Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Auth0 Provider
  3. API Docs
  4. Client
Auth0 v3.21.0 published on Friday, May 23, 2025 by Pulumi
pulumi/pulumi-auth0

auth0.Client

Explore with Pulumi AI

auth0 logo
Auth0 v3.21.0 published on Friday, May 23, 2025 by Pulumi
pulumi/pulumi-auth0

    With this resource, you can set up applications that use Auth0 for authentication and configure allowed callback URLs and secrets for these applications.

    Create Client Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Client(name: string, args?: ClientArgs, opts?: CustomResourceOptions);
    @overload
def Client(resource_name: str,
           args: Optional[ClientArgs] = None,
           opts: Optional[ResourceOptions] = None)

@overload
def Client(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           addons: Optional[ClientAddonsArgs] = None,
           allowed_clients: Optional[Sequence[str]] = None,
           allowed_logout_urls: Optional[Sequence[str]] = None,
           allowed_origins: Optional[Sequence[str]] = None,
           app_type: Optional[str] = None,
           callbacks: Optional[Sequence[str]] = None,
           client_aliases: Optional[Sequence[str]] = None,
           client_metadata: Optional[Mapping[str, str]] = None,
           compliance_level: Optional[str] = None,
           cross_origin_auth: Optional[bool] = None,
           cross_origin_loc: Optional[str] = None,
           custom_login_page: Optional[str] = None,
           custom_login_page_on: Optional[bool] = None,
           default_organization: Optional[ClientDefaultOrganizationArgs] = None,
           description: Optional[str] = None,
           encryption_key: Optional[Mapping[str, str]] = None,
           form_template: Optional[str] = None,
           grant_types: Optional[Sequence[str]] = None,
           initiate_login_uri: Optional[str] = None,
           is_first_party: Optional[bool] = None,
           is_token_endpoint_ip_header_trusted: Optional[bool] = None,
           jwt_configuration: Optional[ClientJwtConfigurationArgs] = None,
           logo_uri: Optional[str] = None,
           mobile: Optional[ClientMobileArgs] = None,
           name: Optional[str] = None,
           native_social_login: Optional[ClientNativeSocialLoginArgs] = None,
           oidc_backchannel_logout_urls: Optional[Sequence[str]] = None,
           oidc_conformant: Optional[bool] = None,
           oidc_logout: Optional[ClientOidcLogoutArgs] = None,
           organization_require_behavior: Optional[str] = None,
           organization_usage: Optional[str] = None,
           refresh_token: Optional[ClientRefreshTokenArgs] = None,
           require_proof_of_possession: Optional[bool] = None,
           require_pushed_authorization_requests: Optional[bool] = None,
           session_transfer: Optional[ClientSessionTransferArgs] = None,
           sso: Optional[bool] = None,
           sso_disabled: Optional[bool] = None,
           token_exchange: Optional[ClientTokenExchangeArgs] = None,
           web_origins: Optional[Sequence[str]] = None)
    func NewClient(ctx *Context, name string, args *ClientArgs, opts ...ResourceOption) (*Client, error)
    public Client(string name, ClientArgs? args = null, CustomResourceOptions? opts = null)
    public Client(String name, ClientArgs args)
public Client(String name, ClientArgs args, CustomResourceOptions options)

    type: auth0:Client
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ClientArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ClientArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ClientArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ClientArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ClientArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var clientResource = new Auth0.Client("clientResource", new()
{
    Addons = new Auth0.Inputs.ClientAddonsArgs
    {
        Aws = new Auth0.Inputs.ClientAddonsAwsArgs
        {
            LifetimeInSeconds = 0,
            Principal = "string",
            Role = "string",
        },
        AzureBlob = new Auth0.Inputs.ClientAddonsAzureBlobArgs
        {
            AccountName = "string",
            BlobDelete = false,
            BlobName = "string",
            BlobRead = false,
            BlobWrite = false,
            ContainerDelete = false,
            ContainerList = false,
            ContainerName = "string",
            ContainerRead = false,
            ContainerWrite = false,
            Expiration = 0,
            SignedIdentifier = "string",
            StorageAccessKey = "string",
        },
        AzureSb = new Auth0.Inputs.ClientAddonsAzureSbArgs
        {
            EntityPath = "string",
            Expiration = 0,
            Namespace = "string",
            SasKey = "string",
            SasKeyName = "string",
        },
        Box = null,
        Cloudbees = null,
        Concur = null,
        Dropbox = null,
        Echosign = new Auth0.Inputs.ClientAddonsEchosignArgs
        {
            Domain = "string",
        },
        Egnyte = new Auth0.Inputs.ClientAddonsEgnyteArgs
        {
            Domain = "string",
        },
        Firebase = new Auth0.Inputs.ClientAddonsFirebaseArgs
        {
            ClientEmail = "string",
            LifetimeInSeconds = 0,
            PrivateKey = "string",
            PrivateKeyId = "string",
            Secret = "string",
        },
        Layer = new Auth0.Inputs.ClientAddonsLayerArgs
        {
            KeyId = "string",
            PrivateKey = "string",
            ProviderId = "string",
            Expiration = 0,
            Principal = "string",
        },
        Mscrm = new Auth0.Inputs.ClientAddonsMscrmArgs
        {
            Url = "string",
        },
        Newrelic = new Auth0.Inputs.ClientAddonsNewrelicArgs
        {
            Account = "string",
        },
        Office365 = new Auth0.Inputs.ClientAddonsOffice365Args
        {
            Connection = "string",
            Domain = "string",
        },
        Rms = new Auth0.Inputs.ClientAddonsRmsArgs
        {
            Url = "string",
        },
        Salesforce = new Auth0.Inputs.ClientAddonsSalesforceArgs
        {
            EntityId = "string",
        },
        SalesforceApi = new Auth0.Inputs.ClientAddonsSalesforceApiArgs
        {
            ClientId = "string",
            CommunityName = "string",
            CommunityUrlSection = "string",
            Principal = "string",
        },
        SalesforceSandboxApi = new Auth0.Inputs.ClientAddonsSalesforceSandboxApiArgs
        {
            ClientId = "string",
            CommunityName = "string",
            CommunityUrlSection = "string",
            Principal = "string",
        },
        Samlp = new Auth0.Inputs.ClientAddonsSamlpArgs
        {
            Audience = "string",
            AuthnContextClassRef = "string",
            Binding = "string",
            CreateUpnClaim = false,
            Destination = "string",
            DigestAlgorithm = "string",
            FlexibleMappings = "string",
            IncludeAttributeNameFormat = false,
            Issuer = "string",
            LifetimeInSeconds = 0,
            Logout = new Auth0.Inputs.ClientAddonsSamlpLogoutArgs
            {
                Callback = "string",
                SloEnabled = false,
            },
            MapIdentities = false,
            MapUnknownClaimsAsIs = false,
            Mappings = 
            {
                { "string", "string" },
            },
            NameIdentifierFormat = "string",
            NameIdentifierProbes = new[]
            {
                "string",
            },
            PassthroughClaimsWithNoMapping = false,
            Recipient = "string",
            SignResponse = false,
            SignatureAlgorithm = "string",
            SigningCert = "string",
            TypedAttributes = false,
        },
        SapApi = new Auth0.Inputs.ClientAddonsSapApiArgs
        {
            ClientId = "string",
            NameIdentifierFormat = "string",
            Scope = "string",
            ServicePassword = "string",
            TokenEndpointUrl = "string",
            UsernameAttribute = "string",
        },
        Sentry = new Auth0.Inputs.ClientAddonsSentryArgs
        {
            BaseUrl = "string",
            OrgSlug = "string",
        },
        Sharepoint = new Auth0.Inputs.ClientAddonsSharepointArgs
        {
            ExternalUrls = new[]
            {
                "string",
            },
            Url = "string",
        },
        Slack = new Auth0.Inputs.ClientAddonsSlackArgs
        {
            Team = "string",
        },
        Springcm = new Auth0.Inputs.ClientAddonsSpringcmArgs
        {
            AcsUrl = "string",
        },
        SsoIntegration = new Auth0.Inputs.ClientAddonsSsoIntegrationArgs
        {
            Name = "string",
            Version = "string",
        },
        Wams = new Auth0.Inputs.ClientAddonsWamsArgs
        {
            MasterKey = "string",
        },
        Wsfed = null,
        Zendesk = new Auth0.Inputs.ClientAddonsZendeskArgs
        {
            AccountName = "string",
        },
        Zoom = new Auth0.Inputs.ClientAddonsZoomArgs
        {
            Account = "string",
        },
    },
    AllowedClients = new[]
    {
        "string",
    },
    AllowedLogoutUrls = new[]
    {
        "string",
    },
    AllowedOrigins = new[]
    {
        "string",
    },
    AppType = "string",
    Callbacks = new[]
    {
        "string",
    },
    ClientAliases = new[]
    {
        "string",
    },
    ClientMetadata = 
    {
        { "string", "string" },
    },
    ComplianceLevel = "string",
    CrossOriginAuth = false,
    CrossOriginLoc = "string",
    CustomLoginPage = "string",
    CustomLoginPageOn = false,
    DefaultOrganization = new Auth0.Inputs.ClientDefaultOrganizationArgs
    {
        Disable = false,
        Flows = new[]
        {
            "string",
        },
        OrganizationId = "string",
    },
    Description = "string",
    EncryptionKey = 
    {
        { "string", "string" },
    },
    FormTemplate = "string",
    GrantTypes = new[]
    {
        "string",
    },
    InitiateLoginUri = "string",
    IsFirstParty = false,
    IsTokenEndpointIpHeaderTrusted = false,
    JwtConfiguration = new Auth0.Inputs.ClientJwtConfigurationArgs
    {
        Alg = "string",
        LifetimeInSeconds = 0,
        Scopes = 
        {
            { "string", "string" },
        },
        SecretEncoded = false,
    },
    LogoUri = "string",
    Mobile = new Auth0.Inputs.ClientMobileArgs
    {
        Android = new Auth0.Inputs.ClientMobileAndroidArgs
        {
            AppPackageName = "string",
            Sha256CertFingerprints = new[]
            {
                "string",
            },
        },
        Ios = new Auth0.Inputs.ClientMobileIosArgs
        {
            AppBundleIdentifier = "string",
            TeamId = "string",
        },
    },
    Name = "string",
    NativeSocialLogin = new Auth0.Inputs.ClientNativeSocialLoginArgs
    {
        Apple = new Auth0.Inputs.ClientNativeSocialLoginAppleArgs
        {
            Enabled = false,
        },
        Facebook = new Auth0.Inputs.ClientNativeSocialLoginFacebookArgs
        {
            Enabled = false,
        },
        Google = new Auth0.Inputs.ClientNativeSocialLoginGoogleArgs
        {
            Enabled = false,
        },
    },
    OidcConformant = false,
    OidcLogout = new Auth0.Inputs.ClientOidcLogoutArgs
    {
        BackchannelLogoutUrls = new[]
        {
            "string",
        },
        BackchannelLogoutInitiators = new Auth0.Inputs.ClientOidcLogoutBackchannelLogoutInitiatorsArgs
        {
            Mode = "string",
            SelectedInitiators = new[]
            {
                "string",
            },
        },
    },
    OrganizationRequireBehavior = "string",
    OrganizationUsage = "string",
    RefreshToken = new Auth0.Inputs.ClientRefreshTokenArgs
    {
        ExpirationType = "string",
        RotationType = "string",
        IdleTokenLifetime = 0,
        InfiniteIdleTokenLifetime = false,
        InfiniteTokenLifetime = false,
        Leeway = 0,
        Policies = new[]
        {
            new Auth0.Inputs.ClientRefreshTokenPolicyArgs
            {
                Audience = "string",
                Scopes = new[]
                {
                    "string",
                },
            },
        },
        TokenLifetime = 0,
    },
    RequireProofOfPossession = false,
    RequirePushedAuthorizationRequests = false,
    SessionTransfer = new Auth0.Inputs.ClientSessionTransferArgs
    {
        AllowRefreshToken = false,
        AllowedAuthenticationMethods = new[]
        {
            "string",
        },
        CanCreateSessionTransferToken = false,
        EnforceDeviceBinding = "string",
    },
    Sso = false,
    SsoDisabled = false,
    TokenExchange = new Auth0.Inputs.ClientTokenExchangeArgs
    {
        AllowAnyProfileOfTypes = new[]
        {
            "string",
        },
    },
    WebOrigins = new[]
    {
        "string",
    },
});

