray []BookmarkInput

func (BookmarkArray) ElementType

func (BookmarkArray) ElementType() reflect.Type

func (BookmarkArray) ToBookmarkArrayOutput

func (i BookmarkArray) ToBookmarkArrayOutput() BookmarkArrayOutput

func (BookmarkArray) ToBookmarkArrayOutputWithContext

func (i BookmarkArray) ToBookmarkArrayOutputWithContext(ctx context.Context) BookmarkArrayOutput

type BookmarkArrayInput

type BookmarkArrayInput interface {
	pulumi.Input

	ToBookmarkArrayOutput() BookmarkArrayOutput
	ToBookmarkArrayOutputWithContext(context.Context) BookmarkArrayOutput
}

BookmarkArrayInput is an input type that accepts BookmarkArray and BookmarkArrayOutput values. You can construct a concrete instance of `BookmarkArrayInput` via:

BookmarkArray{ BookmarkArgs{...} }

type BookmarkArrayOutput

type BookmarkArrayOutput struct{ *pulumi.OutputState }

func (BookmarkArrayOutput) ElementType

func (BookmarkArrayOutput) ElementType() reflect.Type

func (BookmarkArrayOutput) Index

func (BookmarkArrayOutput) ToBookmarkArrayOutput

func (o BookmarkArrayOutput) ToBookmarkArrayOutput() BookmarkArrayOutput

func (BookmarkArrayOutput) ToBookmarkArrayOutputWithContext

func (o BookmarkArrayOutput) ToBookmarkArrayOutputWithContext(ctx context.Context) BookmarkArrayOutput

type BookmarkInput

type BookmarkInput interface {
	pulumi.Input

	ToBookmarkOutput() BookmarkOutput
	ToBookmarkOutputWithContext(ctx context.Context) BookmarkOutput
}

type BookmarkMap

type BookmarkMap map[string]BookmarkInput

func (BookmarkMap) ElementType

func (BookmarkMap) ElementType() reflect.Type

func (BookmarkMap) ToBookmarkMapOutput

func (i BookmarkMap) ToBookmarkMapOutput() BookmarkMapOutput

func (BookmarkMap) ToBookmarkMapOutputWithContext

func (i BookmarkMap) ToBookmarkMapOutputWithContext(ctx context.Context) BookmarkMapOutput

type BookmarkMapInput

type BookmarkMapInput interface {
	pulumi.Input

	ToBookmarkMapOutput() BookmarkMapOutput
	ToBookmarkMapOutputWithContext(context.Context) BookmarkMapOutput
}

BookmarkMapInput is an input type that accepts BookmarkMap and BookmarkMapOutput values. You can construct a concrete instance of `BookmarkMapInput` via:

BookmarkMap{ "key": BookmarkArgs{...} }

type BookmarkMapOutput

type BookmarkMapOutput struct{ *pulumi.OutputState }

func (BookmarkMapOutput) ElementType

func (BookmarkMapOutput) ElementType() reflect.Type

func (BookmarkMapOutput) MapIndex

func (BookmarkMapOutput) ToBookmarkMapOutput

func (o BookmarkMapOutput) ToBookmarkMapOutput() BookmarkMapOutput

func (BookmarkMapOutput) ToBookmarkMapOutputWithContext

func (o BookmarkMapOutput) ToBookmarkMapOutputWithContext(ctx context.Context) BookmarkMapOutput

type BookmarkOutput

type BookmarkOutput struct{ *pulumi.OutputState }

func (BookmarkOutput) AccessibilityErrorRedirectUrl added in v3.9.0

func (o BookmarkOutput) AccessibilityErrorRedirectUrl() pulumi.StringPtrOutput

Custom error page URL.

func (BookmarkOutput) AccessibilityLoginRedirectUrl added in v3.9.0

func (o BookmarkOutput) AccessibilityLoginRedirectUrl() pulumi.StringPtrOutput

Custom login page for this application.

func (BookmarkOutput) AccessibilitySelfService added in v3.9.0

func (o BookmarkOutput) AccessibilitySelfService() pulumi.BoolPtrOutput

Enable self-service. By default, it is `false`.

func (BookmarkOutput) AdminNote added in v3.9.0

func (o BookmarkOutput) AdminNote() pulumi.StringPtrOutput

Application notes for admins.

func (BookmarkOutput) AppLinksJson added in v3.9.0

func (o BookmarkOutput) AppLinksJson() pulumi.StringPtrOutput

Displays specific appLinks for the app. The value for each application link should be boolean.

func (BookmarkOutput) AuthenticationPolicy added in v3.18.0

func (o BookmarkOutput) AuthenticationPolicy() pulumi.StringPtrOutput

The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.

func (BookmarkOutput) AutoSubmitToolbar added in v3.9.0

func (o BookmarkOutput) AutoSubmitToolbar() pulumi.BoolPtrOutput

Display auto submit toolbar.

func (BookmarkOutput) ElementType

func (BookmarkOutput) ElementType() reflect.Type

func (BookmarkOutput) EnduserNote added in v3.9.0

func (o BookmarkOutput) EnduserNote() pulumi.StringPtrOutput

Application notes for end users.

func (BookmarkOutput) Groups deprecated added in v3.9.0

Groups associated with the application.

Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.

func (BookmarkOutput) HideIos added in v3.9.0

func (o BookmarkOutput) HideIos() pulumi.BoolPtrOutput

Do not display application icon on mobile app.

func (BookmarkOutput) HideWeb added in v3.9.0

func (o BookmarkOutput) HideWeb() pulumi.BoolPtrOutput

Do not display application icon to users.

func (BookmarkOutput) Label added in v3.9.0

The Application's display name.

Local file path to the logo. The file must be in PNG, JPG, or GIF format, and less than 1 MB in size.

func (BookmarkOutput) LogoUrl added in v3.9.0

func (o BookmarkOutput) LogoUrl() pulumi.StringOutput

Direct link of application logo.

func (BookmarkOutput) Name added in v3.9.0

Name of the app.

func (BookmarkOutput) RequestIntegration added in v3.9.0

func (o BookmarkOutput) RequestIntegration() pulumi.BoolPtrOutput

Would you like Okta to add an integration for this app?

func (BookmarkOutput) SignOnMode added in v3.9.0

func (o BookmarkOutput) SignOnMode() pulumi.StringOutput

Sign on mode of application.

func (BookmarkOutput) SkipGroups added in v3.9.0

func (o BookmarkOutput) SkipGroups() pulumi.BoolPtrOutput

Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.

func (BookmarkOutput) SkipUsers added in v3.9.0

func (o BookmarkOutput) SkipUsers() pulumi.BoolPtrOutput

Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.

func (BookmarkOutput) Status added in v3.9.0

Status of application. (`"ACTIVE"` or `"INACTIVE"`).

func (BookmarkOutput) ToBookmarkOutput

func (o BookmarkOutput) ToBookmarkOutput() BookmarkOutput

func (BookmarkOutput) ToBookmarkOutputWithContext

func (o BookmarkOutput) ToBookmarkOutputWithContext(ctx context.Context) BookmarkOutput

func (BookmarkOutput) Url added in v3.9.0

The URL of the bookmark.

func (BookmarkOutput) Users deprecated added in v3.9.0

Users associated with the application.

Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.

type BookmarkState

type BookmarkState struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The Application's display name.
	Label pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// Direct link of application logo.
	LogoUrl pulumi.StringPtrInput
	// Name of the app.
	Name pulumi.StringPtrInput
	// Would you like Okta to add an integration for this app?
	RequestIntegration pulumi.BoolPtrInput
	// Sign on mode of application.
	SignOnMode pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. (`"ACTIVE"` or `"INACTIVE"`).
	Status pulumi.StringPtrInput
	// The URL of the bookmark.
	Url pulumi.StringPtrInput
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users BookmarkUserArrayInput
}

func (BookmarkState) ElementType

func (BookmarkState) ElementType() reflect.Type

type BookmarkUser

type BookmarkUser struct {
	// ID of the Application.
	Id       *string `pulumi:"id"`
	Password *string `pulumi:"password"`
	Scope    *string `pulumi:"scope"`
	Username *string `pulumi:"username"`
}

type BookmarkUserArgs

type BookmarkUserArgs struct {
	// ID of the Application.
	Id       pulumi.StringPtrInput `pulumi:"id"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Scope    pulumi.StringPtrInput `pulumi:"scope"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (BookmarkUserArgs) ElementType

func (BookmarkUserArgs) ElementType() reflect.Type

func (BookmarkUserArgs) ToBookmarkUserOutput

func (i BookmarkUserArgs) ToBookmarkUserOutput() BookmarkUserOutput

func (BookmarkUserArgs) ToBookmarkUserOutputWithContext

func (i BookmarkUserArgs) ToBookmarkUserOutputWithContext(ctx context.Context) BookmarkUserOutput

type BookmarkUserArray

type BookmarkUserArray []BookmarkUserInput

func (BookmarkUserArray) ElementType

func (BookmarkUserArray) ElementType() reflect.Type

func (BookmarkUserArray) ToBookmarkUserArrayOutput

func (i BookmarkUserArray) ToBookmarkUserArrayOutput() BookmarkUserArrayOutput

func (BookmarkUserArray) ToBookmarkUserArrayOutputWithContext

func (i BookmarkUserArray) ToBookmarkUserArrayOutputWithContext(ctx context.Context) BookmarkUserArrayOutput

type BookmarkUserArrayInput

type BookmarkUserArrayInput interface {
	pulumi.Input

	ToBookmarkUserArrayOutput() BookmarkUserArrayOutput
	ToBookmarkUserArrayOutputWithContext(context.Context) BookmarkUserArrayOutput
}

BookmarkUserArrayInput is an input type that accepts BookmarkUserArray and BookmarkUserArrayOutput values. You can construct a concrete instance of `BookmarkUserArrayInput` via:

BookmarkUserArray{ BookmarkUserArgs{...} }

type BookmarkUserArrayOutput

type BookmarkUserArrayOutput struct{ *pulumi.OutputState }

func (BookmarkUserArrayOutput) ElementType

func (BookmarkUserArrayOutput) ElementType() reflect.Type

func (BookmarkUserArrayOutput) Index

func (BookmarkUserArrayOutput) ToBookmarkUserArrayOutput

func (o BookmarkUserArrayOutput) ToBookmarkUserArrayOutput() BookmarkUserArrayOutput

func (BookmarkUserArrayOutput) ToBookmarkUserArrayOutputWithContext

func (o BookmarkUserArrayOutput) ToBookmarkUserArrayOutputWithContext(ctx context.Context) BookmarkUserArrayOutput

type BookmarkUserInput

type BookmarkUserInput interface {
	pulumi.Input

	ToBookmarkUserOutput() BookmarkUserOutput
	ToBookmarkUserOutputWithContext(context.Context) BookmarkUserOutput
}

BookmarkUserInput is an input type that accepts BookmarkUserArgs and BookmarkUserOutput values. You can construct a concrete instance of `BookmarkUserInput` via:

BookmarkUserArgs{...}

type BookmarkUserOutput

type BookmarkUserOutput struct{ *pulumi.OutputState }

func (BookmarkUserOutput) ElementType

func (BookmarkUserOutput) ElementType() reflect.Type

func (BookmarkUserOutput) Id

ID of the Application.

func (BookmarkUserOutput) Password

func (BookmarkUserOutput) Scope

func (BookmarkUserOutput) ToBookmarkUserOutput

func (o BookmarkUserOutput) ToBookmarkUserOutput() BookmarkUserOutput

func (BookmarkUserOutput) ToBookmarkUserOutputWithContext

func (o BookmarkUserOutput) ToBookmarkUserOutputWithContext(ctx context.Context) BookmarkUserOutput

func (BookmarkUserOutput) Username

type GetAppArgs

type GetAppArgs struct {
	// tells the provider to query for only `ACTIVE` applications.
	ActiveOnly *bool `pulumi:"activeOnly"`
	// `id` of application to retrieve, conflicts with `label` and `labelPrefix`.
	Id *string `pulumi:"id"`
	// The label of the app to retrieve, conflicts with `labelPrefix` and `id`. Label uses
	// the `?q=<label>` query parameter exposed by Okta's API. It should be noted that at this time the API searches both `name`
	// and `label` with a [starts with query](https://developer.okta.com/docs/reference/api/apps/#list-applications) which
	// may result in multiple apps being returned for the query. The data source further inspects the lables looking for
	// an exact match.
	Label *string `pulumi:"label"`
	// Label prefix of the app to retrieve, conflicts with `label` and `id`. This will tell the
	// provider to do a `starts with` query as opposed to an `equals` query.
	LabelPrefix *string `pulumi:"labelPrefix"`
	// Indicator that allows the app to skip `groups` sync. Default is `false`.
	SkipGroups *bool `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync. Default is `false`.
	SkipUsers *bool `pulumi:"skipUsers"`
}

A collection of arguments for invoking getApp.

type GetAppOutputArgs added in v3.2.0

type GetAppOutputArgs struct {
	// tells the provider to query for only `ACTIVE` applications.
	ActiveOnly pulumi.BoolPtrInput `pulumi:"activeOnly"`
	// `id` of application to retrieve, conflicts with `label` and `labelPrefix`.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// The label of the app to retrieve, conflicts with `labelPrefix` and `id`. Label uses
	// the `?q=<label>` query parameter exposed by Okta's API. It should be noted that at this time the API searches both `name`
	// and `label` with a [starts with query](https://developer.okta.com/docs/reference/api/apps/#list-applications) which
	// may result in multiple apps being returned for the query. The data source further inspects the lables looking for
	// an exact match.
	Label pulumi.StringPtrInput `pulumi:"label"`
	// Label prefix of the app to retrieve, conflicts with `label` and `id`. This will tell the
	// provider to do a `starts with` query as opposed to an `equals` query.
	LabelPrefix pulumi.StringPtrInput `pulumi:"labelPrefix"`
	// Indicator that allows the app to skip `groups` sync. Default is `false`.
	SkipGroups pulumi.BoolPtrInput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync. Default is `false`.
	SkipUsers pulumi.BoolPtrInput `pulumi:"skipUsers"`
}

A collection of arguments for invoking getApp.

func (GetAppOutputArgs) ElementType added in v3.2.0

func (GetAppOutputArgs) ElementType() reflect.Type

type GetAppResult

type GetAppResult struct {
	ActiveOnly *bool `pulumi:"activeOnly"`
	// List of groups IDs assigned to the application.
	//
	// Deprecated: The `groups` field is now deprecated for the data source `okta_app`, please replace all uses of this with: `okta_app_group_assignments`
	Groups []string `pulumi:"groups"`
	// Application ID.
	Id *string `pulumi:"id"`
	// Application label.
	Label       *string `pulumi:"label"`
	LabelPrefix *string `pulumi:"labelPrefix"`
	// Generic JSON containing discoverable resources related to the app.
	Links string `pulumi:"links"`
	// Application name.
	Name       string `pulumi:"name"`
	SkipGroups *bool  `pulumi:"skipGroups"`
	SkipUsers  *bool  `pulumi:"skipUsers"`
	// Application status.
	Status string `pulumi:"status"`
	// List of users IDs assigned to the application.
	//
	// Deprecated: The `users` field is now deprecated for the data source `okta_app`, please replace all uses of this with: `okta_app_user_assignments`
	Users []string `pulumi:"users"`
}

A collection of values returned by getApp.

func GetApp

func GetApp(ctx *pulumi.Context, args *GetAppArgs, opts ...pulumi.InvokeOption) (*GetAppResult, error)

Use this data source to retrieve an application from Okta.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.GetApp(ctx, &app.GetAppArgs{
			Label: pulumi.StringRef("Example App"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetAppResultOutput added in v3.2.0

type GetAppResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getApp.

func GetAppOutput added in v3.2.0

func GetAppOutput(ctx *pulumi.Context, args GetAppOutputArgs, opts ...pulumi.InvokeOption) GetAppResultOutput

func (GetAppResultOutput) ActiveOnly added in v3.2.0

func (o GetAppResultOutput) ActiveOnly() pulumi.BoolPtrOutput

func (GetAppResultOutput) ElementType added in v3.2.0

func (GetAppResultOutput) ElementType() reflect.Type

func (GetAppResultOutput) Groups deprecated added in v3.2.0

List of groups IDs assigned to the application.

Deprecated: The `groups` field is now deprecated for the data source `okta_app`, please replace all uses of this with: `okta_app_group_assignments`

func (GetAppResultOutput) Id added in v3.2.0

Application ID.

func (GetAppResultOutput) Label added in v3.2.0

Application label.

func (GetAppResultOutput) LabelPrefix added in v3.2.0

func (o GetAppResultOutput) LabelPrefix() pulumi.StringPtrOutput

Generic JSON containing discoverable resources related to the app.

func (GetAppResultOutput) Name added in v3.2.0

Application name.

func (GetAppResultOutput) SkipGroups added in v3.3.0

func (o GetAppResultOutput) SkipGroups() pulumi.BoolPtrOutput

func (GetAppResultOutput) SkipUsers added in v3.3.0

func (o GetAppResultOutput) SkipUsers() pulumi.BoolPtrOutput

func (GetAppResultOutput) Status added in v3.2.0

Application status.

func (GetAppResultOutput) ToGetAppResultOutput added in v3.2.0

func (o GetAppResultOutput) ToGetAppResultOutput() GetAppResultOutput

func (GetAppResultOutput) ToGetAppResultOutputWithContext added in v3.2.0

func (o GetAppResultOutput) ToGetAppResultOutputWithContext(ctx context.Context) GetAppResultOutput

func (GetAppResultOutput) Users deprecated added in v3.2.0

List of users IDs assigned to the application.

Deprecated: The `users` field is now deprecated for the data source `okta_app`, please replace all uses of this with: `okta_app_user_assignments`

type GetMetadataSamlArgs

type GetMetadataSamlArgs struct {
	// The application ID.
	AppId string `pulumi:"appId"`
	// Certificate Key ID.
	KeyId *string `pulumi:"keyId"`
}

A collection of arguments for invoking getMetadataSaml.

type GetMetadataSamlOutputArgs added in v3.2.0

type GetMetadataSamlOutputArgs struct {
	// The application ID.
	AppId pulumi.StringInput `pulumi:"appId"`
	// Certificate Key ID.
	KeyId pulumi.StringPtrInput `pulumi:"keyId"`
}

A collection of arguments for invoking getMetadataSaml.

func (GetMetadataSamlOutputArgs) ElementType added in v3.2.0

func (GetMetadataSamlOutputArgs) ElementType() reflect.Type

type GetMetadataSamlResult

type GetMetadataSamlResult struct {
	AppId string `pulumi:"appId"`
	// public certificate from application metadata.
	Certificate string `pulumi:"certificate"`
	// Entity URL for instance `https://www.okta.com/saml2/service-provider/sposcfdmlybtwkdcgtuf`.
	EntityId string `pulumi:"entityId"`
	// urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Post location from the SAML metadata.
	HttpPostBinding string `pulumi:"httpPostBinding"`
	// urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect location from the SAML metadata.
	HttpRedirectBinding string `pulumi:"httpRedirectBinding"`
	// The provider-assigned unique ID for this managed resource.
	Id    string  `pulumi:"id"`
	KeyId *string `pulumi:"keyId"`
	// raw metadata of application.
	Metadata string `pulumi:"metadata"`
	// Whether authn requests are signed.
	WantAuthnRequestsSigned bool `pulumi:"wantAuthnRequestsSigned"`
}

A collection of values returned by getMetadataSaml.

func GetMetadataSaml

func GetMetadataSaml(ctx *pulumi.Context, args *GetMetadataSamlArgs, opts ...pulumi.InvokeOption) (*GetMetadataSamlResult, error)

Use this data source to retrieve the metadata for SAML application from Okta.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.GetMetadataSaml(ctx, &app.GetMetadataSamlArgs{
			AppId: "<app id>",
			KeyId: pulumi.StringRef("<cert key id>"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetMetadataSamlResultOutput added in v3.2.0

type GetMetadataSamlResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getMetadataSaml.

func GetMetadataSamlOutput added in v3.2.0

func (GetMetadataSamlResultOutput) AppId added in v3.2.0

func (GetMetadataSamlResultOutput) Certificate added in v3.2.0

public certificate from application metadata.

func (GetMetadataSamlResultOutput) ElementType added in v3.2.0

func (GetMetadataSamlResultOutput) EntityId added in v3.2.0

Entity URL for instance `https://www.okta.com/saml2/service-provider/sposcfdmlybtwkdcgtuf`.

func (GetMetadataSamlResultOutput) HttpPostBinding added in v3.2.0

func (o GetMetadataSamlResultOutput) HttpPostBinding() pulumi.StringOutput

urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Post location from the SAML metadata.

func (GetMetadataSamlResultOutput) HttpRedirectBinding added in v3.2.0

func (o GetMetadataSamlResultOutput) HttpRedirectBinding() pulumi.StringOutput

urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect location from the SAML metadata.

func (GetMetadataSamlResultOutput) Id added in v3.2.0

The provider-assigned unique ID for this managed resource.

func (GetMetadataSamlResultOutput) KeyId added in v3.2.0

func (GetMetadataSamlResultOutput) Metadata added in v3.2.0

raw metadata of application.

func (GetMetadataSamlResultOutput) ToGetMetadataSamlResultOutput added in v3.2.0

func (o GetMetadataSamlResultOutput) ToGetMetadataSamlResultOutput() GetMetadataSamlResultOutput

func (GetMetadataSamlResultOutput) ToGetMetadataSamlResultOutputWithContext added in v3.2.0

func (o GetMetadataSamlResultOutput) ToGetMetadataSamlResultOutputWithContext(ctx context.Context) GetMetadataSamlResultOutput

func (GetMetadataSamlResultOutput) WantAuthnRequestsSigned added in v3.2.0

func (o GetMetadataSamlResultOutput) WantAuthnRequestsSigned() pulumi.BoolOutput

Whether authn requests are signed.

type GetOauthArgs

type GetOauthArgs struct {
	// tells the provider to query for only `ACTIVE` applications.
	ActiveOnly *bool `pulumi:"activeOnly"`
	// `id` of application to retrieve, conflicts with `label` and `labelPrefix`.
	Id *string `pulumi:"id"`
	// The label of the app to retrieve, conflicts with
	// `labelPrefix` and `id`. Label uses the `?q=<label>` query parameter exposed by
	// Okta's List Apps API. The API will search both `name` and `label` using that
	// query. Therefore similarily named and labeled apps may be returned in the query
	// and have the unitended result of associating the wrong app with this data
	// source. See:
	// https://developer.okta.com/docs/reference/api/apps/#list-applications
	Label *string `pulumi:"label"`
	// Label prefix of the app to retrieve, conflicts with `label` and `id`. This will tell the
	// provider to do a `starts with` query as opposed to an `equals` query.
	LabelPrefix *string `pulumi:"labelPrefix"`
	// Indicator that allows the app to skip `groups` sync. Default is `false`.
	SkipGroups *bool `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync. Default is `false`.
	SkipUsers *bool `pulumi:"skipUsers"`
}

A collection of arguments for invoking getOauth.

type GetOauthOutputArgs added in v3.2.0

type GetOauthOutputArgs struct {
	// tells the provider to query for only `ACTIVE` applications.
	ActiveOnly pulumi.BoolPtrInput `pulumi:"activeOnly"`
	// `id` of application to retrieve, conflicts with `label` and `labelPrefix`.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// The label of the app to retrieve, conflicts with
	// `labelPrefix` and `id`. Label uses the `?q=<label>` query parameter exposed by
	// Okta's List Apps API. The API will search both `name` and `label` using that
	// query. Therefore similarily named and labeled apps may be returned in the query
	// and have the unitended result of associating the wrong app with this data
	// source. See:
	// https://developer.okta.com/docs/reference/api/apps/#list-applications
	Label pulumi.StringPtrInput `pulumi:"label"`
	// Label prefix of the app to retrieve, conflicts with `label` and `id`. This will tell the
	// provider to do a `starts with` query as opposed to an `equals` query.
	LabelPrefix pulumi.StringPtrInput `pulumi:"labelPrefix"`
	// Indicator that allows the app to skip `groups` sync. Default is `false`.
	SkipGroups pulumi.BoolPtrInput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync. Default is `false`.
	SkipUsers pulumi.BoolPtrInput `pulumi:"skipUsers"`
}

A collection of arguments for invoking getOauth.

func (GetOauthOutputArgs) ElementType added in v3.2.0

func (GetOauthOutputArgs) ElementType() reflect.Type

type GetOauthResult

type GetOauthResult struct {
	ActiveOnly *bool `pulumi:"activeOnly"`
	// Display auto submit toolbar.
	AutoSubmitToolbar bool `pulumi:"autoSubmitToolbar"`
	// OAuth client ID. If set during creation, app is created with this id.
	ClientId string `pulumi:"clientId"`
	// The latest active client secret of the application. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	ClientSecret string `pulumi:"clientSecret"`
	// URI to a web page providing information about the client.
	ClientUri string `pulumi:"clientUri"`
	// List of OAuth 2.0 grant types.
	GrantTypes []string `pulumi:"grantTypes"`
	// List of groups IDs assigned to the application.
	//
	// Deprecated: The `groups` field is now deprecated for the data source `okta_app_oauth`, please replace all uses of this with: `okta_app_group_assignments`
	Groups []string `pulumi:"groups"`
	// Do not display application icon on mobile app.
	HideIos bool `pulumi:"hideIos"`
	// Do not display application icon to users.
	HideWeb bool `pulumi:"hideWeb"`
	// ID of application.
	Id *string `pulumi:"id"`
	// Label of application.
	Label       *string `pulumi:"label"`
	LabelPrefix *string `pulumi:"labelPrefix"`
	// generic JSON containing discoverable resources related to the app
	Links string `pulumi:"links"`
	// The type of Idp-Initiated login that the client supports, if any.
	LoginMode string `pulumi:"loginMode"`
	// List of scopes to use for the request.
	LoginScopes []string `pulumi:"loginScopes"`
	// URI that initiates login.
	LoginUri string `pulumi:"loginUri"`
	// URI that references a logo for the client.
	LogoUri string `pulumi:"logoUri"`
	// Name of application.
	Name string `pulumi:"name"`
	// URI to web page providing client policy document.
	PolicyUri string `pulumi:"policyUri"`
	// List of URIs for redirection after logout.
	PostLogoutRedirectUris []string `pulumi:"postLogoutRedirectUris"`
	// List of URIs for use in the redirect-based flow.
	RedirectUris []string `pulumi:"redirectUris"`
	// List of OAuth 2.0 response type strings.
	ResponseTypes []string `pulumi:"responseTypes"`
	SkipGroups    *bool    `pulumi:"skipGroups"`
	SkipUsers     *bool    `pulumi:"skipUsers"`
	// Status of application.
	Status string `pulumi:"status"`
	// The type of OAuth application.
	Type string `pulumi:"type"`
	// List of users IDs assigned to the application.
	//
	// Deprecated: The `users` field is now deprecated for the data source `okta_app_oauth`, please replace all uses of this with: `okta_app_user_assignments`
	Users            []string `pulumi:"users"`
	WildcardRedirect string   `pulumi:"wildcardRedirect"`
}

A collection of values returned by getOauth.

func GetOauth

func GetOauth(ctx *pulumi.Context, args *GetOauthArgs, opts ...pulumi.InvokeOption) (*GetOauthResult, error)

Use this data source to retrieve an OIDC application from Okta.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.GetOauth(ctx, &app.GetOauthArgs{
			Label: pulumi.StringRef("Example App"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetOauthResultOutput added in v3.2.0

type GetOauthResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getOauth.

func GetOauthOutput added in v3.2.0

func GetOauthOutput(ctx *pulumi.Context, args GetOauthOutputArgs, opts ...pulumi.InvokeOption) GetOauthResultOutput

func (GetOauthResultOutput) ActiveOnly added in v3.2.0

func (o GetOauthResultOutput) ActiveOnly() pulumi.BoolPtrOutput

func (GetOauthResultOutput) AutoSubmitToolbar added in v3.2.0

func (o GetOauthResultOutput) AutoSubmitToolbar() pulumi.BoolOutput

Display auto submit toolbar.

func (GetOauthResultOutput) ClientId added in v3.2.0

OAuth client ID. If set during creation, app is created with this id.

func (GetOauthResultOutput) ClientSecret added in v3.16.0

func (o GetOauthResultOutput) ClientSecret() pulumi.StringOutput

The latest active client secret of the application. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object

func (GetOauthResultOutput) ClientUri added in v3.2.0

URI to a web page providing information about the client.

func (GetOauthResultOutput) ElementType added in v3.2.0

func (GetOauthResultOutput) ElementType() reflect.Type

func (GetOauthResultOutput) GrantTypes added in v3.2.0

List of OAuth 2.0 grant types.

func (GetOauthResultOutput) Groups deprecated added in v3.2.0

List of groups IDs assigned to the application.

Deprecated: The `groups` field is now deprecated for the data source `okta_app_oauth`, please replace all uses of this with: `okta_app_group_assignments`

func (GetOauthResultOutput) HideIos added in v3.2.0

Do not display application icon on mobile app.

func (GetOauthResultOutput) HideWeb added in v3.2.0

Do not display application icon to users.

func (GetOauthResultOutput) Id added in v3.2.0

ID of application.

func (GetOauthResultOutput) Label added in v3.2.0

Label of application.

func (GetOauthResultOutput) LabelPrefix added in v3.2.0

generic JSON containing discoverable resources related to the app

func (GetOauthResultOutput) LoginMode added in v3.2.0

The type of Idp-Initiated login that the client supports, if any.

func (GetOauthResultOutput) LoginScopes added in v3.2.0

List of scopes to use for the request.

func (GetOauthResultOutput) LoginUri added in v3.2.0

URI that initiates login.

func (GetOauthResultOutput) LogoUri added in v3.2.0

URI that references a logo for the client.

func (GetOauthResultOutput) Name added in v3.2.0

Name of application.

func (GetOauthResultOutput) PolicyUri added in v3.2.0

URI to web page providing client policy document.

func (GetOauthResultOutput) PostLogoutRedirectUris added in v3.2.0

func (o GetOauthResultOutput) PostLogoutRedirectUris() pulumi.StringArrayOutput

List of URIs for redirection after logout.

func (GetOauthResultOutput) RedirectUris added in v3.2.0

List of URIs for use in the redirect-based flow.

func (GetOauthResultOutput) ResponseTypes added in v3.2.0

func (o GetOauthResultOutput) ResponseTypes() pulumi.StringArrayOutput

List of OAuth 2.0 response type strings.

func (GetOauthResultOutput) SkipGroups added in v3.3.0

func (o GetOauthResultOutput) SkipGroups() pulumi.BoolPtrOutput

func (GetOauthResultOutput) SkipUsers added in v3.3.0

func (GetOauthResultOutput) Status added in v3.2.0

Status of application.

func (GetOauthResultOutput) ToGetOauthResultOutput added in v3.2.0

func (o GetOauthResultOutput) ToGetOauthResultOutput() GetOauthResultOutput

func (GetOauthResultOutput) ToGetOauthResultOutputWithContext added in v3.2.0

func (o GetOauthResultOutput) ToGetOauthResultOutputWithContext(ctx context.Context) GetOauthResultOutput

func (GetOauthResultOutput) Type added in v3.2.0

The type of OAuth application.

func (GetOauthResultOutput) Users deprecated added in v3.2.0

List of users IDs assigned to the application.

Deprecated: The `users` field is now deprecated for the data source `okta_app_oauth`, please replace all uses of this with: `okta_app_user_assignments`

func (GetOauthResultOutput) WildcardRedirect added in v3.2.0

func (o GetOauthResultOutput) WildcardRedirect() pulumi.StringOutput

type GetSamlAttributeStatement

type GetSamlAttributeStatement struct {
	// Type of group attribute filter.
	FilterType string `pulumi:"filterType"`
	// Filter value to use.
	FilterValue string `pulumi:"filterValue"`
	// name of application.
	Name string `pulumi:"name"`
	// The attribute namespace.
	Namespace string `pulumi:"namespace"`
	// The type of attribute statement value.
	Type string `pulumi:"type"`
	// Array of values to use.
	Values []string `pulumi:"values"`
}

type GetSamlAttributeStatementArgs

type GetSamlAttributeStatementArgs struct {
	// Type of group attribute filter.
	FilterType pulumi.StringInput `pulumi:"filterType"`
	// Filter value to use.
	FilterValue pulumi.StringInput `pulumi:"filterValue"`
	// name of application.
	Name pulumi.StringInput `pulumi:"name"`
	// The attribute namespace.
	Namespace pulumi.StringInput `pulumi:"namespace"`
	// The type of attribute statement value.
	Type pulumi.StringInput `pulumi:"type"`
	// Array of values to use.
	Values pulumi.StringArrayInput `pulumi:"values"`
}

func (GetSamlAttributeStatementArgs) ElementType

func (GetSamlAttributeStatementArgs) ToGetSamlAttributeStatementOutput

func (i GetSamlAttributeStatementArgs) ToGetSamlAttributeStatementOutput() GetSamlAttributeStatementOutput

func (GetSamlAttributeStatementArgs) ToGetSamlAttributeStatementOutputWithContext

func (i GetSamlAttributeStatementArgs) ToGetSamlAttributeStatementOutputWithContext(ctx context.Context) GetSamlAttributeStatementOutput

type GetSamlAttributeStatementArray

type GetSamlAttributeStatementArray []GetSamlAttributeStatementInput

func (GetSamlAttributeStatementArray) ElementType

func (GetSamlAttributeStatementArray) ToGetSamlAttributeStatementArrayOutput

func (i GetSamlAttributeStatementArray) ToGetSamlAttributeStatementArrayOutput() GetSamlAttributeStatementArrayOutput

func (GetSamlAttributeStatementArray) ToGetSamlAttributeStatementArrayOutputWithContext

func (i GetSamlAttributeStatementArray) ToGetSamlAttributeStatementArrayOutputWithContext(ctx context.Context) GetSamlAttributeStatementArrayOutput

type GetSamlAttributeStatementArrayInput

type GetSamlAttributeStatementArrayInput interface {
	pulumi.Input

	ToGetSamlAttributeStatementArrayOutput() GetSamlAttributeStatementArrayOutput
	ToGetSamlAttributeStatementArrayOutputWithContext(context.Context) GetSamlAttributeStatementArrayOutput
}

GetSamlAttributeStatementArrayInput is an input type that accepts GetSamlAttributeStatementArray and GetSamlAttributeStatementArrayOutput values. You can construct a concrete instance of `GetSamlAttributeStatementArrayInput` via:

GetSamlAttributeStatementArray{ GetSamlAttributeStatementArgs{...} }

type GetSamlAttributeStatementArrayOutput

type GetSamlAttributeStatementArrayOutput struct{ *pulumi.OutputState }

func (GetSamlAttributeStatementArrayOutput) ElementType

func (GetSamlAttributeStatementArrayOutput) Index

func (GetSamlAttributeStatementArrayOutput) ToGetSamlAttributeStatementArrayOutput

func (o GetSamlAttributeStatementArrayOutput) ToGetSamlAttributeStatementArrayOutput() GetSamlAttributeStatementArrayOutput

func (GetSamlAttributeStatementArrayOutput) ToGetSamlAttributeStatementArrayOutputWithContext

func (o GetSamlAttributeStatementArrayOutput) ToGetSamlAttributeStatementArrayOutputWithContext(ctx context.Context) GetSamlAttributeStatementArrayOutput

type GetSamlAttributeStatementInput

type GetSamlAttributeStatementInput interface {
	pulumi.Input

	ToGetSamlAttributeStatementOutput() GetSamlAttributeStatementOutput
	ToGetSamlAttributeStatementOutputWithContext(context.Context) GetSamlAttributeStatementOutput
}

GetSamlAttributeStatementInput is an input type that accepts GetSamlAttributeStatementArgs and GetSamlAttributeStatementOutput values. You can construct a concrete instance of `GetSamlAttributeStatementInput` via:

GetSamlAttributeStatementArgs{...}

type GetSamlAttributeStatementOutput

type GetSamlAttributeStatementOutput struct{ *pulumi.OutputState }

func (GetSamlAttributeStatementOutput) ElementType

func (GetSamlAttributeStatementOutput) FilterType

Type of group attribute filter.

func (GetSamlAttributeStatementOutput) FilterValue

Filter value to use.

func (GetSamlAttributeStatementOutput) Name

name of application.

func (GetSamlAttributeStatementOutput) Namespace

The attribute namespace.

func (GetSamlAttributeStatementOutput) ToGetSamlAttributeStatementOutput

func (o GetSamlAttributeStatementOutput) ToGetSamlAttributeStatementOutput() GetSamlAttributeStatementOutput

func (GetSamlAttributeStatementOutput) ToGetSamlAttributeStatementOutputWithContext

func (o GetSamlAttributeStatementOutput) ToGetSamlAttributeStatementOutputWithContext(ctx context.Context) GetSamlAttributeStatementOutput

func (GetSamlAttributeStatementOutput) Type

The type of attribute statement value.

func (GetSamlAttributeStatementOutput) Values

Array of values to use.

type GroupAssignment

type GroupAssignment struct {
	pulumi.CustomResourceState

	// The ID of the application to assign a group to.
	AppId pulumi.StringOutput `pulumi:"appId"`
	// The ID of the group to assign the app to.
	GroupId pulumi.StringOutput `pulumi:"groupId"`
	// Priority of group assignment.
	Priority pulumi.IntPtrOutput `pulumi:"priority"`
	// JSON document containing [application profile](https://developer.okta.com/docs/reference/api/apps/#profile-object)
	Profile pulumi.StringPtrOutput `pulumi:"profile"`
	// Retain the group assignment on destroy. If set to true, the resource will be removed from state but not from the Okta app.
	RetainAssignment pulumi.BoolPtrOutput `pulumi:"retainAssignment"`
}