    example, err := auth0.NewClient(ctx, "clientResource", &auth0.ClientArgs{
	Addons: &auth0.ClientAddonsArgs{
		Aws: &auth0.ClientAddonsAwsArgs{
			LifetimeInSeconds: pulumi.Int(0),
			Principal:         pulumi.String("string"),
			Role:              pulumi.String("string"),
		},
		AzureBlob: &auth0.ClientAddonsAzureBlobArgs{
			AccountName:      pulumi.String("string"),
			BlobDelete:       pulumi.Bool(false),
			BlobName:         pulumi.String("string"),
			BlobRead:         pulumi.Bool(false),
			BlobWrite:        pulumi.Bool(false),
			ContainerDelete:  pulumi.Bool(false),
			ContainerList:    pulumi.Bool(false),
			ContainerName:    pulumi.String("string"),
			ContainerRead:    pulumi.Bool(false),
			ContainerWrite:   pulumi.Bool(false),
			Expiration:       pulumi.Int(0),
			SignedIdentifier: pulumi.String("string"),
			StorageAccessKey: pulumi.String("string"),
		},
		AzureSb: &auth0.ClientAddonsAzureSbArgs{
			EntityPath: pulumi.String("string"),
			Expiration: pulumi.Int(0),
			Namespace:  pulumi.String("string"),
			SasKey:     pulumi.String("string"),
			SasKeyName: pulumi.String("string"),
		},
		Box:       &auth0.ClientAddonsBoxArgs{},
		Cloudbees: &auth0.ClientAddonsCloudbeesArgs{},
		Concur:    &auth0.ClientAddonsConcurArgs{},
		Dropbox:   &auth0.ClientAddonsDropboxArgs{},
		Echosign: &auth0.ClientAddonsEchosignArgs{
			Domain: pulumi.String("string"),
		},
		Egnyte: &auth0.ClientAddonsEgnyteArgs{
			Domain: pulumi.String("string"),
		},
		Firebase: &auth0.ClientAddonsFirebaseArgs{
			ClientEmail:       pulumi.String("string"),
			LifetimeInSeconds: pulumi.Int(0),
			PrivateKey:        pulumi.String("string"),
			PrivateKeyId:      pulumi.String("string"),
			Secret:            pulumi.String("string"),
		},
		Layer: &auth0.ClientAddonsLayerArgs{
			KeyId:      pulumi.String("string"),
			PrivateKey: pulumi.String("string"),
			ProviderId: pulumi.String("string"),
			Expiration: pulumi.Int(0),
			Principal:  pulumi.String("string"),
		},
		Mscrm: &auth0.ClientAddonsMscrmArgs{
			Url: pulumi.String("string"),
		},
		Newrelic: &auth0.ClientAddonsNewrelicArgs{
			Account: pulumi.String("string"),
		},
		Office365: &auth0.ClientAddonsOffice365Args{
			Connection: pulumi.String("string"),
			Domain:     pulumi.String("string"),
		},
		Rms: &auth0.ClientAddonsRmsArgs{
			Url: pulumi.String("string"),
		},
		Salesforce: &auth0.ClientAddonsSalesforceArgs{
			EntityId: pulumi.String("string"),
		},
		SalesforceApi: &auth0.ClientAddonsSalesforceApiArgs{
			ClientId:            pulumi.String("string"),
			CommunityName:       pulumi.String("string"),
			CommunityUrlSection: pulumi.String("string"),
			Principal:           pulumi.String("string"),
		},
		SalesforceSandboxApi: &auth0.ClientAddonsSalesforceSandboxApiArgs{
			ClientId:            pulumi.String("string"),
			CommunityName:       pulumi.String("string"),
			CommunityUrlSection: pulumi.String("string"),
			Principal:           pulumi.String("string"),
		},
		Samlp: &auth0.ClientAddonsSamlpArgs{
			Audience:                   pulumi.String("string"),
			AuthnContextClassRef:       pulumi.String("string"),
			Binding:                    pulumi.String("string"),
			CreateUpnClaim:             pulumi.Bool(false),
			Destination:                pulumi.String("string"),
			DigestAlgorithm:            pulumi.String("string"),
			FlexibleMappings:           pulumi.String("string"),
			IncludeAttributeNameFormat: pulumi.Bool(false),
			Issuer:                     pulumi.String("string"),
			LifetimeInSeconds:          pulumi.Int(0),
			Logout: &auth0.ClientAddonsSamlpLogoutArgs{
				Callback:   pulumi.String("string"),
				SloEnabled: pulumi.Bool(false),
			},
			MapIdentities:        pulumi.Bool(false),
			MapUnknownClaimsAsIs: pulumi.Bool(false),
			Mappings: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			NameIdentifierFormat: pulumi.String("string"),
			NameIdentifierProbes: pulumi.StringArray{
				pulumi.String("string"),
			},
			PassthroughClaimsWithNoMapping: pulumi.Bool(false),
			Recipient:                      pulumi.String("string"),
			SignResponse:                   pulumi.Bool(false),
			SignatureAlgorithm:             pulumi.String("string"),
			SigningCert:                    pulumi.String("string"),
			TypedAttributes:                pulumi.Bool(false),
		},
		SapApi: &auth0.ClientAddonsSapApiArgs{
			ClientId:             pulumi.String("string"),
			NameIdentifierFormat: pulumi.String("string"),
			Scope:                pulumi.String("string"),
			ServicePassword:      pulumi.String("string"),
			TokenEndpointUrl:     pulumi.String("string"),
			UsernameAttribute:    pulumi.String("string"),
		},
		Sentry: &auth0.ClientAddonsSentryArgs{
			BaseUrl: pulumi.String("string"),
			OrgSlug: pulumi.String("string"),
		},
		Sharepoint: &auth0.ClientAddonsSharepointArgs{
			ExternalUrls: pulumi.StringArray{
				pulumi.String("string"),
			},
			Url: pulumi.String("string"),
		},
		Slack: &auth0.ClientAddonsSlackArgs{
			Team: pulumi.String("string"),
		},
		Springcm: &auth0.ClientAddonsSpringcmArgs{
			AcsUrl: pulumi.String("string"),
		},
		SsoIntegration: &auth0.ClientAddonsSsoIntegrationArgs{
			Name:    pulumi.String("string"),
			Version: pulumi.String("string"),
		},
		Wams: &auth0.ClientAddonsWamsArgs{
			MasterKey: pulumi.String("string"),
		},
		Wsfed: &auth0.ClientAddonsWsfedArgs{},
		Zendesk: &auth0.ClientAddonsZendeskArgs{
			AccountName: pulumi.String("string"),
		},
		Zoom: &auth0.ClientAddonsZoomArgs{
			Account: pulumi.String("string"),
		},
	},
	AllowedClients: pulumi.StringArray{
		pulumi.String("string"),
	},
	AllowedLogoutUrls: pulumi.StringArray{
		pulumi.String("string"),
	},
	AllowedOrigins: pulumi.StringArray{
		pulumi.String("string"),
	},
	AppType: pulumi.String("string"),
	Callbacks: pulumi.StringArray{
		pulumi.String("string"),
	},
	ClientAliases: pulumi.StringArray{
		pulumi.String("string"),
	},
	ClientMetadata: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	ComplianceLevel:   pulumi.String("string"),
	CrossOriginAuth:   pulumi.Bool(false),
	CrossOriginLoc:    pulumi.String("string"),
	CustomLoginPage:   pulumi.String("string"),
	CustomLoginPageOn: pulumi.Bool(false),
	DefaultOrganization: &auth0.ClientDefaultOrganizationArgs{
		Disable: pulumi.Bool(false),
		Flows: pulumi.StringArray{
			pulumi.String("string"),
		},
		OrganizationId: pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	EncryptionKey: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	FormTemplate: pulumi.String("string"),
	GrantTypes: pulumi.StringArray{
		pulumi.String("string"),
	},
	InitiateLoginUri:               pulumi.String("string"),
	IsFirstParty:                   pulumi.Bool(false),
	IsTokenEndpointIpHeaderTrusted: pulumi.Bool(false),
	JwtConfiguration: &auth0.ClientJwtConfigurationArgs{
		Alg:               pulumi.String("string"),
		LifetimeInSeconds: pulumi.Int(0),
		Scopes: pulumi.StringMap{
			"string": pulumi.String("string"),
		},
		SecretEncoded: pulumi.Bool(false),
	},
	LogoUri: pulumi.String("string"),
	Mobile: &auth0.ClientMobileArgs{
		Android: &auth0.ClientMobileAndroidArgs{
			AppPackageName: pulumi.String("string"),
			Sha256CertFingerprints: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		Ios: &auth0.ClientMobileIosArgs{
			AppBundleIdentifier: pulumi.String("string"),
			TeamId:              pulumi.String("string"),
		},
	},
	Name: pulumi.String("string"),
	NativeSocialLogin: &auth0.ClientNativeSocialLoginArgs{
		Apple: &auth0.ClientNativeSocialLoginAppleArgs{
			Enabled: pulumi.Bool(false),
		},
		Facebook: &auth0.ClientNativeSocialLoginFacebookArgs{
			Enabled: pulumi.Bool(false),
		},
		Google: &auth0.ClientNativeSocialLoginGoogleArgs{
			Enabled: pulumi.Bool(false),
		},
	},
	OidcConformant: pulumi.Bool(false),
	OidcLogout: &auth0.ClientOidcLogoutArgs{
		BackchannelLogoutUrls: pulumi.StringArray{
			pulumi.String("string"),
		},
		BackchannelLogoutInitiators: &auth0.ClientOidcLogoutBackchannelLogoutInitiatorsArgs{
			Mode: pulumi.String("string"),
			SelectedInitiators: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	OrganizationRequireBehavior: pulumi.String("string"),
	OrganizationUsage:           pulumi.String("string"),
	RefreshToken: &auth0.ClientRefreshTokenArgs{
		ExpirationType:            pulumi.String("string"),
		RotationType:              pulumi.String("string"),
		IdleTokenLifetime:         pulumi.Int(0),
		InfiniteIdleTokenLifetime: pulumi.Bool(false),
		InfiniteTokenLifetime:     pulumi.Bool(false),
		Leeway:                    pulumi.Int(0),
		Policies: auth0.ClientRefreshTokenPolicyArray{
			&auth0.ClientRefreshTokenPolicyArgs{
				Audience: pulumi.String("string"),
				Scopes: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		TokenLifetime: pulumi.Int(0),
	},
	RequireProofOfPossession:           pulumi.Bool(false),
	RequirePushedAuthorizationRequests: pulumi.Bool(false),
	SessionTransfer: &auth0.ClientSessionTransferArgs{
		AllowRefreshToken: pulumi.Bool(false),
		AllowedAuthenticationMethods: pulumi.StringArray{
			pulumi.String("string"),
		},
		CanCreateSessionTransferToken: pulumi.Bool(false),
		EnforceDeviceBinding:          pulumi.String("string"),
	},
	Sso:         pulumi.Bool(false),
	SsoDisabled: pulumi.Bool(false),
	TokenExchange: &auth0.ClientTokenExchangeArgs{
		AllowAnyProfileOfTypes: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	WebOrigins: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var clientResource = new Client("clientResource", ClientArgs.builder()
    .addons(ClientAddonsArgs.builder()
        .aws(ClientAddonsAwsArgs.builder()
            .lifetimeInSeconds(0)
            .principal("string")
            .role("string")
            .build())
        .azureBlob(ClientAddonsAzureBlobArgs.builder()
            .accountName("string")
            .blobDelete(false)
            .blobName("string")
            .blobRead(false)
            .blobWrite(false)
            .containerDelete(false)
            .containerList(false)
            .containerName("string")
            .containerRead(false)
            .containerWrite(false)
            .expiration(0)
            .signedIdentifier("string")
            .storageAccessKey("string")
            .build())
        .azureSb(ClientAddonsAzureSbArgs.builder()
            .entityPath("string")
            .expiration(0)
            .namespace("string")
            .sasKey("string")
            .sasKeyName("string")
            .build())
        .box(ClientAddonsBoxArgs.builder()
            .build())
        .cloudbees(ClientAddonsCloudbeesArgs.builder()
            .build())
        .concur(ClientAddonsConcurArgs.builder()
            .build())
        .dropbox(ClientAddonsDropboxArgs.builder()
            .build())
        .echosign(ClientAddonsEchosignArgs.builder()
            .domain("string")
            .build())
        .egnyte(ClientAddonsEgnyteArgs.builder()
            .domain("string")
            .build())
        .firebase(ClientAddonsFirebaseArgs.builder()
            .clientEmail("string")
            .lifetimeInSeconds(0)
            .privateKey("string")
            .privateKeyId("string")
            .secret("string")
            .build())
        .layer(ClientAddonsLayerArgs.builder()
            .keyId("string")
            .privateKey("string")
            .providerId("string")
            .expiration(0)
            .principal("string")
            .build())
        .mscrm(ClientAddonsMscrmArgs.builder()
            .url("string")
            .build())
        .newrelic(ClientAddonsNewrelicArgs.builder()
            .account("string")
            .build())
        .office365(ClientAddonsOffice365Args.builder()
            .connection("string")
            .domain("string")
            .build())
        .rms(ClientAddonsRmsArgs.builder()
            .url("string")
            .build())
        .salesforce(ClientAddonsSalesforceArgs.builder()
            .entityId("string")
            .build())
        .salesforceApi(ClientAddonsSalesforceApiArgs.builder()
            .clientId("string")
            .communityName("string")
            .communityUrlSection("string")
            .principal("string")
            .build())
        .salesforceSandboxApi(ClientAddonsSalesforceSandboxApiArgs.builder()
            .clientId("string")
            .communityName("string")
            .communityUrlSection("string")
            .principal("string")
            .build())
        .samlp(ClientAddonsSamlpArgs.builder()
            .audience("string")
            .authnContextClassRef("string")
            .binding("string")
            .createUpnClaim(false)
            .destination("string")
            .digestAlgorithm("string")
            .flexibleMappings("string")
            .includeAttributeNameFormat(false)
            .issuer("string")
            .lifetimeInSeconds(0)
            .logout(ClientAddonsSamlpLogoutArgs.builder()
                .callback("string")
                .sloEnabled(false)
                .build())
            .mapIdentities(false)
            .mapUnknownClaimsAsIs(false)
            .mappings(Map.of("string", "string"))
            .nameIdentifierFormat("string")
            .nameIdentifierProbes("string")
            .passthroughClaimsWithNoMapping(false)
            .recipient("string")
            .signResponse(false)
            .signatureAlgorithm("string")
            .signingCert("string")
            .typedAttributes(false)
            .build())
        .sapApi(ClientAddonsSapApiArgs.builder()
            .clientId("string")
            .nameIdentifierFormat("string")
            .scope("string")
            .servicePassword("string")
            .tokenEndpointUrl("string")
            .usernameAttribute("string")
            .build())
        .sentry(ClientAddonsSentryArgs.builder()
            .baseUrl("string")
            .orgSlug("string")
            .build())
        .sharepoint(ClientAddonsSharepointArgs.builder()
            .externalUrls("string")
            .url("string")
            .build())
        .slack(ClientAddonsSlackArgs.builder()
            .team("string")
            .build())
        .springcm(ClientAddonsSpringcmArgs.builder()
            .acsUrl("string")
            .build())
        .ssoIntegration(ClientAddonsSsoIntegrationArgs.builder()
            .name("string")
            .version("string")
            .build())
        .wams(ClientAddonsWamsArgs.builder()
            .masterKey("string")
            .build())
        .wsfed(ClientAddonsWsfedArgs.builder()
            .build())
        .zendesk(ClientAddonsZendeskArgs.builder()
            .accountName("string")
            .build())
        .zoom(ClientAddonsZoomArgs.builder()
            .account("string")
            .build())
        .build())
    .allowedClients("string")
    .allowedLogoutUrls("string")
    .allowedOrigins("string")
    .appType("string")
    .callbacks("string")
    .clientAliases("string")
    .clientMetadata(Map.of("string", "string"))
    .complianceLevel("string")
    .crossOriginAuth(false)
    .crossOriginLoc("string")
    .customLoginPage("string")
    .customLoginPageOn(false)
    .defaultOrganization(ClientDefaultOrganizationArgs.builder()
        .disable(false)
        .flows("string")
        .organizationId("string")
        .build())
    .description("string")
    .encryptionKey(Map.of("string", "string"))
    .formTemplate("string")
    .grantTypes("string")
    .initiateLoginUri("string")
    .isFirstParty(false)
    .isTokenEndpointIpHeaderTrusted(false)
    .jwtConfiguration(ClientJwtConfigurationArgs.builder()
        .alg("string")
        .lifetimeInSeconds(0)
        .scopes(Map.of("string", "string"))
        .secretEncoded(false)
        .build())
    .logoUri("string")
    .mobile(ClientMobileArgs.builder()
        .android(ClientMobileAndroidArgs.builder()
            .appPackageName("string")
            .sha256CertFingerprints("string")
            .build())
        .ios(ClientMobileIosArgs.builder()
            .appBundleIdentifier("string")
            .teamId("string")
            .build())
        .build())
    .name("string")
    .nativeSocialLogin(ClientNativeSocialLoginArgs.builder()
        .apple(ClientNativeSocialLoginAppleArgs.builder()
            .enabled(false)
            .build())
        .facebook(ClientNativeSocialLoginFacebookArgs.builder()
            .enabled(false)
            .build())
        .google(ClientNativeSocialLoginGoogleArgs.builder()
            .enabled(false)
            .build())
        .build())
    .oidcConformant(false)
    .oidcLogout(ClientOidcLogoutArgs.builder()
        .backchannelLogoutUrls("string")
        .backchannelLogoutInitiators(ClientOidcLogoutBackchannelLogoutInitiatorsArgs.builder()
            .mode("string")
            .selectedInitiators("string")
            .build())
        .build())
    .organizationRequireBehavior("string")
    .organizationUsage("string")
    .refreshToken(ClientRefreshTokenArgs.builder()
        .expirationType("string")
        .rotationType("string")
        .idleTokenLifetime(0)
        .infiniteIdleTokenLifetime(false)
        .infiniteTokenLifetime(false)
        .leeway(0)
        .policies(ClientRefreshTokenPolicyArgs.builder()
            .audience("string")
            .scopes("string")
            .build())
        .tokenLifetime(0)
        .build())
    .requireProofOfPossession(false)
    .requirePushedAuthorizationRequests(false)
    .sessionTransfer(ClientSessionTransferArgs.builder()
        .allowRefreshToken(false)
        .allowedAuthenticationMethods("string")
        .canCreateSessionTransferToken(false)
        .enforceDeviceBinding("string")
        .build())
    .sso(false)
    .ssoDisabled(false)
    .tokenExchange(ClientTokenExchangeArgs.builder()
        .allowAnyProfileOfTypes("string")
        .build())
    .webOrigins("string")
    .build());