## Import

An application group assignment can be imported via the `app_id` and the `group_id`.

```sh

$ pulumi import okta:app/groupAssignment:GroupAssignment example &#60;app_id&#62;/&#60;group_id&#62;

```

func GetGroupAssignment

func GetGroupAssignment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GroupAssignmentState, opts ...pulumi.ResourceOption) (*GroupAssignment, error)

GetGroupAssignment gets an existing GroupAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGroupAssignment

func NewGroupAssignment(ctx *pulumi.Context,
	name string, args *GroupAssignmentArgs, opts ...pulumi.ResourceOption) (*GroupAssignment, error)

NewGroupAssignment registers a new resource with the given unique name, arguments, and options.

func (*GroupAssignment) ElementType

func (*GroupAssignment) ElementType() reflect.Type

func (*GroupAssignment) ToGroupAssignmentOutput

func (i *GroupAssignment) ToGroupAssignmentOutput() GroupAssignmentOutput

func (*GroupAssignment) ToGroupAssignmentOutputWithContext

func (i *GroupAssignment) ToGroupAssignmentOutputWithContext(ctx context.Context) GroupAssignmentOutput

type GroupAssignmentArgs

type GroupAssignmentArgs struct {
	// The ID of the application to assign a group to.
	AppId pulumi.StringInput
	// The ID of the group to assign the app to.
	GroupId pulumi.StringInput
	// Priority of group assignment.
	Priority pulumi.IntPtrInput
	// JSON document containing [application profile](https://developer.okta.com/docs/reference/api/apps/#profile-object)
	Profile pulumi.StringPtrInput
	// Retain the group assignment on destroy. If set to true, the resource will be removed from state but not from the Okta app.
	RetainAssignment pulumi.BoolPtrInput
}

The set of arguments for constructing a GroupAssignment resource.

func (GroupAssignmentArgs) ElementType

func (GroupAssignmentArgs) ElementType() reflect.Type

type GroupAssignmentArray

type GroupAssignmentArray []GroupAssignmentInput

func (GroupAssignmentArray) ElementType

func (GroupAssignmentArray) ElementType() reflect.Type

func (GroupAssignmentArray) ToGroupAssignmentArrayOutput

func (i GroupAssignmentArray) ToGroupAssignmentArrayOutput() GroupAssignmentArrayOutput

func (GroupAssignmentArray) ToGroupAssignmentArrayOutputWithContext

func (i GroupAssignmentArray) ToGroupAssignmentArrayOutputWithContext(ctx context.Context) GroupAssignmentArrayOutput

type GroupAssignmentArrayInput

type GroupAssignmentArrayInput interface {
	pulumi.Input

	ToGroupAssignmentArrayOutput() GroupAssignmentArrayOutput
	ToGroupAssignmentArrayOutputWithContext(context.Context) GroupAssignmentArrayOutput
}

GroupAssignmentArrayInput is an input type that accepts GroupAssignmentArray and GroupAssignmentArrayOutput values. You can construct a concrete instance of `GroupAssignmentArrayInput` via:

GroupAssignmentArray{ GroupAssignmentArgs{...} }

type GroupAssignmentArrayOutput

type GroupAssignmentArrayOutput struct{ *pulumi.OutputState }

func (GroupAssignmentArrayOutput) ElementType

func (GroupAssignmentArrayOutput) ElementType() reflect.Type

func (GroupAssignmentArrayOutput) Index

func (GroupAssignmentArrayOutput) ToGroupAssignmentArrayOutput

func (o GroupAssignmentArrayOutput) ToGroupAssignmentArrayOutput() GroupAssignmentArrayOutput

func (GroupAssignmentArrayOutput) ToGroupAssignmentArrayOutputWithContext

func (o GroupAssignmentArrayOutput) ToGroupAssignmentArrayOutputWithContext(ctx context.Context) GroupAssignmentArrayOutput

type GroupAssignmentInput

type GroupAssignmentInput interface {
	pulumi.Input

	ToGroupAssignmentOutput() GroupAssignmentOutput
	ToGroupAssignmentOutputWithContext(ctx context.Context) GroupAssignmentOutput
}

type GroupAssignmentMap

type GroupAssignmentMap map[string]GroupAssignmentInput

func (GroupAssignmentMap) ElementType

func (GroupAssignmentMap) ElementType() reflect.Type

func (GroupAssignmentMap) ToGroupAssignmentMapOutput

func (i GroupAssignmentMap) ToGroupAssignmentMapOutput() GroupAssignmentMapOutput

func (GroupAssignmentMap) ToGroupAssignmentMapOutputWithContext

func (i GroupAssignmentMap) ToGroupAssignmentMapOutputWithContext(ctx context.Context) GroupAssignmentMapOutput

type GroupAssignmentMapInput

type GroupAssignmentMapInput interface {
	pulumi.Input

	ToGroupAssignmentMapOutput() GroupAssignmentMapOutput
	ToGroupAssignmentMapOutputWithContext(context.Context) GroupAssignmentMapOutput
}

GroupAssignmentMapInput is an input type that accepts GroupAssignmentMap and GroupAssignmentMapOutput values. You can construct a concrete instance of `GroupAssignmentMapInput` via:

GroupAssignmentMap{ "key": GroupAssignmentArgs{...} }

type GroupAssignmentMapOutput

type GroupAssignmentMapOutput struct{ *pulumi.OutputState }

func (GroupAssignmentMapOutput) ElementType

func (GroupAssignmentMapOutput) ElementType() reflect.Type

func (GroupAssignmentMapOutput) MapIndex

func (GroupAssignmentMapOutput) ToGroupAssignmentMapOutput

func (o GroupAssignmentMapOutput) ToGroupAssignmentMapOutput() GroupAssignmentMapOutput

func (GroupAssignmentMapOutput) ToGroupAssignmentMapOutputWithContext

func (o GroupAssignmentMapOutput) ToGroupAssignmentMapOutputWithContext(ctx context.Context) GroupAssignmentMapOutput

type GroupAssignmentOutput

type GroupAssignmentOutput struct{ *pulumi.OutputState }

func (GroupAssignmentOutput) AppId added in v3.9.0

The ID of the application to assign a group to.

func (GroupAssignmentOutput) ElementType

func (GroupAssignmentOutput) ElementType() reflect.Type

func (GroupAssignmentOutput) GroupId added in v3.9.0

The ID of the group to assign the app to.

func (GroupAssignmentOutput) Priority added in v3.9.0

Priority of group assignment.

func (GroupAssignmentOutput) Profile added in v3.9.0

JSON document containing [application profile](https://developer.okta.com/docs/reference/api/apps/#profile-object)

func (GroupAssignmentOutput) RetainAssignment added in v3.9.0

func (o GroupAssignmentOutput) RetainAssignment() pulumi.BoolPtrOutput

Retain the group assignment on destroy. If set to true, the resource will be removed from state but not from the Okta app.

func (GroupAssignmentOutput) ToGroupAssignmentOutput

func (o GroupAssignmentOutput) ToGroupAssignmentOutput() GroupAssignmentOutput

func (GroupAssignmentOutput) ToGroupAssignmentOutputWithContext

func (o GroupAssignmentOutput) ToGroupAssignmentOutputWithContext(ctx context.Context) GroupAssignmentOutput

type GroupAssignmentState

type GroupAssignmentState struct {
	// The ID of the application to assign a group to.
	AppId pulumi.StringPtrInput
	// The ID of the group to assign the app to.
	GroupId pulumi.StringPtrInput
	// Priority of group assignment.
	Priority pulumi.IntPtrInput
	// JSON document containing [application profile](https://developer.okta.com/docs/reference/api/apps/#profile-object)
	Profile pulumi.StringPtrInput
	// Retain the group assignment on destroy. If set to true, the resource will be removed from state but not from the Okta app.
	RetainAssignment pulumi.BoolPtrInput
}

func (GroupAssignmentState) ElementType

func (GroupAssignmentState) ElementType() reflect.Type

type LookupSamlArgs

type LookupSamlArgs struct {
	// tells the provider to query for only `ACTIVE` applications.
	ActiveOnly *bool `pulumi:"activeOnly"`
	// `id` of application to retrieve, conflicts with `label` and `labelPrefix`.
	Id *string `pulumi:"id"`
	// The label of the app to retrieve, conflicts with `labelPrefix` and `id`. Label uses
	// the `?q=<label>` query parameter exposed by Okta's API. It should be noted that at this time this searches both `name`
	// and `label`. This is used to avoid paginating through all applications.
	Label *string `pulumi:"label"`
	// Label prefix of the app to retrieve, conflicts with `label` and `id`. This will tell the
	// provider to do a `starts with` query as opposed to an `equals` query.
	LabelPrefix *string `pulumi:"labelPrefix"`
	// Denotes whether the request is compressed or not.
	RequestCompressed *bool `pulumi:"requestCompressed"`
	// Indicator that allows the app to skip `groups` sync. Default is `false`.
	SkipGroups *bool `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync. Default is `false`.
	SkipUsers *bool `pulumi:"skipUsers"`
}

A collection of arguments for invoking getSaml.

type LookupSamlOutputArgs added in v3.2.0

type LookupSamlOutputArgs struct {
	// tells the provider to query for only `ACTIVE` applications.
	ActiveOnly pulumi.BoolPtrInput `pulumi:"activeOnly"`
	// `id` of application to retrieve, conflicts with `label` and `labelPrefix`.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// The label of the app to retrieve, conflicts with `labelPrefix` and `id`. Label uses
	// the `?q=<label>` query parameter exposed by Okta's API. It should be noted that at this time this searches both `name`
	// and `label`. This is used to avoid paginating through all applications.
	Label pulumi.StringPtrInput `pulumi:"label"`
	// Label prefix of the app to retrieve, conflicts with `label` and `id`. This will tell the
	// provider to do a `starts with` query as opposed to an `equals` query.
	LabelPrefix pulumi.StringPtrInput `pulumi:"labelPrefix"`
	// Denotes whether the request is compressed or not.
	RequestCompressed pulumi.BoolPtrInput `pulumi:"requestCompressed"`
	// Indicator that allows the app to skip `groups` sync. Default is `false`.
	SkipGroups pulumi.BoolPtrInput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync. Default is `false`.
	SkipUsers pulumi.BoolPtrInput `pulumi:"skipUsers"`
}

A collection of arguments for invoking getSaml.

func (LookupSamlOutputArgs) ElementType added in v3.2.0

func (LookupSamlOutputArgs) ElementType() reflect.Type

type LookupSamlResult

type LookupSamlResult struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl string `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page URL.
	AccessibilityLoginRedirectUrl string `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service.
	AccessibilitySelfService bool `pulumi:"accessibilitySelfService"`
	// An array of ACS endpoints. You can configure a maximum of 100 endpoints.
	AcsEndpoints []string `pulumi:"acsEndpoints"`
	ActiveOnly   *bool    `pulumi:"activeOnly"`
	// Application settings in JSON format.
	AppSettingsJson string `pulumi:"appSettingsJson"`
	// Determines whether the SAML assertion is digitally signed.
	AssertionSigned bool `pulumi:"assertionSigned"`
	// List of SAML Attribute statements.
	AttributeStatements []GetSamlAttributeStatement `pulumi:"attributeStatements"`
	// Audience restriction.
	Audience string `pulumi:"audience"`
	// Identifies the SAML authentication context class for the assertion’s authentication statement.
	AuthnContextClassRef string `pulumi:"authnContextClassRef"`
	// Display auto submit toolbar.
	AutoSubmitToolbar bool `pulumi:"autoSubmitToolbar"`
	// Identifies a specific application resource in an IDP initiated SSO scenario.
	DefaultRelayState string `pulumi:"defaultRelayState"`
	// Identifies the location where the SAML response is intended to be sent inside the SAML assertion.
	Destination string `pulumi:"destination"`
	// Determines the digest algorithm used to digitally sign the SAML assertion and response.
	DigestAlgorithm string `pulumi:"digestAlgorithm"`
	// features enabled.
	Features []string `pulumi:"features"`
	// List of groups IDs assigned to the application.
	//
	// Deprecated: The `groups` field is now deprecated for the data source `okta_app_saml`, please replace all uses of this with: `okta_app_group_assignments`
	Groups []string `pulumi:"groups"`
	// Do not display application icon on mobile app.
	HideIos bool `pulumi:"hideIos"`
	// Do not display application icon to users
	HideWeb bool `pulumi:"hideWeb"`
	// Prompt user to re-authenticate if SP asks for it.
	HonorForceAuthn bool `pulumi:"honorForceAuthn"`
	// id of application.
	Id *string `pulumi:"id"`
	// SAML issuer ID.
	IdpIssuer string `pulumi:"idpIssuer"`
	// Saml Inline Hook associated with the application.
	InlineHookId string `pulumi:"inlineHookId"`
	// Certificate key ID.
	KeyId string `pulumi:"keyId"`
	// label of application.
	Label       *string `pulumi:"label"`
	LabelPrefix *string `pulumi:"labelPrefix"`
	// Generic JSON containing discoverable resources related to the app.
	Links string `pulumi:"links"`
	// name of application.
	Name string `pulumi:"name"`
	// The location where the app may present the SAML assertion.
	Recipient string `pulumi:"recipient"`
	// Denotes whether the request is compressed or not.
	RequestCompressed *bool `pulumi:"requestCompressed"`
	// Determines whether the SAML auth response message is digitally signed.
	ResponseSigned bool `pulumi:"responseSigned"`
	// SAML Signed Request enabled
	SamlSignedRequestEnabled bool `pulumi:"samlSignedRequestEnabled"`
	// Signature algorithm used ot digitally sign the assertion and response.
	SignatureAlgorithm string `pulumi:"signatureAlgorithm"`
	// x509 encoded certificate that the Service Provider uses to sign Single Logout requests.
	SingleLogoutCertificate string `pulumi:"singleLogoutCertificate"`
	// The issuer of the Service Provider that generates the Single Logout request.
	SingleLogoutIssuer string `pulumi:"singleLogoutIssuer"`
	// The location where the logout response is sent.
	SingleLogoutUrl string `pulumi:"singleLogoutUrl"`
	SkipGroups      *bool  `pulumi:"skipGroups"`
	SkipUsers       *bool  `pulumi:"skipUsers"`
	// SAML service provider issuer.
	SpIssuer string `pulumi:"spIssuer"`
	// Single Sign-on Url.
	SsoUrl string `pulumi:"ssoUrl"`
	// status of application.
	Status string `pulumi:"status"`
	// Identifies the SAML processing rules.
	SubjectNameIdFormat string `pulumi:"subjectNameIdFormat"`
	// Template for app user's username when a user is assigned to the app.
	SubjectNameIdTemplate string `pulumi:"subjectNameIdTemplate"`
	// Username template.
	UserNameTemplate string `pulumi:"userNameTemplate"`
	// Push username on update.
	UserNameTemplatePushStatus string `pulumi:"userNameTemplatePushStatus"`
	// Username template suffix.
	UserNameTemplateSuffix string `pulumi:"userNameTemplateSuffix"`
	// Username template type.
	UserNameTemplateType string `pulumi:"userNameTemplateType"`
	// List of users IDs assigned to the application.
	//
	// Deprecated: The `users` field is now deprecated for the data source `okta_app_saml`, please replace all uses of this with: `okta_app_user_assignments`
	Users []string `pulumi:"users"`
}

A collection of values returned by getSaml.

func LookupSaml

func LookupSaml(ctx *pulumi.Context, args *LookupSamlArgs, opts ...pulumi.InvokeOption) (*LookupSamlResult, error)

Use this data source to retrieve an SAML application from Okta.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.LookupSaml(ctx, &app.LookupSamlArgs{
			Label: pulumi.StringRef("Example App"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupSamlResultOutput added in v3.2.0

type LookupSamlResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getSaml.

func LookupSamlOutput added in v3.2.0

func LookupSamlOutput(ctx *pulumi.Context, args LookupSamlOutputArgs, opts ...pulumi.InvokeOption) LookupSamlResultOutput

func (LookupSamlResultOutput) AccessibilityErrorRedirectUrl added in v3.2.0

func (o LookupSamlResultOutput) AccessibilityErrorRedirectUrl() pulumi.StringOutput

Custom error page URL.

func (LookupSamlResultOutput) AccessibilityLoginRedirectUrl added in v3.2.0

func (o LookupSamlResultOutput) AccessibilityLoginRedirectUrl() pulumi.StringOutput

Custom login page URL.

func (LookupSamlResultOutput) AccessibilitySelfService added in v3.2.0

func (o LookupSamlResultOutput) AccessibilitySelfService() pulumi.BoolOutput

Enable self-service.

func (LookupSamlResultOutput) AcsEndpoints added in v3.2.0

An array of ACS endpoints. You can configure a maximum of 100 endpoints.

func (LookupSamlResultOutput) ActiveOnly added in v3.2.0

func (LookupSamlResultOutput) AppSettingsJson added in v3.2.0

func (o LookupSamlResultOutput) AppSettingsJson() pulumi.StringOutput

Application settings in JSON format.

func (LookupSamlResultOutput) AssertionSigned added in v3.2.0

func (o LookupSamlResultOutput) AssertionSigned() pulumi.BoolOutput

Determines whether the SAML assertion is digitally signed.

func (LookupSamlResultOutput) AttributeStatements added in v3.2.0

List of SAML Attribute statements.

func (LookupSamlResultOutput) Audience added in v3.2.0

Audience restriction.

func (LookupSamlResultOutput) AuthnContextClassRef added in v3.2.0

func (o LookupSamlResultOutput) AuthnContextClassRef() pulumi.StringOutput

Identifies the SAML authentication context class for the assertion’s authentication statement.

func (LookupSamlResultOutput) AutoSubmitToolbar added in v3.2.0

func (o LookupSamlResultOutput) AutoSubmitToolbar() pulumi.BoolOutput

Display auto submit toolbar.

func (LookupSamlResultOutput) DefaultRelayState added in v3.2.0

func (o LookupSamlResultOutput) DefaultRelayState() pulumi.StringOutput

Identifies a specific application resource in an IDP initiated SSO scenario.

func (LookupSamlResultOutput) Destination added in v3.2.0

func (o LookupSamlResultOutput) Destination() pulumi.StringOutput

Identifies the location where the SAML response is intended to be sent inside the SAML assertion.

func (LookupSamlResultOutput) DigestAlgorithm added in v3.2.0

func (o LookupSamlResultOutput) DigestAlgorithm() pulumi.StringOutput

Determines the digest algorithm used to digitally sign the SAML assertion and response.

func (LookupSamlResultOutput) ElementType added in v3.2.0

func (LookupSamlResultOutput) ElementType() reflect.Type

func (LookupSamlResultOutput) Features added in v3.2.0

features enabled.

func (LookupSamlResultOutput) Groups deprecated added in v3.2.0

List of groups IDs assigned to the application.

Deprecated: The `groups` field is now deprecated for the data source `okta_app_saml`, please replace all uses of this with: `okta_app_group_assignments`

func (LookupSamlResultOutput) HideIos added in v3.2.0

Do not display application icon on mobile app.

func (LookupSamlResultOutput) HideWeb added in v3.2.0

Do not display application icon to users

func (LookupSamlResultOutput) HonorForceAuthn added in v3.2.0

func (o LookupSamlResultOutput) HonorForceAuthn() pulumi.BoolOutput

Prompt user to re-authenticate if SP asks for it.

func (LookupSamlResultOutput) Id added in v3.2.0

id of application.

func (LookupSamlResultOutput) IdpIssuer added in v3.2.0

SAML issuer ID.

func (LookupSamlResultOutput) InlineHookId added in v3.2.0

func (o LookupSamlResultOutput) InlineHookId() pulumi.StringOutput

Saml Inline Hook associated with the application.

func (LookupSamlResultOutput) KeyId added in v3.2.0

Certificate key ID.

func (LookupSamlResultOutput) Label added in v3.2.0

label of application.

func (LookupSamlResultOutput) LabelPrefix added in v3.2.0

Generic JSON containing discoverable resources related to the app.

func (LookupSamlResultOutput) Name added in v3.2.0

name of application.

func (LookupSamlResultOutput) Recipient added in v3.2.0

The location where the app may present the SAML assertion.

func (LookupSamlResultOutput) RequestCompressed added in v3.2.0

func (o LookupSamlResultOutput) RequestCompressed() pulumi.BoolPtrOutput

Denotes whether the request is compressed or not.

func (LookupSamlResultOutput) ResponseSigned added in v3.2.0

func (o LookupSamlResultOutput) ResponseSigned() pulumi.BoolOutput

Determines whether the SAML auth response message is digitally signed.

func (LookupSamlResultOutput) SamlSignedRequestEnabled added in v3.20.0

func (o LookupSamlResultOutput) SamlSignedRequestEnabled() pulumi.BoolOutput

SAML Signed Request enabled

func (LookupSamlResultOutput) SignatureAlgorithm added in v3.2.0

func (o LookupSamlResultOutput) SignatureAlgorithm() pulumi.StringOutput

Signature algorithm used ot digitally sign the assertion and response.

func (LookupSamlResultOutput) SingleLogoutCertificate added in v3.2.0

func (o LookupSamlResultOutput) SingleLogoutCertificate() pulumi.StringOutput

x509 encoded certificate that the Service Provider uses to sign Single Logout requests.

func (LookupSamlResultOutput) SingleLogoutIssuer added in v3.2.0

func (o LookupSamlResultOutput) SingleLogoutIssuer() pulumi.StringOutput

The issuer of the Service Provider that generates the Single Logout request.

func (LookupSamlResultOutput) SingleLogoutUrl added in v3.2.0

func (o LookupSamlResultOutput) SingleLogoutUrl() pulumi.StringOutput

The location where the logout response is sent.

func (LookupSamlResultOutput) SkipGroups added in v3.3.0

func (LookupSamlResultOutput) SkipUsers added in v3.3.0

func (LookupSamlResultOutput) SpIssuer added in v3.2.0

SAML service provider issuer.

func (LookupSamlResultOutput) SsoUrl added in v3.2.0

Single Sign-on Url.

func (LookupSamlResultOutput) Status added in v3.2.0

status of application.

func (LookupSamlResultOutput) SubjectNameIdFormat added in v3.2.0

func (o LookupSamlResultOutput) SubjectNameIdFormat() pulumi.StringOutput

Identifies the SAML processing rules.

func (LookupSamlResultOutput) SubjectNameIdTemplate added in v3.2.0

func (o LookupSamlResultOutput) SubjectNameIdTemplate() pulumi.StringOutput

Template for app user's username when a user is assigned to the app.

func (LookupSamlResultOutput) ToLookupSamlResultOutput added in v3.2.0

func (o LookupSamlResultOutput) ToLookupSamlResultOutput() LookupSamlResultOutput

func (LookupSamlResultOutput) ToLookupSamlResultOutputWithContext added in v3.2.0

func (o LookupSamlResultOutput) ToLookupSamlResultOutputWithContext(ctx context.Context) LookupSamlResultOutput

func (LookupSamlResultOutput) UserNameTemplate added in v3.2.0

func (o LookupSamlResultOutput) UserNameTemplate() pulumi.StringOutput

Username template.

func (LookupSamlResultOutput) UserNameTemplatePushStatus added in v3.3.0

func (o LookupSamlResultOutput) UserNameTemplatePushStatus() pulumi.StringOutput

Push username on update.

func (LookupSamlResultOutput) UserNameTemplateSuffix added in v3.2.0

func (o LookupSamlResultOutput) UserNameTemplateSuffix() pulumi.StringOutput

Username template suffix.

func (LookupSamlResultOutput) UserNameTemplateType added in v3.2.0

func (o LookupSamlResultOutput) UserNameTemplateType() pulumi.StringOutput

Username template type.

func (LookupSamlResultOutput) Users deprecated added in v3.2.0

List of users IDs assigned to the application.

Deprecated: The `users` field is now deprecated for the data source `okta_app_saml`, please replace all uses of this with: `okta_app_user_assignments`

type OAuth

type OAuth struct {
	pulumi.CustomResourceState

	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrOutput `pulumi:"accessibilitySelfService"`
	// Application notes for admins.
	AdminNote pulumi.StringPtrOutput `pulumi:"adminNote"`
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrOutput `pulumi:"appLinksJson"`
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrOutput `pulumi:"appSettingsJson"`
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrOutput `pulumi:"authenticationPolicy"`
	// Requested key rotation mode.  If
	// `autoKeyRotation` isn't specified, the client automatically opts in for Okta's
	// key rotation. You can update this property via the API or via the administrator
	// UI.
	// See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	AutoKeyRotation pulumi.BoolPtrOutput `pulumi:"autoKeyRotation"`
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrOutput `pulumi:"autoSubmitToolbar"`
	// OAuth client secret key, this can be set when `tokenEndpointAuthMethod` is `"clientSecretBasic"`.
	ClientBasicSecret pulumi.StringPtrOutput `pulumi:"clientBasicSecret"`
	// OAuth client ID. If set during creation, app is created with this id. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	ClientId pulumi.StringOutput `pulumi:"clientId"`
	// The client secret of the application. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	ClientSecret pulumi.StringOutput `pulumi:"clientSecret"`
	// URI to a web page providing information about the client.
	ClientUri pulumi.StringPtrOutput `pulumi:"clientUri"`
	// Indicates whether user consent is required or implicit. Valid values: `"REQUIRED"`, `"TRUSTED"`. Default value is `"TRUSTED"`.
	ConsentMethod pulumi.StringPtrOutput `pulumi:"consentMethod"`
	// This property allows you to set your clientId during creation. NOTE: updating after creation will be a no-op, use clientId for that behavior instead.
	//
	// Deprecated: This field is being replaced by client_id. Please set that field instead.
	CustomClientId pulumi.StringPtrOutput `pulumi:"customClientId"`
	// Application notes for end users.
	EnduserNote pulumi.StringPtrOutput `pulumi:"enduserNote"`
	// List of OAuth 2.0 grant types. Conditional validation params found [here](https://developer.okta.com/docs/api/resources/apps#credentials-settings-details).
	// Defaults to minimum requirements per app type. Valid values: `"authorizationCode"`, `"implicit"`, `"password"`, `"refreshToken"`, `"clientCredentials"`,
	// `"urn:ietf:params:oauth:grant-type:saml2-bearer"` (*Early Access Property*), `"urn:ietf:params:oauth:grant-type:token-exchange"` (*Early Access Property*),
	// `"interactionCode"` (*OIE only*).
	GrantTypes pulumi.StringArrayOutput `pulumi:"grantTypes"`
	// The groups assigned to the application. It is recommended not to use this and instead use `app.GroupAssignment`.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayOutput `pulumi:"groups"`
	// Groups claim for an OpenID Connect client application. **IMPORTANT**: this field is available only when using api token in the provider config.
	GroupsClaim OAuthGroupsClaimPtrOutput `pulumi:"groupsClaim"`
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrOutput `pulumi:"hideIos"`
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrOutput `pulumi:"hideWeb"`
	// *Early Access Property*. Enables [Federation Broker Mode](https://help.okta.com/en/prod/Content/Topics/Apps/apps-fbm-enable.htm). When this mode is enabled, `users` and `groups` arguments are ignored.
	ImplicitAssignment pulumi.BoolPtrOutput `pulumi:"implicitAssignment"`
	// Indicates whether the Okta Authorization Server uses the original Okta org domain URL or a custom domain URL as the issuer of ID token for this client.
	// Valid values: `"CUSTOM_URL"`,`"ORG_URL"` or `"DYNAMIC"`. Default is `"ORG_URL"`.
	IssuerMode pulumi.StringPtrOutput `pulumi:"issuerMode"`
	// JSON Web Key set. [Admin Console JWK Reference](https://developer.okta.com/docs/guides/implement-oauth-for-okta-serviceapp/main/#generate-the-jwk-in-the-admin-console)
	Jwks OAuthJwkArrayOutput `pulumi:"jwks"`
	// The Application's display name.
	Label pulumi.StringOutput `pulumi:"label"`
	// The type of Idp-Initiated login that the client supports, if any. Valid values: `"DISABLED"`, `"SPEC"`, `"OKTA"`. Default is `"DISABLED"`.
	LoginMode pulumi.StringPtrOutput `pulumi:"loginMode"`
	// List of scopes to use for the request. Valid values: `"openid"`, `"profile"`, `"email"`, `"address"`, `"phone"`. Required when `loginMode` is NOT `DISABLED`.
	LoginScopes pulumi.StringArrayOutput `pulumi:"loginScopes"`
	// URI that initiates login. Required when `loginMode` is NOT `DISABLED`.
	LoginUri pulumi.StringPtrOutput `pulumi:"loginUri"`
	Logo pulumi.StringPtrOutput `pulumi:"logo"`
	// URI that references a logo for the client.
	LogoUri pulumi.StringPtrOutput `pulumi:"logoUri"`
	// Direct link of application logo.
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// Name of the claim that will be used in the token.
	Name pulumi.StringOutput `pulumi:"name"`
	// This tells the provider not to persist the application's secret to state. Your app's `clientSecret` will be recreated if this ever changes from true => false.
	OmitSecret pulumi.BoolPtrOutput `pulumi:"omitSecret"`
	// Require Proof Key for Code Exchange (PKCE) for
	// additional verification.  If `pkceRequired` isn't specified when adding a new
	// application, Okta sets it to `true` by default for `"browser"` and `"native"`
	// application types.
	// See https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	PkceRequired pulumi.BoolPtrOutput `pulumi:"pkceRequired"`
	// URI to web page providing client policy document.
	PolicyUri pulumi.StringPtrOutput `pulumi:"policyUri"`
	// List of URIs for redirection after logout.
	PostLogoutRedirectUris pulumi.StringArrayOutput `pulumi:"postLogoutRedirectUris"`
	// Custom JSON that represents an OAuth application's profile.
	Profile pulumi.StringPtrOutput `pulumi:"profile"`
	// List of URIs for use in the redirect-based flow. This is required for all application types except service.
	RedirectUris pulumi.StringArrayOutput `pulumi:"redirectUris"`
	// Grace period for token rotation. Valid values: 0 to 60 seconds.
	RefreshTokenLeeway pulumi.IntOutput `pulumi:"refreshTokenLeeway"`
	// Refresh token rotation behavior. Valid values: `"STATIC"` or `"ROTATE"`.
	RefreshTokenRotation pulumi.StringOutput `pulumi:"refreshTokenRotation"`
	// List of OAuth 2.0 response type strings. Array
	// values of `"code"`, `"token"`, `"idToken"`. The `grantTypes` and `responseTypes`
	// values described are partially orthogonal, as they refer to arguments
	// passed to different endpoints in the OAuth 2.0 protocol (opens new window).
	// However, they are related in that the `grantTypes` available to a client
	// influence the `responseTypes` that the client is allowed to use, and vice versa.
	// For instance, a grantTypes value that includes authorizationCode implies a
	// `responseTypes` value that includes code, as both values are defined as part of
	// the OAuth 2.0 authorization code grant.
	// See: https://developer.okta.com/docs/reference/api/apps/#add-oauth-2-0-client-application
	ResponseTypes pulumi.StringArrayOutput `pulumi:"responseTypes"`
	// Sign-on mode of application.
	SignOnMode pulumi.StringOutput `pulumi:"signOnMode"`
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrOutput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrOutput `pulumi:"skipUsers"`
	// The status of the application, by default, it is `"ACTIVE"`.
	Status pulumi.StringPtrOutput `pulumi:"status"`
	// Requested authentication method for
	// the token endpoint. It can be set to `"none"`, `"clientSecretPost"`,
	// `"clientSecretBasic"`, `"clientSecretJwt"`, `"privateKeyJwt"`.  Use
	// `pkceRequired` to require PKCE for your confidential clients using the
	// Authorization Code flow. If `"tokenEndpointAuthMethod"` is `"none"`,
	// `pkceRequired` needs to be `true`. If `pkceRequired` isn't specified when
	// adding a new application, Okta sets it to `true` by default for `"browser"` and
	// `"native"` application types.
	// See https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	TokenEndpointAuthMethod pulumi.StringPtrOutput `pulumi:"tokenEndpointAuthMethod"`
	// URI to web page providing client tos (terms of service).
	TosUri pulumi.StringPtrOutput `pulumi:"tosUri"`
	// The type of OAuth application. Valid values: `"web"`, `"native"`, `"browser"`, `"service"`. For SPA apps use `browser`.
	Type pulumi.StringOutput `pulumi:"type"`
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrOutput `pulumi:"userNameTemplate"`
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrOutput `pulumi:"userNameTemplatePushStatus"`
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrOutput `pulumi:"userNameTemplateSuffix"`
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrOutput `pulumi:"userNameTemplateType"`
	// The users assigned to the application. It is recommended not to use this and instead use `app.User`.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users OAuthUserArrayOutput `pulumi:"users"`
	// *Early Access Property*. Indicates if the client is allowed to use wildcard matching of `redirectUris`. Valid values: `"DISABLED"`, `"SUBDOMAIN"`. Default value is `"DISABLED"`.
	WildcardRedirect pulumi.StringPtrOutput `pulumi:"wildcardRedirect"`
}

This resource allows you to create and configure an OIDC Application.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewOAuth(ctx, "example", &app.OAuthArgs{
			GrantTypes: pulumi.StringArray{
				pulumi.String("authorization_code"),
			},
			Label: pulumi.String("example"),
			RedirectUris: pulumi.StringArray{
				pulumi.String("https://example.com/"),
			},
			ResponseTypes: pulumi.StringArray{
				pulumi.String("code"),
			},
			Type: pulumi.String("web"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### With JWKS value

See also Advanced PEM secrets and JWKS example.

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewOAuth(ctx, "example", &app.OAuthArgs{
			GrantTypes: pulumi.StringArray{
				pulumi.String("client_credentials"),
			},
			Jwks: app.OAuthJwkArray{
				&app.OAuthJwkArgs{
					E:   pulumi.String("AQAB"),
					Kid: pulumi.String("SIGNING_KEY"),
					Kty: pulumi.String("RSA"),
					N:   pulumi.String("xyz"),
				},
			},
			Label: pulumi.String("example"),
			ResponseTypes: pulumi.StringArray{
				pulumi.String("token"),
			},
			TokenEndpointAuthMethod: pulumi.String("private_key_jwt"),
			Type:                    pulumi.String("service"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## Etc.

### Resetting client secret

If the client secret needs to be reset run an apply with `omitSecret` set to true in the resource. This causes `clientSecret` to be set to blank. Remove `omitSecret` and run apply again. The resource will set a new `clientSecret` for the app.