    client_resource = auth0.Client("clientResource",
    addons={
        "aws": {
            "lifetime_in_seconds": 0,
            "principal": "string",
            "role": "string",
        },
        "azure_blob": {
            "account_name": "string",
            "blob_delete": False,
            "blob_name": "string",
            "blob_read": False,
            "blob_write": False,
            "container_delete": False,
            "container_list": False,
            "container_name": "string",
            "container_read": False,
            "container_write": False,
            "expiration": 0,
            "signed_identifier": "string",
            "storage_access_key": "string",
        },
        "azure_sb": {
            "entity_path": "string",
            "expiration": 0,
            "namespace": "string",
            "sas_key": "string",
            "sas_key_name": "string",
        },
        "box": {},
        "cloudbees": {},
        "concur": {},
        "dropbox": {},
        "echosign": {
            "domain": "string",
        },
        "egnyte": {
            "domain": "string",
        },
        "firebase": {
            "client_email": "string",
            "lifetime_in_seconds": 0,
            "private_key": "string",
            "private_key_id": "string",
            "secret": "string",
        },
        "layer": {
            "key_id": "string",
            "private_key": "string",
            "provider_id": "string",
            "expiration": 0,
            "principal": "string",
        },
        "mscrm": {
            "url": "string",
        },
        "newrelic": {
            "account": "string",
        },
        "office365": {
            "connection": "string",
            "domain": "string",
        },
        "rms": {
            "url": "string",
        },
        "salesforce": {
            "entity_id": "string",
        },
        "salesforce_api": {
            "client_id": "string",
            "community_name": "string",
            "community_url_section": "string",
            "principal": "string",
        },
        "salesforce_sandbox_api": {
            "client_id": "string",
            "community_name": "string",
            "community_url_section": "string",
            "principal": "string",
        },
        "samlp": {
            "audience": "string",
            "authn_context_class_ref": "string",
            "binding": "string",
            "create_upn_claim": False,
            "destination": "string",
            "digest_algorithm": "string",
            "flexible_mappings": "string",
            "include_attribute_name_format": False,
            "issuer": "string",
            "lifetime_in_seconds": 0,
            "logout": {
                "callback": "string",
                "slo_enabled": False,
            },
            "map_identities": False,
            "map_unknown_claims_as_is": False,
            "mappings": {
                "string": "string",
            },
            "name_identifier_format": "string",
            "name_identifier_probes": ["string"],
            "passthrough_claims_with_no_mapping": False,
            "recipient": "string",
            "sign_response": False,
            "signature_algorithm": "string",
            "signing_cert": "string",
            "typed_attributes": False,
        },
        "sap_api": {
            "client_id": "string",
            "name_identifier_format": "string",
            "scope": "string",
            "service_password": "string",
            "token_endpoint_url": "string",
            "username_attribute": "string",
        },
        "sentry": {
            "base_url": "string",
            "org_slug": "string",
        },
        "sharepoint": {
            "external_urls": ["string"],
            "url": "string",
        },
        "slack": {
            "team": "string",
        },
        "springcm": {
            "acs_url": "string",
        },
        "sso_integration": {
            "name": "string",
            "version": "string",
        },
        "wams": {
            "master_key": "string",
        },
        "wsfed": {},
        "zendesk": {
            "account_name": "string",
        },
        "zoom": {
            "account": "string",
        },
    },
    allowed_clients=["string"],
    allowed_logout_urls=["string"],
    allowed_origins=["string"],
    app_type="string",
    callbacks=["string"],
    client_aliases=["string"],
    client_metadata={
        "string": "string",
    },
    compliance_level="string",
    cross_origin_auth=False,
    cross_origin_loc="string",
    custom_login_page="string",
    custom_login_page_on=False,
    default_organization={
        "disable": False,
        "flows": ["string"],
        "organization_id": "string",
    },
    description="string",
    encryption_key={
        "string": "string",
    },
    form_template="string",
    grant_types=["string"],
    initiate_login_uri="string",
    is_first_party=False,
    is_token_endpoint_ip_header_trusted=False,
    jwt_configuration={
        "alg": "string",
        "lifetime_in_seconds": 0,
        "scopes": {
            "string": "string",
        },
        "secret_encoded": False,
    },
    logo_uri="string",
    mobile={
        "android": {
            "app_package_name": "string",
            "sha256_cert_fingerprints": ["string"],
        },
        "ios": {
            "app_bundle_identifier": "string",
            "team_id": "string",
        },
    },
    name="string",
    native_social_login={
        "apple": {
            "enabled": False,
        },
        "facebook": {
            "enabled": False,
        },
        "google": {
            "enabled": False,
        },
    },
    oidc_conformant=False,
    oidc_logout={
        "backchannel_logout_urls": ["string"],
        "backchannel_logout_initiators": {
            "mode": "string",
            "selected_initiators": ["string"],
        },
    },
    organization_require_behavior="string",
    organization_usage="string",
    refresh_token={
        "expiration_type": "string",
        "rotation_type": "string",
        "idle_token_lifetime": 0,
        "infinite_idle_token_lifetime": False,
        "infinite_token_lifetime": False,
        "leeway": 0,
        "policies": [{
            "audience": "string",
            "scopes": ["string"],
        }],
        "token_lifetime": 0,
    },
    require_proof_of_possession=False,
    require_pushed_authorization_requests=False,
    session_transfer={
        "allow_refresh_token": False,
        "allowed_authentication_methods": ["string"],
        "can_create_session_transfer_token": False,
        "enforce_device_binding": "string",
    },
    sso=False,
    sso_disabled=False,
    token_exchange={
        "allow_any_profile_of_types": ["string"],
    },
    web_origins=["string"])

    const clientResource = new auth0.Client("clientResource", {
    addons: {
        aws: {
            lifetimeInSeconds: 0,
            principal: "string",
            role: "string",
        },
        azureBlob: {
            accountName: "string",
            blobDelete: false,
            blobName: "string",
            blobRead: false,
            blobWrite: false,
            containerDelete: false,
            containerList: false,
            containerName: "string",
            containerRead: false,
            containerWrite: false,
            expiration: 0,
            signedIdentifier: "string",
            storageAccessKey: "string",
        },
        azureSb: {
            entityPath: "string",
            expiration: 0,
            namespace: "string",
            sasKey: "string",
            sasKeyName: "string",
        },
        box: {},
        cloudbees: {},
        concur: {},
        dropbox: {},
        echosign: {
            domain: "string",
        },
        egnyte: {
            domain: "string",
        },
        firebase: {
            clientEmail: "string",
            lifetimeInSeconds: 0,
            privateKey: "string",
            privateKeyId: "string",
            secret: "string",
        },
        layer: {
            keyId: "string",
            privateKey: "string",
            providerId: "string",
            expiration: 0,
            principal: "string",
        },
        mscrm: {
            url: "string",
        },
        newrelic: {
            account: "string",
        },
        office365: {
            connection: "string",
            domain: "string",
        },
        rms: {
            url: "string",
        },
        salesforce: {
            entityId: "string",
        },
        salesforceApi: {
            clientId: "string",
            communityName: "string",
            communityUrlSection: "string",
            principal: "string",
        },
        salesforceSandboxApi: {
            clientId: "string",
            communityName: "string",
            communityUrlSection: "string",
            principal: "string",
        },
        samlp: {
            audience: "string",
            authnContextClassRef: "string",
            binding: "string",
            createUpnClaim: false,
            destination: "string",
            digestAlgorithm: "string",
            flexibleMappings: "string",
            includeAttributeNameFormat: false,
            issuer: "string",
            lifetimeInSeconds: 0,
            logout: {
                callback: "string",
                sloEnabled: false,
            },
            mapIdentities: false,
            mapUnknownClaimsAsIs: false,
            mappings: {
                string: "string",
            },
            nameIdentifierFormat: "string",
            nameIdentifierProbes: ["string"],
            passthroughClaimsWithNoMapping: false,
            recipient: "string",
            signResponse: false,
            signatureAlgorithm: "string",
            signingCert: "string",
            typedAttributes: false,
        },
        sapApi: {
            clientId: "string",
            nameIdentifierFormat: "string",
            scope: "string",
            servicePassword: "string",
            tokenEndpointUrl: "string",
            usernameAttribute: "string",
        },
        sentry: {
            baseUrl: "string",
            orgSlug: "string",
        },
        sharepoint: {
            externalUrls: ["string"],
            url: "string",
        },
        slack: {
            team: "string",
        },
        springcm: {
            acsUrl: "string",
        },
        ssoIntegration: {
            name: "string",
            version: "string",
        },
        wams: {
            masterKey: "string",
        },
        wsfed: {},
        zendesk: {
            accountName: "string",
        },
        zoom: {
            account: "string",
        },
    },
    allowedClients: ["string"],
    allowedLogoutUrls: ["string"],
    allowedOrigins: ["string"],
    appType: "string",
    callbacks: ["string"],
    clientAliases: ["string"],
    clientMetadata: {
        string: "string",
    },
    complianceLevel: "string",
    crossOriginAuth: false,
    crossOriginLoc: "string",
    customLoginPage: "string",
    customLoginPageOn: false,
    defaultOrganization: {
        disable: false,
        flows: ["string"],
        organizationId: "string",
    },
    description: "string",
    encryptionKey: {
        string: "string",
    },
    formTemplate: "string",
    grantTypes: ["string"],
    initiateLoginUri: "string",
    isFirstParty: false,
    isTokenEndpointIpHeaderTrusted: false,
    jwtConfiguration: {
        alg: "string",
        lifetimeInSeconds: 0,
        scopes: {
            string: "string",
        },
        secretEncoded: false,
    },
    logoUri: "string",
    mobile: {
        android: {
            appPackageName: "string",
            sha256CertFingerprints: ["string"],
        },
        ios: {
            appBundleIdentifier: "string",
            teamId: "string",
        },
    },
    name: "string",
    nativeSocialLogin: {
        apple: {
            enabled: false,
        },
        facebook: {
            enabled: false,
        },
        google: {
            enabled: false,
        },
    },
    oidcConformant: false,
    oidcLogout: {
        backchannelLogoutUrls: ["string"],
        backchannelLogoutInitiators: {
            mode: "string",
            selectedInitiators: ["string"],
        },
    },
    organizationRequireBehavior: "string",
    organizationUsage: "string",
    refreshToken: {
        expirationType: "string",
        rotationType: "string",
        idleTokenLifetime: 0,
        infiniteIdleTokenLifetime: false,
        infiniteTokenLifetime: false,
        leeway: 0,
        policies: [{
            audience: "string",
            scopes: ["string"],
        }],
        tokenLifetime: 0,
    },
    requireProofOfPossession: false,
    requirePushedAuthorizationRequests: false,
    sessionTransfer: {
        allowRefreshToken: false,
        allowedAuthenticationMethods: ["string"],
        canCreateSessionTransferToken: false,
        enforceDeviceBinding: "string",
    },
    sso: false,
    ssoDisabled: false,
    tokenExchange: {
        allowAnyProfileOfTypes: ["string"],
    },
    webOrigins: ["string"],
});