## Import

An OIDC Application can be imported via the Okta ID.

```sh

$ pulumi import okta:app/oAuth:OAuth example &#60;app id&#62;

```

It's also possible to import app without groups or/and users. In this case ID may look like this

```sh

$ pulumi import okta:app/oAuth:OAuth example &#60;app id&#62;/skip_users

```

```sh

$ pulumi import okta:app/oAuth:OAuth example &#60;app id&#62;/skip_users/skip_groups

```

```sh

$ pulumi import okta:app/oAuth:OAuth example &#60;app id&#62;/skip_groups

```

func GetOAuth

func GetOAuth(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OAuthState, opts ...pulumi.ResourceOption) (*OAuth, error)

GetOAuth gets an existing OAuth resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOAuth

func NewOAuth(ctx *pulumi.Context,
	name string, args *OAuthArgs, opts ...pulumi.ResourceOption) (*OAuth, error)

NewOAuth registers a new resource with the given unique name, arguments, and options.

func (*OAuth) ElementType

func (*OAuth) ElementType() reflect.Type

func (*OAuth) ToOAuthOutput

func (i *OAuth) ToOAuthOutput() OAuthOutput

func (*OAuth) ToOAuthOutputWithContext

func (i *OAuth) ToOAuthOutputWithContext(ctx context.Context) OAuthOutput

type OAuthArgs

type OAuthArgs struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrInput
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrInput
	// Requested key rotation mode.  If
	// `autoKeyRotation` isn't specified, the client automatically opts in for Okta's
	// key rotation. You can update this property via the API or via the administrator
	// UI.
	// See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	AutoKeyRotation pulumi.BoolPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// OAuth client secret key, this can be set when `tokenEndpointAuthMethod` is `"clientSecretBasic"`.
	ClientBasicSecret pulumi.StringPtrInput
	// OAuth client ID. If set during creation, app is created with this id. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	ClientId pulumi.StringPtrInput
	// URI to a web page providing information about the client.
	ClientUri pulumi.StringPtrInput
	// Indicates whether user consent is required or implicit. Valid values: `"REQUIRED"`, `"TRUSTED"`. Default value is `"TRUSTED"`.
	ConsentMethod pulumi.StringPtrInput
	// This property allows you to set your clientId during creation. NOTE: updating after creation will be a no-op, use clientId for that behavior instead.
	//
	// Deprecated: This field is being replaced by client_id. Please set that field instead.
	CustomClientId pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// List of OAuth 2.0 grant types. Conditional validation params found [here](https://developer.okta.com/docs/api/resources/apps#credentials-settings-details).
	// Defaults to minimum requirements per app type. Valid values: `"authorizationCode"`, `"implicit"`, `"password"`, `"refreshToken"`, `"clientCredentials"`,
	// `"urn:ietf:params:oauth:grant-type:saml2-bearer"` (*Early Access Property*), `"urn:ietf:params:oauth:grant-type:token-exchange"` (*Early Access Property*),
	// `"interactionCode"` (*OIE only*).
	GrantTypes pulumi.StringArrayInput
	// The groups assigned to the application. It is recommended not to use this and instead use `app.GroupAssignment`.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Groups claim for an OpenID Connect client application. **IMPORTANT**: this field is available only when using api token in the provider config.
	GroupsClaim OAuthGroupsClaimPtrInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// *Early Access Property*. Enables [Federation Broker Mode](https://help.okta.com/en/prod/Content/Topics/Apps/apps-fbm-enable.htm). When this mode is enabled, `users` and `groups` arguments are ignored.
	ImplicitAssignment pulumi.BoolPtrInput
	// Indicates whether the Okta Authorization Server uses the original Okta org domain URL or a custom domain URL as the issuer of ID token for this client.
	// Valid values: `"CUSTOM_URL"`,`"ORG_URL"` or `"DYNAMIC"`. Default is `"ORG_URL"`.
	IssuerMode pulumi.StringPtrInput
	// JSON Web Key set. [Admin Console JWK Reference](https://developer.okta.com/docs/guides/implement-oauth-for-okta-serviceapp/main/#generate-the-jwk-in-the-admin-console)
	Jwks OAuthJwkArrayInput
	// The Application's display name.
	Label pulumi.StringInput
	// The type of Idp-Initiated login that the client supports, if any. Valid values: `"DISABLED"`, `"SPEC"`, `"OKTA"`. Default is `"DISABLED"`.
	LoginMode pulumi.StringPtrInput
	// List of scopes to use for the request. Valid values: `"openid"`, `"profile"`, `"email"`, `"address"`, `"phone"`. Required when `loginMode` is NOT `DISABLED`.
	LoginScopes pulumi.StringArrayInput
	// URI that initiates login. Required when `loginMode` is NOT `DISABLED`.
	LoginUri pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// URI that references a logo for the client.
	LogoUri pulumi.StringPtrInput
	// This tells the provider not to persist the application's secret to state. Your app's `clientSecret` will be recreated if this ever changes from true => false.
	OmitSecret pulumi.BoolPtrInput
	// Require Proof Key for Code Exchange (PKCE) for
	// additional verification.  If `pkceRequired` isn't specified when adding a new
	// application, Okta sets it to `true` by default for `"browser"` and `"native"`
	// application types.
	// See https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	PkceRequired pulumi.BoolPtrInput
	// URI to web page providing client policy document.
	PolicyUri pulumi.StringPtrInput
	// List of URIs for redirection after logout.
	PostLogoutRedirectUris pulumi.StringArrayInput
	// Custom JSON that represents an OAuth application's profile.
	Profile pulumi.StringPtrInput
	// List of URIs for use in the redirect-based flow. This is required for all application types except service.
	RedirectUris pulumi.StringArrayInput
	// Grace period for token rotation. Valid values: 0 to 60 seconds.
	RefreshTokenLeeway pulumi.IntPtrInput
	// Refresh token rotation behavior. Valid values: `"STATIC"` or `"ROTATE"`.
	RefreshTokenRotation pulumi.StringPtrInput
	// List of OAuth 2.0 response type strings. Array
	// values of `"code"`, `"token"`, `"idToken"`. The `grantTypes` and `responseTypes`
	// values described are partially orthogonal, as they refer to arguments
	// passed to different endpoints in the OAuth 2.0 protocol (opens new window).
	// However, they are related in that the `grantTypes` available to a client
	// influence the `responseTypes` that the client is allowed to use, and vice versa.
	// For instance, a grantTypes value that includes authorizationCode implies a
	// `responseTypes` value that includes code, as both values are defined as part of
	// the OAuth 2.0 authorization code grant.
	// See: https://developer.okta.com/docs/reference/api/apps/#add-oauth-2-0-client-application
	ResponseTypes pulumi.StringArrayInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// The status of the application, by default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// Requested authentication method for
	// the token endpoint. It can be set to `"none"`, `"clientSecretPost"`,
	// `"clientSecretBasic"`, `"clientSecretJwt"`, `"privateKeyJwt"`.  Use
	// `pkceRequired` to require PKCE for your confidential clients using the
	// Authorization Code flow. If `"tokenEndpointAuthMethod"` is `"none"`,
	// `pkceRequired` needs to be `true`. If `pkceRequired` isn't specified when
	// adding a new application, Okta sets it to `true` by default for `"browser"` and
	// `"native"` application types.
	// See https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	TokenEndpointAuthMethod pulumi.StringPtrInput
	// URI to web page providing client tos (terms of service).
	TosUri pulumi.StringPtrInput
	// The type of OAuth application. Valid values: `"web"`, `"native"`, `"browser"`, `"service"`. For SPA apps use `browser`.
	Type pulumi.StringInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// The users assigned to the application. It is recommended not to use this and instead use `app.User`.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users OAuthUserArrayInput
	// *Early Access Property*. Indicates if the client is allowed to use wildcard matching of `redirectUris`. Valid values: `"DISABLED"`, `"SUBDOMAIN"`. Default value is `"DISABLED"`.
	WildcardRedirect pulumi.StringPtrInput
}

The set of arguments for constructing a OAuth resource.

func (OAuthArgs) ElementType

func (OAuthArgs) ElementType() reflect.Type

type OAuthArray

type OAuthArray []OAuthInput

func (OAuthArray) ElementType

func (OAuthArray) ElementType() reflect.Type

func (OAuthArray) ToOAuthArrayOutput

func (i OAuthArray) ToOAuthArrayOutput() OAuthArrayOutput

func (OAuthArray) ToOAuthArrayOutputWithContext

func (i OAuthArray) ToOAuthArrayOutputWithContext(ctx context.Context) OAuthArrayOutput

type OAuthArrayInput

type OAuthArrayInput interface {
	pulumi.Input

	ToOAuthArrayOutput() OAuthArrayOutput
	ToOAuthArrayOutputWithContext(context.Context) OAuthArrayOutput
}

OAuthArrayInput is an input type that accepts OAuthArray and OAuthArrayOutput values. You can construct a concrete instance of `OAuthArrayInput` via:

OAuthArray{ OAuthArgs{...} }

type OAuthArrayOutput

type OAuthArrayOutput struct{ *pulumi.OutputState }

func (OAuthArrayOutput) ElementType

func (OAuthArrayOutput) ElementType() reflect.Type

func (OAuthArrayOutput) Index

func (OAuthArrayOutput) ToOAuthArrayOutput

func (o OAuthArrayOutput) ToOAuthArrayOutput() OAuthArrayOutput

func (OAuthArrayOutput) ToOAuthArrayOutputWithContext

func (o OAuthArrayOutput) ToOAuthArrayOutputWithContext(ctx context.Context) OAuthArrayOutput

type OAuthGroupsClaim added in v3.1.0

type OAuthGroupsClaim struct {
	// Groups claim filter. Can only be set if type is `"FILTER"`. Valid values: `"EQUALS"`, `"STARTS_WITH"`, `"CONTAINS"`, `"REGEX"`.
	FilterType *string `pulumi:"filterType"`
	// Indicates whether the Okta Authorization Server uses the original Okta org domain URL or a custom domain URL as the issuer of ID token for this client.
	// Valid values: `"CUSTOM_URL"`,`"ORG_URL"` or `"DYNAMIC"`. Default is `"ORG_URL"`.
	IssuerMode *string `pulumi:"issuerMode"`
	// Name of the claim that will be used in the token.
	Name string `pulumi:"name"`
	// The type of OAuth application. Valid values: `"web"`, `"native"`, `"browser"`, `"service"`. For SPA apps use `browser`.
	Type string `pulumi:"type"`
	// Value of the claim. Can be an Okta Expression Language statement that evaluates at the time the token is minted.
	Value string `pulumi:"value"`
}

type OAuthGroupsClaimArgs added in v3.1.0

type OAuthGroupsClaimArgs struct {
	// Groups claim filter. Can only be set if type is `"FILTER"`. Valid values: `"EQUALS"`, `"STARTS_WITH"`, `"CONTAINS"`, `"REGEX"`.
	FilterType pulumi.StringPtrInput `pulumi:"filterType"`
	// Indicates whether the Okta Authorization Server uses the original Okta org domain URL or a custom domain URL as the issuer of ID token for this client.
	// Valid values: `"CUSTOM_URL"`,`"ORG_URL"` or `"DYNAMIC"`. Default is `"ORG_URL"`.
	IssuerMode pulumi.StringPtrInput `pulumi:"issuerMode"`
	// Name of the claim that will be used in the token.
	Name pulumi.StringInput `pulumi:"name"`
	// The type of OAuth application. Valid values: `"web"`, `"native"`, `"browser"`, `"service"`. For SPA apps use `browser`.
	Type pulumi.StringInput `pulumi:"type"`
	// Value of the claim. Can be an Okta Expression Language statement that evaluates at the time the token is minted.
	Value pulumi.StringInput `pulumi:"value"`
}

func (OAuthGroupsClaimArgs) ElementType added in v3.1.0

func (OAuthGroupsClaimArgs) ElementType() reflect.Type

func (OAuthGroupsClaimArgs) ToOAuthGroupsClaimOutput added in v3.1.0

func (i OAuthGroupsClaimArgs) ToOAuthGroupsClaimOutput() OAuthGroupsClaimOutput

func (OAuthGroupsClaimArgs) ToOAuthGroupsClaimOutputWithContext added in v3.1.0

func (i OAuthGroupsClaimArgs) ToOAuthGroupsClaimOutputWithContext(ctx context.Context) OAuthGroupsClaimOutput

func (OAuthGroupsClaimArgs) ToOAuthGroupsClaimPtrOutput added in v3.1.0

func (i OAuthGroupsClaimArgs) ToOAuthGroupsClaimPtrOutput() OAuthGroupsClaimPtrOutput

func (OAuthGroupsClaimArgs) ToOAuthGroupsClaimPtrOutputWithContext added in v3.1.0

func (i OAuthGroupsClaimArgs) ToOAuthGroupsClaimPtrOutputWithContext(ctx context.Context) OAuthGroupsClaimPtrOutput

type OAuthGroupsClaimInput added in v3.1.0

type OAuthGroupsClaimInput interface {
	pulumi.Input

	ToOAuthGroupsClaimOutput() OAuthGroupsClaimOutput
	ToOAuthGroupsClaimOutputWithContext(context.Context) OAuthGroupsClaimOutput
}

OAuthGroupsClaimInput is an input type that accepts OAuthGroupsClaimArgs and OAuthGroupsClaimOutput values. You can construct a concrete instance of `OAuthGroupsClaimInput` via:

OAuthGroupsClaimArgs{...}

type OAuthGroupsClaimOutput added in v3.1.0

type OAuthGroupsClaimOutput struct{ *pulumi.OutputState }

func (OAuthGroupsClaimOutput) ElementType added in v3.1.0

func (OAuthGroupsClaimOutput) ElementType() reflect.Type

func (OAuthGroupsClaimOutput) FilterType added in v3.1.0

Groups claim filter. Can only be set if type is `"FILTER"`. Valid values: `"EQUALS"`, `"STARTS_WITH"`, `"CONTAINS"`, `"REGEX"`.

func (OAuthGroupsClaimOutput) IssuerMode added in v3.14.0

Indicates whether the Okta Authorization Server uses the original Okta org domain URL or a custom domain URL as the issuer of ID token for this client. Valid values: `"CUSTOM_URL"`,`"ORG_URL"` or `"DYNAMIC"`. Default is `"ORG_URL"`.

func (OAuthGroupsClaimOutput) Name added in v3.1.0

Name of the claim that will be used in the token.

func (OAuthGroupsClaimOutput) ToOAuthGroupsClaimOutput added in v3.1.0

func (o OAuthGroupsClaimOutput) ToOAuthGroupsClaimOutput() OAuthGroupsClaimOutput

func (OAuthGroupsClaimOutput) ToOAuthGroupsClaimOutputWithContext added in v3.1.0

func (o OAuthGroupsClaimOutput) ToOAuthGroupsClaimOutputWithContext(ctx context.Context) OAuthGroupsClaimOutput

func (OAuthGroupsClaimOutput) ToOAuthGroupsClaimPtrOutput added in v3.1.0

func (o OAuthGroupsClaimOutput) ToOAuthGroupsClaimPtrOutput() OAuthGroupsClaimPtrOutput

func (OAuthGroupsClaimOutput) ToOAuthGroupsClaimPtrOutputWithContext added in v3.1.0

func (o OAuthGroupsClaimOutput) ToOAuthGroupsClaimPtrOutputWithContext(ctx context.Context) OAuthGroupsClaimPtrOutput

func (OAuthGroupsClaimOutput) Type added in v3.1.0

The type of OAuth application. Valid values: `"web"`, `"native"`, `"browser"`, `"service"`. For SPA apps use `browser`.

func (OAuthGroupsClaimOutput) Value added in v3.1.0

Value of the claim. Can be an Okta Expression Language statement that evaluates at the time the token is minted.

type OAuthGroupsClaimPtrInput added in v3.1.0

type OAuthGroupsClaimPtrInput interface {
	pulumi.Input

	ToOAuthGroupsClaimPtrOutput() OAuthGroupsClaimPtrOutput
	ToOAuthGroupsClaimPtrOutputWithContext(context.Context) OAuthGroupsClaimPtrOutput
}

OAuthGroupsClaimPtrInput is an input type that accepts OAuthGroupsClaimArgs, OAuthGroupsClaimPtr and OAuthGroupsClaimPtrOutput values. You can construct a concrete instance of `OAuthGroupsClaimPtrInput` via:

        OAuthGroupsClaimArgs{...}

or:

        nil

func OAuthGroupsClaimPtr added in v3.1.0

func OAuthGroupsClaimPtr(v *OAuthGroupsClaimArgs) OAuthGroupsClaimPtrInput

type OAuthGroupsClaimPtrOutput added in v3.1.0

type OAuthGroupsClaimPtrOutput struct{ *pulumi.OutputState }

func (OAuthGroupsClaimPtrOutput) Elem added in v3.1.0

func (OAuthGroupsClaimPtrOutput) ElementType added in v3.1.0

func (OAuthGroupsClaimPtrOutput) ElementType() reflect.Type

func (OAuthGroupsClaimPtrOutput) FilterType added in v3.1.0

Groups claim filter. Can only be set if type is `"FILTER"`. Valid values: `"EQUALS"`, `"STARTS_WITH"`, `"CONTAINS"`, `"REGEX"`.

func (OAuthGroupsClaimPtrOutput) IssuerMode added in v3.14.0

Indicates whether the Okta Authorization Server uses the original Okta org domain URL or a custom domain URL as the issuer of ID token for this client. Valid values: `"CUSTOM_URL"`,`"ORG_URL"` or `"DYNAMIC"`. Default is `"ORG_URL"`.

func (OAuthGroupsClaimPtrOutput) Name added in v3.1.0

Name of the claim that will be used in the token.

func (OAuthGroupsClaimPtrOutput) ToOAuthGroupsClaimPtrOutput added in v3.1.0

func (o OAuthGroupsClaimPtrOutput) ToOAuthGroupsClaimPtrOutput() OAuthGroupsClaimPtrOutput

func (OAuthGroupsClaimPtrOutput) ToOAuthGroupsClaimPtrOutputWithContext added in v3.1.0

func (o OAuthGroupsClaimPtrOutput) ToOAuthGroupsClaimPtrOutputWithContext(ctx context.Context) OAuthGroupsClaimPtrOutput

func (OAuthGroupsClaimPtrOutput) Type added in v3.1.0

The type of OAuth application. Valid values: `"web"`, `"native"`, `"browser"`, `"service"`. For SPA apps use `browser`.

func (OAuthGroupsClaimPtrOutput) Value added in v3.1.0

Value of the claim. Can be an Okta Expression Language statement that evaluates at the time the token is minted.

type OAuthInput

type OAuthInput interface {
	pulumi.Input

	ToOAuthOutput() OAuthOutput
	ToOAuthOutputWithContext(ctx context.Context) OAuthOutput
}

type OAuthJwk

type OAuthJwk struct {
	E   *string `pulumi:"e"`
	Kid string  `pulumi:"kid"`
	Kty string  `pulumi:"kty"`
	N   *string `pulumi:"n"`
}

type OAuthJwkArgs

type OAuthJwkArgs struct {
	E   pulumi.StringPtrInput `pulumi:"e"`
	Kid pulumi.StringInput    `pulumi:"kid"`
	Kty pulumi.StringInput    `pulumi:"kty"`
	N   pulumi.StringPtrInput `pulumi:"n"`
}

func (OAuthJwkArgs) ElementType

func (OAuthJwkArgs) ElementType() reflect.Type

func (OAuthJwkArgs) ToOAuthJwkOutput

func (i OAuthJwkArgs) ToOAuthJwkOutput() OAuthJwkOutput

func (OAuthJwkArgs) ToOAuthJwkOutputWithContext

func (i OAuthJwkArgs) ToOAuthJwkOutputWithContext(ctx context.Context) OAuthJwkOutput

type OAuthJwkArray

type OAuthJwkArray []OAuthJwkInput

func (OAuthJwkArray) ElementType

func (OAuthJwkArray) ElementType() reflect.Type

func (OAuthJwkArray) ToOAuthJwkArrayOutput

func (i OAuthJwkArray) ToOAuthJwkArrayOutput() OAuthJwkArrayOutput

func (OAuthJwkArray) ToOAuthJwkArrayOutputWithContext

func (i OAuthJwkArray) ToOAuthJwkArrayOutputWithContext(ctx context.Context) OAuthJwkArrayOutput

type OAuthJwkArrayInput

type OAuthJwkArrayInput interface {
	pulumi.Input

	ToOAuthJwkArrayOutput() OAuthJwkArrayOutput
	ToOAuthJwkArrayOutputWithContext(context.Context) OAuthJwkArrayOutput
}

OAuthJwkArrayInput is an input type that accepts OAuthJwkArray and OAuthJwkArrayOutput values. You can construct a concrete instance of `OAuthJwkArrayInput` via:

OAuthJwkArray{ OAuthJwkArgs{...} }

type OAuthJwkArrayOutput

type OAuthJwkArrayOutput struct{ *pulumi.OutputState }

func (OAuthJwkArrayOutput) ElementType

func (OAuthJwkArrayOutput) ElementType() reflect.Type

func (OAuthJwkArrayOutput) Index

func (OAuthJwkArrayOutput) ToOAuthJwkArrayOutput

func (o OAuthJwkArrayOutput) ToOAuthJwkArrayOutput() OAuthJwkArrayOutput

func (OAuthJwkArrayOutput) ToOAuthJwkArrayOutputWithContext

func (o OAuthJwkArrayOutput) ToOAuthJwkArrayOutputWithContext(ctx context.Context) OAuthJwkArrayOutput

type OAuthJwkInput

type OAuthJwkInput interface {
	pulumi.Input

	ToOAuthJwkOutput() OAuthJwkOutput
	ToOAuthJwkOutputWithContext(context.Context) OAuthJwkOutput
}

OAuthJwkInput is an input type that accepts OAuthJwkArgs and OAuthJwkOutput values. You can construct a concrete instance of `OAuthJwkInput` via:

OAuthJwkArgs{...}

type OAuthJwkOutput

type OAuthJwkOutput struct{ *pulumi.OutputState }

func (OAuthJwkOutput) E

func (OAuthJwkOutput) ElementType

func (OAuthJwkOutput) ElementType() reflect.Type

func (OAuthJwkOutput) Kid

func (OAuthJwkOutput) Kty

func (OAuthJwkOutput) N

func (OAuthJwkOutput) ToOAuthJwkOutput

func (o OAuthJwkOutput) ToOAuthJwkOutput() OAuthJwkOutput

func (OAuthJwkOutput) ToOAuthJwkOutputWithContext

func (o OAuthJwkOutput) ToOAuthJwkOutputWithContext(ctx context.Context) OAuthJwkOutput

type OAuthMap

type OAuthMap map[string]OAuthInput

func (OAuthMap) ElementType

func (OAuthMap) ElementType() reflect.Type

func (OAuthMap) ToOAuthMapOutput

func (i OAuthMap) ToOAuthMapOutput() OAuthMapOutput

func (OAuthMap) ToOAuthMapOutputWithContext

func (i OAuthMap) ToOAuthMapOutputWithContext(ctx context.Context) OAuthMapOutput

type OAuthMapInput

type OAuthMapInput interface {
	pulumi.Input

	ToOAuthMapOutput() OAuthMapOutput
	ToOAuthMapOutputWithContext(context.Context) OAuthMapOutput
}

OAuthMapInput is an input type that accepts OAuthMap and OAuthMapOutput values. You can construct a concrete instance of `OAuthMapInput` via:

OAuthMap{ "key": OAuthArgs{...} }

type OAuthMapOutput

type OAuthMapOutput struct{ *pulumi.OutputState }

func (OAuthMapOutput) ElementType

func (OAuthMapOutput) ElementType() reflect.Type

func (OAuthMapOutput) MapIndex

func (OAuthMapOutput) ToOAuthMapOutput

func (o OAuthMapOutput) ToOAuthMapOutput() OAuthMapOutput

func (OAuthMapOutput) ToOAuthMapOutputWithContext

func (o OAuthMapOutput) ToOAuthMapOutputWithContext(ctx context.Context) OAuthMapOutput

type OAuthOutput

type OAuthOutput struct{ *pulumi.OutputState }

func (OAuthOutput) AccessibilityErrorRedirectUrl added in v3.9.0

func (o OAuthOutput) AccessibilityErrorRedirectUrl() pulumi.StringPtrOutput

Custom error page URL.

func (OAuthOutput) AccessibilityLoginRedirectUrl added in v3.9.0

func (o OAuthOutput) AccessibilityLoginRedirectUrl() pulumi.StringPtrOutput

Custom login page for this application.

func (OAuthOutput) AccessibilitySelfService added in v3.9.0

func (o OAuthOutput) AccessibilitySelfService() pulumi.BoolPtrOutput

Enable self-service. By default, it is `false`.

func (OAuthOutput) AdminNote added in v3.9.0

func (o OAuthOutput) AdminNote() pulumi.StringPtrOutput

Application notes for admins.

func (OAuthOutput) AppLinksJson added in v3.9.0

func (o OAuthOutput) AppLinksJson() pulumi.StringPtrOutput

Displays specific appLinks for the app. The value for each application link should be boolean.

func (OAuthOutput) AppSettingsJson added in v3.9.0

func (o OAuthOutput) AppSettingsJson() pulumi.StringPtrOutput

Application settings in JSON format.

func (OAuthOutput) AuthenticationPolicy added in v3.14.0

func (o OAuthOutput) AuthenticationPolicy() pulumi.StringPtrOutput

The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.

func (OAuthOutput) AutoKeyRotation added in v3.9.0

func (o OAuthOutput) AutoKeyRotation() pulumi.BoolPtrOutput

Requested key rotation mode. If `autoKeyRotation` isn't specified, the client automatically opts in for Okta's key rotation. You can update this property via the API or via the administrator UI. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object

func (OAuthOutput) AutoSubmitToolbar added in v3.9.0

func (o OAuthOutput) AutoSubmitToolbar() pulumi.BoolPtrOutput

Display auto submit toolbar.

func (OAuthOutput) ClientBasicSecret added in v3.9.0

func (o OAuthOutput) ClientBasicSecret() pulumi.StringPtrOutput

OAuth client secret key, this can be set when `tokenEndpointAuthMethod` is `"clientSecretBasic"`.

func (OAuthOutput) ClientId added in v3.9.0

func (o OAuthOutput) ClientId() pulumi.StringOutput

OAuth client ID. If set during creation, app is created with this id. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object

func (OAuthOutput) ClientSecret added in v3.9.0

func (o OAuthOutput) ClientSecret() pulumi.StringOutput

The client secret of the application. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object

func (OAuthOutput) ClientUri added in v3.9.0

func (o OAuthOutput) ClientUri() pulumi.StringPtrOutput

URI to a web page providing information about the client.

func (OAuthOutput) ConsentMethod added in v3.9.0

func (o OAuthOutput) ConsentMethod() pulumi.StringPtrOutput

Indicates whether user consent is required or implicit. Valid values: `"REQUIRED"`, `"TRUSTED"`. Default value is `"TRUSTED"`.

func (OAuthOutput) CustomClientId deprecated added in v3.9.0

func (o OAuthOutput) CustomClientId() pulumi.StringPtrOutput

This property allows you to set your clientId during creation. NOTE: updating after creation will be a no-op, use clientId for that behavior instead.

Deprecated: This field is being replaced by client_id. Please set that field instead.

func (OAuthOutput) ElementType

func (OAuthOutput) ElementType() reflect.Type

func (OAuthOutput) EnduserNote added in v3.9.0

func (o OAuthOutput) EnduserNote() pulumi.StringPtrOutput

Application notes for end users.

func (OAuthOutput) GrantTypes added in v3.9.0

func (o OAuthOutput) GrantTypes() pulumi.StringArrayOutput

List of OAuth 2.0 grant types. Conditional validation params found [here](https://developer.okta.com/docs/api/resources/apps#credentials-settings-details). Defaults to minimum requirements per app type. Valid values: `"authorizationCode"`, `"implicit"`, `"password"`, `"refreshToken"`, `"clientCredentials"`, `"urn:ietf:params:oauth:grant-type:saml2-bearer"` (*Early Access Property*), `"urn:ietf:params:oauth:grant-type:token-exchange"` (*Early Access Property*), `"interactionCode"` (*OIE only*).

func (OAuthOutput) Groups deprecated added in v3.9.0

The groups assigned to the application. It is recommended not to use this and instead use `app.GroupAssignment`.

Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.

func (OAuthOutput) GroupsClaim added in v3.9.0

func (o OAuthOutput) GroupsClaim() OAuthGroupsClaimPtrOutput

Groups claim for an OpenID Connect client application. **IMPORTANT**: this field is available only when using api token in the provider config.

func (OAuthOutput) HideIos added in v3.9.0

func (o OAuthOutput) HideIos() pulumi.BoolPtrOutput

Do not display application icon on mobile app.

func (OAuthOutput) HideWeb added in v3.9.0

func (o OAuthOutput) HideWeb() pulumi.BoolPtrOutput

Do not display application icon to users.

func (OAuthOutput) ImplicitAssignment added in v3.9.0

func (o OAuthOutput) ImplicitAssignment() pulumi.BoolPtrOutput

*Early Access Property*. Enables [Federation Broker Mode](https://help.okta.com/en/prod/Content/Topics/Apps/apps-fbm-enable.htm). When this mode is enabled, `users` and `groups` arguments are ignored.

func (OAuthOutput) IssuerMode added in v3.9.0

func (o OAuthOutput) IssuerMode() pulumi.StringPtrOutput

Indicates whether the Okta Authorization Server uses the original Okta org domain URL or a custom domain URL as the issuer of ID token for this client. Valid values: `"CUSTOM_URL"`,`"ORG_URL"` or `"DYNAMIC"`. Default is `"ORG_URL"`.

func (OAuthOutput) Jwks added in v3.9.0

JSON Web Key set. [Admin Console JWK Reference](https://developer.okta.com/docs/guides/implement-oauth-for-okta-serviceapp/main/#generate-the-jwk-in-the-admin-console)

func (OAuthOutput) Label added in v3.9.0

func (o OAuthOutput) Label() pulumi.StringOutput

The Application's display name.

func (OAuthOutput) LoginMode added in v3.9.0

func (o OAuthOutput) LoginMode() pulumi.StringPtrOutput

The type of Idp-Initiated login that the client supports, if any. Valid values: `"DISABLED"`, `"SPEC"`, `"OKTA"`. Default is `"DISABLED"`.

func (OAuthOutput) LoginScopes added in v3.9.0

func (o OAuthOutput) LoginScopes() pulumi.StringArrayOutput

List of scopes to use for the request. Valid values: `"openid"`, `"profile"`, `"email"`, `"address"`, `"phone"`. Required when `loginMode` is NOT `DISABLED`.

func (OAuthOutput) LoginUri added in v3.9.0

func (o OAuthOutput) LoginUri() pulumi.StringPtrOutput

URI that initiates login. Required when `loginMode` is NOT `DISABLED`.

Local file path to the logo. The file must be in PNG, JPG, or GIF format, and less than 1 MB in size.

func (OAuthOutput) LogoUri added in v3.9.0

func (o OAuthOutput) LogoUri() pulumi.StringPtrOutput

URI that references a logo for the client.

func (OAuthOutput) LogoUrl added in v3.9.0

func (o OAuthOutput) LogoUrl() pulumi.StringOutput

Direct link of application logo.

func (OAuthOutput) Name added in v3.9.0

func (o OAuthOutput) Name() pulumi.StringOutput

Name of the claim that will be used in the token.

func (OAuthOutput) OmitSecret added in v3.9.0

func (o OAuthOutput) OmitSecret() pulumi.BoolPtrOutput

This tells the provider not to persist the application's secret to state. Your app's `clientSecret` will be recreated if this ever changes from true => false.

func (OAuthOutput) PkceRequired added in v3.16.0

func (o OAuthOutput) PkceRequired() pulumi.BoolPtrOutput

Require Proof Key for Code Exchange (PKCE) for additional verification. If `pkceRequired` isn't specified when adding a new application, Okta sets it to `true` by default for `"browser"` and `"native"` application types. See https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object

func (OAuthOutput) PolicyUri added in v3.9.0

func (o OAuthOutput) PolicyUri() pulumi.StringPtrOutput

URI to web page providing client policy document.

func (OAuthOutput) PostLogoutRedirectUris added in v3.9.0

func (o OAuthOutput) PostLogoutRedirectUris() pulumi.StringArrayOutput

List of URIs for redirection after logout.

func (OAuthOutput) Profile added in v3.9.0

func (o OAuthOutput) Profile() pulumi.StringPtrOutput

Custom JSON that represents an OAuth application's profile.

func (OAuthOutput) RedirectUris added in v3.9.0

func (o OAuthOutput) RedirectUris() pulumi.StringArrayOutput

List of URIs for use in the redirect-based flow. This is required for all application types except service.

func (OAuthOutput) RefreshTokenLeeway added in v3.9.0

func (o OAuthOutput) RefreshTokenLeeway() pulumi.IntOutput

Grace period for token rotation. Valid values: 0 to 60 seconds.

func (OAuthOutput) RefreshTokenRotation added in v3.9.0

func (o OAuthOutput) RefreshTokenRotation() pulumi.StringOutput

Refresh token rotation behavior. Valid values: `"STATIC"` or `"ROTATE"`.

func (OAuthOutput) ResponseTypes added in v3.9.0

func (o OAuthOutput) ResponseTypes() pulumi.StringArrayOutput

List of OAuth 2.0 response type strings. Array values of `"code"`, `"token"`, `"idToken"`. The `grantTypes` and `responseTypes` values described are partially orthogonal, as they refer to arguments passed to different endpoints in the OAuth 2.0 protocol (opens new window). However, they are related in that the `grantTypes` available to a client influence the `responseTypes` that the client is allowed to use, and vice versa. For instance, a grantTypes value that includes authorizationCode implies a `responseTypes` value that includes code, as both values are defined as part of the OAuth 2.0 authorization code grant. See: https://developer.okta.com/docs/reference/api/apps/#add-oauth-2-0-client-application

func (OAuthOutput) SignOnMode added in v3.9.0

func (o OAuthOutput) SignOnMode() pulumi.StringOutput

Sign-on mode of application.

func (OAuthOutput) SkipGroups added in v3.9.0

func (o OAuthOutput) SkipGroups() pulumi.BoolPtrOutput

Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.

func (OAuthOutput) SkipUsers added in v3.9.0

func (o OAuthOutput) SkipUsers() pulumi.BoolPtrOutput

Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.

func (OAuthOutput) Status added in v3.9.0

func (o OAuthOutput) Status() pulumi.StringPtrOutput

The status of the application, by default, it is `"ACTIVE"`.

func (OAuthOutput) ToOAuthOutput

func (o OAuthOutput) ToOAuthOutput() OAuthOutput

func (OAuthOutput) ToOAuthOutputWithContext

func (o OAuthOutput) ToOAuthOutputWithContext(ctx context.Context) OAuthOutput

func (OAuthOutput) TokenEndpointAuthMethod added in v3.9.0

func (o OAuthOutput) TokenEndpointAuthMethod() pulumi.StringPtrOutput

Requested authentication method for the token endpoint. It can be set to `"none"`, `"clientSecretPost"`, `"clientSecretBasic"`, `"clientSecretJwt"`, `"privateKeyJwt"`. Use `pkceRequired` to require PKCE for your confidential clients using the Authorization Code flow. If `"tokenEndpointAuthMethod"` is `"none"`, `pkceRequired` needs to be `true`. If `pkceRequired` isn't specified when adding a new application, Okta sets it to `true` by default for `"browser"` and `"native"` application types. See https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object

func (OAuthOutput) TosUri added in v3.9.0

func (o OAuthOutput) TosUri() pulumi.StringPtrOutput

URI to web page providing client tos (terms of service).

func (OAuthOutput) Type added in v3.9.0

func (o OAuthOutput) Type() pulumi.StringOutput

The type of OAuth application. Valid values: `"web"`, `"native"`, `"browser"`, `"service"`. For SPA apps use `browser`.

func (OAuthOutput) UserNameTemplate added in v3.9.0

func (o OAuthOutput) UserNameTemplate() pulumi.StringPtrOutput

Username template. Default: `"${source.login}"`

func (OAuthOutput) UserNameTemplatePushStatus added in v3.9.0

func (o OAuthOutput) UserNameTemplatePushStatus() pulumi.StringPtrOutput

Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.

func (OAuthOutput) UserNameTemplateSuffix added in v3.9.0

func (o OAuthOutput) UserNameTemplateSuffix() pulumi.StringPtrOutput

Username template suffix.

func (OAuthOutput) UserNameTemplateType added in v3.9.0

func (o OAuthOutput) UserNameTemplateType() pulumi.StringPtrOutput

Username template type. Default: `"BUILT_IN"`.

func (OAuthOutput) Users deprecated added in v3.9.0

The users assigned to the application. It is recommended not to use this and instead use `app.User`.

Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.

func (OAuthOutput) WildcardRedirect added in v3.9.0

func (o OAuthOutput) WildcardRedirect() pulumi.StringPtrOutput

*Early Access Property*. Indicates if the client is allowed to use wildcard matching of `redirectUris`. Valid values: `"DISABLED"`, `"SUBDOMAIN"`. Default value is `"DISABLED"`.

type OAuthPostLogoutRedirectUri added in v3.6.3

type OAuthPostLogoutRedirectUri struct {
	pulumi.CustomResourceState

	// OAuth application ID.
	AppId pulumi.StringOutput `pulumi:"appId"`
	// Post Logout Redirect URI to append to Okta OIDC application.
	Uri pulumi.StringOutput `pulumi:"uri"`
}

This resource allows you to manage post logout redirection URI for use in redirect-based flows.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		testOAuth, err := app.NewOAuth(ctx, "testOAuth", &app.OAuthArgs{
			Label: pulumi.String("testAcc_replace_with_uuid"),
			Type:  pulumi.String("web"),
			GrantTypes: pulumi.StringArray{
				pulumi.String("authorization_code"),
			},
			ResponseTypes: pulumi.StringArray{
				pulumi.String("code"),
			},
			RedirectUris: pulumi.StringArray{
				pulumi.String("myapp://callback"),
			},
			PostLogoutRedirectUris: pulumi.StringArray{
				pulumi.String("https://www.example.com"),
			},
		})
		if err != nil {
			return err
		}
		_, err = app.NewOAuthPostLogoutRedirectUri(ctx, "testOAuthPostLogoutRedirectUri", &app.OAuthPostLogoutRedirectUriArgs{
			AppId: testOAuth.ID(),
			Uri:   pulumi.String("https://www.example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

A post logout redirect URI can be imported via the Okta ID.

```sh

$ pulumi import okta:app/oAuthPostLogoutRedirectUri:OAuthPostLogoutRedirectUri example &#60;app id&#62;/&#60;uri&#62;

```

func GetOAuthPostLogoutRedirectUri added in v3.6.3

func GetOAuthPostLogoutRedirectUri(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OAuthPostLogoutRedirectUriState, opts ...pulumi.ResourceOption) (*OAuthPostLogoutRedirectUri, error)

GetOAuthPostLogoutRedirectUri gets an existing OAuthPostLogoutRedirectUri resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOAuthPostLogoutRedirectUri added in v3.6.3

func NewOAuthPostLogoutRedirectUri(ctx *pulumi.Context,
	name string, args *OAuthPostLogoutRedirectUriArgs, opts ...pulumi.ResourceOption) (*OAuthPostLogoutRedirectUri, error)

NewOAuthPostLogoutRedirectUri registers a new resource with the given unique name, arguments, and options.

func (*OAuthPostLogoutRedirectUri) ElementType added in v3.6.3

func (*OAuthPostLogoutRedirectUri) ElementType() reflect.Type

func (*OAuthPostLogoutRedirectUri) ToOAuthPostLogoutRedirectUriOutput added in v3.6.3

func (i *OAuthPostLogoutRedirectUri) ToOAuthPostLogoutRedirectUriOutput() OAuthPostLogoutRedirectUriOutput

func (*OAuthPostLogoutRedirectUri) ToOAuthPostLogoutRedirectUriOutputWithContext added in v3.6.3

func (i *OAuthPostLogoutRedirectUri) ToOAuthPostLogoutRedirectUriOutputWithContext(ctx context.Context) OAuthPostLogoutRedirectUriOutput

type OAuthPostLogoutRedirectUriArgs added in v3.6.3

type OAuthPostLogoutRedirectUriArgs struct {
	// OAuth application ID.
	AppId pulumi.StringInput
	// Post Logout Redirect URI to append to Okta OIDC application.
	Uri pulumi.StringInput
}

The set of arguments for constructing a OAuthPostLogoutRedirectUri resource.

func (OAuthPostLogoutRedirectUriArgs) ElementType added in v3.6.3

type OAuthPostLogoutRedirectUriArray added in v3.6.3

type OAuthPostLogoutRedirectUriArray []OAuthPostLogoutRedirectUriInput

func (OAuthPostLogoutRedirectUriArray) ElementType added in v3.6.3

func (OAuthPostLogoutRedirectUriArray) ToOAuthPostLogoutRedirectUriArrayOutput added in v3.6.3

func (i OAuthPostLogoutRedirectUriArray) ToOAuthPostLogoutRedirectUriArrayOutput() OAuthPostLogoutRedirectUriArrayOutput

func (OAuthPostLogoutRedirectUriArray) ToOAuthPostLogoutRedirectUriArrayOutputWithContext added in v3.6.3

func (i OAuthPostLogoutRedirectUriArray) ToOAuthPostLogoutRedirectUriArrayOutputWithContext(ctx context.Context) OAuthPostLogoutRedirectUriArrayOutput

type OAuthPostLogoutRedirectUriArrayInput added in v3.6.3

type OAuthPostLogoutRedirectUriArrayInput interface {
	pulumi.Input

	ToOAuthPostLogoutRedirectUriArrayOutput() OAuthPostLogoutRedirectUriArrayOutput
	ToOAuthPostLogoutRedirectUriArrayOutputWithContext(context.Context) OAuthPostLogoutRedirectUriArrayOutput
}

OAuthPostLogoutRedirectUriArrayInput is an input type that accepts OAuthPostLogoutRedirectUriArray and OAuthPostLogoutRedirectUriArrayOutput values. You can construct a concrete instance of `OAuthPostLogoutRedirectUriArrayInput` via:

OAuthPostLogoutRedirectUriArray{ OAuthPostLogoutRedirectUriArgs{...} }

type OAuthPostLogoutRedirectUriArrayOutput added in v3.6.3

type OAuthPostLogoutRedirectUriArrayOutput struct{ *pulumi.OutputState }

func (OAuthPostLogoutRedirectUriArrayOutput) ElementType added in v3.6.3

func (OAuthPostLogoutRedirectUriArrayOutput) Index added in v3.6.3

func (OAuthPostLogoutRedirectUriArrayOutput) ToOAuthPostLogoutRedirectUriArrayOutput added in v3.6.3

func (o OAuthPostLogoutRedirectUriArrayOutput) ToOAuthPostLogoutRedirectUriArrayOutput() OAuthPostLogoutRedirectUriArrayOutput

func (OAuthPostLogoutRedirectUriArrayOutput) ToOAuthPostLogoutRedirectUriArrayOutputWithContext added in v3.6.3

func (o OAuthPostLogoutRedirectUriArrayOutput) ToOAuthPostLogoutRedirectUriArrayOutputWithContext(ctx context.Context) OAuthPostLogoutRedirectUriArrayOutput

type OAuthPostLogoutRedirectUriInput added in v3.6.3

type OAuthPostLogoutRedirectUriInput interface {
	pulumi.Input

	ToOAuthPostLogoutRedirectUriOutput() OAuthPostLogoutRedirectUriOutput
	ToOAuthPostLogoutRedirectUriOutputWithContext(ctx context.Context) OAuthPostLogoutRedirectUriOutput
}

type OAuthPostLogoutRedirectUriMap added in v3.6.3

type OAuthPostLogoutRedirectUriMap map[string]OAuthPostLogoutRedirectUriInput

func (OAuthPostLogoutRedirectUriMap) ElementType added in v3.6.3

func (OAuthPostLogoutRedirectUriMap) ToOAuthPostLogoutRedirectUriMapOutput added in v3.6.3

func (i OAuthPostLogoutRedirectUriMap) ToOAuthPostLogoutRedirectUriMapOutput() OAuthPostLogoutRedirectUriMapOutput

func (OAuthPostLogoutRedirectUriMap) ToOAuthPostLogoutRedirectUriMapOutputWithContext added in v3.6.3

func (i OAuthPostLogoutRedirectUriMap) ToOAuthPostLogoutRedirectUriMapOutputWithContext(ctx context.Context) OAuthPostLogoutRedirectUriMapOutput

type OAuthPostLogoutRedirectUriMapInput added in v3.6.3

type OAuthPostLogoutRedirectUriMapInput interface {
	pulumi.Input

	ToOAuthPostLogoutRedirectUriMapOutput() OAuthPostLogoutRedirectUriMapOutput
	ToOAuthPostLogoutRedirectUriMapOutputWithContext(context.Context) OAuthPostLogoutRedirectUriMapOutput
}

OAuthPostLogoutRedirectUriMapInput is an input type that accepts OAuthPostLogoutRedirectUriMap and OAuthPostLogoutRedirectUriMapOutput values. You can construct a concrete instance of `OAuthPostLogoutRedirectUriMapInput` via:

OAuthPostLogoutRedirectUriMap{ "key": OAuthPostLogoutRedirectUriArgs{...} }

type OAuthPostLogoutRedirectUriMapOutput added in v3.6.3

type OAuthPostLogoutRedirectUriMapOutput struct{ *pulumi.OutputState }

func (OAuthPostLogoutRedirectUriMapOutput) ElementType added in v3.6.3

func (OAuthPostLogoutRedirectUriMapOutput) MapIndex added in v3.6.3

func (OAuthPostLogoutRedirectUriMapOutput) ToOAuthPostLogoutRedirectUriMapOutput added in v3.6.3

func (o OAuthPostLogoutRedirectUriMapOutput) ToOAuthPostLogoutRedirectUriMapOutput() OAuthPostLogoutRedirectUriMapOutput

func (OAuthPostLogoutRedirectUriMapOutput) ToOAuthPostLogoutRedirectUriMapOutputWithContext added in v3.6.3

func (o OAuthPostLogoutRedirectUriMapOutput) ToOAuthPostLogoutRedirectUriMapOutputWithContext(ctx context.Context) OAuthPostLogoutRedirectUriMapOutput

type OAuthPostLogoutRedirectUriOutput added in v3.6.3

type OAuthPostLogoutRedirectUriOutput struct{ *pulumi.OutputState }

func (OAuthPostLogoutRedirectUriOutput) AppId added in v3.9.0

OAuth application ID.

func (OAuthPostLogoutRedirectUriOutput) ElementType added in v3.6.3

func (OAuthPostLogoutRedirectUriOutput) ToOAuthPostLogoutRedirectUriOutput added in v3.6.3

func (o OAuthPostLogoutRedirectUriOutput) ToOAuthPostLogoutRedirectUriOutput() OAuthPostLogoutRedirectUriOutput

func (OAuthPostLogoutRedirectUriOutput) ToOAuthPostLogoutRedirectUriOutputWithContext added in v3.6.3

func (o OAuthPostLogoutRedirectUriOutput) ToOAuthPostLogoutRedirectUriOutputWithContext(ctx context.Context) OAuthPostLogoutRedirectUriOutput

func (OAuthPostLogoutRedirectUriOutput) Uri added in v3.9.0

Post Logout Redirect URI to append to Okta OIDC application.

type OAuthPostLogoutRedirectUriState added in v3.6.3

type OAuthPostLogoutRedirectUriState struct {
	// OAuth application ID.
	AppId pulumi.StringPtrInput
	// Post Logout Redirect URI to append to Okta OIDC application.
	Uri pulumi.StringPtrInput
}

func (OAuthPostLogoutRedirectUriState) ElementType added in v3.6.3

type OAuthRedirectUri

type OAuthRedirectUri struct {
	pulumi.CustomResourceState

	// OAuth application ID.
	AppId pulumi.StringOutput `pulumi:"appId"`
	// Redirect URI to append to Okta OIDC application.
	Uri pulumi.StringOutput `pulumi:"uri"`
}

This resource allows you to manage redirection URI for use in redirect-based flows.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		testOAuth, err := app.NewOAuth(ctx, "testOAuth", &app.OAuthArgs{
			Label: pulumi.String("testAcc_replace_with_uuid"),
			Type:  pulumi.String("web"),
			GrantTypes: pulumi.StringArray{
				pulumi.String("authorization_code"),
			},
			ResponseTypes: pulumi.StringArray{
				pulumi.String("code"),
			},
			RedirectUris: pulumi.StringArray{
				pulumi.String("myapp://callback"),
			},
		})
		if err != nil {
			return err
		}
		_, err = app.NewOAuthRedirectUri(ctx, "testOAuthRedirectUri", &app.OAuthRedirectUriArgs{
			AppId: testOAuth.ID(),
			Uri:   pulumi.String("http://google.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

A redirect URI can be imported via the Okta ID.

```sh

$ pulumi import okta:app/oAuthRedirectUri:OAuthRedirectUri example &#60;app id&#62;/&#60;uri&#62;

```

func GetOAuthRedirectUri

func GetOAuthRedirectUri(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OAuthRedirectUriState, opts ...pulumi.ResourceOption) (*OAuthRedirectUri, error)

GetOAuthRedirectUri gets an existing OAuthRedirectUri resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOAuthRedirectUri

func NewOAuthRedirectUri(ctx *pulumi.Context,
	name string, args *OAuthRedirectUriArgs, opts ...pulumi.ResourceOption) (*OAuthRedirectUri, error)

NewOAuthRedirectUri registers a new resource with the given unique name, arguments, and options.

func (*OAuthRedirectUri) ElementType

func (*OAuthRedirectUri) ElementType() reflect.Type

func (*OAuthRedirectUri) ToOAuthRedirectUriOutput

func (i *OAuthRedirectUri) ToOAuthRedirectUriOutput() OAuthRedirectUriOutput

func (*OAuthRedirectUri) ToOAuthRedirectUriOutputWithContext

func (i *OAuthRedirectUri) ToOAuthRedirectUriOutputWithContext(ctx context.Context) OAuthRedirectUriOutput

type OAuthRedirectUriArgs

type OAuthRedirectUriArgs struct {
	// OAuth application ID.
	AppId pulumi.StringInput
	// Redirect URI to append to Okta OIDC application.
	Uri pulumi.StringInput
}

The set of arguments for constructing a OAuthRedirectUri resource.

func (OAuthRedirectUriArgs) ElementType

func (OAuthRedirectUriArgs) ElementType() reflect.Type

type OAuthRedirectUriArray

type OAuthRedirectUriArray []OAuthRedirectUriInput

func (OAuthRedirectUriArray) ElementType

func (OAuthRedirectUriArray) ElementType() reflect.Type

func (OAuthRedirectUriArray) ToOAuthRedirectUriArrayOutput

func (i OAuthRedirectUriArray) ToOAuthRedirectUriArrayOutput() OAuthRedirectUriArrayOutput

func (OAuthRedirectUriArray) ToOAuthRedirectUriArrayOutputWithContext

func (i OAuthRedirectUriArray) ToOAuthRedirectUriArrayOutputWithContext(ctx context.Context) OAuthRedirectUriArrayOutput

type OAuthRedirectUriArrayInput

type OAuthRedirectUriArrayInput interface {
	pulumi.Input

	ToOAuthRedirectUriArrayOutput() OAuthRedirectUriArrayOutput
	ToOAuthRedirectUriArrayOutputWithContext(context.Context) OAuthRedirectUriArrayOutput
}

OAuthRedirectUriArrayInput is an input type that accepts OAuthRedirectUriArray and OAuthRedirectUriArrayOutput values. You can construct a concrete instance of `OAuthRedirectUriArrayInput` via:

OAuthRedirectUriArray{ OAuthRedirectUriArgs{...} }

type OAuthRedirectUriArrayOutput

type OAuthRedirectUriArrayOutput struct{ *pulumi.OutputState }

func (OAuthRedirectUriArrayOutput) ElementType

func (OAuthRedirectUriArrayOutput) Index

func (OAuthRedirectUriArrayOutput) ToOAuthRedirectUriArrayOutput

func (o OAuthRedirectUriArrayOutput) ToOAuthRedirectUriArrayOutput() OAuthRedirectUriArrayOutput

func (OAuthRedirectUriArrayOutput) ToOAuthRedirectUriArrayOutputWithContext

func (o OAuthRedirectUriArrayOutput) ToOAuthRedirectUriArrayOutputWithContext(ctx context.Context) OAuthRedirectUriArrayOutput

type OAuthRedirectUriInput

type OAuthRedirectUriInput interface {
	pulumi.Input

	ToOAuthRedirectUriOutput() OAuthRedirectUriOutput
	ToOAuthRedirectUriOutputWithContext(ctx context.Context) OAuthRedirectUriOutput
}

type OAuthRedirectUriMap

type OAuthRedirectUriMap map[string]OAuthRedirectUriInput

func (OAuthRedirectUriMap) ElementType

func (OAuthRedirectUriMap) ElementType() reflect.Type

func (OAuthRedirectUriMap) ToOAuthRedirectUriMapOutput

func (i OAuthRedirectUriMap) ToOAuthRedirectUriMapOutput() OAuthRedirectUriMapOutput

func (OAuthRedirectUriMap) ToOAuthRedirectUriMapOutputWithContext

func (i OAuthRedirectUriMap) ToOAuthRedirectUriMapOutputWithContext(ctx context.Context) OAuthRedirectUriMapOutput

type OAuthRedirectUriMapInput

type OAuthRedirectUriMapInput interface {
	pulumi.Input

	ToOAuthRedirectUriMapOutput() OAuthRedirectUriMapOutput
	ToOAuthRedirectUriMapOutputWithContext(context.Context) OAuthRedirectUriMapOutput
}

OAuthRedirectUriMapInput is an input type that accepts OAuthRedirectUriMap and OAuthRedirectUriMapOutput values. You can construct a concrete instance of `OAuthRedirectUriMapInput` via:

OAuthRedirectUriMap{ "key": OAuthRedirectUriArgs{...} }

type OAuthRedirectUriMapOutput

type OAuthRedirectUriMapOutput struct{ *pulumi.OutputState }

func (OAuthRedirectUriMapOutput) ElementType

func (OAuthRedirectUriMapOutput) ElementType() reflect.Type

func (OAuthRedirectUriMapOutput) MapIndex

func (OAuthRedirectUriMapOutput) ToOAuthRedirectUriMapOutput

func (o OAuthRedirectUriMapOutput) ToOAuthRedirectUriMapOutput() OAuthRedirectUriMapOutput

func (OAuthRedirectUriMapOutput) ToOAuthRedirectUriMapOutputWithContext

func (o OAuthRedirectUriMapOutput) ToOAuthRedirectUriMapOutputWithContext(ctx context.Context) OAuthRedirectUriMapOutput

type OAuthRedirectUriOutput

type OAuthRedirectUriOutput struct{ *pulumi.OutputState }

func (OAuthRedirectUriOutput) AppId added in v3.9.0

OAuth application ID.

func (OAuthRedirectUriOutput) ElementType

func (OAuthRedirectUriOutput) ElementType() reflect.Type

func (OAuthRedirectUriOutput) ToOAuthRedirectUriOutput

func (o OAuthRedirectUriOutput) ToOAuthRedirectUriOutput() OAuthRedirectUriOutput

func (OAuthRedirectUriOutput) ToOAuthRedirectUriOutputWithContext

func (o OAuthRedirectUriOutput) ToOAuthRedirectUriOutputWithContext(ctx context.Context) OAuthRedirectUriOutput

func (OAuthRedirectUriOutput) Uri added in v3.9.0

Redirect URI to append to Okta OIDC application.

type OAuthRedirectUriState

type OAuthRedirectUriState struct {
	// OAuth application ID.
	AppId pulumi.StringPtrInput
	// Redirect URI to append to Okta OIDC application.
	Uri pulumi.StringPtrInput
}

func (OAuthRedirectUriState) ElementType

func (OAuthRedirectUriState) ElementType() reflect.Type

type OAuthState

type OAuthState struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrInput
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrInput
	// Requested key rotation mode.  If
	// `autoKeyRotation` isn't specified, the client automatically opts in for Okta's
	// key rotation. You can update this property via the API or via the administrator
	// UI.
	// See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	AutoKeyRotation pulumi.BoolPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// OAuth client secret key, this can be set when `tokenEndpointAuthMethod` is `"clientSecretBasic"`.
	ClientBasicSecret pulumi.StringPtrInput
	// OAuth client ID. If set during creation, app is created with this id. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	ClientId pulumi.StringPtrInput
	// The client secret of the application. See: https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	ClientSecret pulumi.StringPtrInput
	// URI to a web page providing information about the client.
	ClientUri pulumi.StringPtrInput
	// Indicates whether user consent is required or implicit. Valid values: `"REQUIRED"`, `"TRUSTED"`. Default value is `"TRUSTED"`.
	ConsentMethod pulumi.StringPtrInput
	// This property allows you to set your clientId during creation. NOTE: updating after creation will be a no-op, use clientId for that behavior instead.
	//
	// Deprecated: This field is being replaced by client_id. Please set that field instead.
	CustomClientId pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// List of OAuth 2.0 grant types. Conditional validation params found [here](https://developer.okta.com/docs/api/resources/apps#credentials-settings-details).
	// Defaults to minimum requirements per app type. Valid values: `"authorizationCode"`, `"implicit"`, `"password"`, `"refreshToken"`, `"clientCredentials"`,
	// `"urn:ietf:params:oauth:grant-type:saml2-bearer"` (*Early Access Property*), `"urn:ietf:params:oauth:grant-type:token-exchange"` (*Early Access Property*),
	// `"interactionCode"` (*OIE only*).
	GrantTypes pulumi.StringArrayInput
	// The groups assigned to the application. It is recommended not to use this and instead use `app.GroupAssignment`.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Groups claim for an OpenID Connect client application. **IMPORTANT**: this field is available only when using api token in the provider config.
	GroupsClaim OAuthGroupsClaimPtrInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// *Early Access Property*. Enables [Federation Broker Mode](https://help.okta.com/en/prod/Content/Topics/Apps/apps-fbm-enable.htm). When this mode is enabled, `users` and `groups` arguments are ignored.
	ImplicitAssignment pulumi.BoolPtrInput
	// Indicates whether the Okta Authorization Server uses the original Okta org domain URL or a custom domain URL as the issuer of ID token for this client.
	// Valid values: `"CUSTOM_URL"`,`"ORG_URL"` or `"DYNAMIC"`. Default is `"ORG_URL"`.
	IssuerMode pulumi.StringPtrInput
	// JSON Web Key set. [Admin Console JWK Reference](https://developer.okta.com/docs/guides/implement-oauth-for-okta-serviceapp/main/#generate-the-jwk-in-the-admin-console)
	Jwks OAuthJwkArrayInput
	// The Application's display name.
	Label pulumi.StringPtrInput
	// The type of Idp-Initiated login that the client supports, if any. Valid values: `"DISABLED"`, `"SPEC"`, `"OKTA"`. Default is `"DISABLED"`.
	LoginMode pulumi.StringPtrInput
	// List of scopes to use for the request. Valid values: `"openid"`, `"profile"`, `"email"`, `"address"`, `"phone"`. Required when `loginMode` is NOT `DISABLED`.
	LoginScopes pulumi.StringArrayInput
	// URI that initiates login. Required when `loginMode` is NOT `DISABLED`.
	LoginUri pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// URI that references a logo for the client.
	LogoUri pulumi.StringPtrInput
	// Direct link of application logo.
	LogoUrl pulumi.StringPtrInput
	// Name of the claim that will be used in the token.
	Name pulumi.StringPtrInput
	// This tells the provider not to persist the application's secret to state. Your app's `clientSecret` will be recreated if this ever changes from true => false.
	OmitSecret pulumi.BoolPtrInput
	// Require Proof Key for Code Exchange (PKCE) for
	// additional verification.  If `pkceRequired` isn't specified when adding a new
	// application, Okta sets it to `true` by default for `"browser"` and `"native"`
	// application types.
	// See https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	PkceRequired pulumi.BoolPtrInput
	// URI to web page providing client policy document.
	PolicyUri pulumi.StringPtrInput
	// List of URIs for redirection after logout.
	PostLogoutRedirectUris pulumi.StringArrayInput
	// Custom JSON that represents an OAuth application's profile.
	Profile pulumi.StringPtrInput
	// List of URIs for use in the redirect-based flow. This is required for all application types except service.
	RedirectUris pulumi.StringArrayInput
	// Grace period for token rotation. Valid values: 0 to 60 seconds.
	RefreshTokenLeeway pulumi.IntPtrInput
	// Refresh token rotation behavior. Valid values: `"STATIC"` or `"ROTATE"`.
	RefreshTokenRotation pulumi.StringPtrInput
	// List of OAuth 2.0 response type strings. Array
	// values of `"code"`, `"token"`, `"idToken"`. The `grantTypes` and `responseTypes`
	// values described are partially orthogonal, as they refer to arguments
	// passed to different endpoints in the OAuth 2.0 protocol (opens new window).
	// However, they are related in that the `grantTypes` available to a client
	// influence the `responseTypes` that the client is allowed to use, and vice versa.
	// For instance, a grantTypes value that includes authorizationCode implies a
	// `responseTypes` value that includes code, as both values are defined as part of
	// the OAuth 2.0 authorization code grant.
	// See: https://developer.okta.com/docs/reference/api/apps/#add-oauth-2-0-client-application
	ResponseTypes pulumi.StringArrayInput
	// Sign-on mode of application.
	SignOnMode pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// The status of the application, by default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// Requested authentication method for
	// the token endpoint. It can be set to `"none"`, `"clientSecretPost"`,
	// `"clientSecretBasic"`, `"clientSecretJwt"`, `"privateKeyJwt"`.  Use
	// `pkceRequired` to require PKCE for your confidential clients using the
	// Authorization Code flow. If `"tokenEndpointAuthMethod"` is `"none"`,
	// `pkceRequired` needs to be `true`. If `pkceRequired` isn't specified when
	// adding a new application, Okta sets it to `true` by default for `"browser"` and
	// `"native"` application types.
	// See https://developer.okta.com/docs/reference/api/apps/#oauth-credential-object
	TokenEndpointAuthMethod pulumi.StringPtrInput
	// URI to web page providing client tos (terms of service).
	TosUri pulumi.StringPtrInput
	// The type of OAuth application. Valid values: `"web"`, `"native"`, `"browser"`, `"service"`. For SPA apps use `browser`.
	Type pulumi.StringPtrInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// The users assigned to the application. It is recommended not to use this and instead use `app.User`.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users OAuthUserArrayInput
	// *Early Access Property*. Indicates if the client is allowed to use wildcard matching of `redirectUris`. Valid values: `"DISABLED"`, `"SUBDOMAIN"`. Default value is `"DISABLED"`.
	WildcardRedirect pulumi.StringPtrInput
}

func (OAuthState) ElementType

func (OAuthState) ElementType() reflect.Type

type OAuthUser

type OAuthUser struct {
	// ID of the application.
	Id       *string `pulumi:"id"`
	Password *string `pulumi:"password"`
	Scope    *string `pulumi:"scope"`
	Username *string `pulumi:"username"`
}

type OAuthUserArgs

type OAuthUserArgs struct {
	// ID of the application.
	Id       pulumi.StringPtrInput `pulumi:"id"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Scope    pulumi.StringPtrInput `pulumi:"scope"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (OAuthUserArgs) ElementType

func (OAuthUserArgs) ElementType() reflect.Type

func (OAuthUserArgs) ToOAuthUserOutput

func (i OAuthUserArgs) ToOAuthUserOutput() OAuthUserOutput

func (OAuthUserArgs) ToOAuthUserOutputWithContext

func (i OAuthUserArgs) ToOAuthUserOutputWithContext(ctx context.Context) OAuthUserOutput

type OAuthUserArray

type OAuthUserArray []OAuthUserInput

func (OAuthUserArray) ElementType

func (OAuthUserArray) ElementType() reflect.Type

func (OAuthUserArray) ToOAuthUserArrayOutput

func (i OAuthUserArray) ToOAuthUserArrayOutput() OAuthUserArrayOutput

func (OAuthUserArray) ToOAuthUserArrayOutputWithContext

func (i OAuthUserArray) ToOAuthUserArrayOutputWithContext(ctx context.Context) OAuthUserArrayOutput

type OAuthUserArrayInput

type OAuthUserArrayInput interface {
	pulumi.Input

	ToOAuthUserArrayOutput() OAuthUserArrayOutput
	ToOAuthUserArrayOutputWithContext(context.Context) OAuthUserArrayOutput
}

OAuthUserArrayInput is an input type that accepts OAuthUserArray and OAuthUserArrayOutput values. You can construct a concrete instance of `OAuthUserArrayInput` via:

OAuthUserArray{ OAuthUserArgs{...} }

type OAuthUserArrayOutput

type OAuthUserArrayOutput struct{ *pulumi.OutputState }

func (OAuthUserArrayOutput) ElementType

func (OAuthUserArrayOutput) ElementType() reflect.Type

func (OAuthUserArrayOutput) Index

func (OAuthUserArrayOutput) ToOAuthUserArrayOutput

func (o OAuthUserArrayOutput) ToOAuthUserArrayOutput() OAuthUserArrayOutput

func (OAuthUserArrayOutput) ToOAuthUserArrayOutputWithContext

func (o OAuthUserArrayOutput) ToOAuthUserArrayOutputWithContext(ctx context.Context) OAuthUserArrayOutput

type OAuthUserInput

type OAuthUserInput interface {
	pulumi.Input

	ToOAuthUserOutput() OAuthUserOutput
	ToOAuthUserOutputWithContext(context.Context) OAuthUserOutput
}

OAuthUserInput is an input type that accepts OAuthUserArgs and OAuthUserOutput values. You can construct a concrete instance of `OAuthUserInput` via:

OAuthUserArgs{...}

type OAuthUserOutput

type OAuthUserOutput struct{ *pulumi.OutputState }

func (OAuthUserOutput) ElementType

func (OAuthUserOutput) ElementType() reflect.Type

func (OAuthUserOutput) Id

ID of the application.

func (OAuthUserOutput) Password

func (o OAuthUserOutput) Password() pulumi.StringPtrOutput

func (OAuthUserOutput) Scope

func (OAuthUserOutput) ToOAuthUserOutput

func (o OAuthUserOutput) ToOAuthUserOutput() OAuthUserOutput

func (OAuthUserOutput) ToOAuthUserOutputWithContext

func (o OAuthUserOutput) ToOAuthUserOutputWithContext(ctx context.Context) OAuthUserOutput

func (OAuthUserOutput) Username

func (o OAuthUserOutput) Username() pulumi.StringPtrOutput

type Saml

type Saml struct {
	pulumi.CustomResourceState

	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service. Default is: `false`.
	AccessibilitySelfService pulumi.BoolPtrOutput `pulumi:"accessibilitySelfService"`
	// An array of ACS endpoints. You can configure a maximum of 100 endpoints.
	AcsEndpoints pulumi.StringArrayOutput `pulumi:"acsEndpoints"`
	// Application notes for admins.
	AdminNote pulumi.StringPtrOutput `pulumi:"adminNote"`
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrOutput `pulumi:"appLinksJson"`
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrOutput `pulumi:"appSettingsJson"`
	// Determines whether the SAML assertion is digitally signed.
	AssertionSigned pulumi.BoolPtrOutput `pulumi:"assertionSigned"`
	// List of SAML Attribute statements.
	AttributeStatements SamlAttributeStatementArrayOutput `pulumi:"attributeStatements"`
	// Audience Restriction
	Audience pulumi.StringPtrOutput `pulumi:"audience"`
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrOutput `pulumi:"authenticationPolicy"`
	// Identifies the SAML authentication context class for the assertion’s authentication statement
	AuthnContextClassRef pulumi.StringPtrOutput `pulumi:"authnContextClassRef"`
	// Display auto submit toolbar. Default is: `false`
	AutoSubmitToolbar pulumi.BoolPtrOutput `pulumi:"autoSubmitToolbar"`
	// The raw signing certificate.
	Certificate pulumi.StringOutput `pulumi:"certificate"`
	// Identifies a specific application resource in an IDP initiated SSO scenario.
	DefaultRelayState pulumi.StringPtrOutput `pulumi:"defaultRelayState"`
	// Identifies the location where the SAML response is intended to be sent inside of the SAML assertion
	Destination pulumi.StringPtrOutput `pulumi:"destination"`
	// Determines the digest algorithm used to digitally sign the SAML assertion and response
	DigestAlgorithm pulumi.StringPtrOutput `pulumi:"digestAlgorithm"`
	// Url that can be used to embed this application into another portal.
	EmbedUrl pulumi.StringOutput `pulumi:"embedUrl"`
	// Application notes for end users.
	EnduserNote pulumi.StringPtrOutput `pulumi:"enduserNote"`
	// Entity ID, the ID portion of the `entityUrl`.
	EntityKey pulumi.StringOutput `pulumi:"entityKey"`
	// Entity URL for instance [http://www.okta.com/exk1fcia6d6EMsf331d8](http://www.okta.com/exk1fcia6d6EMsf331d8).
	EntityUrl pulumi.StringOutput `pulumi:"entityUrl"`
	// features enabled. Notice: you can't currently configure provisioning features via the API.
	Features pulumi.StringArrayOutput `pulumi:"features"`
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayOutput `pulumi:"groups"`
	// Do not display application icon on mobile app. Default is: `false`
	HideIos pulumi.BoolPtrOutput `pulumi:"hideIos"`
	// Do not display application icon to users. Default is: `false`
	HideWeb pulumi.BoolPtrOutput `pulumi:"hideWeb"`
	// Prompt user to re-authenticate if SP asks for it. Default is: `false`
	HonorForceAuthn pulumi.BoolPtrOutput `pulumi:"honorForceAuthn"`
	// `urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Post` location from the SAML metadata.
	HttpPostBinding pulumi.StringOutput `pulumi:"httpPostBinding"`
	// `urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect` location from the SAML metadata.
	HttpRedirectBinding pulumi.StringOutput `pulumi:"httpRedirectBinding"`
	// SAML issuer ID.
	IdpIssuer pulumi.StringPtrOutput `pulumi:"idpIssuer"`
	// _Early Access Property_. Enables [Federation Broker Mode](https://help.okta.com/en/prod/Content/Topics/Apps/apps-fbm-enable.htm). When this mode is enabled, `users` and `groups` arguments are ignored.
	ImplicitAssignment pulumi.BoolPtrOutput `pulumi:"implicitAssignment"`
	// Saml Inline Hook associated with the application.
	InlineHookId pulumi.StringPtrOutput `pulumi:"inlineHookId"`
	// Certificate key ID.
	KeyId pulumi.StringOutput `pulumi:"keyId"`
	// Certificate name. This modulates the rotation of keys. New name == new key. Required to be set with `keyYearsValid`.
	KeyName pulumi.StringPtrOutput `pulumi:"keyName"`
	// Number of years the certificate is valid (2 - 10 years).
	KeyYearsValid pulumi.IntPtrOutput `pulumi:"keyYearsValid"`
	// An array of all key credentials for the application. Format of each entry is as follows:
	Keys SamlKeyArrayOutput `pulumi:"keys"`
	// label of application.
	Label pulumi.StringOutput `pulumi:"label"`
	Logo pulumi.StringPtrOutput `pulumi:"logo"`
	// Direct link of application logo.
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// The raw SAML metadata in XML.
	Metadata pulumi.StringOutput `pulumi:"metadata"`
	// SAML xml metadata URL.
	MetadataUrl pulumi.StringOutput `pulumi:"metadataUrl"`
	// The name of the attribute statement.
	Name pulumi.StringOutput `pulumi:"name"`
	// name of application from the Okta Integration Network, if not included a custom app will be created.  If not provided the following arguments are required:
	PreconfiguredApp pulumi.StringPtrOutput `pulumi:"preconfiguredApp"`
	// The location where the app may present the SAML assertion.
	Recipient pulumi.StringPtrOutput `pulumi:"recipient"`
	// Denotes whether the request is compressed or not.
	RequestCompressed pulumi.BoolPtrOutput `pulumi:"requestCompressed"`
	// Determines whether the SAML auth response message is digitally signed.
	ResponseSigned pulumi.BoolPtrOutput `pulumi:"responseSigned"`
	// SAML Signed Request enabled
	SamlSignedRequestEnabled pulumi.BoolPtrOutput `pulumi:"samlSignedRequestEnabled"`
	// SAML version for the app's sign-on mode. Valid values are: `"2.0"` or `"1.1"`. Default is `"2.0"`.
	SamlVersion pulumi.StringPtrOutput `pulumi:"samlVersion"`
	// Sign-on mode of application.
	SignOnMode pulumi.StringOutput `pulumi:"signOnMode"`
	// Signature algorithm used ot digitally sign the assertion and response.
	SignatureAlgorithm pulumi.StringPtrOutput `pulumi:"signatureAlgorithm"`
	// x509 encoded certificate that the Service Provider uses to sign Single Logout requests.  Note: should be provided without `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----`, see [official documentation](https://developer.okta.com/docs/reference/api/apps/#service-provider-certificate).
	SingleLogoutCertificate pulumi.StringPtrOutput `pulumi:"singleLogoutCertificate"`
	// The issuer of the Service Provider that generates the Single Logout request.
	SingleLogoutIssuer pulumi.StringPtrOutput `pulumi:"singleLogoutIssuer"`
	// The location where the logout response is sent.
	SingleLogoutUrl pulumi.StringPtrOutput `pulumi:"singleLogoutUrl"`
	// Indicator that allows the app to skip `groups` sync (it can also be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrOutput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync (it can also be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrOutput `pulumi:"skipUsers"`
	// SAML service provider issuer.
	SpIssuer pulumi.StringPtrOutput `pulumi:"spIssuer"`
	// Single Sign-on Url.
	SsoUrl pulumi.StringPtrOutput `pulumi:"ssoUrl"`
	// status of application.
	Status pulumi.StringPtrOutput `pulumi:"status"`
	// Identifies the SAML processing rules.
	SubjectNameIdFormat pulumi.StringPtrOutput `pulumi:"subjectNameIdFormat"`
	// Template for app user's username when a user is assigned to the app.
	SubjectNameIdTemplate pulumi.StringPtrOutput `pulumi:"subjectNameIdTemplate"`
	// Username template. Default is: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrOutput `pulumi:"userNameTemplate"`
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrOutput `pulumi:"userNameTemplatePushStatus"`
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrOutput `pulumi:"userNameTemplateSuffix"`
	// Username template type. Default is: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrOutput `pulumi:"userNameTemplateType"`
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SamlUserArrayOutput `pulumi:"users"`
}

This resource allows you to create and configure a SAML Application.