    type: auth0:Client
properties:
    addons:
        aws:
            lifetimeInSeconds: 0
            principal: string
            role: string
        azureBlob:
            accountName: string
            blobDelete: false
            blobName: string
            blobRead: false
            blobWrite: false
            containerDelete: false
            containerList: false
            containerName: string
            containerRead: false
            containerWrite: false
            expiration: 0
            signedIdentifier: string
            storageAccessKey: string
        azureSb:
            entityPath: string
            expiration: 0
            namespace: string
            sasKey: string
            sasKeyName: string
        box: {}
        cloudbees: {}
        concur: {}
        dropbox: {}
        echosign:
            domain: string
        egnyte:
            domain: string
        firebase:
            clientEmail: string
            lifetimeInSeconds: 0
            privateKey: string
            privateKeyId: string
            secret: string
        layer:
            expiration: 0
            keyId: string
            principal: string
            privateKey: string
            providerId: string
        mscrm:
            url: string
        newrelic:
            account: string
        office365:
            connection: string
            domain: string
        rms:
            url: string
        salesforce:
            entityId: string
        salesforceApi:
            clientId: string
            communityName: string
            communityUrlSection: string
            principal: string
        salesforceSandboxApi:
            clientId: string
            communityName: string
            communityUrlSection: string
            principal: string
        samlp:
            audience: string
            authnContextClassRef: string
            binding: string
            createUpnClaim: false
            destination: string
            digestAlgorithm: string
            flexibleMappings: string
            includeAttributeNameFormat: false
            issuer: string
            lifetimeInSeconds: 0
            logout:
                callback: string
                sloEnabled: false
            mapIdentities: false
            mapUnknownClaimsAsIs: false
            mappings:
                string: string
            nameIdentifierFormat: string
            nameIdentifierProbes:
                - string
            passthroughClaimsWithNoMapping: false
            recipient: string
            signResponse: false
            signatureAlgorithm: string
            signingCert: string
            typedAttributes: false
        sapApi:
            clientId: string
            nameIdentifierFormat: string
            scope: string
            servicePassword: string
            tokenEndpointUrl: string
            usernameAttribute: string
        sentry:
            baseUrl: string
            orgSlug: string
        sharepoint:
            externalUrls:
                - string
            url: string
        slack:
            team: string
        springcm:
            acsUrl: string
        ssoIntegration:
            name: string
            version: string
        wams:
            masterKey: string
        wsfed: {}
        zendesk:
            accountName: string
        zoom:
            account: string
    allowedClients:
        - string
    allowedLogoutUrls:
        - string
    allowedOrigins:
        - string
    appType: string
    callbacks:
        - string
    clientAliases:
        - string
    clientMetadata:
        string: string
    complianceLevel: string
    crossOriginAuth: false
    crossOriginLoc: string
    customLoginPage: string
    customLoginPageOn: false
    defaultOrganization:
        disable: false
        flows:
            - string
        organizationId: string
    description: string
    encryptionKey:
        string: string
    formTemplate: string
    grantTypes:
        - string
    initiateLoginUri: string
    isFirstParty: false
    isTokenEndpointIpHeaderTrusted: false
    jwtConfiguration:
        alg: string
        lifetimeInSeconds: 0
        scopes:
            string: string
        secretEncoded: false
    logoUri: string
    mobile:
        android:
            appPackageName: string
            sha256CertFingerprints:
                - string
        ios:
            appBundleIdentifier: string
            teamId: string
    name: string
    nativeSocialLogin:
        apple:
            enabled: false
        facebook:
            enabled: false
        google:
            enabled: false
    oidcConformant: false
    oidcLogout:
        backchannelLogoutInitiators:
            mode: string
            selectedInitiators:
                - string
        backchannelLogoutUrls:
            - string
    organizationRequireBehavior: string
    organizationUsage: string
    refreshToken:
        expirationType: string
        idleTokenLifetime: 0
        infiniteIdleTokenLifetime: false
        infiniteTokenLifetime: false
        leeway: 0
        policies:
            - audience: string
              scopes:
                - string
        rotationType: string
        tokenLifetime: 0
    requireProofOfPossession: false
    requirePushedAuthorizationRequests: false
    sessionTransfer:
        allowRefreshToken: false
        allowedAuthenticationMethods:
            - string
        canCreateSessionTransferToken: false
        enforceDeviceBinding: string
    sso: false
    ssoDisabled: false
    tokenExchange:
        allowAnyProfileOfTypes:
            - string
    webOrigins:
        - string

    Client Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Client resource accepts the following input properties:

    Addons ClientAddons
    Addons enabled for this client and their associated configurations.
    AllowedClients List<string>
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    AllowedLogoutUrls List<string>
    URLs that Auth0 may redirect to after logout.
    AllowedOrigins List<string>
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    AppType string
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    Callbacks List<string>
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    ClientAliases List<string>
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    ClientMetadata Dictionary<string, string>
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    ComplianceLevel string
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    CrossOriginAuth bool
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    CrossOriginLoc string
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    CustomLoginPage string
    The content (HTML, CSS, JS) of the custom login page.
    CustomLoginPageOn bool
    Indicates whether a custom login page is to be used.
    DefaultOrganization ClientDefaultOrganization
    Configure and associate an organization with the Client
    Description string
    Description of the purpose of the client.
    EncryptionKey Dictionary<string, string>
    Encryption used for WS-Fed responses with this client.
    FormTemplate string
    HTML form template to be used for WS-Federation.
    GrantTypes List<string>
    Types of grants that this client is authorized to use.
    InitiateLoginUri string
    Initiate login URI. Must be HTTPS or an empty string.
    IsFirstParty bool
    Indicates whether this client is a first-party client.Defaults to true from the API
    IsTokenEndpointIpHeaderTrusted bool
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    JwtConfiguration ClientJwtConfiguration
    Configuration settings for the JWTs issued for this client.
    LogoUri string
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    Mobile ClientMobile
    Additional configuration for native mobile apps.
    Name string
    Name of the client.
    NativeSocialLogin ClientNativeSocialLogin
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    OidcBackchannelLogoutUrls List<string>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    OidcConformant bool
    Indicates whether this client will conform to strict OIDC specifications.
    OidcLogout ClientOidcLogout
    Configure OIDC logout for the Client
    OrganizationRequireBehavior string
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    OrganizationUsage string
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    RefreshToken ClientRefreshToken
    Configuration settings for the refresh tokens issued for this client.
    RequireProofOfPossession bool
    Makes the use of Proof-of-Possession mandatory for this client.
    RequirePushedAuthorizationRequests bool
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    SessionTransfer ClientSessionTransfer
    Sso bool
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    SsoDisabled bool
    Indicates whether or not SSO is disabled.
    TokenExchange ClientTokenExchange
    Allows configuration for token exchange
    WebOrigins List<string>
    URLs that represent valid web origins for use with web message response mode.
    Addons ClientAddonsArgs
    Addons enabled for this client and their associated configurations.
    AllowedClients []string
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    AllowedLogoutUrls []string
    URLs that Auth0 may redirect to after logout.
    AllowedOrigins []string
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    AppType string
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    Callbacks []string
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    ClientAliases []string
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    ClientMetadata map[string]string
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    ComplianceLevel string
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    CrossOriginAuth bool
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    CrossOriginLoc string
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    CustomLoginPage string
    The content (HTML, CSS, JS) of the custom login page.
    CustomLoginPageOn bool
    Indicates whether a custom login page is to be used.
    DefaultOrganization ClientDefaultOrganizationArgs
    Configure and associate an organization with the Client
    Description string
    Description of the purpose of the client.
    EncryptionKey map[string]string
    Encryption used for WS-Fed responses with this client.
    FormTemplate string
    HTML form template to be used for WS-Federation.
    GrantTypes []string
    Types of grants that this client is authorized to use.
    InitiateLoginUri string
    Initiate login URI. Must be HTTPS or an empty string.
    IsFirstParty bool
    Indicates whether this client is a first-party client.Defaults to true from the API
    IsTokenEndpointIpHeaderTrusted bool
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    JwtConfiguration ClientJwtConfigurationArgs
    Configuration settings for the JWTs issued for this client.
    LogoUri string
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    Mobile ClientMobileArgs
    Additional configuration for native mobile apps.
    Name string
    Name of the client.
    NativeSocialLogin ClientNativeSocialLoginArgs
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    OidcBackchannelLogoutUrls []string
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    OidcConformant bool
    Indicates whether this client will conform to strict OIDC specifications.
    OidcLogout ClientOidcLogoutArgs
    Configure OIDC logout for the Client
    OrganizationRequireBehavior string
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    OrganizationUsage string
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    RefreshToken ClientRefreshTokenArgs
    Configuration settings for the refresh tokens issued for this client.
    RequireProofOfPossession bool
    Makes the use of Proof-of-Possession mandatory for this client.
    RequirePushedAuthorizationRequests bool
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    SessionTransfer ClientSessionTransferArgs
    Sso bool
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    SsoDisabled bool
    Indicates whether or not SSO is disabled.
    TokenExchange ClientTokenExchangeArgs
    Allows configuration for token exchange
    WebOrigins []string
    URLs that represent valid web origins for use with web message response mode.
    addons ClientAddons
    Addons enabled for this client and their associated configurations.
    allowedClients List<String>
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    allowedLogoutUrls List<String>
    URLs that Auth0 may redirect to after logout.
    allowedOrigins List<String>
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    appType String
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    callbacks List<String>
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    clientAliases List<String>
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    clientMetadata Map<String,String>
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    complianceLevel String
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    crossOriginAuth Boolean
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    crossOriginLoc String
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    customLoginPage String
    The content (HTML, CSS, JS) of the custom login page.
    customLoginPageOn Boolean
    Indicates whether a custom login page is to be used.
    defaultOrganization ClientDefaultOrganization
    Configure and associate an organization with the Client
    description String
    Description of the purpose of the client.
    encryptionKey Map<String,String>
    Encryption used for WS-Fed responses with this client.
    formTemplate String
    HTML form template to be used for WS-Federation.
    grantTypes List<String>
    Types of grants that this client is authorized to use.
    initiateLoginUri String
    Initiate login URI. Must be HTTPS or an empty string.
    isFirstParty Boolean
    Indicates whether this client is a first-party client.Defaults to true from the API
    isTokenEndpointIpHeaderTrusted Boolean
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    jwtConfiguration ClientJwtConfiguration
    Configuration settings for the JWTs issued for this client.
    logoUri String
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    mobile ClientMobile
    Additional configuration for native mobile apps.
    name String
    Name of the client.
    nativeSocialLogin ClientNativeSocialLogin
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    oidcBackchannelLogoutUrls List<String>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    oidcConformant Boolean
    Indicates whether this client will conform to strict OIDC specifications.
    oidcLogout ClientOidcLogout
    Configure OIDC logout for the Client
    organizationRequireBehavior String
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    organizationUsage String
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    refreshToken ClientRefreshToken
    Configuration settings for the refresh tokens issued for this client.
    requireProofOfPossession Boolean
    Makes the use of Proof-of-Possession mandatory for this client.
    requirePushedAuthorizationRequests Boolean
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    sessionTransfer ClientSessionTransfer
    sso Boolean
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    ssoDisabled Boolean
    Indicates whether or not SSO is disabled.
    tokenExchange ClientTokenExchange
    Allows configuration for token exchange
    webOrigins List<String>
    URLs that represent valid web origins for use with web message response mode.
    addons ClientAddons
    Addons enabled for this client and their associated configurations.
    allowedClients string[]
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    allowedLogoutUrls string[]
    URLs that Auth0 may redirect to after logout.
    allowedOrigins string[]
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    appType string
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    callbacks string[]
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    clientAliases string[]
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    clientMetadata {[key: string]: string}
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    complianceLevel string
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    crossOriginAuth boolean
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    crossOriginLoc string
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    customLoginPage string
    The content (HTML, CSS, JS) of the custom login page.
    customLoginPageOn boolean
    Indicates whether a custom login page is to be used.
    defaultOrganization ClientDefaultOrganization
    Configure and associate an organization with the Client
    description string
    Description of the purpose of the client.
    encryptionKey {[key: string]: string}
    Encryption used for WS-Fed responses with this client.
    formTemplate string
    HTML form template to be used for WS-Federation.
    grantTypes string[]
    Types of grants that this client is authorized to use.
    initiateLoginUri string
    Initiate login URI. Must be HTTPS or an empty string.
    isFirstParty boolean
    Indicates whether this client is a first-party client.Defaults to true from the API
    isTokenEndpointIpHeaderTrusted boolean
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    jwtConfiguration ClientJwtConfiguration
    Configuration settings for the JWTs issued for this client.
    logoUri string
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    mobile ClientMobile
    Additional configuration for native mobile apps.
    name string
    Name of the client.
    nativeSocialLogin ClientNativeSocialLogin
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    oidcBackchannelLogoutUrls string[]
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    oidcConformant boolean
    Indicates whether this client will conform to strict OIDC specifications.
    oidcLogout ClientOidcLogout
    Configure OIDC logout for the Client
    organizationRequireBehavior string
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    organizationUsage string
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    refreshToken ClientRefreshToken
    Configuration settings for the refresh tokens issued for this client.
    requireProofOfPossession boolean
    Makes the use of Proof-of-Possession mandatory for this client.
    requirePushedAuthorizationRequests boolean
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    sessionTransfer ClientSessionTransfer
    sso boolean
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    ssoDisabled boolean
    Indicates whether or not SSO is disabled.
    tokenExchange ClientTokenExchange
    Allows configuration for token exchange
    webOrigins string[]
    URLs that represent valid web origins for use with web message response mode.
    addons ClientAddonsArgs
    Addons enabled for this client and their associated configurations.
    allowed_clients Sequence[str]
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    allowed_logout_urls Sequence[str]
    URLs that Auth0 may redirect to after logout.
    allowed_origins Sequence[str]
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    app_type str
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    callbacks Sequence[str]
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    client_aliases Sequence[str]
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    client_metadata Mapping[str, str]
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    compliance_level str
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    cross_origin_auth bool
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    cross_origin_loc str
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    custom_login_page str
    The content (HTML, CSS, JS) of the custom login page.
    custom_login_page_on bool
    Indicates whether a custom login page is to be used.
    default_organization ClientDefaultOrganizationArgs
    Configure and associate an organization with the Client
    description str
    Description of the purpose of the client.
    encryption_key Mapping[str, str]
    Encryption used for WS-Fed responses with this client.
    form_template str
    HTML form template to be used for WS-Federation.
    grant_types Sequence[str]
    Types of grants that this client is authorized to use.
    initiate_login_uri str
    Initiate login URI. Must be HTTPS or an empty string.
    is_first_party bool
    Indicates whether this client is a first-party client.Defaults to true from the API
    is_token_endpoint_ip_header_trusted bool
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    jwt_configuration ClientJwtConfigurationArgs
    Configuration settings for the JWTs issued for this client.
    logo_uri str
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    mobile ClientMobileArgs
    Additional configuration for native mobile apps.
    name str
    Name of the client.
    native_social_login ClientNativeSocialLoginArgs
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    oidc_backchannel_logout_urls Sequence[str]
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    oidc_conformant bool
    Indicates whether this client will conform to strict OIDC specifications.
    oidc_logout ClientOidcLogoutArgs
    Configure OIDC logout for the Client
    organization_require_behavior str
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    organization_usage str
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    refresh_token ClientRefreshTokenArgs
    Configuration settings for the refresh tokens issued for this client.
    require_proof_of_possession bool
    Makes the use of Proof-of-Possession mandatory for this client.
    require_pushed_authorization_requests bool
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    session_transfer ClientSessionTransferArgs
    sso bool
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    sso_disabled bool
    Indicates whether or not SSO is disabled.
    token_exchange ClientTokenExchangeArgs
    Allows configuration for token exchange
    web_origins Sequence[str]
    URLs that represent valid web origins for use with web message response mode.
    addons Property Map
    Addons enabled for this client and their associated configurations.
    allowedClients List<String>
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    allowedLogoutUrls List<String>
    URLs that Auth0 may redirect to after logout.
    allowedOrigins List<String>
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    appType String
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    callbacks List<String>
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    clientAliases List<String>
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    clientMetadata Map<String>
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    complianceLevel String
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    crossOriginAuth Boolean
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    crossOriginLoc String
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    customLoginPage String
    The content (HTML, CSS, JS) of the custom login page.
    customLoginPageOn Boolean
    Indicates whether a custom login page is to be used.
    defaultOrganization Property Map
    Configure and associate an organization with the Client
    description String
    Description of the purpose of the client.
    encryptionKey Map<String>
    Encryption used for WS-Fed responses with this client.
    formTemplate String
    HTML form template to be used for WS-Federation.
    grantTypes List<String>
    Types of grants that this client is authorized to use.
    initiateLoginUri String
    Initiate login URI. Must be HTTPS or an empty string.
    isFirstParty Boolean
    Indicates whether this client is a first-party client.Defaults to true from the API
    isTokenEndpointIpHeaderTrusted Boolean
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    jwtConfiguration Property Map
    Configuration settings for the JWTs issued for this client.
    logoUri String
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    mobile Property Map
    Additional configuration for native mobile apps.
    name String
    Name of the client.
    nativeSocialLogin Property Map
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    oidcBackchannelLogoutUrls List<String>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    oidcConformant Boolean
    Indicates whether this client will conform to strict OIDC specifications.
    oidcLogout Property Map
    Configure OIDC logout for the Client
    organizationRequireBehavior String
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    organizationUsage String
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    refreshToken Property Map
    Configuration settings for the refresh tokens issued for this client.
    requireProofOfPossession Boolean
    Makes the use of Proof-of-Possession mandatory for this client.
    requirePushedAuthorizationRequests Boolean
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    sessionTransfer Property Map
    sso Boolean
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    ssoDisabled Boolean
    Indicates whether or not SSO is disabled.
    tokenExchange Property Map
    Allows configuration for token exchange
    webOrigins List<String>
    URLs that represent valid web origins for use with web message response mode.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Client resource produces the following output properties:

    ClientId string
    The ID of the client.
    Id string
    The provider-assigned unique ID for this managed resource.
    SigningKeys List<ImmutableDictionary<string, string>>
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    ClientId string
    The ID of the client.
    Id string
    The provider-assigned unique ID for this managed resource.
    SigningKeys []map[string]string
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    clientId String
    The ID of the client.
    id String
    The provider-assigned unique ID for this managed resource.
    signingKeys List<Map<String,String>>
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    clientId string
    The ID of the client.
    id string
    The provider-assigned unique ID for this managed resource.
    signingKeys {[key: string]: string}[]
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    client_id str
    The ID of the client.
    id str
    The provider-assigned unique ID for this managed resource.
    signing_keys Sequence[Mapping[str, str]]
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    clientId String
    The ID of the client.
    id String
    The provider-assigned unique ID for this managed resource.
    signingKeys List<Map<String>>
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.

    Look up Existing Client Resource

    Get an existing Client resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ClientState, opts?: CustomResourceOptions): Client
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        addons: Optional[ClientAddonsArgs] = None,
        allowed_clients: Optional[Sequence[str]] = None,
        allowed_logout_urls: Optional[Sequence[str]] = None,
        allowed_origins: Optional[Sequence[str]] = None,
        app_type: Optional[str] = None,
        callbacks: Optional[Sequence[str]] = None,
        client_aliases: Optional[Sequence[str]] = None,
        client_id: Optional[str] = None,
        client_metadata: Optional[Mapping[str, str]] = None,
        compliance_level: Optional[str] = None,
        cross_origin_auth: Optional[bool] = None,
        cross_origin_loc: Optional[str] = None,
        custom_login_page: Optional[str] = None,
        custom_login_page_on: Optional[bool] = None,
        default_organization: Optional[ClientDefaultOrganizationArgs] = None,
        description: Optional[str] = None,
        encryption_key: Optional[Mapping[str, str]] = None,
        form_template: Optional[str] = None,
        grant_types: Optional[Sequence[str]] = None,
        initiate_login_uri: Optional[str] = None,
        is_first_party: Optional[bool] = None,
        is_token_endpoint_ip_header_trusted: Optional[bool] = None,
        jwt_configuration: Optional[ClientJwtConfigurationArgs] = None,
        logo_uri: Optional[str] = None,
        mobile: Optional[ClientMobileArgs] = None,
        name: Optional[str] = None,
        native_social_login: Optional[ClientNativeSocialLoginArgs] = None,
        oidc_backchannel_logout_urls: Optional[Sequence[str]] = None,
        oidc_conformant: Optional[bool] = None,
        oidc_logout: Optional[ClientOidcLogoutArgs] = None,
        organization_require_behavior: Optional[str] = None,
        organization_usage: Optional[str] = None,
        refresh_token: Optional[ClientRefreshTokenArgs] = None,
        require_proof_of_possession: Optional[bool] = None,
        require_pushed_authorization_requests: Optional[bool] = None,
        session_transfer: Optional[ClientSessionTransferArgs] = None,
        signing_keys: Optional[Sequence[Mapping[str, str]]] = None,
        sso: Optional[bool] = None,
        sso_disabled: Optional[bool] = None,
        token_exchange: Optional[ClientTokenExchangeArgs] = None,
        web_origins: Optional[Sequence[str]] = None) -> Client
    func GetClient(ctx *Context, name string, id IDInput, state *ClientState, opts ...ResourceOption) (*Client, error)
    public static Client Get(string name, Input<string> id, ClientState? state, CustomResourceOptions? opts = null)
    public static Client get(String name, Output<String> id, ClientState state, CustomResourceOptions options)
    resources:  _:    type: auth0:Client    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Addons ClientAddons
    Addons enabled for this client and their associated configurations.
    AllowedClients List<string>
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    AllowedLogoutUrls List<string>
    URLs that Auth0 may redirect to after logout.
    AllowedOrigins List<string>
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    AppType string
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    Callbacks List<string>
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    ClientAliases List<string>
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    ClientId string
    The ID of the client.
    ClientMetadata Dictionary<string, string>
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    ComplianceLevel string
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    CrossOriginAuth bool
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    CrossOriginLoc string
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    CustomLoginPage string
    The content (HTML, CSS, JS) of the custom login page.
    CustomLoginPageOn bool
    Indicates whether a custom login page is to be used.
    DefaultOrganization ClientDefaultOrganization
    Configure and associate an organization with the Client
    Description string
    Description of the purpose of the client.
    EncryptionKey Dictionary<string, string>
    Encryption used for WS-Fed responses with this client.
    FormTemplate string
    HTML form template to be used for WS-Federation.
    GrantTypes List<string>
    Types of grants that this client is authorized to use.
    InitiateLoginUri string
    Initiate login URI. Must be HTTPS or an empty string.
    IsFirstParty bool
    Indicates whether this client is a first-party client.Defaults to true from the API
    IsTokenEndpointIpHeaderTrusted bool
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    JwtConfiguration ClientJwtConfiguration
    Configuration settings for the JWTs issued for this client.
    LogoUri string
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    Mobile ClientMobile
    Additional configuration for native mobile apps.
    Name string
    Name of the client.
    NativeSocialLogin ClientNativeSocialLogin
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    OidcBackchannelLogoutUrls List<string>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    OidcConformant bool
    Indicates whether this client will conform to strict OIDC specifications.
    OidcLogout ClientOidcLogout
    Configure OIDC logout for the Client
    OrganizationRequireBehavior string
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    OrganizationUsage string
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    RefreshToken ClientRefreshToken
    Configuration settings for the refresh tokens issued for this client.
    RequireProofOfPossession bool
    Makes the use of Proof-of-Possession mandatory for this client.
    RequirePushedAuthorizationRequests bool
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    SessionTransfer ClientSessionTransfer
    SigningKeys List<ImmutableDictionary<string, string>>
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    Sso bool
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    SsoDisabled bool
    Indicates whether or not SSO is disabled.
    TokenExchange ClientTokenExchange
    Allows configuration for token exchange
    WebOrigins List<string>
    URLs that represent valid web origins for use with web message response mode.
    Addons ClientAddonsArgs
    Addons enabled for this client and their associated configurations.
    AllowedClients []string
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    AllowedLogoutUrls []string
    URLs that Auth0 may redirect to after logout.
    AllowedOrigins []string
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    AppType string
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    Callbacks []string
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    ClientAliases []string
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    ClientId string
    The ID of the client.
    ClientMetadata map[string]string
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    ComplianceLevel string
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    CrossOriginAuth bool
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    CrossOriginLoc string
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    CustomLoginPage string
    The content (HTML, CSS, JS) of the custom login page.
    CustomLoginPageOn bool
    Indicates whether a custom login page is to be used.
    DefaultOrganization ClientDefaultOrganizationArgs
    Configure and associate an organization with the Client
    Description string
    Description of the purpose of the client.
    EncryptionKey map[string]string
    Encryption used for WS-Fed responses with this client.
    FormTemplate string
    HTML form template to be used for WS-Federation.
    GrantTypes []string
    Types of grants that this client is authorized to use.
    InitiateLoginUri string
    Initiate login URI. Must be HTTPS or an empty string.
    IsFirstParty bool
    Indicates whether this client is a first-party client.Defaults to true from the API
    IsTokenEndpointIpHeaderTrusted bool
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    JwtConfiguration ClientJwtConfigurationArgs
    Configuration settings for the JWTs issued for this client.
    LogoUri string
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    Mobile ClientMobileArgs
    Additional configuration for native mobile apps.
    Name string
    Name of the client.
    NativeSocialLogin ClientNativeSocialLoginArgs
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    OidcBackchannelLogoutUrls []string