> If you receive the error `You do not have permission to access the feature you are requesting` contact support and request feature flag `ADVANCED_SSO` be applied to your org.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewSaml(ctx, "example", &app.SamlArgs{
			AttributeStatements: app.SamlAttributeStatementArray{
				&app.SamlAttributeStatementArgs{
					FilterType:  pulumi.String("REGEX"),
					FilterValue: pulumi.String(".*"),
					Name:        pulumi.String("groups"),
					Type:        pulumi.String("GROUP"),
				},
			},
			Audience:              pulumi.String("https://example.com/audience"),
			AuthnContextClassRef:  pulumi.String("urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"),
			Destination:           pulumi.String("https://example.com"),
			DigestAlgorithm:       pulumi.String("SHA256"),
			HonorForceAuthn:       pulumi.Bool(false),
			Label:                 pulumi.String("example"),
			Recipient:             pulumi.String("https://example.com"),
			ResponseSigned:        pulumi.Bool(true),
			SignatureAlgorithm:    pulumi.String("RSA_SHA256"),
			SsoUrl:                pulumi.String("https://example.com"),
			SubjectNameIdFormat:   pulumi.String("urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"),
			SubjectNameIdTemplate: pulumi.String("${user.userName}"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### With inline hook

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/inline"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		testHook, err := inline.NewHook(ctx, "testHook", &inline.HookArgs{
			Status:  pulumi.String("ACTIVE"),
			Type:    pulumi.String("com.okta.saml.tokens.transform"),
			Version: pulumi.String("1.0.2"),
			Channel: pulumi.StringMap{
				"type":    pulumi.String("HTTP"),
				"version": pulumi.String("1.0.0"),
				"uri":     pulumi.String("https://example.com/test1"),
				"method":  pulumi.String("POST"),
			},
			Auth: pulumi.StringMap{
				"key":   pulumi.String("Authorization"),
				"type":  pulumi.String("HEADER"),
				"value": pulumi.String("secret"),
			},
		})
		if err != nil {
			return err
		}
		_, err = app.NewSaml(ctx, "testSaml", &app.SamlArgs{
			Label:                 pulumi.String("testAcc_replace_with_uuid"),
			SsoUrl:                pulumi.String("https://google.com"),
			Recipient:             pulumi.String("https://here.com"),
			Destination:           pulumi.String("https://its-about-the-journey.com"),
			Audience:              pulumi.String("https://audience.com"),
			SubjectNameIdTemplate: pulumi.String("${user.userName}"),
			SubjectNameIdFormat:   pulumi.String("urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"),
			ResponseSigned:        pulumi.Bool(true),
			SignatureAlgorithm:    pulumi.String("RSA_SHA256"),
			DigestAlgorithm:       pulumi.String("SHA256"),
			HonorForceAuthn:       pulumi.Bool(false),
			AuthnContextClassRef:  pulumi.String("urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"),
			InlineHookId:          testHook.ID(),
			AttributeStatements: app.SamlAttributeStatementArray{
				&app.SamlAttributeStatementArgs{
					Type:        pulumi.String("GROUP"),
					Name:        pulumi.String("groups"),
					FilterType:  pulumi.String("REGEX"),
					FilterValue: pulumi.String(".*"),
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			testHook,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Pre-configured app with SAML 1.1 sign-on mode

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewSaml(ctx, "test", &app.SamlArgs{
			AppSettingsJson:      pulumi.String("{\n    \"groupFilter\": \"app1.*\",\n    \"siteURL\": \"https://www.okta.com\"\n}\n\n"),
			Label:                pulumi.String("SharePoint (On-Premise)"),
			PreconfiguredApp:     pulumi.String("sharepoint_onpremise"),
			SamlVersion:          pulumi.String("1.1"),
			Status:               pulumi.String("ACTIVE"),
			UserNameTemplate:     pulumi.String("${source.login}"),
			UserNameTemplateType: pulumi.String("BUILT_IN"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Pre-configured app with SAML 1.1 sign-on mode, `appSettingsJson` and `appLinksJson`

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewSaml(ctx, "office365", &app.SamlArgs{
			AppLinksJson:     pulumi.String("  {\n      \"calendar\": false,\n      \"crm\": false,\n      \"delve\": false,\n      \"excel\": false,\n      \"forms\": false,\n      \"mail\": false,\n      \"newsfeed\": false,\n      \"onedrive\": false,\n      \"people\": false,\n      \"planner\": false,\n      \"powerbi\": false,\n      \"powerpoint\": false,\n      \"sites\": false,\n      \"sway\": false,\n      \"tasks\": false,\n      \"teams\": false,\n      \"video\": false,\n      \"word\": false,\n      \"yammer\": false,\n      \"login\": true\n  }\n\n"),
			AppSettingsJson:  pulumi.String("    {\n       \"wsFedConfigureType\": \"AUTO\",\n       \"windowsTransportEnabled\": false,\n       \"domain\": \"okta.com\",\n       \"msftTenant\": \"okta\",\n       \"domains\": [],\n       \"requireAdminConsent\": false\n    }\n\n"),
			Label:            pulumi.String("Microsoft Office 365"),
			PreconfiguredApp: pulumi.String("office365"),
			SamlVersion:      pulumi.String("1.1"),
			Status:           pulumi.String("ACTIVE"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

A SAML App can be imported via the Okta ID.

```sh

$ pulumi import okta:app/saml:Saml example &#60;app id&#62;

```

It's also possible to import app without groups or/and users. In this case ID may look like this

```sh

$ pulumi import okta:app/saml:Saml example &#60;app id&#62;/skip_users

```

```sh

$ pulumi import okta:app/saml:Saml example &#60;app id&#62;/skip_users/skip_groups

```

```sh

$ pulumi import okta:app/saml:Saml example &#60;app id&#62;/skip_groups

```

func GetSaml

func GetSaml(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SamlState, opts ...pulumi.ResourceOption) (*Saml, error)

GetSaml gets an existing Saml resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSaml

func NewSaml(ctx *pulumi.Context,
	name string, args *SamlArgs, opts ...pulumi.ResourceOption) (*Saml, error)

NewSaml registers a new resource with the given unique name, arguments, and options.

func (*Saml) ElementType

func (*Saml) ElementType() reflect.Type

func (*Saml) ToSamlOutput

func (i *Saml) ToSamlOutput() SamlOutput

func (*Saml) ToSamlOutputWithContext

func (i *Saml) ToSamlOutputWithContext(ctx context.Context) SamlOutput

type SamlArgs

type SamlArgs struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. Default is: `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// An array of ACS endpoints. You can configure a maximum of 100 endpoints.
	AcsEndpoints pulumi.StringArrayInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrInput
	// Determines whether the SAML assertion is digitally signed.
	AssertionSigned pulumi.BoolPtrInput
	// List of SAML Attribute statements.
	AttributeStatements SamlAttributeStatementArrayInput
	// Audience Restriction
	Audience pulumi.StringPtrInput
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrInput
	// Identifies the SAML authentication context class for the assertion’s authentication statement
	AuthnContextClassRef pulumi.StringPtrInput
	// Display auto submit toolbar. Default is: `false`
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Identifies a specific application resource in an IDP initiated SSO scenario.
	DefaultRelayState pulumi.StringPtrInput
	// Identifies the location where the SAML response is intended to be sent inside of the SAML assertion
	Destination pulumi.StringPtrInput
	// Determines the digest algorithm used to digitally sign the SAML assertion and response
	DigestAlgorithm pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app. Default is: `false`
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users. Default is: `false`
	HideWeb pulumi.BoolPtrInput
	// Prompt user to re-authenticate if SP asks for it. Default is: `false`
	HonorForceAuthn pulumi.BoolPtrInput
	// SAML issuer ID.
	IdpIssuer pulumi.StringPtrInput
	// _Early Access Property_. Enables [Federation Broker Mode](https://help.okta.com/en/prod/Content/Topics/Apps/apps-fbm-enable.htm). When this mode is enabled, `users` and `groups` arguments are ignored.
	ImplicitAssignment pulumi.BoolPtrInput
	// Saml Inline Hook associated with the application.
	InlineHookId pulumi.StringPtrInput
	// Certificate name. This modulates the rotation of keys. New name == new key. Required to be set with `keyYearsValid`.
	KeyName pulumi.StringPtrInput
	// Number of years the certificate is valid (2 - 10 years).
	KeyYearsValid pulumi.IntPtrInput
	// label of application.
	Label pulumi.StringInput
	Logo pulumi.StringPtrInput
	// name of application from the Okta Integration Network, if not included a custom app will be created.  If not provided the following arguments are required:
	PreconfiguredApp pulumi.StringPtrInput
	// The location where the app may present the SAML assertion.
	Recipient pulumi.StringPtrInput
	// Denotes whether the request is compressed or not.
	RequestCompressed pulumi.BoolPtrInput
	// Determines whether the SAML auth response message is digitally signed.
	ResponseSigned pulumi.BoolPtrInput
	// SAML Signed Request enabled
	SamlSignedRequestEnabled pulumi.BoolPtrInput
	// SAML version for the app's sign-on mode. Valid values are: `"2.0"` or `"1.1"`. Default is `"2.0"`.
	SamlVersion pulumi.StringPtrInput
	// Signature algorithm used ot digitally sign the assertion and response.
	SignatureAlgorithm pulumi.StringPtrInput
	// x509 encoded certificate that the Service Provider uses to sign Single Logout requests.  Note: should be provided without `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----`, see [official documentation](https://developer.okta.com/docs/reference/api/apps/#service-provider-certificate).
	SingleLogoutCertificate pulumi.StringPtrInput
	// The issuer of the Service Provider that generates the Single Logout request.
	SingleLogoutIssuer pulumi.StringPtrInput
	// The location where the logout response is sent.
	SingleLogoutUrl pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it can also be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it can also be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// SAML service provider issuer.
	SpIssuer pulumi.StringPtrInput
	// Single Sign-on Url.
	SsoUrl pulumi.StringPtrInput
	// status of application.
	Status pulumi.StringPtrInput
	// Identifies the SAML processing rules.
	SubjectNameIdFormat pulumi.StringPtrInput
	// Template for app user's username when a user is assigned to the app.
	SubjectNameIdTemplate pulumi.StringPtrInput
	// Username template. Default is: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default is: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SamlUserArrayInput
}

The set of arguments for constructing a Saml resource.

func (SamlArgs) ElementType

func (SamlArgs) ElementType() reflect.Type

type SamlArray

type SamlArray []SamlInput

func (SamlArray) ElementType

func (SamlArray) ElementType() reflect.Type

func (SamlArray) ToSamlArrayOutput

func (i SamlArray) ToSamlArrayOutput() SamlArrayOutput

func (SamlArray) ToSamlArrayOutputWithContext

func (i SamlArray) ToSamlArrayOutputWithContext(ctx context.Context) SamlArrayOutput

type SamlArrayInput

type SamlArrayInput interface {
	pulumi.Input

	ToSamlArrayOutput() SamlArrayOutput
	ToSamlArrayOutputWithContext(context.Context) SamlArrayOutput
}

SamlArrayInput is an input type that accepts SamlArray and SamlArrayOutput values. You can construct a concrete instance of `SamlArrayInput` via:

SamlArray{ SamlArgs{...} }

type SamlArrayOutput

type SamlArrayOutput struct{ *pulumi.OutputState }

func (SamlArrayOutput) ElementType

func (SamlArrayOutput) ElementType() reflect.Type

func (SamlArrayOutput) Index

func (SamlArrayOutput) ToSamlArrayOutput

func (o SamlArrayOutput) ToSamlArrayOutput() SamlArrayOutput

func (SamlArrayOutput) ToSamlArrayOutputWithContext

func (o SamlArrayOutput) ToSamlArrayOutputWithContext(ctx context.Context) SamlArrayOutput

type SamlAttributeStatement

type SamlAttributeStatement struct {
	// Type of group attribute filter. Valid values are: `"STARTS_WITH"`, `"EQUALS"`, `"CONTAINS"`, or `"REGEX"`
	FilterType *string `pulumi:"filterType"`
	// Filter value to use.
	FilterValue *string `pulumi:"filterValue"`
	// The name of the attribute statement.
	Name string `pulumi:"name"`
	// The attribute namespace. It can be set to `"urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"`, `"urn:oasis:names:tc:SAML:2.0:attrname-format:uri"`, or `"urn:oasis:names:tc:SAML:2.0:attrname-format:basic"`.
	Namespace *string `pulumi:"namespace"`
	// The type of attribute statement value. Valid values are: `"EXPRESSION"` or `"GROUP"`. Default is `"EXPRESSION"`.
	Type *string `pulumi:"type"`
	// Array of values to use.
	Values []string `pulumi:"values"`
}

type SamlAttributeStatementArgs

type SamlAttributeStatementArgs struct {
	// Type of group attribute filter. Valid values are: `"STARTS_WITH"`, `"EQUALS"`, `"CONTAINS"`, or `"REGEX"`
	FilterType pulumi.StringPtrInput `pulumi:"filterType"`
	// Filter value to use.
	FilterValue pulumi.StringPtrInput `pulumi:"filterValue"`
	// The name of the attribute statement.
	Name pulumi.StringInput `pulumi:"name"`
	// The attribute namespace. It can be set to `"urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"`, `"urn:oasis:names:tc:SAML:2.0:attrname-format:uri"`, or `"urn:oasis:names:tc:SAML:2.0:attrname-format:basic"`.
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
	// The type of attribute statement value. Valid values are: `"EXPRESSION"` or `"GROUP"`. Default is `"EXPRESSION"`.
	Type pulumi.StringPtrInput `pulumi:"type"`
	// Array of values to use.
	Values pulumi.StringArrayInput `pulumi:"values"`
}

func (SamlAttributeStatementArgs) ElementType

func (SamlAttributeStatementArgs) ElementType() reflect.Type

func (SamlAttributeStatementArgs) ToSamlAttributeStatementOutput

func (i SamlAttributeStatementArgs) ToSamlAttributeStatementOutput() SamlAttributeStatementOutput

func (SamlAttributeStatementArgs) ToSamlAttributeStatementOutputWithContext

func (i SamlAttributeStatementArgs) ToSamlAttributeStatementOutputWithContext(ctx context.Context) SamlAttributeStatementOutput

type SamlAttributeStatementArray

type SamlAttributeStatementArray []SamlAttributeStatementInput

func (SamlAttributeStatementArray) ElementType

func (SamlAttributeStatementArray) ToSamlAttributeStatementArrayOutput

func (i SamlAttributeStatementArray) ToSamlAttributeStatementArrayOutput() SamlAttributeStatementArrayOutput

func (SamlAttributeStatementArray) ToSamlAttributeStatementArrayOutputWithContext

func (i SamlAttributeStatementArray) ToSamlAttributeStatementArrayOutputWithContext(ctx context.Context) SamlAttributeStatementArrayOutput

type SamlAttributeStatementArrayInput

type SamlAttributeStatementArrayInput interface {
	pulumi.Input

	ToSamlAttributeStatementArrayOutput() SamlAttributeStatementArrayOutput
	ToSamlAttributeStatementArrayOutputWithContext(context.Context) SamlAttributeStatementArrayOutput
}

SamlAttributeStatementArrayInput is an input type that accepts SamlAttributeStatementArray and SamlAttributeStatementArrayOutput values. You can construct a concrete instance of `SamlAttributeStatementArrayInput` via:

SamlAttributeStatementArray{ SamlAttributeStatementArgs{...} }

type SamlAttributeStatementArrayOutput

type SamlAttributeStatementArrayOutput struct{ *pulumi.OutputState }

func (SamlAttributeStatementArrayOutput) ElementType

func (SamlAttributeStatementArrayOutput) Index

func (SamlAttributeStatementArrayOutput) ToSamlAttributeStatementArrayOutput

func (o SamlAttributeStatementArrayOutput) ToSamlAttributeStatementArrayOutput() SamlAttributeStatementArrayOutput

func (SamlAttributeStatementArrayOutput) ToSamlAttributeStatementArrayOutputWithContext

func (o SamlAttributeStatementArrayOutput) ToSamlAttributeStatementArrayOutputWithContext(ctx context.Context) SamlAttributeStatementArrayOutput

type SamlAttributeStatementInput

type SamlAttributeStatementInput interface {
	pulumi.Input

	ToSamlAttributeStatementOutput() SamlAttributeStatementOutput
	ToSamlAttributeStatementOutputWithContext(context.Context) SamlAttributeStatementOutput
}

SamlAttributeStatementInput is an input type that accepts SamlAttributeStatementArgs and SamlAttributeStatementOutput values. You can construct a concrete instance of `SamlAttributeStatementInput` via:

SamlAttributeStatementArgs{...}

type SamlAttributeStatementOutput

type SamlAttributeStatementOutput struct{ *pulumi.OutputState }

func (SamlAttributeStatementOutput) ElementType

func (SamlAttributeStatementOutput) FilterType

Type of group attribute filter. Valid values are: `"STARTS_WITH"`, `"EQUALS"`, `"CONTAINS"`, or `"REGEX"`

func (SamlAttributeStatementOutput) FilterValue

Filter value to use.

func (SamlAttributeStatementOutput) Name

The name of the attribute statement.

func (SamlAttributeStatementOutput) Namespace

The attribute namespace. It can be set to `"urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"`, `"urn:oasis:names:tc:SAML:2.0:attrname-format:uri"`, or `"urn:oasis:names:tc:SAML:2.0:attrname-format:basic"`.

func (SamlAttributeStatementOutput) ToSamlAttributeStatementOutput

func (o SamlAttributeStatementOutput) ToSamlAttributeStatementOutput() SamlAttributeStatementOutput

func (SamlAttributeStatementOutput) ToSamlAttributeStatementOutputWithContext

func (o SamlAttributeStatementOutput) ToSamlAttributeStatementOutputWithContext(ctx context.Context) SamlAttributeStatementOutput

func (SamlAttributeStatementOutput) Type

The type of attribute statement value. Valid values are: `"EXPRESSION"` or `"GROUP"`. Default is `"EXPRESSION"`.

func (SamlAttributeStatementOutput) Values

Array of values to use.

type SamlInput

type SamlInput interface {
	pulumi.Input

	ToSamlOutput() SamlOutput
	ToSamlOutputWithContext(ctx context.Context) SamlOutput
}

type SamlKey added in v3.14.0

type SamlKey struct {
	// Date created.
	Created *string `pulumi:"created"`
	// RSA exponent.
	E *string `pulumi:"e"`
	// Date the key expires.
	ExpiresAt *string `pulumi:"expiresAt"`
	// Key ID.
	Kid *string `pulumi:"kid"`
	// Identifies the cryptographic algorithm family used with the key.
	Kty *string `pulumi:"kty"`
	// Date the key was last updated.
	LastUpdated *string `pulumi:"lastUpdated"`
	// RSA modulus.
	N *string `pulumi:"n"`
	// Intended use of the public key.
	Use *string `pulumi:"use"`
	// X.509 certificate chain.
	X5cs []string `pulumi:"x5cs"`
	// X.509 certificate SHA-256 thumbprint.
	X5tS256 *string `pulumi:"x5tS256"`
}

type SamlKeyArgs added in v3.14.0

type SamlKeyArgs struct {
	// Date created.
	Created pulumi.StringPtrInput `pulumi:"created"`
	// RSA exponent.
	E pulumi.StringPtrInput `pulumi:"e"`
	// Date the key expires.
	ExpiresAt pulumi.StringPtrInput `pulumi:"expiresAt"`
	// Key ID.
	Kid pulumi.StringPtrInput `pulumi:"kid"`
	// Identifies the cryptographic algorithm family used with the key.
	Kty pulumi.StringPtrInput `pulumi:"kty"`
	// Date the key was last updated.
	LastUpdated pulumi.StringPtrInput `pulumi:"lastUpdated"`
	// RSA modulus.
	N pulumi.StringPtrInput `pulumi:"n"`
	// Intended use of the public key.
	Use pulumi.StringPtrInput `pulumi:"use"`
	// X.509 certificate chain.
	X5cs pulumi.StringArrayInput `pulumi:"x5cs"`
	// X.509 certificate SHA-256 thumbprint.
	X5tS256 pulumi.StringPtrInput `pulumi:"x5tS256"`
}

func (SamlKeyArgs) ElementType added in v3.14.0

func (SamlKeyArgs) ElementType() reflect.Type

func (SamlKeyArgs) ToSamlKeyOutput added in v3.14.0

func (i SamlKeyArgs) ToSamlKeyOutput() SamlKeyOutput

func (SamlKeyArgs) ToSamlKeyOutputWithContext added in v3.14.0

func (i SamlKeyArgs) ToSamlKeyOutputWithContext(ctx context.Context) SamlKeyOutput

type SamlKeyArray added in v3.14.0

type SamlKeyArray []SamlKeyInput

func (SamlKeyArray) ElementType added in v3.14.0

func (SamlKeyArray) ElementType() reflect.Type

func (SamlKeyArray) ToSamlKeyArrayOutput added in v3.14.0

func (i SamlKeyArray) ToSamlKeyArrayOutput() SamlKeyArrayOutput

func (SamlKeyArray) ToSamlKeyArrayOutputWithContext added in v3.14.0

func (i SamlKeyArray) ToSamlKeyArrayOutputWithContext(ctx context.Context) SamlKeyArrayOutput

type SamlKeyArrayInput added in v3.14.0

type SamlKeyArrayInput interface {
	pulumi.Input

	ToSamlKeyArrayOutput() SamlKeyArrayOutput
	ToSamlKeyArrayOutputWithContext(context.Context) SamlKeyArrayOutput
}

SamlKeyArrayInput is an input type that accepts SamlKeyArray and SamlKeyArrayOutput values. You can construct a concrete instance of `SamlKeyArrayInput` via:

SamlKeyArray{ SamlKeyArgs{...} }

type SamlKeyArrayOutput added in v3.14.0

type SamlKeyArrayOutput struct{ *pulumi.OutputState }

func (SamlKeyArrayOutput) ElementType added in v3.14.0

func (SamlKeyArrayOutput) ElementType() reflect.Type

func (SamlKeyArrayOutput) Index added in v3.14.0

func (SamlKeyArrayOutput) ToSamlKeyArrayOutput added in v3.14.0

func (o SamlKeyArrayOutput) ToSamlKeyArrayOutput() SamlKeyArrayOutput

func (SamlKeyArrayOutput) ToSamlKeyArrayOutputWithContext added in v3.14.0

func (o SamlKeyArrayOutput) ToSamlKeyArrayOutputWithContext(ctx context.Context) SamlKeyArrayOutput

type SamlKeyInput added in v3.14.0

type SamlKeyInput interface {
	pulumi.Input

	ToSamlKeyOutput() SamlKeyOutput
	ToSamlKeyOutputWithContext(context.Context) SamlKeyOutput
}

SamlKeyInput is an input type that accepts SamlKeyArgs and SamlKeyOutput values. You can construct a concrete instance of `SamlKeyInput` via:

SamlKeyArgs{...}

type SamlKeyOutput added in v3.14.0

type SamlKeyOutput struct{ *pulumi.OutputState }

func (SamlKeyOutput) Created added in v3.14.0

func (o SamlKeyOutput) Created() pulumi.StringPtrOutput

Date created.

func (SamlKeyOutput) E added in v3.14.0

RSA exponent.

func (SamlKeyOutput) ElementType added in v3.14.0

func (SamlKeyOutput) ElementType() reflect.Type

func (SamlKeyOutput) ExpiresAt added in v3.14.0

func (o SamlKeyOutput) ExpiresAt() pulumi.StringPtrOutput

Date the key expires.

func (SamlKeyOutput) Kid added in v3.14.0

Key ID.

func (SamlKeyOutput) Kty added in v3.14.0

Identifies the cryptographic algorithm family used with the key.

func (SamlKeyOutput) LastUpdated added in v3.14.0

func (o SamlKeyOutput) LastUpdated() pulumi.StringPtrOutput

Date the key was last updated.

func (SamlKeyOutput) N added in v3.14.0

RSA modulus.

func (SamlKeyOutput) ToSamlKeyOutput added in v3.14.0

func (o SamlKeyOutput) ToSamlKeyOutput() SamlKeyOutput

func (SamlKeyOutput) ToSamlKeyOutputWithContext added in v3.14.0

func (o SamlKeyOutput) ToSamlKeyOutputWithContext(ctx context.Context) SamlKeyOutput

func (SamlKeyOutput) Use added in v3.14.0

Intended use of the public key.

func (SamlKeyOutput) X5cs added in v3.14.0

X.509 certificate chain.

func (SamlKeyOutput) X5tS256 added in v3.14.0

func (o SamlKeyOutput) X5tS256() pulumi.StringPtrOutput

X.509 certificate SHA-256 thumbprint.

type SamlMap

type SamlMap map[string]SamlInput

func (SamlMap) ElementType

func (SamlMap) ElementType() reflect.Type

func (SamlMap) ToSamlMapOutput

func (i SamlMap) ToSamlMapOutput() SamlMapOutput

func (SamlMap) ToSamlMapOutputWithContext

func (i SamlMap) ToSamlMapOutputWithContext(ctx context.Context) SamlMapOutput

type SamlMapInput

type SamlMapInput interface {
	pulumi.Input

	ToSamlMapOutput() SamlMapOutput
	ToSamlMapOutputWithContext(context.Context) SamlMapOutput
}

SamlMapInput is an input type that accepts SamlMap and SamlMapOutput values. You can construct a concrete instance of `SamlMapInput` via:

SamlMap{ "key": SamlArgs{...} }

type SamlMapOutput

type SamlMapOutput struct{ *pulumi.OutputState }

func (SamlMapOutput) ElementType

func (SamlMapOutput) ElementType() reflect.Type

func (SamlMapOutput) MapIndex

func (SamlMapOutput) ToSamlMapOutput

func (o SamlMapOutput) ToSamlMapOutput() SamlMapOutput

func (SamlMapOutput) ToSamlMapOutputWithContext

func (o SamlMapOutput) ToSamlMapOutputWithContext(ctx context.Context) SamlMapOutput

type SamlOutput

type SamlOutput struct{ *pulumi.OutputState }

func (SamlOutput) AccessibilityErrorRedirectUrl added in v3.9.0

func (o SamlOutput) AccessibilityErrorRedirectUrl() pulumi.StringPtrOutput

Custom error page URL.

func (SamlOutput) AccessibilityLoginRedirectUrl added in v3.9.0

func (o SamlOutput) AccessibilityLoginRedirectUrl() pulumi.StringPtrOutput

Custom login page for this application.

func (SamlOutput) AccessibilitySelfService added in v3.9.0

func (o SamlOutput) AccessibilitySelfService() pulumi.BoolPtrOutput

Enable self-service. Default is: `false`.

func (SamlOutput) AcsEndpoints added in v3.9.0

func (o SamlOutput) AcsEndpoints() pulumi.StringArrayOutput

An array of ACS endpoints. You can configure a maximum of 100 endpoints.

func (SamlOutput) AdminNote added in v3.9.0

func (o SamlOutput) AdminNote() pulumi.StringPtrOutput

Application notes for admins.

func (SamlOutput) AppLinksJson added in v3.9.0

func (o SamlOutput) AppLinksJson() pulumi.StringPtrOutput

Displays specific appLinks for the app. The value for each application link should be boolean.

func (SamlOutput) AppSettingsJson added in v3.9.0

func (o SamlOutput) AppSettingsJson() pulumi.StringPtrOutput

Application settings in JSON format.

func (SamlOutput) AssertionSigned added in v3.9.0

func (o SamlOutput) AssertionSigned() pulumi.BoolPtrOutput

Determines whether the SAML assertion is digitally signed.

func (SamlOutput) AttributeStatements added in v3.9.0

func (o SamlOutput) AttributeStatements() SamlAttributeStatementArrayOutput

List of SAML Attribute statements.

func (SamlOutput) Audience added in v3.9.0

func (o SamlOutput) Audience() pulumi.StringPtrOutput

Audience Restriction

func (SamlOutput) AuthenticationPolicy added in v3.14.0

func (o SamlOutput) AuthenticationPolicy() pulumi.StringPtrOutput

The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.

func (SamlOutput) AuthnContextClassRef added in v3.9.0

func (o SamlOutput) AuthnContextClassRef() pulumi.StringPtrOutput

Identifies the SAML authentication context class for the assertion’s authentication statement

func (SamlOutput) AutoSubmitToolbar added in v3.9.0

func (o SamlOutput) AutoSubmitToolbar() pulumi.BoolPtrOutput

Display auto submit toolbar. Default is: `false`

func (SamlOutput) Certificate added in v3.9.0

func (o SamlOutput) Certificate() pulumi.StringOutput

The raw signing certificate.

func (SamlOutput) DefaultRelayState added in v3.9.0

func (o SamlOutput) DefaultRelayState() pulumi.StringPtrOutput

Identifies a specific application resource in an IDP initiated SSO scenario.

func (SamlOutput) Destination added in v3.9.0

func (o SamlOutput) Destination() pulumi.StringPtrOutput

Identifies the location where the SAML response is intended to be sent inside of the SAML assertion

func (SamlOutput) DigestAlgorithm added in v3.9.0

func (o SamlOutput) DigestAlgorithm() pulumi.StringPtrOutput

Determines the digest algorithm used to digitally sign the SAML assertion and response

func (SamlOutput) ElementType

func (SamlOutput) ElementType() reflect.Type

func (SamlOutput) EmbedUrl added in v3.14.0

func (o SamlOutput) EmbedUrl() pulumi.StringOutput

Url that can be used to embed this application into another portal.

func (SamlOutput) EnduserNote added in v3.9.0

func (o SamlOutput) EnduserNote() pulumi.StringPtrOutput

Application notes for end users.

func (SamlOutput) EntityKey added in v3.9.0

func (o SamlOutput) EntityKey() pulumi.StringOutput

Entity ID, the ID portion of the `entityUrl`.

func (SamlOutput) EntityUrl added in v3.9.0

func (o SamlOutput) EntityUrl() pulumi.StringOutput

Entity URL for instance [http://www.okta.com/exk1fcia6d6EMsf331d8](http://www.okta.com/exk1fcia6d6EMsf331d8).

func (SamlOutput) Features added in v3.9.0

func (o SamlOutput) Features() pulumi.StringArrayOutput

features enabled. Notice: you can't currently configure provisioning features via the API.

func (SamlOutput) Groups deprecated added in v3.9.0

func (o SamlOutput) Groups() pulumi.StringArrayOutput

Groups associated with the application.

Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.

func (SamlOutput) HideIos added in v3.9.0

func (o SamlOutput) HideIos() pulumi.BoolPtrOutput

Do not display application icon on mobile app. Default is: `false`

func (SamlOutput) HideWeb added in v3.9.0

func (o SamlOutput) HideWeb() pulumi.BoolPtrOutput

Do not display application icon to users. Default is: `false`

func (SamlOutput) HonorForceAuthn added in v3.9.0

func (o SamlOutput) HonorForceAuthn() pulumi.BoolPtrOutput

Prompt user to re-authenticate if SP asks for it. Default is: `false`

func (SamlOutput) HttpPostBinding added in v3.9.0

func (o SamlOutput) HttpPostBinding() pulumi.StringOutput

`urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Post` location from the SAML metadata.

func (SamlOutput) HttpRedirectBinding added in v3.9.0

func (o SamlOutput) HttpRedirectBinding() pulumi.StringOutput

`urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect` location from the SAML metadata.

func (SamlOutput) IdpIssuer added in v3.9.0

func (o SamlOutput) IdpIssuer() pulumi.StringPtrOutput

SAML issuer ID.

func (SamlOutput) ImplicitAssignment added in v3.9.0

func (o SamlOutput) ImplicitAssignment() pulumi.BoolPtrOutput

_Early Access Property_. Enables [Federation Broker Mode](https://help.okta.com/en/prod/Content/Topics/Apps/apps-fbm-enable.htm). When this mode is enabled, `users` and `groups` arguments are ignored.

func (SamlOutput) InlineHookId added in v3.9.0

func (o SamlOutput) InlineHookId() pulumi.StringPtrOutput

Saml Inline Hook associated with the application.

func (SamlOutput) KeyId added in v3.9.0

func (o SamlOutput) KeyId() pulumi.StringOutput

Certificate key ID.

func (SamlOutput) KeyName added in v3.9.0

func (o SamlOutput) KeyName() pulumi.StringPtrOutput

Certificate name. This modulates the rotation of keys. New name == new key. Required to be set with `keyYearsValid`.

func (SamlOutput) KeyYearsValid added in v3.9.0

func (o SamlOutput) KeyYearsValid() pulumi.IntPtrOutput

Number of years the certificate is valid (2 - 10 years).

func (SamlOutput) Keys added in v3.14.0

func (o SamlOutput) Keys() SamlKeyArrayOutput

An array of all key credentials for the application. Format of each entry is as follows:

func (SamlOutput) Label added in v3.9.0

func (o SamlOutput) Label() pulumi.StringOutput

label of application.

Local file path to the logo. The file must be in PNG, JPG, or GIF format, and less than 1 MB in size.

func (SamlOutput) LogoUrl added in v3.9.0

func (o SamlOutput) LogoUrl() pulumi.StringOutput

Direct link of application logo.

func (SamlOutput) Metadata added in v3.9.0

func (o SamlOutput) Metadata() pulumi.StringOutput

The raw SAML metadata in XML.

func (SamlOutput) MetadataUrl added in v3.9.0

func (o SamlOutput) MetadataUrl() pulumi.StringOutput

SAML xml metadata URL.

func (SamlOutput) Name added in v3.9.0

func (o SamlOutput) Name() pulumi.StringOutput

The name of the attribute statement.

func (SamlOutput) PreconfiguredApp added in v3.9.0

func (o SamlOutput) PreconfiguredApp() pulumi.StringPtrOutput

name of application from the Okta Integration Network, if not included a custom app will be created. If not provided the following arguments are required:

func (SamlOutput) Recipient added in v3.9.0

func (o SamlOutput) Recipient() pulumi.StringPtrOutput

The location where the app may present the SAML assertion.

func (SamlOutput) RequestCompressed added in v3.9.0

func (o SamlOutput) RequestCompressed() pulumi.BoolPtrOutput

Denotes whether the request is compressed or not.

func (SamlOutput) ResponseSigned added in v3.9.0

func (o SamlOutput) ResponseSigned() pulumi.BoolPtrOutput

Determines whether the SAML auth response message is digitally signed.

func (SamlOutput) SamlSignedRequestEnabled added in v3.20.0

func (o SamlOutput) SamlSignedRequestEnabled() pulumi.BoolPtrOutput

SAML Signed Request enabled

func (SamlOutput) SamlVersion added in v3.9.0

func (o SamlOutput) SamlVersion() pulumi.StringPtrOutput

SAML version for the app's sign-on mode. Valid values are: `"2.0"` or `"1.1"`. Default is `"2.0"`.

func (SamlOutput) SignOnMode added in v3.9.0

func (o SamlOutput) SignOnMode() pulumi.StringOutput

Sign-on mode of application.

func (SamlOutput) SignatureAlgorithm added in v3.9.0

func (o SamlOutput) SignatureAlgorithm() pulumi.StringPtrOutput

Signature algorithm used ot digitally sign the assertion and response.

func (SamlOutput) SingleLogoutCertificate added in v3.9.0

func (o SamlOutput) SingleLogoutCertificate() pulumi.StringPtrOutput

x509 encoded certificate that the Service Provider uses to sign Single Logout requests. Note: should be provided without `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----`, see [official documentation](https://developer.okta.com/docs/reference/api/apps/#service-provider-certificate).

func (SamlOutput) SingleLogoutIssuer added in v3.9.0

func (o SamlOutput) SingleLogoutIssuer() pulumi.StringPtrOutput

The issuer of the Service Provider that generates the Single Logout request.

func (SamlOutput) SingleLogoutUrl added in v3.9.0

func (o SamlOutput) SingleLogoutUrl() pulumi.StringPtrOutput

The location where the logout response is sent.

func (SamlOutput) SkipGroups added in v3.9.0

func (o SamlOutput) SkipGroups() pulumi.BoolPtrOutput

Indicator that allows the app to skip `groups` sync (it can also be provided during import). Default is `false`.

func (SamlOutput) SkipUsers added in v3.9.0

func (o SamlOutput) SkipUsers() pulumi.BoolPtrOutput

Indicator that allows the app to skip `users` sync (it can also be provided during import). Default is `false`.

func (SamlOutput) SpIssuer added in v3.9.0

func (o SamlOutput) SpIssuer() pulumi.StringPtrOutput

SAML service provider issuer.

func (SamlOutput) SsoUrl added in v3.9.0

func (o SamlOutput) SsoUrl() pulumi.StringPtrOutput

Single Sign-on Url.

func (SamlOutput) Status added in v3.9.0

func (o SamlOutput) Status() pulumi.StringPtrOutput

status of application.

func (SamlOutput) SubjectNameIdFormat added in v3.9.0

func (o SamlOutput) SubjectNameIdFormat() pulumi.StringPtrOutput

Identifies the SAML processing rules.

func (SamlOutput) SubjectNameIdTemplate added in v3.9.0

func (o SamlOutput) SubjectNameIdTemplate() pulumi.StringPtrOutput

Template for app user's username when a user is assigned to the app.

func (SamlOutput) ToSamlOutput

func (o SamlOutput) ToSamlOutput() SamlOutput

func (SamlOutput) ToSamlOutputWithContext

func (o SamlOutput) ToSamlOutputWithContext(ctx context.Context) SamlOutput

func (SamlOutput) UserNameTemplate added in v3.9.0

func (o SamlOutput) UserNameTemplate() pulumi.StringPtrOutput

Username template. Default is: `"${source.login}"`

func (SamlOutput) UserNameTemplatePushStatus added in v3.9.0

func (o SamlOutput) UserNameTemplatePushStatus() pulumi.StringPtrOutput

Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.

func (SamlOutput) UserNameTemplateSuffix added in v3.9.0

func (o SamlOutput) UserNameTemplateSuffix() pulumi.StringPtrOutput

Username template suffix.

func (SamlOutput) UserNameTemplateType added in v3.9.0

func (o SamlOutput) UserNameTemplateType() pulumi.StringPtrOutput

Username template type. Default is: `"BUILT_IN"`.

func (SamlOutput) Users deprecated added in v3.9.0

func (o SamlOutput) Users() SamlUserArrayOutput

Users associated with the application.

Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.

type SamlState

type SamlState struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. Default is: `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// An array of ACS endpoints. You can configure a maximum of 100 endpoints.
	AcsEndpoints pulumi.StringArrayInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Application settings in JSON format.
	AppSettingsJson pulumi.StringPtrInput
	// Determines whether the SAML assertion is digitally signed.
	AssertionSigned pulumi.BoolPtrInput
	// List of SAML Attribute statements.
	AttributeStatements SamlAttributeStatementArrayInput
	// Audience Restriction
	Audience pulumi.StringPtrInput
	// The ID of the associated `appSignonPolicy`. If this property is removed from the application the `default` sign-on-policy will be associated with this application.
	AuthenticationPolicy pulumi.StringPtrInput
	// Identifies the SAML authentication context class for the assertion’s authentication statement
	AuthnContextClassRef pulumi.StringPtrInput
	// Display auto submit toolbar. Default is: `false`
	AutoSubmitToolbar pulumi.BoolPtrInput
	// The raw signing certificate.
	Certificate pulumi.StringPtrInput
	// Identifies a specific application resource in an IDP initiated SSO scenario.
	DefaultRelayState pulumi.StringPtrInput
	// Identifies the location where the SAML response is intended to be sent inside of the SAML assertion
	Destination pulumi.StringPtrInput
	// Determines the digest algorithm used to digitally sign the SAML assertion and response
	DigestAlgorithm pulumi.StringPtrInput
	// Url that can be used to embed this application into another portal.
	EmbedUrl pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Entity ID, the ID portion of the `entityUrl`.
	EntityKey pulumi.StringPtrInput
	// Entity URL for instance [http://www.okta.com/exk1fcia6d6EMsf331d8](http://www.okta.com/exk1fcia6d6EMsf331d8).
	EntityUrl pulumi.StringPtrInput
	// features enabled. Notice: you can't currently configure provisioning features via the API.
	Features pulumi.StringArrayInput
	// Groups associated with the application.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app. Default is: `false`
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users. Default is: `false`
	HideWeb pulumi.BoolPtrInput
	// Prompt user to re-authenticate if SP asks for it. Default is: `false`
	HonorForceAuthn pulumi.BoolPtrInput
	// `urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Post` location from the SAML metadata.
	HttpPostBinding pulumi.StringPtrInput
	// `urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect` location from the SAML metadata.
	HttpRedirectBinding pulumi.StringPtrInput
	// SAML issuer ID.
	IdpIssuer pulumi.StringPtrInput
	// _Early Access Property_. Enables [Federation Broker Mode](https://help.okta.com/en/prod/Content/Topics/Apps/apps-fbm-enable.htm). When this mode is enabled, `users` and `groups` arguments are ignored.
	ImplicitAssignment pulumi.BoolPtrInput
	// Saml Inline Hook associated with the application.
	InlineHookId pulumi.StringPtrInput
	// Certificate key ID.
	KeyId pulumi.StringPtrInput
	// Certificate name. This modulates the rotation of keys. New name == new key. Required to be set with `keyYearsValid`.
	KeyName pulumi.StringPtrInput
	// Number of years the certificate is valid (2 - 10 years).
	KeyYearsValid pulumi.IntPtrInput
	// An array of all key credentials for the application. Format of each entry is as follows:
	Keys SamlKeyArrayInput
	// label of application.
	Label pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// Direct link of application logo.
	LogoUrl pulumi.StringPtrInput
	// The raw SAML metadata in XML.
	Metadata pulumi.StringPtrInput
	// SAML xml metadata URL.
	MetadataUrl pulumi.StringPtrInput
	// The name of the attribute statement.
	Name pulumi.StringPtrInput
	// name of application from the Okta Integration Network, if not included a custom app will be created.  If not provided the following arguments are required:
	PreconfiguredApp pulumi.StringPtrInput
	// The location where the app may present the SAML assertion.
	Recipient pulumi.StringPtrInput
	// Denotes whether the request is compressed or not.
	RequestCompressed pulumi.BoolPtrInput
	// Determines whether the SAML auth response message is digitally signed.
	ResponseSigned pulumi.BoolPtrInput
	// SAML Signed Request enabled
	SamlSignedRequestEnabled pulumi.BoolPtrInput
	// SAML version for the app's sign-on mode. Valid values are: `"2.0"` or `"1.1"`. Default is `"2.0"`.
	SamlVersion pulumi.StringPtrInput
	// Sign-on mode of application.
	SignOnMode pulumi.StringPtrInput
	// Signature algorithm used ot digitally sign the assertion and response.
	SignatureAlgorithm pulumi.StringPtrInput
	// x509 encoded certificate that the Service Provider uses to sign Single Logout requests.  Note: should be provided without `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----`, see [official documentation](https://developer.okta.com/docs/reference/api/apps/#service-provider-certificate).
	SingleLogoutCertificate pulumi.StringPtrInput
	// The issuer of the Service Provider that generates the Single Logout request.
	SingleLogoutIssuer pulumi.StringPtrInput
	// The location where the logout response is sent.
	SingleLogoutUrl pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it can also be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it can also be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// SAML service provider issuer.
	SpIssuer pulumi.StringPtrInput
	// Single Sign-on Url.
	SsoUrl pulumi.StringPtrInput
	// status of application.
	Status pulumi.StringPtrInput
	// Identifies the SAML processing rules.
	SubjectNameIdFormat pulumi.StringPtrInput
	// Template for app user's username when a user is assigned to the app.
	SubjectNameIdTemplate pulumi.StringPtrInput
	// Username template. Default is: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default is: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// Users associated with the application.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SamlUserArrayInput
}

func (SamlState) ElementType

func (SamlState) ElementType() reflect.Type

type SamlUser

type SamlUser struct {
	// id of application.
	Id       *string `pulumi:"id"`
	Password *string `pulumi:"password"`
	Scope    *string `pulumi:"scope"`
	Username *string `pulumi:"username"`
}

type SamlUserArgs

type SamlUserArgs struct {
	// id of application.
	Id       pulumi.StringPtrInput `pulumi:"id"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Scope    pulumi.StringPtrInput `pulumi:"scope"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (SamlUserArgs) ElementType

func (SamlUserArgs) ElementType() reflect.Type

func (SamlUserArgs) ToSamlUserOutput

func (i SamlUserArgs) ToSamlUserOutput() SamlUserOutput

func (SamlUserArgs) ToSamlUserOutputWithContext

func (i SamlUserArgs) ToSamlUserOutputWithContext(ctx context.Context) SamlUserOutput

type SamlUserArray

type SamlUserArray []SamlUserInput

func (SamlUserArray) ElementType

func (SamlUserArray) ElementType() reflect.Type

func (SamlUserArray) ToSamlUserArrayOutput

func (i SamlUserArray) ToSamlUserArrayOutput() SamlUserArrayOutput

func (SamlUserArray) ToSamlUserArrayOutputWithContext

func (i SamlUserArray) ToSamlUserArrayOutputWithContext(ctx context.Context) SamlUserArrayOutput

type SamlUserArrayInput

type SamlUserArrayInput interface {
	pulumi.Input

	ToSamlUserArrayOutput() SamlUserArrayOutput
	ToSamlUserArrayOutputWithContext(context.Context) SamlUserArrayOutput
}

SamlUserArrayInput is an input type that accepts SamlUserArray and SamlUserArrayOutput values. You can construct a concrete instance of `SamlUserArrayInput` via:

SamlUserArray{ SamlUserArgs{...} }

type SamlUserArrayOutput

type SamlUserArrayOutput struct{ *pulumi.OutputState }

func (SamlUserArrayOutput) ElementType

func (SamlUserArrayOutput) ElementType() reflect.Type

func (SamlUserArrayOutput) Index

func (SamlUserArrayOutput) ToSamlUserArrayOutput

func (o SamlUserArrayOutput) ToSamlUserArrayOutput() SamlUserArrayOutput

func (SamlUserArrayOutput) ToSamlUserArrayOutputWithContext

func (o SamlUserArrayOutput) ToSamlUserArrayOutputWithContext(ctx context.Context) SamlUserArrayOutput

type SamlUserInput

type SamlUserInput interface {
	pulumi.Input

	ToSamlUserOutput() SamlUserOutput
	ToSamlUserOutputWithContext(context.Context) SamlUserOutput
}

SamlUserInput is an input type that accepts SamlUserArgs and SamlUserOutput values. You can construct a concrete instance of `SamlUserInput` via:

SamlUserArgs{...}

type SamlUserOutput

type SamlUserOutput struct{ *pulumi.OutputState }

func (SamlUserOutput) ElementType

func (SamlUserOutput) ElementType() reflect.Type

func (SamlUserOutput) Id

id of application.

func (SamlUserOutput) Password

func (o SamlUserOutput) Password() pulumi.StringPtrOutput

func (SamlUserOutput) Scope

func (SamlUserOutput) ToSamlUserOutput

func (o SamlUserOutput) ToSamlUserOutput() SamlUserOutput

func (SamlUserOutput) ToSamlUserOutputWithContext

func (o SamlUserOutput) ToSamlUserOutputWithContext(ctx context.Context) SamlUserOutput

func (SamlUserOutput) Username

func (o SamlUserOutput) Username() pulumi.StringPtrOutput

type SecurePasswordStore

type SecurePasswordStore struct {
	pulumi.CustomResourceState

	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrOutput `pulumi:"accessibilitySelfService"`
	// Application notes for admins.
	AdminNote pulumi.StringPtrOutput `pulumi:"adminNote"`
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrOutput `pulumi:"appLinksJson"`
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrOutput `pulumi:"autoSubmitToolbar"`
	// Application credentials scheme. Can be set to `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrOutput `pulumi:"credentialsScheme"`
	// Application notes for end users.
	EnduserNote pulumi.StringPtrOutput `pulumi:"enduserNote"`
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayOutput `pulumi:"groups"`
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrOutput `pulumi:"hideIos"`
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrOutput `pulumi:"hideWeb"`
	// The display name of the Application.
	Label pulumi.StringOutput `pulumi:"label"`
	Logo pulumi.StringPtrOutput `pulumi:"logo"`
	// URL of the application's logo
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// Name assigned to the application by Okta.
	Name pulumi.StringOutput `pulumi:"name"`
	// Name of optional param in the login form.
	OptionalField1 pulumi.StringPtrOutput `pulumi:"optionalField1"`
	// Name of optional value in the login form.
	OptionalField1Value pulumi.StringPtrOutput `pulumi:"optionalField1Value"`
	// Name of optional param in the login form.
	OptionalField2 pulumi.StringPtrOutput `pulumi:"optionalField2"`
	// Name of optional value in the login form.
	OptionalField2Value pulumi.StringPtrOutput `pulumi:"optionalField2Value"`
	// Name of optional param in the login form.
	OptionalField3 pulumi.StringPtrOutput `pulumi:"optionalField3"`
	// Name of optional value in the login form.
	OptionalField3Value pulumi.StringPtrOutput `pulumi:"optionalField3Value"`
	// Login password field.
	PasswordField pulumi.StringOutput `pulumi:"passwordField"`
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrOutput `pulumi:"revealPassword"`
	// Shared password, required for certain schemes.
	SharedPassword pulumi.StringPtrOutput `pulumi:"sharedPassword"`
	// Shared username, required for certain schemes.
	SharedUsername pulumi.StringPtrOutput `pulumi:"sharedUsername"`
	// Sign-on mode of application.
	SignOnMode pulumi.StringOutput `pulumi:"signOnMode"`
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrOutput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrOutput `pulumi:"skipUsers"`
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrOutput `pulumi:"status"`
	// Login URL.
	Url pulumi.StringOutput `pulumi:"url"`
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrOutput `pulumi:"userNameTemplate"`
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrOutput `pulumi:"userNameTemplatePushStatus"`
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrOutput `pulumi:"userNameTemplateSuffix"`
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrOutput `pulumi:"userNameTemplateType"`
	// Login username field.
	UsernameField pulumi.StringOutput `pulumi:"usernameField"`
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SecurePasswordStoreUserArrayOutput `pulumi:"users"`
}

This resource allows you to create and configure a Secure Password Store Application.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewSecurePasswordStore(ctx, "example", &app.SecurePasswordStoreArgs{
			CredentialsScheme: pulumi.String("ADMIN_SETS_CREDENTIALS"),
			Label:             pulumi.String("example"),
			PasswordField:     pulumi.String("pass"),
			Url:               pulumi.String("https://test.com"),
			UsernameField:     pulumi.String("user"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Secure Password Store Application can be imported via the Okta ID.

```sh

$ pulumi import okta:app/securePasswordStore:SecurePasswordStore example &#60;app id&#62;

```

It's also possible to import app without groups or/and users. In this case ID may look like this

```sh

$ pulumi import okta:app/securePasswordStore:SecurePasswordStore example &#60;app id&#62;/skip_users

```

```sh

$ pulumi import okta:app/securePasswordStore:SecurePasswordStore example &#60;app id&#62;/skip_users/skip_groups

```

```sh

$ pulumi import okta:app/securePasswordStore:SecurePasswordStore example &#60;app id&#62;/skip_groups

```

func GetSecurePasswordStore

func GetSecurePasswordStore(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SecurePasswordStoreState, opts ...pulumi.ResourceOption) (*SecurePasswordStore, error)

GetSecurePasswordStore gets an existing SecurePasswordStore resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSecurePasswordStore

func NewSecurePasswordStore(ctx *pulumi.Context,
	name string, args *SecurePasswordStoreArgs, opts ...pulumi.ResourceOption) (*SecurePasswordStore, error)

NewSecurePasswordStore registers a new resource with the given unique name, arguments, and options.

func (*SecurePasswordStore) ElementType

func (*SecurePasswordStore) ElementType() reflect.Type

func (*SecurePasswordStore) ToSecurePasswordStoreOutput

func (i *SecurePasswordStore) ToSecurePasswordStoreOutput() SecurePasswordStoreOutput

func (*SecurePasswordStore) ToSecurePasswordStoreOutputWithContext

func (i *SecurePasswordStore) ToSecurePasswordStoreOutputWithContext(ctx context.Context) SecurePasswordStoreOutput

type SecurePasswordStoreArgs

type SecurePasswordStoreArgs struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Application credentials scheme. Can be set to `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The display name of the Application.
	Label pulumi.StringInput
	Logo pulumi.StringPtrInput
	// Name of optional param in the login form.
	OptionalField1 pulumi.StringPtrInput
	// Name of optional value in the login form.
	OptionalField1Value pulumi.StringPtrInput
	// Name of optional param in the login form.
	OptionalField2 pulumi.StringPtrInput
	// Name of optional value in the login form.
	OptionalField2Value pulumi.StringPtrInput
	// Name of optional param in the login form.
	OptionalField3 pulumi.StringPtrInput
	// Name of optional value in the login form.
	OptionalField3Value pulumi.StringPtrInput
	// Login password field.
	PasswordField pulumi.StringInput
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrInput
	// Shared password, required for certain schemes.
	SharedPassword pulumi.StringPtrInput
	// Shared username, required for certain schemes.
	SharedUsername pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// Login URL.
	Url pulumi.StringInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// Login username field.
	UsernameField pulumi.StringInput
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SecurePasswordStoreUserArrayInput
}

The set of arguments for constructing a SecurePasswordStore resource.

func (SecurePasswordStoreArgs) ElementType

func (SecurePasswordStoreArgs) ElementType() reflect.Type

type SecurePasswordStoreArray

type SecurePasswordStoreArray []SecurePasswordStoreInput

func (SecurePasswordStoreArray) ElementType

func (SecurePasswordStoreArray) ElementType() reflect.Type

func (SecurePasswordStoreArray) ToSecurePasswordStoreArrayOutput

func (i SecurePasswordStoreArray) ToSecurePasswordStoreArrayOutput() SecurePasswordStoreArrayOutput

func (SecurePasswordStoreArray) ToSecurePasswordStoreArrayOutputWithContext

func (i SecurePasswordStoreArray) ToSecurePasswordStoreArrayOutputWithContext(ctx context.Context) SecurePasswordStoreArrayOutput

type SecurePasswordStoreArrayInput

type SecurePasswordStoreArrayInput interface {
	pulumi.Input

	ToSecurePasswordStoreArrayOutput() SecurePasswordStoreArrayOutput
	ToSecurePasswordStoreArrayOutputWithContext(context.Context) SecurePasswordStoreArrayOutput
}

SecurePasswordStoreArrayInput is an input type that accepts SecurePasswordStoreArray and SecurePasswordStoreArrayOutput values. You can construct a concrete instance of `SecurePasswordStoreArrayInput` via:

SecurePasswordStoreArray{ SecurePasswordStoreArgs{...} }

type SecurePasswordStoreArrayOutput

type SecurePasswordStoreArrayOutput struct{ *pulumi.OutputState }

func (SecurePasswordStoreArrayOutput) ElementType

func (SecurePasswordStoreArrayOutput) Index

func (SecurePasswordStoreArrayOutput) ToSecurePasswordStoreArrayOutput

func (o SecurePasswordStoreArrayOutput) ToSecurePasswordStoreArrayOutput() SecurePasswordStoreArrayOutput

func (SecurePasswordStoreArrayOutput) ToSecurePasswordStoreArrayOutputWithContext

func (o SecurePasswordStoreArrayOutput) ToSecurePasswordStoreArrayOutputWithContext(ctx context.Context) SecurePasswordStoreArrayOutput

type SecurePasswordStoreInput

type SecurePasswordStoreInput interface {
	pulumi.Input

	ToSecurePasswordStoreOutput() SecurePasswordStoreOutput
	ToSecurePasswordStoreOutputWithContext(ctx context.Context) SecurePasswordStoreOutput
}

type SecurePasswordStoreMap

type SecurePasswordStoreMap map[string]SecurePasswordStoreInput

func (SecurePasswordStoreMap) ElementType

func (SecurePasswordStoreMap) ElementType() reflect.Type

func (SecurePasswordStoreMap) ToSecurePasswordStoreMapOutput

func (i SecurePasswordStoreMap) ToSecurePasswordStoreMapOutput() SecurePasswordStoreMapOutput

func (SecurePasswordStoreMap) ToSecurePasswordStoreMapOutputWithContext

func (i SecurePasswordStoreMap) ToSecurePasswordStoreMapOutputWithContext(ctx context.Context) SecurePasswordStoreMapOutput

type SecurePasswordStoreMapInput

type SecurePasswordStoreMapInput interface {
	pulumi.Input

	ToSecurePasswordStoreMapOutput() SecurePasswordStoreMapOutput
	ToSecurePasswordStoreMapOutputWithContext(context.Context) SecurePasswordStoreMapOutput
}

SecurePasswordStoreMapInput is an input type that accepts SecurePasswordStoreMap and SecurePasswordStoreMapOutput values. You can construct a concrete instance of `SecurePasswordStoreMapInput` via:

SecurePasswordStoreMap{ "key": SecurePasswordStoreArgs{...} }

type SecurePasswordStoreMapOutput

type SecurePasswordStoreMapOutput struct{ *pulumi.OutputState }

func (SecurePasswordStoreMapOutput) ElementType

func (SecurePasswordStoreMapOutput) MapIndex

func (SecurePasswordStoreMapOutput) ToSecurePasswordStoreMapOutput

func (o SecurePasswordStoreMapOutput) ToSecurePasswordStoreMapOutput() SecurePasswordStoreMapOutput

func (SecurePasswordStoreMapOutput) ToSecurePasswordStoreMapOutputWithContext

func (o SecurePasswordStoreMapOutput) ToSecurePasswordStoreMapOutputWithContext(ctx context.Context) SecurePasswordStoreMapOutput

type SecurePasswordStoreOutput

type SecurePasswordStoreOutput struct{ *pulumi.OutputState }

func (SecurePasswordStoreOutput) AccessibilityErrorRedirectUrl added in v3.9.0

func (o SecurePasswordStoreOutput) AccessibilityErrorRedirectUrl() pulumi.StringPtrOutput

Custom error page URL.

func (SecurePasswordStoreOutput) AccessibilityLoginRedirectUrl added in v3.9.0

func (o SecurePasswordStoreOutput) AccessibilityLoginRedirectUrl() pulumi.StringPtrOutput

Custom login page for this application.

func (SecurePasswordStoreOutput) AccessibilitySelfService added in v3.9.0

func (o SecurePasswordStoreOutput) AccessibilitySelfService() pulumi.BoolPtrOutput

Enable self-service. By default, it is `false`.

func (SecurePasswordStoreOutput) AdminNote added in v3.9.0

Application notes for admins.

func (SecurePasswordStoreOutput) AppLinksJson added in v3.9.0

Displays specific appLinks for the app. The value for each application link should be boolean.

func (SecurePasswordStoreOutput) AutoSubmitToolbar added in v3.9.0

func (o SecurePasswordStoreOutput) AutoSubmitToolbar() pulumi.BoolPtrOutput

Display auto submit toolbar.

func (SecurePasswordStoreOutput) CredentialsScheme added in v3.9.0

func (o SecurePasswordStoreOutput) CredentialsScheme() pulumi.StringPtrOutput

Application credentials scheme. Can be set to `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.

func (SecurePasswordStoreOutput) ElementType

func (SecurePasswordStoreOutput) ElementType() reflect.Type

func (SecurePasswordStoreOutput) EnduserNote added in v3.9.0

Application notes for end users.

func (SecurePasswordStoreOutput) Groups deprecated added in v3.9.0

Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.

Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.

func (SecurePasswordStoreOutput) HideIos added in v3.9.0

Do not display application icon on mobile app.

func (SecurePasswordStoreOutput) HideWeb added in v3.9.0

Do not display application icon to users.

func (SecurePasswordStoreOutput) Label added in v3.9.0

The display name of the Application.

Local file path to the logo. The file must be in PNG, JPG, or GIF format, and less than 1 MB in size.

func (SecurePasswordStoreOutput) LogoUrl added in v3.9.0

URL of the application's logo

func (SecurePasswordStoreOutput) Name added in v3.9.0

Name assigned to the application by Okta.

func (SecurePasswordStoreOutput) OptionalField1 added in v3.9.0

Name of optional param in the login form.

func (SecurePasswordStoreOutput) OptionalField1Value added in v3.9.0

func (o SecurePasswordStoreOutput) OptionalField1Value() pulumi.StringPtrOutput

Name of optional value in the login form.

func (SecurePasswordStoreOutput) OptionalField2 added in v3.9.0

Name of optional param in the login form.

func (SecurePasswordStoreOutput) OptionalField2Value added in v3.9.0

func (o SecurePasswordStoreOutput) OptionalField2Value() pulumi.StringPtrOutput

Name of optional value in the login form.

func (SecurePasswordStoreOutput) OptionalField3 added in v3.9.0

Name of optional param in the login form.

func (SecurePasswordStoreOutput) OptionalField3Value added in v3.9.0

func (o SecurePasswordStoreOutput) OptionalField3Value() pulumi.StringPtrOutput

Name of optional value in the login form.

func (SecurePasswordStoreOutput) PasswordField added in v3.9.0

func (o SecurePasswordStoreOutput) PasswordField() pulumi.StringOutput

Login password field.

func (SecurePasswordStoreOutput) RevealPassword added in v3.9.0

func (o SecurePasswordStoreOutput) RevealPassword() pulumi.BoolPtrOutput

Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.

func (SecurePasswordStoreOutput) SharedPassword added in v3.9.0

Shared password, required for certain schemes.

func (SecurePasswordStoreOutput) SharedUsername added in v3.9.0

Shared username, required for certain schemes.

func (SecurePasswordStoreOutput) SignOnMode added in v3.9.0

Sign-on mode of application.

func (SecurePasswordStoreOutput) SkipGroups added in v3.9.0

Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.

func (SecurePasswordStoreOutput) SkipUsers added in v3.9.0

Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.

func (SecurePasswordStoreOutput) Status added in v3.9.0

Status of application. By default, it is `"ACTIVE"`.

func (SecurePasswordStoreOutput) ToSecurePasswordStoreOutput

func (o SecurePasswordStoreOutput) ToSecurePasswordStoreOutput() SecurePasswordStoreOutput

func (SecurePasswordStoreOutput) ToSecurePasswordStoreOutputWithContext

func (o SecurePasswordStoreOutput) ToSecurePasswordStoreOutputWithContext(ctx context.Context) SecurePasswordStoreOutput

func (SecurePasswordStoreOutput) Url added in v3.9.0

Login URL.

func (SecurePasswordStoreOutput) UserNameTemplate added in v3.9.0

func (o SecurePasswordStoreOutput) UserNameTemplate() pulumi.StringPtrOutput

Username template. Default: `"${source.login}"`

func (SecurePasswordStoreOutput) UserNameTemplatePushStatus added in v3.9.0

func (o SecurePasswordStoreOutput) UserNameTemplatePushStatus() pulumi.StringPtrOutput

Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.

func (SecurePasswordStoreOutput) UserNameTemplateSuffix added in v3.9.0

func (o SecurePasswordStoreOutput) UserNameTemplateSuffix() pulumi.StringPtrOutput

Username template suffix.

func (SecurePasswordStoreOutput) UserNameTemplateType added in v3.9.0

func (o SecurePasswordStoreOutput) UserNameTemplateType() pulumi.StringPtrOutput

Username template type. Default: `"BUILT_IN"`.

func (SecurePasswordStoreOutput) UsernameField added in v3.9.0

func (o SecurePasswordStoreOutput) UsernameField() pulumi.StringOutput

Login username field.

func (SecurePasswordStoreOutput) Users deprecated added in v3.9.0

The users assigned to the application. See `app.User` for a more flexible approach.

Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.

type SecurePasswordStoreState

type SecurePasswordStoreState struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Application credentials scheme. Can be set to `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The display name of the Application.
	Label pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// URL of the application's logo
	LogoUrl pulumi.StringPtrInput
	// Name assigned to the application by Okta.
	Name pulumi.StringPtrInput
	// Name of optional param in the login form.
	OptionalField1 pulumi.StringPtrInput
	// Name of optional value in the login form.
	OptionalField1Value pulumi.StringPtrInput
	// Name of optional param in the login form.
	OptionalField2 pulumi.StringPtrInput
	// Name of optional value in the login form.
	OptionalField2Value pulumi.StringPtrInput
	// Name of optional param in the login form.
	OptionalField3 pulumi.StringPtrInput
	// Name of optional value in the login form.
	OptionalField3Value pulumi.StringPtrInput
	// Login password field.
	PasswordField pulumi.StringPtrInput
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrInput
	// Shared password, required for certain schemes.
	SharedPassword pulumi.StringPtrInput
	// Shared username, required for certain schemes.
	SharedUsername pulumi.StringPtrInput
	// Sign-on mode of application.
	SignOnMode pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// Login URL.
	Url pulumi.StringPtrInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// Login username field.
	UsernameField pulumi.StringPtrInput
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SecurePasswordStoreUserArrayInput
}

func (SecurePasswordStoreState) ElementType

func (SecurePasswordStoreState) ElementType() reflect.Type

type SecurePasswordStoreUser

type SecurePasswordStoreUser struct {
	Id       *string `pulumi:"id"`
	Password *string `pulumi:"password"`
	Scope    *string `pulumi:"scope"`
	Username *string `pulumi:"username"`
}

type SecurePasswordStoreUserArgs

type SecurePasswordStoreUserArgs struct {
	Id       pulumi.StringPtrInput `pulumi:"id"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Scope    pulumi.StringPtrInput `pulumi:"scope"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (SecurePasswordStoreUserArgs) ElementType

func (SecurePasswordStoreUserArgs) ToSecurePasswordStoreUserOutput

func (i SecurePasswordStoreUserArgs) ToSecurePasswordStoreUserOutput() SecurePasswordStoreUserOutput

func (SecurePasswordStoreUserArgs) ToSecurePasswordStoreUserOutputWithContext

func (i SecurePasswordStoreUserArgs) ToSecurePasswordStoreUserOutputWithContext(ctx context.Context) SecurePasswordStoreUserOutput

type SecurePasswordStoreUserArray

type SecurePasswordStoreUserArray []SecurePasswordStoreUserInput

func (SecurePasswordStoreUserArray) ElementType

func (SecurePasswordStoreUserArray) ToSecurePasswordStoreUserArrayOutput

func (i SecurePasswordStoreUserArray) ToSecurePasswordStoreUserArrayOutput() SecurePasswordStoreUserArrayOutput

func (SecurePasswordStoreUserArray) ToSecurePasswordStoreUserArrayOutputWithContext

func (i SecurePasswordStoreUserArray) ToSecurePasswordStoreUserArrayOutputWithContext(ctx context.Context) SecurePasswordStoreUserArrayOutput

type SecurePasswordStoreUserArrayInput

type SecurePasswordStoreUserArrayInput interface {
	pulumi.Input

	ToSecurePasswordStoreUserArrayOutput() SecurePasswordStoreUserArrayOutput
	ToSecurePasswordStoreUserArrayOutputWithContext(context.Context) SecurePasswordStoreUserArrayOutput
}

SecurePasswordStoreUserArrayInput is an input type that accepts SecurePasswordStoreUserArray and SecurePasswordStoreUserArrayOutput values. You can construct a concrete instance of `SecurePasswordStoreUserArrayInput` via:

SecurePasswordStoreUserArray{ SecurePasswordStoreUserArgs{...} }

type SecurePasswordStoreUserArrayOutput

type SecurePasswordStoreUserArrayOutput struct{ *pulumi.OutputState }

func (SecurePasswordStoreUserArrayOutput) ElementType

func (SecurePasswordStoreUserArrayOutput) Index

func (SecurePasswordStoreUserArrayOutput) ToSecurePasswordStoreUserArrayOutput

func (o SecurePasswordStoreUserArrayOutput) ToSecurePasswordStoreUserArrayOutput() SecurePasswordStoreUserArrayOutput

func (SecurePasswordStoreUserArrayOutput) ToSecurePasswordStoreUserArrayOutputWithContext

func (o SecurePasswordStoreUserArrayOutput) ToSecurePasswordStoreUserArrayOutputWithContext(ctx context.Context) SecurePasswordStoreUserArrayOutput

type SecurePasswordStoreUserInput

type SecurePasswordStoreUserInput interface {
	pulumi.Input

	ToSecurePasswordStoreUserOutput() SecurePasswordStoreUserOutput
	ToSecurePasswordStoreUserOutputWithContext(context.Context) SecurePasswordStoreUserOutput
}

SecurePasswordStoreUserInput is an input type that accepts SecurePasswordStoreUserArgs and SecurePasswordStoreUserOutput values. You can construct a concrete instance of `SecurePasswordStoreUserInput` via:

SecurePasswordStoreUserArgs{...}

type SecurePasswordStoreUserOutput

type SecurePasswordStoreUserOutput struct{ *pulumi.OutputState }

func (SecurePasswordStoreUserOutput) ElementType

func (SecurePasswordStoreUserOutput) Id

func (SecurePasswordStoreUserOutput) Password

func (SecurePasswordStoreUserOutput) Scope

func (SecurePasswordStoreUserOutput) ToSecurePasswordStoreUserOutput

func (o SecurePasswordStoreUserOutput) ToSecurePasswordStoreUserOutput() SecurePasswordStoreUserOutput

func (SecurePasswordStoreUserOutput) ToSecurePasswordStoreUserOutputWithContext

func (o SecurePasswordStoreUserOutput) ToSecurePasswordStoreUserOutputWithContext(ctx context.Context) SecurePasswordStoreUserOutput

func (SecurePasswordStoreUserOutput) Username

type Swa

type Swa struct {
	pulumi.CustomResourceState

	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrOutput `pulumi:"accessibilitySelfService"`
	// Application notes for admins.
	AdminNote pulumi.StringPtrOutput `pulumi:"adminNote"`
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrOutput `pulumi:"appLinksJson"`
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrOutput `pulumi:"autoSubmitToolbar"`
	// Login button field.
	ButtonField pulumi.StringPtrOutput `pulumi:"buttonField"`
	// CSS selector for the checkbox.
	Checkbox pulumi.StringPtrOutput `pulumi:"checkbox"`
	// Application notes for end users.
	EnduserNote pulumi.StringPtrOutput `pulumi:"enduserNote"`
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayOutput `pulumi:"groups"`
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrOutput `pulumi:"hideIos"`
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrOutput `pulumi:"hideWeb"`
	// The display name of the Application.
	Label pulumi.StringOutput `pulumi:"label"`
	Logo pulumi.StringPtrOutput `pulumi:"logo"`
	// Direct link of application logo.
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// Name assigned to the application by Okta.
	Name pulumi.StringOutput `pulumi:"name"`
	// Login password field.
	PasswordField pulumi.StringPtrOutput `pulumi:"passwordField"`
	// name of application from the Okta Integration Network, if not included a custom app will be created.
	PreconfiguredApp pulumi.StringPtrOutput `pulumi:"preconfiguredApp"`
	// Redirect URL. If going to the login page URL redirects to another page, then enter that URL here.
	RedirectUrl pulumi.StringPtrOutput `pulumi:"redirectUrl"`
	// Sign-on mode of application.
	SignOnMode pulumi.StringOutput `pulumi:"signOnMode"`
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrOutput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrOutput `pulumi:"skipUsers"`
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrOutput `pulumi:"status"`
	// The URL of the sign-in page for this app.
	Url pulumi.StringPtrOutput `pulumi:"url"`
	// A regular expression that further restricts url to the specified regular expression.
	UrlRegex pulumi.StringPtrOutput `pulumi:"urlRegex"`
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrOutput `pulumi:"userNameTemplate"`
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrOutput `pulumi:"userNameTemplatePushStatus"`
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrOutput `pulumi:"userNameTemplateSuffix"`
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrOutput `pulumi:"userNameTemplateType"`
	// Login username field.
	UsernameField pulumi.StringPtrOutput `pulumi:"usernameField"`
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SwaUserArrayOutput `pulumi:"users"`
}

This resource allows you to create and configure a SWA Application.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewSwa(ctx, "example", &app.SwaArgs{
			ButtonField:   pulumi.String("btn-login"),
			Label:         pulumi.String("example"),
			PasswordField: pulumi.String("txtbox-password"),
			Url:           pulumi.String("https://example.com/login.html"),
			UsernameField: pulumi.String("txtbox-username"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Okta SWA App can be imported via the Okta ID.

```sh

$ pulumi import okta:app/swa:Swa example &#60;app id&#62;

```

It's also possible to import app without groups or/and users. In this case ID may look like this

```sh

$ pulumi import okta:app/swa:Swa example &#60;app id&#62;/skip_users

```

```sh

$ pulumi import okta:app/swa:Swa example &#60;app id&#62;/skip_users/skip_groups

```

```sh

$ pulumi import okta:app/swa:Swa example &#60;app id&#62;/skip_groups

```

func GetSwa

func GetSwa(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SwaState, opts ...pulumi.ResourceOption) (*Swa, error)

GetSwa gets an existing Swa resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSwa

func NewSwa(ctx *pulumi.Context,
	name string, args *SwaArgs, opts ...pulumi.ResourceOption) (*Swa, error)

NewSwa registers a new resource with the given unique name, arguments, and options.

func (*Swa) ElementType

func (*Swa) ElementType() reflect.Type

func (*Swa) ToSwaOutput

func (i *Swa) ToSwaOutput() SwaOutput

func (*Swa) ToSwaOutputWithContext

func (i *Swa) ToSwaOutputWithContext(ctx context.Context) SwaOutput

type SwaArgs

type SwaArgs struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Login button field.
	ButtonField pulumi.StringPtrInput
	// CSS selector for the checkbox.
	Checkbox pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The display name of the Application.
	Label pulumi.StringInput
	Logo pulumi.StringPtrInput
	// Login password field.
	PasswordField pulumi.StringPtrInput
	// name of application from the Okta Integration Network, if not included a custom app will be created.
	PreconfiguredApp pulumi.StringPtrInput
	// Redirect URL. If going to the login page URL redirects to another page, then enter that URL here.
	RedirectUrl pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// The URL of the sign-in page for this app.
	Url pulumi.StringPtrInput
	// A regular expression that further restricts url to the specified regular expression.
	UrlRegex pulumi.StringPtrInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// Login username field.
	UsernameField pulumi.StringPtrInput
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SwaUserArrayInput
}

The set of arguments for constructing a Swa resource.

func (SwaArgs) ElementType

func (SwaArgs) ElementType() reflect.Type

type SwaArray

type SwaArray []SwaInput

func (SwaArray) ElementType

func (SwaArray) ElementType() reflect.Type

func (SwaArray) ToSwaArrayOutput

func (i SwaArray) ToSwaArrayOutput() SwaArrayOutput

func (SwaArray) ToSwaArrayOutputWithContext

func (i SwaArray) ToSwaArrayOutputWithContext(ctx context.Context) SwaArrayOutput

type SwaArrayInput

type SwaArrayInput interface {
	pulumi.Input

	ToSwaArrayOutput() SwaArrayOutput
	ToSwaArrayOutputWithContext(context.Context) SwaArrayOutput
}

SwaArrayInput is an input type that accepts SwaArray and SwaArrayOutput values. You can construct a concrete instance of `SwaArrayInput` via:

SwaArray{ SwaArgs{...} }

type SwaArrayOutput

type SwaArrayOutput struct{ *pulumi.OutputState }

func (SwaArrayOutput) ElementType

func (SwaArrayOutput) ElementType() reflect.Type

func (SwaArrayOutput) Index

func (SwaArrayOutput) ToSwaArrayOutput

func (o SwaArrayOutput) ToSwaArrayOutput() SwaArrayOutput

func (SwaArrayOutput) ToSwaArrayOutputWithContext

func (o SwaArrayOutput) ToSwaArrayOutputWithContext(ctx context.Context) SwaArrayOutput

type SwaInput

type SwaInput interface {
	pulumi.Input

	ToSwaOutput() SwaOutput
	ToSwaOutputWithContext(ctx context.Context) SwaOutput
}

type SwaMap

type SwaMap map[string]SwaInput

func (SwaMap) ElementType

func (SwaMap) ElementType() reflect.Type

func (SwaMap) ToSwaMapOutput

func (i SwaMap) ToSwaMapOutput() SwaMapOutput

func (SwaMap) ToSwaMapOutputWithContext

func (i SwaMap) ToSwaMapOutputWithContext(ctx context.Context) SwaMapOutput

type SwaMapInput

type SwaMapInput interface {
	pulumi.Input

	ToSwaMapOutput() SwaMapOutput
	ToSwaMapOutputWithContext(context.Context) SwaMapOutput
}

SwaMapInput is an input type that accepts SwaMap and SwaMapOutput values. You can construct a concrete instance of `SwaMapInput` via:

SwaMap{ "key": SwaArgs{...} }

type SwaMapOutput

type SwaMapOutput struct{ *pulumi.OutputState }

func (SwaMapOutput) ElementType

func (SwaMapOutput) ElementType() reflect.Type

func (SwaMapOutput) MapIndex

func (o SwaMapOutput) MapIndex(k pulumi.StringInput) SwaOutput

func (SwaMapOutput) ToSwaMapOutput

func (o SwaMapOutput) ToSwaMapOutput() SwaMapOutput

func (SwaMapOutput) ToSwaMapOutputWithContext

func (o SwaMapOutput) ToSwaMapOutputWithContext(ctx context.Context) SwaMapOutput

type SwaOutput

type SwaOutput struct{ *pulumi.OutputState }

func (SwaOutput) AccessibilityErrorRedirectUrl added in v3.9.0

func (o SwaOutput) AccessibilityErrorRedirectUrl() pulumi.StringPtrOutput

Custom error page URL.

func (SwaOutput) AccessibilityLoginRedirectUrl added in v3.9.0

func (o SwaOutput) AccessibilityLoginRedirectUrl() pulumi.StringPtrOutput

Custom login page for this application.

func (SwaOutput) AccessibilitySelfService added in v3.9.0

func (o SwaOutput) AccessibilitySelfService() pulumi.BoolPtrOutput

Enable self-service. By default, it is `false`.

func (SwaOutput) AdminNote added in v3.9.0

func (o SwaOutput) AdminNote() pulumi.StringPtrOutput

Application notes for admins.

func (SwaOutput) AppLinksJson added in v3.9.0

func (o SwaOutput) AppLinksJson() pulumi.StringPtrOutput

Displays specific appLinks for the app. The value for each application link should be boolean.

func (SwaOutput) AutoSubmitToolbar added in v3.9.0

func (o SwaOutput) AutoSubmitToolbar() pulumi.BoolPtrOutput

Display auto submit toolbar.

func (SwaOutput) ButtonField added in v3.9.0

func (o SwaOutput) ButtonField() pulumi.StringPtrOutput

Login button field.

func (SwaOutput) Checkbox added in v3.9.0

func (o SwaOutput) Checkbox() pulumi.StringPtrOutput

CSS selector for the checkbox.

func (SwaOutput) ElementType

func (SwaOutput) ElementType() reflect.Type

func (SwaOutput) EnduserNote added in v3.9.0

func (o SwaOutput) EnduserNote() pulumi.StringPtrOutput

Application notes for end users.

func (SwaOutput) Groups deprecated added in v3.9.0

func (o SwaOutput) Groups() pulumi.StringArrayOutput

Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.

Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.

func (SwaOutput) HideIos added in v3.9.0

func (o SwaOutput) HideIos() pulumi.BoolPtrOutput

Do not display application icon on mobile app.

func (SwaOutput) HideWeb added in v3.9.0

func (o SwaOutput) HideWeb() pulumi.BoolPtrOutput

Do not display application icon to users.

func (SwaOutput) Label added in v3.9.0

func (o SwaOutput) Label() pulumi.StringOutput

The display name of the Application.

func (o SwaOutput) Logo() pulumi.StringPtrOutput

Local file path to the logo. The file must be in PNG, JPG, or GIF format, and less than 1 MB in size.

func (SwaOutput) LogoUrl added in v3.9.0

func (o SwaOutput) LogoUrl() pulumi.StringOutput

Direct link of application logo.

func (SwaOutput) Name added in v3.9.0

func (o SwaOutput) Name() pulumi.StringOutput

Name assigned to the application by Okta.

func (SwaOutput) PasswordField added in v3.9.0

func (o SwaOutput) PasswordField() pulumi.StringPtrOutput

Login password field.

func (SwaOutput) PreconfiguredApp added in v3.9.0

func (o SwaOutput) PreconfiguredApp() pulumi.StringPtrOutput

name of application from the Okta Integration Network, if not included a custom app will be created.

func (SwaOutput) RedirectUrl added in v3.9.0

func (o SwaOutput) RedirectUrl() pulumi.StringPtrOutput

Redirect URL. If going to the login page URL redirects to another page, then enter that URL here.

func (SwaOutput) SignOnMode added in v3.9.0

func (o SwaOutput) SignOnMode() pulumi.StringOutput

Sign-on mode of application.

func (SwaOutput) SkipGroups added in v3.9.0

func (o SwaOutput) SkipGroups() pulumi.BoolPtrOutput

Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.

func (SwaOutput) SkipUsers added in v3.9.0

func (o SwaOutput) SkipUsers() pulumi.BoolPtrOutput

Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.

func (SwaOutput) Status added in v3.9.0

func (o SwaOutput) Status() pulumi.StringPtrOutput

Status of application. By default, it is `"ACTIVE"`.

func (SwaOutput) ToSwaOutput

func (o SwaOutput) ToSwaOutput() SwaOutput

func (SwaOutput) ToSwaOutputWithContext

func (o SwaOutput) ToSwaOutputWithContext(ctx context.Context) SwaOutput

func (SwaOutput) Url added in v3.9.0

The URL of the sign-in page for this app.

func (SwaOutput) UrlRegex added in v3.9.0

func (o SwaOutput) UrlRegex() pulumi.StringPtrOutput

A regular expression that further restricts url to the specified regular expression.

func (SwaOutput) UserNameTemplate added in v3.9.0

func (o SwaOutput) UserNameTemplate() pulumi.StringPtrOutput

Username template. Default: `"${source.login}"`

func (SwaOutput) UserNameTemplatePushStatus added in v3.9.0

func (o SwaOutput) UserNameTemplatePushStatus() pulumi.StringPtrOutput

Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.

func (SwaOutput) UserNameTemplateSuffix added in v3.9.0

func (o SwaOutput) UserNameTemplateSuffix() pulumi.StringPtrOutput

Username template suffix.

func (SwaOutput) UserNameTemplateType added in v3.9.0

func (o SwaOutput) UserNameTemplateType() pulumi.StringPtrOutput

Username template type. Default: `"BUILT_IN"`.

func (SwaOutput) UsernameField added in v3.9.0

func (o SwaOutput) UsernameField() pulumi.StringPtrOutput

Login username field.

func (SwaOutput) Users deprecated added in v3.9.0

func (o SwaOutput) Users() SwaUserArrayOutput

The users assigned to the application. See `app.User` for a more flexible approach.

Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.

type SwaState

type SwaState struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app. The value for each application link should be boolean.
	AppLinksJson pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Login button field.
	ButtonField pulumi.StringPtrInput
	// CSS selector for the checkbox.
	Checkbox pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The display name of the Application.
	Label pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// Direct link of application logo.
	LogoUrl pulumi.StringPtrInput
	// Name assigned to the application by Okta.
	Name pulumi.StringPtrInput
	// Login password field.
	PasswordField pulumi.StringPtrInput
	// name of application from the Okta Integration Network, if not included a custom app will be created.
	PreconfiguredApp pulumi.StringPtrInput
	// Redirect URL. If going to the login page URL redirects to another page, then enter that URL here.
	RedirectUrl pulumi.StringPtrInput
	// Sign-on mode of application.
	SignOnMode pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// The URL of the sign-in page for this app.
	Url pulumi.StringPtrInput
	// A regular expression that further restricts url to the specified regular expression.
	UrlRegex pulumi.StringPtrInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// Login username field.
	UsernameField pulumi.StringPtrInput
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users SwaUserArrayInput
}

func (SwaState) ElementType

func (SwaState) ElementType() reflect.Type

type SwaUser

type SwaUser struct {
	Id       *string `pulumi:"id"`
	Password *string `pulumi:"password"`
	Scope    *string `pulumi:"scope"`
	Username *string `pulumi:"username"`
}

type SwaUserArgs

type SwaUserArgs struct {
	Id       pulumi.StringPtrInput `pulumi:"id"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Scope    pulumi.StringPtrInput `pulumi:"scope"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (SwaUserArgs) ElementType

func (SwaUserArgs) ElementType() reflect.Type

func (SwaUserArgs) ToSwaUserOutput

func (i SwaUserArgs) ToSwaUserOutput() SwaUserOutput

func (SwaUserArgs) ToSwaUserOutputWithContext

func (i SwaUserArgs) ToSwaUserOutputWithContext(ctx context.Context) SwaUserOutput

type SwaUserArray

type SwaUserArray []SwaUserInput

func (SwaUserArray) ElementType

func (SwaUserArray) ElementType() reflect.Type

func (SwaUserArray) ToSwaUserArrayOutput

func (i SwaUserArray) ToSwaUserArrayOutput() SwaUserArrayOutput

func (SwaUserArray) ToSwaUserArrayOutputWithContext

func (i SwaUserArray) ToSwaUserArrayOutputWithContext(ctx context.Context) SwaUserArrayOutput

type SwaUserArrayInput

type SwaUserArrayInput interface {
	pulumi.Input

	ToSwaUserArrayOutput() SwaUserArrayOutput
	ToSwaUserArrayOutputWithContext(context.Context) SwaUserArrayOutput
}

SwaUserArrayInput is an input type that accepts SwaUserArray and SwaUserArrayOutput values. You can construct a concrete instance of `SwaUserArrayInput` via:

SwaUserArray{ SwaUserArgs{...} }

type SwaUserArrayOutput

type SwaUserArrayOutput struct{ *pulumi.OutputState }

func (SwaUserArrayOutput) ElementType

func (SwaUserArrayOutput) ElementType() reflect.Type

func (SwaUserArrayOutput) Index

func (SwaUserArrayOutput) ToSwaUserArrayOutput

func (o SwaUserArrayOutput) ToSwaUserArrayOutput() SwaUserArrayOutput

func (SwaUserArrayOutput) ToSwaUserArrayOutputWithContext

func (o SwaUserArrayOutput) ToSwaUserArrayOutputWithContext(ctx context.Context) SwaUserArrayOutput

type SwaUserInput

type SwaUserInput interface {
	pulumi.Input

	ToSwaUserOutput() SwaUserOutput
	ToSwaUserOutputWithContext(context.Context) SwaUserOutput
}

SwaUserInput is an input type that accepts SwaUserArgs and SwaUserOutput values. You can construct a concrete instance of `SwaUserInput` via:

SwaUserArgs{...}

type SwaUserOutput

type SwaUserOutput struct{ *pulumi.OutputState }

func (SwaUserOutput) ElementType

func (SwaUserOutput) ElementType() reflect.Type

func (SwaUserOutput) Id

func (SwaUserOutput) Password

func (o SwaUserOutput) Password() pulumi.StringPtrOutput

func (SwaUserOutput) Scope

func (SwaUserOutput) ToSwaUserOutput

func (o SwaUserOutput) ToSwaUserOutput() SwaUserOutput

func (SwaUserOutput) ToSwaUserOutputWithContext

func (o SwaUserOutput) ToSwaUserOutputWithContext(ctx context.Context) SwaUserOutput

func (SwaUserOutput) Username

func (o SwaUserOutput) Username() pulumi.StringPtrOutput

type ThreeField

type ThreeField struct {
	pulumi.CustomResourceState

	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityErrorRedirectUrl"`
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrOutput `pulumi:"accessibilityLoginRedirectUrl"`
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrOutput `pulumi:"accessibilitySelfService"`
	// Application notes for admins.
	AdminNote pulumi.StringPtrOutput `pulumi:"adminNote"`
	// Displays specific appLinks for the app
	AppLinksJson pulumi.StringPtrOutput `pulumi:"appLinksJson"`
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrOutput `pulumi:"autoSubmitToolbar"`
	// Login button field CSS selector.
	ButtonSelector pulumi.StringOutput `pulumi:"buttonSelector"`
	// Application credentials scheme. Can be set to `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrOutput `pulumi:"credentialsScheme"`
	// Application notes for end users.
	EnduserNote pulumi.StringPtrOutput `pulumi:"enduserNote"`
	// Extra field CSS selector.
	ExtraFieldSelector pulumi.StringOutput `pulumi:"extraFieldSelector"`
	// Value for extra form field.
	ExtraFieldValue pulumi.StringOutput `pulumi:"extraFieldValue"`
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayOutput `pulumi:"groups"`
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrOutput `pulumi:"hideIos"`
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrOutput `pulumi:"hideWeb"`
	// The display name of the Application.
	Label pulumi.StringOutput `pulumi:"label"`
	Logo pulumi.StringPtrOutput `pulumi:"logo"`
	// Direct link of application logo.
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// Name assigned to the application by Okta.
	Name pulumi.StringOutput `pulumi:"name"`
	// Login password field CSS selector.
	PasswordSelector pulumi.StringOutput `pulumi:"passwordSelector"`
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrOutput `pulumi:"revealPassword"`
	// Shared password, required for certain schemes.
	SharedPassword pulumi.StringPtrOutput `pulumi:"sharedPassword"`
	// Shared username, required for certain schemes.
	SharedUsername pulumi.StringPtrOutput `pulumi:"sharedUsername"`
	// Sign-on mode of application.
	SignOnMode pulumi.StringOutput `pulumi:"signOnMode"`
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrOutput `pulumi:"skipGroups"`
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrOutput `pulumi:"skipUsers"`
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrOutput `pulumi:"status"`
	// Login URL.
	Url pulumi.StringOutput `pulumi:"url"`
	// A regex that further restricts URL to the specified regex.
	UrlRegex pulumi.StringPtrOutput `pulumi:"urlRegex"`
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrOutput `pulumi:"userNameTemplate"`
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrOutput `pulumi:"userNameTemplatePushStatus"`
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrOutput `pulumi:"userNameTemplateSuffix"`
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrOutput `pulumi:"userNameTemplateType"`
	// Login username field CSS selector.
	UsernameSelector pulumi.StringOutput `pulumi:"usernameSelector"`
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users ThreeFieldUserArrayOutput `pulumi:"users"`
}

This resource allows you to create and configure a Three Field Application.

## Import

A Three Field App can be imported via the Okta ID.

```sh

$ pulumi import okta:app/threeField:ThreeField example &#60;app id&#62;

```

It's also possible to import app without groups or/and users. In this case ID may look like this

```sh

$ pulumi import okta:app/threeField:ThreeField example &#60;app id&#62;/skip_users

```

```sh

$ pulumi import okta:app/threeField:ThreeField example &#60;app id&#62;/skip_users/skip_groups

```

```sh

$ pulumi import okta:app/threeField:ThreeField example &#60;app id&#62;/skip_groups

```

func GetThreeField

func GetThreeField(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ThreeFieldState, opts ...pulumi.ResourceOption) (*ThreeField, error)

GetThreeField gets an existing ThreeField resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewThreeField

func NewThreeField(ctx *pulumi.Context,
	name string, args *ThreeFieldArgs, opts ...pulumi.ResourceOption) (*ThreeField, error)

NewThreeField registers a new resource with the given unique name, arguments, and options.

func (*ThreeField) ElementType

func (*ThreeField) ElementType() reflect.Type

func (*ThreeField) ToThreeFieldOutput

func (i *ThreeField) ToThreeFieldOutput() ThreeFieldOutput

func (*ThreeField) ToThreeFieldOutputWithContext

func (i *ThreeField) ToThreeFieldOutputWithContext(ctx context.Context) ThreeFieldOutput

type ThreeFieldArgs

type ThreeFieldArgs struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app
	AppLinksJson pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Login button field CSS selector.
	ButtonSelector pulumi.StringInput
	// Application credentials scheme. Can be set to `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Extra field CSS selector.
	ExtraFieldSelector pulumi.StringInput
	// Value for extra form field.
	ExtraFieldValue pulumi.StringInput
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The display name of the Application.
	Label pulumi.StringInput
	Logo pulumi.StringPtrInput
	// Login password field CSS selector.
	PasswordSelector pulumi.StringInput
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrInput
	// Shared password, required for certain schemes.
	SharedPassword pulumi.StringPtrInput
	// Shared username, required for certain schemes.
	SharedUsername pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// Login URL.
	Url pulumi.StringInput
	// A regex that further restricts URL to the specified regex.
	UrlRegex pulumi.StringPtrInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// Login username field CSS selector.
	UsernameSelector pulumi.StringInput
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users ThreeFieldUserArrayInput
}

The set of arguments for constructing a ThreeField resource.

func (ThreeFieldArgs) ElementType

func (ThreeFieldArgs) ElementType() reflect.Type

type ThreeFieldArray

type ThreeFieldArray []ThreeFieldInput

func (ThreeFieldArray) ElementType

func (ThreeFieldArray) ElementType() reflect.Type

func (ThreeFieldArray) ToThreeFieldArrayOutput

func (i ThreeFieldArray) ToThreeFieldArrayOutput() ThreeFieldArrayOutput

func (ThreeFieldArray) ToThreeFieldArrayOutputWithContext

func (i ThreeFieldArray) ToThreeFieldArrayOutputWithContext(ctx context.Context) ThreeFieldArrayOutput

type ThreeFieldArrayInput

type ThreeFieldArrayInput interface {
	pulumi.Input

	ToThreeFieldArrayOutput() ThreeFieldArrayOutput
	ToThreeFieldArrayOutputWithContext(context.Context) ThreeFieldArrayOutput
}

ThreeFieldArrayInput is an input type that accepts ThreeFieldArray and ThreeFieldArrayOutput values. You can construct a concrete instance of `ThreeFieldArrayInput` via:

ThreeFieldArray{ ThreeFieldArgs{...} }

type ThreeFieldArrayOutput

type ThreeFieldArrayOutput struct{ *pulumi.OutputState }

func (ThreeFieldArrayOutput) ElementType

func (ThreeFieldArrayOutput) ElementType() reflect.Type

func (ThreeFieldArrayOutput) Index

func (ThreeFieldArrayOutput) ToThreeFieldArrayOutput

func (o ThreeFieldArrayOutput) ToThreeFieldArrayOutput() ThreeFieldArrayOutput

func (ThreeFieldArrayOutput) ToThreeFieldArrayOutputWithContext

func (o ThreeFieldArrayOutput) ToThreeFieldArrayOutputWithContext(ctx context.Context) ThreeFieldArrayOutput

type ThreeFieldInput

type ThreeFieldInput interface {
	pulumi.Input

	ToThreeFieldOutput() ThreeFieldOutput
	ToThreeFieldOutputWithContext(ctx context.Context) ThreeFieldOutput
}

type ThreeFieldMap

type ThreeFieldMap map[string]ThreeFieldInput

func (ThreeFieldMap) ElementType

func (ThreeFieldMap) ElementType() reflect.Type

func (ThreeFieldMap) ToThreeFieldMapOutput

func (i ThreeFieldMap) ToThreeFieldMapOutput() ThreeFieldMapOutput

func (ThreeFieldMap) ToThreeFieldMapOutputWithContext

func (i ThreeFieldMap) ToThreeFieldMapOutputWithContext(ctx context.Context) ThreeFieldMapOutput

type ThreeFieldMapInput

type ThreeFieldMapInput interface {
	pulumi.Input

	ToThreeFieldMapOutput() ThreeFieldMapOutput
	ToThreeFieldMapOutputWithContext(context.Context) ThreeFieldMapOutput
}

ThreeFieldMapInput is an input type that accepts ThreeFieldMap and ThreeFieldMapOutput values. You can construct a concrete instance of `ThreeFieldMapInput` via:

ThreeFieldMap{ "key": ThreeFieldArgs{...} }

type ThreeFieldMapOutput

type ThreeFieldMapOutput struct{ *pulumi.OutputState }

func (ThreeFieldMapOutput) ElementType

func (ThreeFieldMapOutput) ElementType() reflect.Type

func (ThreeFieldMapOutput) MapIndex

func (ThreeFieldMapOutput) ToThreeFieldMapOutput

func (o ThreeFieldMapOutput) ToThreeFieldMapOutput() ThreeFieldMapOutput

func (ThreeFieldMapOutput) ToThreeFieldMapOutputWithContext

func (o ThreeFieldMapOutput) ToThreeFieldMapOutputWithContext(ctx context.Context) ThreeFieldMapOutput

type ThreeFieldOutput

type ThreeFieldOutput struct{ *pulumi.OutputState }

func (ThreeFieldOutput) AccessibilityErrorRedirectUrl added in v3.9.0

func (o ThreeFieldOutput) AccessibilityErrorRedirectUrl() pulumi.StringPtrOutput

Custom error page URL.

func (ThreeFieldOutput) AccessibilityLoginRedirectUrl added in v3.9.0

func (o ThreeFieldOutput) AccessibilityLoginRedirectUrl() pulumi.StringPtrOutput

Custom login page for this application.

func (ThreeFieldOutput) AccessibilitySelfService added in v3.9.0

func (o ThreeFieldOutput) AccessibilitySelfService() pulumi.BoolPtrOutput

Enable self-service. By default, it is `false`.

func (ThreeFieldOutput) AdminNote added in v3.9.0

func (o ThreeFieldOutput) AdminNote() pulumi.StringPtrOutput

Application notes for admins.

func (ThreeFieldOutput) AppLinksJson added in v3.9.0

func (o ThreeFieldOutput) AppLinksJson() pulumi.StringPtrOutput

Displays specific appLinks for the app

func (ThreeFieldOutput) AutoSubmitToolbar added in v3.9.0

func (o ThreeFieldOutput) AutoSubmitToolbar() pulumi.BoolPtrOutput

Display auto submit toolbar.

func (ThreeFieldOutput) ButtonSelector added in v3.9.0

func (o ThreeFieldOutput) ButtonSelector() pulumi.StringOutput

Login button field CSS selector.

func (ThreeFieldOutput) CredentialsScheme added in v3.9.0

func (o ThreeFieldOutput) CredentialsScheme() pulumi.StringPtrOutput

Application credentials scheme. Can be set to `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.

func (ThreeFieldOutput) ElementType

func (ThreeFieldOutput) ElementType() reflect.Type

func (ThreeFieldOutput) EnduserNote added in v3.9.0

func (o ThreeFieldOutput) EnduserNote() pulumi.StringPtrOutput

Application notes for end users.

func (ThreeFieldOutput) ExtraFieldSelector added in v3.9.0

func (o ThreeFieldOutput) ExtraFieldSelector() pulumi.StringOutput

Extra field CSS selector.

func (ThreeFieldOutput) ExtraFieldValue added in v3.9.0

func (o ThreeFieldOutput) ExtraFieldValue() pulumi.StringOutput

Value for extra form field.

func (ThreeFieldOutput) Groups deprecated added in v3.9.0

Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.

Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.

func (ThreeFieldOutput) HideIos added in v3.9.0

Do not display application icon on mobile app.

func (ThreeFieldOutput) HideWeb added in v3.9.0

Do not display application icon to users.

func (ThreeFieldOutput) Label added in v3.9.0

The display name of the Application.

Local file path to the logo. The file must be in PNG, JPG, or GIF format, and less than 1 MB in size.

func (ThreeFieldOutput) LogoUrl added in v3.9.0

func (o ThreeFieldOutput) LogoUrl() pulumi.StringOutput

Direct link of application logo.

func (ThreeFieldOutput) Name added in v3.9.0

Name assigned to the application by Okta.

func (ThreeFieldOutput) PasswordSelector added in v3.9.0

func (o ThreeFieldOutput) PasswordSelector() pulumi.StringOutput

Login password field CSS selector.

func (ThreeFieldOutput) RevealPassword added in v3.9.0

func (o ThreeFieldOutput) RevealPassword() pulumi.BoolPtrOutput

Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.

func (ThreeFieldOutput) SharedPassword added in v3.9.0

func (o ThreeFieldOutput) SharedPassword() pulumi.StringPtrOutput

Shared password, required for certain schemes.

func (ThreeFieldOutput) SharedUsername added in v3.9.0

func (o ThreeFieldOutput) SharedUsername() pulumi.StringPtrOutput

Shared username, required for certain schemes.

func (ThreeFieldOutput) SignOnMode added in v3.9.0

func (o ThreeFieldOutput) SignOnMode() pulumi.StringOutput

Sign-on mode of application.

func (ThreeFieldOutput) SkipGroups added in v3.9.0

func (o ThreeFieldOutput) SkipGroups() pulumi.BoolPtrOutput

Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.

func (ThreeFieldOutput) SkipUsers added in v3.9.0

func (o ThreeFieldOutput) SkipUsers() pulumi.BoolPtrOutput

Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.

func (ThreeFieldOutput) Status added in v3.9.0

Status of application. By default, it is `"ACTIVE"`.

func (ThreeFieldOutput) ToThreeFieldOutput

func (o ThreeFieldOutput) ToThreeFieldOutput() ThreeFieldOutput

func (ThreeFieldOutput) ToThreeFieldOutputWithContext

func (o ThreeFieldOutput) ToThreeFieldOutputWithContext(ctx context.Context) ThreeFieldOutput

func (ThreeFieldOutput) Url added in v3.9.0

Login URL.

func (ThreeFieldOutput) UrlRegex added in v3.9.0

A regex that further restricts URL to the specified regex.

func (ThreeFieldOutput) UserNameTemplate added in v3.9.0

func (o ThreeFieldOutput) UserNameTemplate() pulumi.StringPtrOutput

Username template. Default: `"${source.login}"`

func (ThreeFieldOutput) UserNameTemplatePushStatus added in v3.9.0

func (o ThreeFieldOutput) UserNameTemplatePushStatus() pulumi.StringPtrOutput

Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.

func (ThreeFieldOutput) UserNameTemplateSuffix added in v3.9.0

func (o ThreeFieldOutput) UserNameTemplateSuffix() pulumi.StringPtrOutput

Username template suffix.

func (ThreeFieldOutput) UserNameTemplateType added in v3.9.0

func (o ThreeFieldOutput) UserNameTemplateType() pulumi.StringPtrOutput

Username template type. Default: `"BUILT_IN"`.

func (ThreeFieldOutput) UsernameSelector added in v3.9.0

func (o ThreeFieldOutput) UsernameSelector() pulumi.StringOutput

Login username field CSS selector.

func (ThreeFieldOutput) Users deprecated added in v3.9.0

The users assigned to the application. See `app.User` for a more flexible approach.

Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.

type ThreeFieldState

type ThreeFieldState struct {
	// Custom error page URL.
	AccessibilityErrorRedirectUrl pulumi.StringPtrInput
	// Custom login page for this application.
	AccessibilityLoginRedirectUrl pulumi.StringPtrInput
	// Enable self-service. By default, it is `false`.
	AccessibilitySelfService pulumi.BoolPtrInput
	// Application notes for admins.
	AdminNote pulumi.StringPtrInput
	// Displays specific appLinks for the app
	AppLinksJson pulumi.StringPtrInput
	// Display auto submit toolbar.
	AutoSubmitToolbar pulumi.BoolPtrInput
	// Login button field CSS selector.
	ButtonSelector pulumi.StringPtrInput
	// Application credentials scheme. Can be set to `"EDIT_USERNAME_AND_PASSWORD"`, `"ADMIN_SETS_CREDENTIALS"`, `"EDIT_PASSWORD_ONLY"`, `"EXTERNAL_PASSWORD_SYNC"`, or `"SHARED_USERNAME_AND_PASSWORD"`.
	CredentialsScheme pulumi.StringPtrInput
	// Application notes for end users.
	EnduserNote pulumi.StringPtrInput
	// Extra field CSS selector.
	ExtraFieldSelector pulumi.StringPtrInput
	// Value for extra form field.
	ExtraFieldValue pulumi.StringPtrInput
	// Groups associated with the application. See `app.GroupAssignment` for a more flexible approach.
	//
	// Deprecated: The direct configuration of groups in this app resource is deprecated, please ensure you use the resource `okta_app_group_assignments` for this functionality.
	Groups pulumi.StringArrayInput
	// Do not display application icon on mobile app.
	HideIos pulumi.BoolPtrInput
	// Do not display application icon to users.
	HideWeb pulumi.BoolPtrInput
	// The display name of the Application.
	Label pulumi.StringPtrInput
	Logo pulumi.StringPtrInput
	// Direct link of application logo.
	LogoUrl pulumi.StringPtrInput
	// Name assigned to the application by Okta.
	Name pulumi.StringPtrInput
	// Login password field CSS selector.
	PasswordSelector pulumi.StringPtrInput
	// Allow user to reveal password. It can not be set to `true` if `credentialsScheme` is `"ADMIN_SETS_CREDENTIALS"`, `"SHARED_USERNAME_AND_PASSWORD"` or `"EXTERNAL_PASSWORD_SYNC"`.
	RevealPassword pulumi.BoolPtrInput
	// Shared password, required for certain schemes.
	SharedPassword pulumi.StringPtrInput
	// Shared username, required for certain schemes.
	SharedUsername pulumi.StringPtrInput
	// Sign-on mode of application.
	SignOnMode pulumi.StringPtrInput
	// Indicator that allows the app to skip `groups` sync (it's also can be provided during import). Default is `false`.
	SkipGroups pulumi.BoolPtrInput
	// Indicator that allows the app to skip `users` sync (it's also can be provided during import). Default is `false`.
	SkipUsers pulumi.BoolPtrInput
	// Status of application. By default, it is `"ACTIVE"`.
	Status pulumi.StringPtrInput
	// Login URL.
	Url pulumi.StringPtrInput
	// A regex that further restricts URL to the specified regex.
	UrlRegex pulumi.StringPtrInput
	// Username template. Default: `"${source.login}"`
	UserNameTemplate pulumi.StringPtrInput
	// Push username on update. Valid values: `"PUSH"` and `"DONT_PUSH"`.
	UserNameTemplatePushStatus pulumi.StringPtrInput
	// Username template suffix.
	UserNameTemplateSuffix pulumi.StringPtrInput
	// Username template type. Default: `"BUILT_IN"`.
	UserNameTemplateType pulumi.StringPtrInput
	// Login username field CSS selector.
	UsernameSelector pulumi.StringPtrInput
	// The users assigned to the application. See `app.User` for a more flexible approach.
	//
	// Deprecated: The direct configuration of users in this app resource is deprecated, please ensure you use the resource `okta_app_user` for this functionality.
	Users ThreeFieldUserArrayInput
}

func (ThreeFieldState) ElementType

func (ThreeFieldState) ElementType() reflect.Type

type ThreeFieldUser

type ThreeFieldUser struct {
	Id       *string `pulumi:"id"`
	Password *string `pulumi:"password"`
	Scope    *string `pulumi:"scope"`
	Username *string `pulumi:"username"`
}

type ThreeFieldUserArgs

type ThreeFieldUserArgs struct {
	Id       pulumi.StringPtrInput `pulumi:"id"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Scope    pulumi.StringPtrInput `pulumi:"scope"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (ThreeFieldUserArgs) ElementType

func (ThreeFieldUserArgs) ElementType() reflect.Type

func (ThreeFieldUserArgs) ToThreeFieldUserOutput

func (i ThreeFieldUserArgs) ToThreeFieldUserOutput() ThreeFieldUserOutput

func (ThreeFieldUserArgs) ToThreeFieldUserOutputWithContext

func (i ThreeFieldUserArgs) ToThreeFieldUserOutputWithContext(ctx context.Context) ThreeFieldUserOutput

type ThreeFieldUserArray

type ThreeFieldUserArray []ThreeFieldUserInput

func (ThreeFieldUserArray) ElementType

func (ThreeFieldUserArray) ElementType() reflect.Type

func (ThreeFieldUserArray) ToThreeFieldUserArrayOutput

func (i ThreeFieldUserArray) ToThreeFieldUserArrayOutput() ThreeFieldUserArrayOutput

func (ThreeFieldUserArray) ToThreeFieldUserArrayOutputWithContext

func (i ThreeFieldUserArray) ToThreeFieldUserArrayOutputWithContext(ctx context.Context) ThreeFieldUserArrayOutput

type ThreeFieldUserArrayInput

type ThreeFieldUserArrayInput interface {
	pulumi.Input

	ToThreeFieldUserArrayOutput() ThreeFieldUserArrayOutput
	ToThreeFieldUserArrayOutputWithContext(context.Context) ThreeFieldUserArrayOutput
}

ThreeFieldUserArrayInput is an input type that accepts ThreeFieldUserArray and ThreeFieldUserArrayOutput values. You can construct a concrete instance of `ThreeFieldUserArrayInput` via:

ThreeFieldUserArray{ ThreeFieldUserArgs{...} }

type ThreeFieldUserArrayOutput

type ThreeFieldUserArrayOutput struct{ *pulumi.OutputState }

func (ThreeFieldUserArrayOutput) ElementType

func (ThreeFieldUserArrayOutput) ElementType() reflect.Type

func (ThreeFieldUserArrayOutput) Index

func (ThreeFieldUserArrayOutput) ToThreeFieldUserArrayOutput

func (o ThreeFieldUserArrayOutput) ToThreeFieldUserArrayOutput() ThreeFieldUserArrayOutput

func (ThreeFieldUserArrayOutput) ToThreeFieldUserArrayOutputWithContext

func (o ThreeFieldUserArrayOutput) ToThreeFieldUserArrayOutputWithContext(ctx context.Context) ThreeFieldUserArrayOutput

type ThreeFieldUserInput

type ThreeFieldUserInput interface {
	pulumi.Input

	ToThreeFieldUserOutput() ThreeFieldUserOutput
	ToThreeFieldUserOutputWithContext(context.Context) ThreeFieldUserOutput
}

ThreeFieldUserInput is an input type that accepts ThreeFieldUserArgs and ThreeFieldUserOutput values. You can construct a concrete instance of `ThreeFieldUserInput` via:

ThreeFieldUserArgs{...}

type ThreeFieldUserOutput

type ThreeFieldUserOutput struct{ *pulumi.OutputState }

func (ThreeFieldUserOutput) ElementType

func (ThreeFieldUserOutput) ElementType() reflect.Type

func (ThreeFieldUserOutput) Id

func (ThreeFieldUserOutput) Password

func (ThreeFieldUserOutput) Scope

func (ThreeFieldUserOutput) ToThreeFieldUserOutput

func (o ThreeFieldUserOutput) ToThreeFieldUserOutput() ThreeFieldUserOutput

func (ThreeFieldUserOutput) ToThreeFieldUserOutputWithContext

func (o ThreeFieldUserOutput) ToThreeFieldUserOutputWithContext(ctx context.Context) ThreeFieldUserOutput

func (ThreeFieldUserOutput) Username

type User

type User struct {
	pulumi.CustomResourceState

	// App to associate user with.
	AppId             pulumi.StringOutput `pulumi:"appId"`
	HasSharedUsername pulumi.BoolOutput   `pulumi:"hasSharedUsername"`
	// The password to use.
	Password pulumi.StringPtrOutput `pulumi:"password"`
	// The JSON profile of the App User.
	Profile pulumi.StringPtrOutput `pulumi:"profile"`
	// Retain the user association on destroy. If set to true, the resource will be removed from state but not from the Okta app.
	RetainAssignment pulumi.BoolPtrOutput `pulumi:"retainAssignment"`
	// User to associate the application with.
	UserId pulumi.StringOutput `pulumi:"userId"`
	// The username to use for the app user. In case the user is assigned to the app with
	// 'SHARED_USERNAME_AND_PASSWORD' credentials scheme, this field will be computed and should not be set.
	Username pulumi.StringPtrOutput `pulumi:"username"`
}

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewUser(ctx, "example", &app.UserArgs{
			AppId:    pulumi.String("<app_id>"),
			UserId:   pulumi.String("<user id>"),
			Username: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

An Application User can be imported via the Okta ID.

```sh

$ pulumi import okta:app/user:User example &#60;app id&#62;/&#60;user id&#62;

```

func GetUser

func GetUser(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserState, opts ...pulumi.ResourceOption) (*User, error)

GetUser gets an existing User resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUser

func NewUser(ctx *pulumi.Context,
	name string, args *UserArgs, opts ...pulumi.ResourceOption) (*User, error)

NewUser registers a new resource with the given unique name, arguments, and options.

func (*User) ElementType

func (*User) ElementType() reflect.Type

func (*User) ToUserOutput

func (i *User) ToUserOutput() UserOutput

func (*User) ToUserOutputWithContext

func (i *User) ToUserOutputWithContext(ctx context.Context) UserOutput

type UserArgs

type UserArgs struct {
	// App to associate user with.
	AppId pulumi.StringInput
	// The password to use.
	Password pulumi.StringPtrInput
	// The JSON profile of the App User.
	Profile pulumi.StringPtrInput
	// Retain the user association on destroy. If set to true, the resource will be removed from state but not from the Okta app.
	RetainAssignment pulumi.BoolPtrInput
	// User to associate the application with.
	UserId pulumi.StringInput
	// The username to use for the app user. In case the user is assigned to the app with
	// 'SHARED_USERNAME_AND_PASSWORD' credentials scheme, this field will be computed and should not be set.
	Username pulumi.StringPtrInput
}

The set of arguments for constructing a User resource.

func (UserArgs) ElementType

func (UserArgs) ElementType() reflect.Type

type UserArray

type UserArray []UserInput

func (UserArray) ElementType

func (UserArray) ElementType() reflect.Type

func (UserArray) ToUserArrayOutput

func (i UserArray) ToUserArrayOutput() UserArrayOutput

func (UserArray) ToUserArrayOutputWithContext

func (i UserArray) ToUserArrayOutputWithContext(ctx context.Context) UserArrayOutput

type UserArrayInput

type UserArrayInput interface {
	pulumi.Input

	ToUserArrayOutput() UserArrayOutput
	ToUserArrayOutputWithContext(context.Context) UserArrayOutput
}

UserArrayInput is an input type that accepts UserArray and UserArrayOutput values. You can construct a concrete instance of `UserArrayInput` via:

UserArray{ UserArgs{...} }

type UserArrayOutput

type UserArrayOutput struct{ *pulumi.OutputState }

func (UserArrayOutput) ElementType

func (UserArrayOutput) ElementType() reflect.Type

func (UserArrayOutput) Index

func (UserArrayOutput) ToUserArrayOutput

func (o UserArrayOutput) ToUserArrayOutput() UserArrayOutput

func (UserArrayOutput) ToUserArrayOutputWithContext

func (o UserArrayOutput) ToUserArrayOutputWithContext(ctx context.Context) UserArrayOutput

type UserBaseSchema

type UserBaseSchema struct {
	pulumi.CustomResourceState

	// The Application's ID the user schema property should be assigned to.
	AppId pulumi.StringOutput `pulumi:"appId"`
	// The property name.
	Index pulumi.StringOutput `pulumi:"index"`
	// Master priority for the user schema property. It can be set to `"PROFILE_MASTER"` or `"OKTA"`.
	Master pulumi.StringPtrOutput `pulumi:"master"`
	// The validation pattern to use for the subschema, only available for `login` property. Must be in form of `.+`, or `[<pattern>]+`.
	Pattern pulumi.StringPtrOutput `pulumi:"pattern"`
	// Access control permissions for the property. It can be set to `"READ_WRITE"`, `"READ_ONLY"`, `"HIDE"`.
	Permissions pulumi.StringPtrOutput `pulumi:"permissions"`
	// Whether the property is required for this application's users.
	Required pulumi.BoolPtrOutput `pulumi:"required"`
	// The property display name.
	Title pulumi.StringOutput `pulumi:"title"`
	// The type of the schema property. It can be `"string"`, `"boolean"`, `"number"`, `"integer"`, `"array"`, or `"object"`.
	Type pulumi.StringOutput `pulumi:"type"`
	// Custom subschema user type
	UserType pulumi.StringPtrOutput `pulumi:"userType"`
}

> **DEPRECATED** use `AppUserBaseSchemaProperty` instead.

This resource allows you to configure a base app user schema property.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewUserBaseSchema(ctx, "example", &app.UserBaseSchemaArgs{
			AppId:  pulumi.String("<app id>"),
			Index:  pulumi.String("customPropertyName"),
			Master: pulumi.String("OKTA"),
			Title:  pulumi.String("customPropertyName"),
			Type:   pulumi.String("string"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

App user base schema property can be imported via the property index and app id.

```sh

$ pulumi import okta:app/userBaseSchema:UserBaseSchema example &#60;app id&#62;/&#60;property name&#62;

```

func GetUserBaseSchema

func GetUserBaseSchema(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserBaseSchemaState, opts ...pulumi.ResourceOption) (*UserBaseSchema, error)

GetUserBaseSchema gets an existing UserBaseSchema resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserBaseSchema

func NewUserBaseSchema(ctx *pulumi.Context,
	name string, args *UserBaseSchemaArgs, opts ...pulumi.ResourceOption) (*UserBaseSchema, error)

NewUserBaseSchema registers a new resource with the given unique name, arguments, and options.

func (*UserBaseSchema) ElementType

func (*UserBaseSchema) ElementType() reflect.Type

func (*UserBaseSchema) ToUserBaseSchemaOutput

func (i *UserBaseSchema) ToUserBaseSchemaOutput() UserBaseSchemaOutput

func (*UserBaseSchema) ToUserBaseSchemaOutputWithContext

func (i *UserBaseSchema) ToUserBaseSchemaOutputWithContext(ctx context.Context) UserBaseSchemaOutput

type UserBaseSchemaArgs

type UserBaseSchemaArgs struct {
	// The Application's ID the user schema property should be assigned to.
	AppId pulumi.StringInput
	// The property name.
	Index pulumi.StringInput
	// Master priority for the user schema property. It can be set to `"PROFILE_MASTER"` or `"OKTA"`.
	Master pulumi.StringPtrInput
	// The validation pattern to use for the subschema, only available for `login` property. Must be in form of `.+`, or `[<pattern>]+`.
	Pattern pulumi.StringPtrInput
	// Access control permissions for the property. It can be set to `"READ_WRITE"`, `"READ_ONLY"`, `"HIDE"`.
	Permissions pulumi.StringPtrInput
	// Whether the property is required for this application's users.
	Required pulumi.BoolPtrInput
	// The property display name.
	Title pulumi.StringInput
	// The type of the schema property. It can be `"string"`, `"boolean"`, `"number"`, `"integer"`, `"array"`, or `"object"`.
	Type pulumi.StringInput
	// Custom subschema user type
	UserType pulumi.StringPtrInput
}

The set of arguments for constructing a UserBaseSchema resource.

func (UserBaseSchemaArgs) ElementType

func (UserBaseSchemaArgs) ElementType() reflect.Type

type UserBaseSchemaArray

type UserBaseSchemaArray []UserBaseSchemaInput

func (UserBaseSchemaArray) ElementType

func (UserBaseSchemaArray) ElementType() reflect.Type

func (UserBaseSchemaArray) ToUserBaseSchemaArrayOutput

func (i UserBaseSchemaArray) ToUserBaseSchemaArrayOutput() UserBaseSchemaArrayOutput

func (UserBaseSchemaArray) ToUserBaseSchemaArrayOutputWithContext

func (i UserBaseSchemaArray) ToUserBaseSchemaArrayOutputWithContext(ctx context.Context) UserBaseSchemaArrayOutput

type UserBaseSchemaArrayInput

type UserBaseSchemaArrayInput interface {
	pulumi.Input

	ToUserBaseSchemaArrayOutput() UserBaseSchemaArrayOutput
	ToUserBaseSchemaArrayOutputWithContext(context.Context) UserBaseSchemaArrayOutput
}

UserBaseSchemaArrayInput is an input type that accepts UserBaseSchemaArray and UserBaseSchemaArrayOutput values. You can construct a concrete instance of `UserBaseSchemaArrayInput` via:

UserBaseSchemaArray{ UserBaseSchemaArgs{...} }

type UserBaseSchemaArrayOutput

type UserBaseSchemaArrayOutput struct{ *pulumi.OutputState }

func (UserBaseSchemaArrayOutput) ElementType

func (UserBaseSchemaArrayOutput) ElementType() reflect.Type

func (UserBaseSchemaArrayOutput) Index

func (UserBaseSchemaArrayOutput) ToUserBaseSchemaArrayOutput

func (o UserBaseSchemaArrayOutput) ToUserBaseSchemaArrayOutput() UserBaseSchemaArrayOutput

func (UserBaseSchemaArrayOutput) ToUserBaseSchemaArrayOutputWithContext

func (o UserBaseSchemaArrayOutput) ToUserBaseSchemaArrayOutputWithContext(ctx context.Context) UserBaseSchemaArrayOutput

type UserBaseSchemaInput

type UserBaseSchemaInput interface {
	pulumi.Input

	ToUserBaseSchemaOutput() UserBaseSchemaOutput
	ToUserBaseSchemaOutputWithContext(ctx context.Context) UserBaseSchemaOutput
}

type UserBaseSchemaMap

type UserBaseSchemaMap map[string]UserBaseSchemaInput

func (UserBaseSchemaMap) ElementType

func (UserBaseSchemaMap) ElementType() reflect.Type

func (UserBaseSchemaMap) ToUserBaseSchemaMapOutput

func (i UserBaseSchemaMap) ToUserBaseSchemaMapOutput() UserBaseSchemaMapOutput

func (UserBaseSchemaMap) ToUserBaseSchemaMapOutputWithContext

func (i UserBaseSchemaMap) ToUserBaseSchemaMapOutputWithContext(ctx context.Context) UserBaseSchemaMapOutput

type UserBaseSchemaMapInput

type UserBaseSchemaMapInput interface {
	pulumi.Input

	ToUserBaseSchemaMapOutput() UserBaseSchemaMapOutput
	ToUserBaseSchemaMapOutputWithContext(context.Context) UserBaseSchemaMapOutput
}

UserBaseSchemaMapInput is an input type that accepts UserBaseSchemaMap and UserBaseSchemaMapOutput values. You can construct a concrete instance of `UserBaseSchemaMapInput` via:

UserBaseSchemaMap{ "key": UserBaseSchemaArgs{...} }

type UserBaseSchemaMapOutput

type UserBaseSchemaMapOutput struct{ *pulumi.OutputState }

func (UserBaseSchemaMapOutput) ElementType

func (UserBaseSchemaMapOutput) ElementType() reflect.Type

func (UserBaseSchemaMapOutput) MapIndex

func (UserBaseSchemaMapOutput) ToUserBaseSchemaMapOutput

func (o UserBaseSchemaMapOutput) ToUserBaseSchemaMapOutput() UserBaseSchemaMapOutput

func (UserBaseSchemaMapOutput) ToUserBaseSchemaMapOutputWithContext

func (o UserBaseSchemaMapOutput) ToUserBaseSchemaMapOutputWithContext(ctx context.Context) UserBaseSchemaMapOutput

type UserBaseSchemaOutput

type UserBaseSchemaOutput struct{ *pulumi.OutputState }

func (UserBaseSchemaOutput) AppId added in v3.9.0

The Application's ID the user schema property should be assigned to.

func (UserBaseSchemaOutput) ElementType

func (UserBaseSchemaOutput) ElementType() reflect.Type

func (UserBaseSchemaOutput) Index added in v3.9.0

The property name.

func (UserBaseSchemaOutput) Master added in v3.9.0

Master priority for the user schema property. It can be set to `"PROFILE_MASTER"` or `"OKTA"`.

func (UserBaseSchemaOutput) Pattern added in v3.9.0

The validation pattern to use for the subschema, only available for `login` property. Must be in form of `.+`, or `[<pattern>]+`.

func (UserBaseSchemaOutput) Permissions added in v3.9.0

Access control permissions for the property. It can be set to `"READ_WRITE"`, `"READ_ONLY"`, `"HIDE"`.

func (UserBaseSchemaOutput) Required added in v3.9.0

Whether the property is required for this application's users.

func (UserBaseSchemaOutput) Title added in v3.9.0

The property display name.

func (UserBaseSchemaOutput) ToUserBaseSchemaOutput

func (o UserBaseSchemaOutput) ToUserBaseSchemaOutput() UserBaseSchemaOutput

func (UserBaseSchemaOutput) ToUserBaseSchemaOutputWithContext

func (o UserBaseSchemaOutput) ToUserBaseSchemaOutputWithContext(ctx context.Context) UserBaseSchemaOutput

func (UserBaseSchemaOutput) Type added in v3.9.0

The type of the schema property. It can be `"string"`, `"boolean"`, `"number"`, `"integer"`, `"array"`, or `"object"`.

func (UserBaseSchemaOutput) UserType added in v3.9.0

Custom subschema user type

type UserBaseSchemaState

type UserBaseSchemaState struct {
	// The Application's ID the user schema property should be assigned to.
	AppId pulumi.StringPtrInput
	// The property name.
	Index pulumi.StringPtrInput
	// Master priority for the user schema property. It can be set to `"PROFILE_MASTER"` or `"OKTA"`.
	Master pulumi.StringPtrInput
	// The validation pattern to use for the subschema, only available for `login` property. Must be in form of `.+`, or `[<pattern>]+`.
	Pattern pulumi.StringPtrInput
	// Access control permissions for the property. It can be set to `"READ_WRITE"`, `"READ_ONLY"`, `"HIDE"`.
	Permissions pulumi.StringPtrInput
	// Whether the property is required for this application's users.
	Required pulumi.BoolPtrInput
	// The property display name.
	Title pulumi.StringPtrInput
	// The type of the schema property. It can be `"string"`, `"boolean"`, `"number"`, `"integer"`, `"array"`, or `"object"`.
	Type pulumi.StringPtrInput
	// Custom subschema user type
	UserType pulumi.StringPtrInput
}

func (UserBaseSchemaState) ElementType

func (UserBaseSchemaState) ElementType() reflect.Type

type UserInput

type UserInput interface {
	pulumi.Input

	ToUserOutput() UserOutput
	ToUserOutputWithContext(ctx context.Context) UserOutput
}

type UserMap

type UserMap map[string]UserInput

func (UserMap) ElementType

func (UserMap) ElementType() reflect.Type

func (UserMap) ToUserMapOutput

func (i UserMap) ToUserMapOutput() UserMapOutput

func (UserMap) ToUserMapOutputWithContext

func (i UserMap) ToUserMapOutputWithContext(ctx context.Context) UserMapOutput

type UserMapInput

type UserMapInput interface {
	pulumi.Input

	ToUserMapOutput() UserMapOutput
	ToUserMapOutputWithContext(context.Context) UserMapOutput
}

UserMapInput is an input type that accepts UserMap and UserMapOutput values. You can construct a concrete instance of `UserMapInput` via:

UserMap{ "key": UserArgs{...} }

type UserMapOutput

type UserMapOutput struct{ *pulumi.OutputState }

func (UserMapOutput) ElementType

func (UserMapOutput) ElementType() reflect.Type

func (UserMapOutput) MapIndex

func (UserMapOutput) ToUserMapOutput

func (o UserMapOutput) ToUserMapOutput() UserMapOutput

func (UserMapOutput) ToUserMapOutputWithContext

func (o UserMapOutput) ToUserMapOutputWithContext(ctx context.Context) UserMapOutput

type UserOutput

type UserOutput struct{ *pulumi.OutputState }

func (UserOutput) AppId added in v3.9.0

func (o UserOutput) AppId() pulumi.StringOutput

App to associate user with.

func (UserOutput) ElementType

func (UserOutput) ElementType() reflect.Type

func (UserOutput) HasSharedUsername added in v3.9.0

func (o UserOutput) HasSharedUsername() pulumi.BoolOutput

func (UserOutput) Password added in v3.9.0

func (o UserOutput) Password() pulumi.StringPtrOutput

The password to use.

func (UserOutput) Profile added in v3.9.0

func (o UserOutput) Profile() pulumi.StringPtrOutput

The JSON profile of the App User.

func (UserOutput) RetainAssignment added in v3.9.0

func (o UserOutput) RetainAssignment() pulumi.BoolPtrOutput

Retain the user association on destroy. If set to true, the resource will be removed from state but not from the Okta app.

func (UserOutput) ToUserOutput

func (o UserOutput) ToUserOutput() UserOutput

func (UserOutput) ToUserOutputWithContext

func (o UserOutput) ToUserOutputWithContext(ctx context.Context) UserOutput

func (UserOutput) UserId added in v3.9.0

func (o UserOutput) UserId() pulumi.StringOutput

User to associate the application with.

func (UserOutput) Username added in v3.9.0

func (o UserOutput) Username() pulumi.StringPtrOutput

The username to use for the app user. In case the user is assigned to the app with 'SHARED_USERNAME_AND_PASSWORD' credentials scheme, this field will be computed and should not be set.

type UserSchema

type UserSchema struct {
	pulumi.CustomResourceState

	// The Application's ID the user custom schema property should be assigned to.
	AppId pulumi.StringOutput `pulumi:"appId"`
	// Array of values that an array property's items can be set to.
	ArrayEnums pulumi.StringArrayOutput `pulumi:"arrayEnums"`
	// Display name and value an enum array can be set to.
	ArrayOneOfs UserSchemaArrayOneOfArrayOutput `pulumi:"arrayOneOfs"`
	// The type of the array elements if `type` is set to `"array"`.
	ArrayType pulumi.StringPtrOutput `pulumi:"arrayType"`
	// The description of the user schema property.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Array of values a primitive property can be set to. See `arrayEnum` for arrays.
	Enums pulumi.StringArrayOutput `pulumi:"enums"`
	// External name of the user schema property.
	ExternalName pulumi.StringPtrOutput `pulumi:"externalName"`
	// External namespace of the user schema property.
	ExternalNamespace pulumi.StringPtrOutput `pulumi:"externalNamespace"`
	// The property name.
	Index pulumi.StringOutput `pulumi:"index"`
	// Master priority for the user schema property. It can be set to `"PROFILE_MASTER"` or `"OKTA"`.
	Master pulumi.StringPtrOutput `pulumi:"master"`
	// The maximum length of the user property value. Only applies to type `"string"`.
	MaxLength pulumi.IntPtrOutput `pulumi:"maxLength"`
	// The minimum length of the user property value. Only applies to type `"string"`.
	MinLength pulumi.IntPtrOutput `pulumi:"minLength"`
	// Array of maps containing a mapping for display name to enum value.
	OneOfs UserSchemaOneOfArrayOutput `pulumi:"oneOfs"`
	// Access control permissions for the property. It can be set to `"READ_WRITE"`, `"READ_ONLY"`, `"HIDE"`.
	Permissions pulumi.StringPtrOutput `pulumi:"permissions"`
	// Whether the property is required for this application's users.
	Required pulumi.BoolPtrOutput `pulumi:"required"`
	// determines whether an app user attribute can be set at the Individual or Group Level.
	Scope pulumi.StringPtrOutput `pulumi:"scope"`
	// display name for the enum value.
	Title pulumi.StringOutput `pulumi:"title"`
	// The type of the schema property. It can be `"string"`, `"boolean"`, `"number"`, `"integer"`, `"array"`, or `"object"`.
	Type pulumi.StringOutput `pulumi:"type"`
	// Used to assign attribute group priority. Can not be set to 'true' if `scope` is set to Individual level.
	Union pulumi.BoolPtrOutput `pulumi:"union"`
	// Subschema unique restriction
	Unique pulumi.StringPtrOutput `pulumi:"unique"`
	// Custom subschema user type
	UserType pulumi.StringPtrOutput `pulumi:"userType"`
}

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-okta/sdk/v3/go/okta/app"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := app.NewUserSchema(ctx, "example", &app.UserSchemaArgs{
			AppId:       pulumi.String("<app id>"),
			Description: pulumi.String("My custom property name"),
			Index:       pulumi.String("customPropertyName"),
			Master:      pulumi.String("OKTA"),
			Scope:       pulumi.String("SELF"),
			Title:       pulumi.String("customPropertyName"),
			Type:        pulumi.String("string"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

App user schema property can be imported via the property index and app id.

```sh

$ pulumi import okta:app/userSchema:UserSchema example &#60;app id&#62;/&#60;property name&#62;

```

func GetUserSchema

func GetUserSchema(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserSchemaState, opts ...pulumi.ResourceOption) (*UserSchema, error)

GetUserSchema gets an existing UserSchema resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserSchema

func NewUserSchema(ctx *pulumi.Context,
	name string, args *UserSchemaArgs, opts ...pulumi.ResourceOption) (*UserSchema, error)

NewUserSchema registers a new resource with the given unique name, arguments, and options.

func (*UserSchema) ElementType

func (*UserSchema) ElementType() reflect.Type

func (*UserSchema) ToUserSchemaOutput

func (i *UserSchema) ToUserSchemaOutput() UserSchemaOutput

func (*UserSchema) ToUserSchemaOutputWithContext

func (i *UserSchema) ToUserSchemaOutputWithContext(ctx context.Context) UserSchemaOutput

type UserSchemaArgs

type UserSchemaArgs struct {
	// The Application's ID the user custom schema property should be assigned to.
	AppId pulumi.StringInput
	// Array of values that an array property's items can be set to.
	ArrayEnums pulumi.StringArrayInput
	// Display name and value an enum array can be set to.
	ArrayOneOfs UserSchemaArrayOneOfArrayInput
	// The type of the array elements if `type` is set to `"array"`.
	ArrayType pulumi.StringPtrInput
	// The description of the user schema property.
	Description pulumi.StringPtrInput
	// Array of values a primitive property can be set to. See `arrayEnum` for arrays.
	Enums pulumi.StringArrayInput
	// External name of the user schema property.
	ExternalName pulumi.StringPtrInput
	// External namespace of the user schema property.
	ExternalNamespace pulumi.StringPtrInput
	// The property name.
	Index pulumi.StringInput
	// Master priority for the user schema property. It can be set to `"PROFILE_MASTER"` or `"OKTA"`.
	Master pulumi.StringPtrInput
	// The maximum length of the user property value. Only applies to type `"string"`.
	MaxLength pulumi.IntPtrInput
	// The minimum length of the user property value. Only applies to type `"string"`.
	MinLength pulumi.IntPtrInput
	// Array of maps containing a mapping for display name to enum value.
	OneOfs UserSchemaOneOfArrayInput
	// Access control permissions for the property. It can be set to `"READ_WRITE"`, `"READ_ONLY"`, `"HIDE"`.
	Permissions pulumi.StringPtrInput
	// Whether the property is required for this application's users.
	Required pulumi.BoolPtrInput
	// determines whether an app user attribute can be set at the Individual or Group Level.
	Scope pulumi.StringPtrInput
	// display name for the enum value.
	Title pulumi.StringInput
	// The type of the schema property. It can be `"string"`, `"boolean"`, `"number"`, `"integer"`, `"array"`, or `"object"`.
	Type pulumi.StringInput
	// Used to assign attribute group priority. Can not be set to 'true' if `scope` is set to Individual level.
	Union pulumi.BoolPtrInput
	// Subschema unique restriction
	Unique pulumi.StringPtrInput
	// Custom subschema user type
	UserType pulumi.StringPtrInput
}

The set of arguments for constructing a UserSchema resource.

func (UserSchemaArgs) ElementType

func (UserSchemaArgs) ElementType() reflect.Type

type UserSchemaArray

type UserSchemaArray []UserSchemaInput

func (UserSchemaArray) ElementType

func (UserSchemaArray) ElementType() reflect.Type

func (UserSchemaArray) ToUserSchemaArrayOutput

func (i UserSchemaArray) ToUserSchemaArrayOutput() UserSchemaArrayOutput

func (UserSchemaArray) ToUserSchemaArrayOutputWithContext

func (i UserSchemaArray) ToUserSchemaArrayOutputWithContext(ctx context.Context) UserSchemaArrayOutput

type UserSchemaArrayInput

type UserSchemaArrayInput interface {
	pulumi.Input

	ToUserSchemaArrayOutput() UserSchemaArrayOutput
	ToUserSchemaArrayOutputWithContext(context.Context) UserSchemaArrayOutput
}

UserSchemaArrayInput is an input type that accepts UserSchemaArray and UserSchemaArrayOutput values. You can construct a concrete instance of `UserSchemaArrayInput` via:

UserSchemaArray{ UserSchemaArgs{...} }

type UserSchemaArrayOneOf

type UserSchemaArrayOneOf struct {
	// value mapping to member of `enum`.
	Const string `pulumi:"const"`
	// display name for the enum value.
	Title string `pulumi:"title"`
}

type UserSchemaArrayOneOfArgs

type UserSchemaArrayOneOfArgs struct {
	// value mapping to member of `enum`.
	Const pulumi.StringInput `pulumi:"const"`
	// display name for the enum value.
	Title pulumi.StringInput `pulumi:"title"`
}

func (UserSchemaArrayOneOfArgs) ElementType

func (UserSchemaArrayOneOfArgs) ElementType() reflect.Type

func (UserSchemaArrayOneOfArgs) ToUserSchemaArrayOneOfOutput

func (i UserSchemaArrayOneOfArgs) ToUserSchemaArrayOneOfOutput() UserSchemaArrayOneOfOutput

func (UserSchemaArrayOneOfArgs) ToUserSchemaArrayOneOfOutputWithContext

func (i UserSchemaArrayOneOfArgs) ToUserSchemaArrayOneOfOutputWithContext(ctx context.Context) UserSchemaArrayOneOfOutput

type UserSchemaArrayOneOfArray

type UserSchemaArrayOneOfArray []UserSchemaArrayOneOfInput

func (UserSchemaArrayOneOfArray) ElementType

func (UserSchemaArrayOneOfArray) ElementType() reflect.Type

func (UserSchemaArrayOneOfArray) ToUserSchemaArrayOneOfArrayOutput

func (i UserSchemaArrayOneOfArray) ToUserSchemaArrayOneOfArrayOutput() UserSchemaArrayOneOfArrayOutput

func (UserSchemaArrayOneOfArray) ToUserSchemaArrayOneOfArrayOutputWithContext

func (i UserSchemaArrayOneOfArray) ToUserSchemaArrayOneOfArrayOutputWithContext(ctx context.Context) UserSchemaArrayOneOfArrayOutput

type UserSchemaArrayOneOfArrayInput

type UserSchemaArrayOneOfArrayInput interface {
	pulumi.Input

	ToUserSchemaArrayOneOfArrayOutput() UserSchemaArrayOneOfArrayOutput
	ToUserSchemaArrayOneOfArrayOutputWithContext(context.Context) UserSchemaArrayOneOfArrayOutput
}

UserSchemaArrayOneOfArrayInput is an input type that accepts UserSchemaArrayOneOfArray and UserSchemaArrayOneOfArrayOutput values. You can construct a concrete instance of `UserSchemaArrayOneOfArrayInput` via:

UserSchemaArrayOneOfArray{ UserSchemaArrayOneOfArgs{...} }

type UserSchemaArrayOneOfArrayOutput

type UserSchemaArrayOneOfArrayOutput struct{ *pulumi.OutputState }

func (UserSchemaArrayOneOfArrayOutput) ElementType

func (UserSchemaArrayOneOfArrayOutput) Index

func (UserSchemaArrayOneOfArrayOutput) ToUserSchemaArrayOneOfArrayOutput

func (o UserSchemaArrayOneOfArrayOutput) ToUserSchemaArrayOneOfArrayOutput() UserSchemaArrayOneOfArrayOutput

func (UserSchemaArrayOneOfArrayOutput) ToUserSchemaArrayOneOfArrayOutputWithContext

func (o UserSchemaArrayOneOfArrayOutput) ToUserSchemaArrayOneOfArrayOutputWithContext(ctx context.Context) UserSchemaArrayOneOfArrayOutput

type UserSchemaArrayOneOfInput

type UserSchemaArrayOneOfInput interface {
	pulumi.Input

	ToUserSchemaArrayOneOfOutput() UserSchemaArrayOneOfOutput
	ToUserSchemaArrayOneOfOutputWithContext(context.Context) UserSchemaArrayOneOfOutput
}

UserSchemaArrayOneOfInput is an input type that accepts UserSchemaArrayOneOfArgs and UserSchemaArrayOneOfOutput values. You can construct a concrete instance of `UserSchemaArrayOneOfInput` via:

UserSchemaArrayOneOfArgs{...}

type UserSchemaArrayOneOfOutput

type UserSchemaArrayOneOfOutput struct{ *pulumi.OutputState }

func (UserSchemaArrayOneOfOutput) Const

value mapping to member of `enum`.

func (UserSchemaArrayOneOfOutput) ElementType

func (UserSchemaArrayOneOfOutput) ElementType() reflect.Type

func (UserSchemaArrayOneOfOutput) Title

display name for the enum value.

func (UserSchemaArrayOneOfOutput) ToUserSchemaArrayOneOfOutput

func (o UserSchemaArrayOneOfOutput) ToUserSchemaArrayOneOfOutput() UserSchemaArrayOneOfOutput

func (UserSchemaArrayOneOfOutput) ToUserSchemaArrayOneOfOutputWithContext

func (o UserSchemaArrayOneOfOutput) ToUserSchemaArrayOneOfOutputWithContext(ctx context.Context) UserSchemaArrayOneOfOutput

type UserSchemaArrayOutput

type UserSchemaArrayOutput struct{ *pulumi.OutputState }

func (UserSchemaArrayOutput) ElementType

func (UserSchemaArrayOutput) ElementType() reflect.Type

func (UserSchemaArrayOutput) Index

func (UserSchemaArrayOutput) ToUserSchemaArrayOutput

func (o UserSchemaArrayOutput) ToUserSchemaArrayOutput() UserSchemaArrayOutput

func (UserSchemaArrayOutput) ToUserSchemaArrayOutputWithContext

func (o UserSchemaArrayOutput) ToUserSchemaArrayOutputWithContext(ctx context.Context) UserSchemaArrayOutput

type UserSchemaInput

type UserSchemaInput interface {
	pulumi.Input

	ToUserSchemaOutput() UserSchemaOutput
	ToUserSchemaOutputWithContext(ctx context.Context) UserSchemaOutput
}

type UserSchemaMap

type UserSchemaMap map[string]UserSchemaInput

func (UserSchemaMap) ElementType

func (UserSchemaMap) ElementType() reflect.Type

func (UserSchemaMap) ToUserSchemaMapOutput

func (i UserSchemaMap) ToUserSchemaMapOutput() UserSchemaMapOutput

func (UserSchemaMap) ToUserSchemaMapOutputWithContext

func (i UserSchemaMap) ToUserSchemaMapOutputWithContext(ctx context.Context) UserSchemaMapOutput

type UserSchemaMapInput

type UserSchemaMapInput interface {
	pulumi.Input

	ToUserSchemaMapOutput() UserSchemaMapOutput
	ToUserSchemaMapOutputWithContext(context.Context) UserSchemaMapOutput
}

UserSchemaMapInput is an input type that accepts UserSchemaMap and UserSchemaMapOutput values. You can construct a concrete instance of `UserSchemaMapInput` via:

UserSchemaMap{ "key": UserSchemaArgs{...} }

type UserSchemaMapOutput

type UserSchemaMapOutput struct{ *pulumi.OutputState }

func (UserSchemaMapOutput) ElementType

func (UserSchemaMapOutput) ElementType() reflect.Type

func (UserSchemaMapOutput) MapIndex

func (UserSchemaMapOutput) ToUserSchemaMapOutput

func (o UserSchemaMapOutput) ToUserSchemaMapOutput() UserSchemaMapOutput

func (UserSchemaMapOutput) ToUserSchemaMapOutputWithContext

func (o UserSchemaMapOutput) ToUserSchemaMapOutputWithContext(ctx context.Context) UserSchemaMapOutput

type UserSchemaOneOf

type UserSchemaOneOf struct {
	// value mapping to member of `enum`.
	Const string `pulumi:"const"`
	// display name for the enum value.
	Title string `pulumi:"title"`
}

type UserSchemaOneOfArgs

type UserSchemaOneOfArgs struct {
	// value mapping to member of `enum`.
	Const pulumi.StringInput `pulumi:"const"`
	// display name for the enum value.
	Title pulumi.StringInput `pulumi:"title"`
}

func (UserSchemaOneOfArgs) ElementType

func (UserSchemaOneOfArgs) ElementType() reflect.Type

func (UserSchemaOneOfArgs) ToUserSchemaOneOfOutput

func (i UserSchemaOneOfArgs) ToUserSchemaOneOfOutput() UserSchemaOneOfOutput

func (UserSchemaOneOfArgs) ToUserSchemaOneOfOutputWithContext

func (i UserSchemaOneOfArgs) ToUserSchemaOneOfOutputWithContext(ctx context.Context) UserSchemaOneOfOutput

type UserSchemaOneOfArray

type UserSchemaOneOfArray []UserSchemaOneOfInput

func (UserSchemaOneOfArray) ElementType

func (UserSchemaOneOfArray) ElementType() reflect.Type

func (UserSchemaOneOfArray) ToUserSchemaOneOfArrayOutput

func (i UserSchemaOneOfArray) ToUserSchemaOneOfArrayOutput() UserSchemaOneOfArrayOutput

func (UserSchemaOneOfArray) ToUserSchemaOneOfArrayOutputWithContext

func (i UserSchemaOneOfArray) ToUserSchemaOneOfArrayOutputWithContext(ctx context.Context) UserSchemaOneOfArrayOutput

type UserSchemaOneOfArrayInput

type UserSchemaOneOfArrayInput interface {
	pulumi.Input

	ToUserSchemaOneOfArrayOutput() UserSchemaOneOfArrayOutput
	ToUserSchemaOneOfArrayOutputWithContext(context.Context) UserSchemaOneOfArrayOutput
}

UserSchemaOneOfArrayInput is an input type that accepts UserSchemaOneOfArray and UserSchemaOneOfArrayOutput values. You can construct a concrete instance of `UserSchemaOneOfArrayInput` via:

UserSchemaOneOfArray{ UserSchemaOneOfArgs{...} }

type UserSchemaOneOfArrayOutput

type UserSchemaOneOfArrayOutput struct{ *pulumi.OutputState }

func (UserSchemaOneOfArrayOutput) ElementType

func (UserSchemaOneOfArrayOutput) ElementType() reflect.Type

func (UserSchemaOneOfArrayOutput) Index

func (UserSchemaOneOfArrayOutput) ToUserSchemaOneOfArrayOutput

func (o UserSchemaOneOfArrayOutput) ToUserSchemaOneOfArrayOutput() UserSchemaOneOfArrayOutput

func (UserSchemaOneOfArrayOutput) ToUserSchemaOneOfArrayOutputWithContext

func (o UserSchemaOneOfArrayOutput) ToUserSchemaOneOfArrayOutputWithContext(ctx context.Context) UserSchemaOneOfArrayOutput

type UserSchemaOneOfInput

type UserSchemaOneOfInput interface {
	pulumi.Input

	ToUserSchemaOneOfOutput() UserSchemaOneOfOutput
	ToUserSchemaOneOfOutputWithContext(context.Context) UserSchemaOneOfOutput
}

UserSchemaOneOfInput is an input type that accepts UserSchemaOneOfArgs and UserSchemaOneOfOutput values. You can construct a concrete instance of `UserSchemaOneOfInput` via:

UserSchemaOneOfArgs{...}

type UserSchemaOneOfOutput

type UserSchemaOneOfOutput struct{ *pulumi.OutputState }

func (UserSchemaOneOfOutput) Const

value mapping to member of `enum`.

func (UserSchemaOneOfOutput) ElementType

func (UserSchemaOneOfOutput) ElementType() reflect.Type

func (UserSchemaOneOfOutput) Title

display name for the enum value.

func (UserSchemaOneOfOutput) ToUserSchemaOneOfOutput

func (o UserSchemaOneOfOutput) ToUserSchemaOneOfOutput() UserSchemaOneOfOutput

func (UserSchemaOneOfOutput) ToUserSchemaOneOfOutputWithContext

func (o UserSchemaOneOfOutput) ToUserSchemaOneOfOutputWithContext(ctx context.Context) UserSchemaOneOfOutput

type UserSchemaOutput

type UserSchemaOutput struct{ *pulumi.OutputState }

func (UserSchemaOutput) AppId added in v3.9.0

The Application's ID the user custom schema property should be assigned to.

func (UserSchemaOutput) ArrayEnums added in v3.9.0

func (o UserSchemaOutput) ArrayEnums() pulumi.StringArrayOutput

Array of values that an array property's items can be set to.

func (UserSchemaOutput) ArrayOneOfs added in v3.9.0

Display name and value an enum array can be set to.

func (UserSchemaOutput) ArrayType added in v3.9.0

func (o UserSchemaOutput) ArrayType() pulumi.StringPtrOutput

The type of the array elements if `type` is set to `"array"`.

func (UserSchemaOutput) Description added in v3.9.0

func (o UserSchemaOutput) Description() pulumi.StringPtrOutput

The description of the user schema property.

func (UserSchemaOutput) ElementType

func (UserSchemaOutput) ElementType() reflect.Type

func (UserSchemaOutput) Enums added in v3.9.0

Array of values a primitive property can be set to. See `arrayEnum` for arrays.

func (UserSchemaOutput) ExternalName added in v3.9.0

func (o UserSchemaOutput) ExternalName() pulumi.StringPtrOutput

External name of the user schema property.

func (UserSchemaOutput) ExternalNamespace added in v3.9.0

func (o UserSchemaOutput) ExternalNamespace() pulumi.StringPtrOutput

External namespace of the user schema property.

func (UserSchemaOutput) Index added in v3.9.0

The property name.

func (UserSchemaOutput) Master added in v3.9.0

Master priority for the user schema property. It can be set to `"PROFILE_MASTER"` or `"OKTA"`.

func (UserSchemaOutput) MaxLength added in v3.9.0

func (o UserSchemaOutput) MaxLength() pulumi.IntPtrOutput

The maximum length of the user property value. Only applies to type `"string"`.

func (UserSchemaOutput) MinLength added in v3.9.0

func (o UserSchemaOutput) MinLength() pulumi.IntPtrOutput

The minimum length of the user property value. Only applies to type `"string"`.

func (UserSchemaOutput) OneOfs added in v3.9.0

Array of maps containing a mapping for display name to enum value.

func (UserSchemaOutput) Permissions added in v3.9.0

func (o UserSchemaOutput) Permissions() pulumi.StringPtrOutput

Access control permissions for the property. It can be set to `"READ_WRITE"`, `"READ_ONLY"`, `"HIDE"`.

func (UserSchemaOutput) Required added in v3.9.0

func (o UserSchemaOutput) Required() pulumi.BoolPtrOutput

Whether the property is required for this application's users.

func (UserSchemaOutput) Scope added in v3.9.0

determines whether an app user attribute can be set at the Individual or Group Level.

func (UserSchemaOutput) Title added in v3.9.0

display name for the enum value.

func (UserSchemaOutput) ToUserSchemaOutput

func (o UserSchemaOutput) ToUserSchemaOutput() UserSchemaOutput

func (UserSchemaOutput) ToUserSchemaOutputWithContext

func (o UserSchemaOutput) ToUserSchemaOutputWithContext(ctx context.Context) UserSchemaOutput

func (UserSchemaOutput) Type added in v3.9.0

The type of the schema property. It can be `"string"`, `"boolean"`, `"number"`, `"integer"`, `"array"`, or `"object"`.

func (UserSchemaOutput) Union added in v3.9.0

Used to assign attribute group priority. Can not be set to 'true' if `scope` is set to Individual level.

func (UserSchemaOutput) Unique added in v3.9.0

Subschema unique restriction

func (UserSchemaOutput) UserType added in v3.9.0

Custom subschema user type

type UserSchemaState

type UserSchemaState struct {
	// The Application's ID the user custom schema property should be assigned to.
	AppId pulumi.StringPtrInput
	// Array of values that an array property's items can be set to.
	ArrayEnums pulumi.StringArrayInput
	// Display name and value an enum array can be set to.
	ArrayOneOfs UserSchemaArrayOneOfArrayInput
	// The type of the array elements if `type` is set to `"array"`.
	ArrayType pulumi.StringPtrInput
	// The description of the user schema property.
	Description pulumi.StringPtrInput
	// Array of values a primitive property can be set to. See `arrayEnum` for arrays.
	Enums pulumi.StringArrayInput
	// External name of the user schema property.
	ExternalName pulumi.StringPtrInput
	// External namespace of the user schema property.
	ExternalNamespace pulumi.StringPtrInput
	// The property name.
	Index pulumi.StringPtrInput
	// Master priority for the user schema property. It can be set to `"PROFILE_MASTER"` or `"OKTA"`.
	Master pulumi.StringPtrInput
	// The maximum length of the user property value. Only applies to type `"string"`.
	MaxLength pulumi.IntPtrInput
	// The minimum length of the user property value. Only applies to type `"string"`.
	MinLength pulumi.IntPtrInput
	// Array of maps containing a mapping for display name to enum value.
	OneOfs UserSchemaOneOfArrayInput
	// Access control permissions for the property. It can be set to `"READ_WRITE"`, `"READ_ONLY"`, `"HIDE"`.
	Permissions pulumi.StringPtrInput
	// Whether the property is required for this application's users.
	Required pulumi.BoolPtrInput
	// determines whether an app user attribute can be set at the Individual or Group Level.
	Scope pulumi.StringPtrInput
	// display name for the enum value.
	Title pulumi.StringPtrInput
	// The type of the schema property. It can be `"string"`, `"boolean"`, `"number"`, `"integer"`, `"array"`, or `"object"`.
	Type pulumi.StringPtrInput
	// Used to assign attribute group priority. Can not be set to 'true' if `scope` is set to Individual level.
	Union pulumi.BoolPtrInput
	// Subschema unique restriction
	Unique pulumi.StringPtrInput
	// Custom subschema user type
	UserType pulumi.StringPtrInput
}

func (UserSchemaState) ElementType

func (UserSchemaState) ElementType() reflect.Type

type UserState

type UserState struct {
	// App to associate user with.
	AppId             pulumi.StringPtrInput
	HasSharedUsername pulumi.BoolPtrInput
	// The password to use.
	Password pulumi.StringPtrInput
	// The JSON profile of the App User.
	Profile pulumi.StringPtrInput
	// Retain the user association on destroy. If set to true, the resource will be removed from state but not from the Okta app.
	RetainAssignment pulumi.BoolPtrInput
	// User to associate the application with.
	UserId pulumi.StringPtrInput
	// The username to use for the app user. In case the user is assigned to the app with
	// 'SHARED_USERNAME_AND_PASSWORD' credentials scheme, this field will be computed and should not be set.
	Username pulumi.StringPtrInput
}

func (UserState) ElementType

func (UserState) ElementType() reflect.Type

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL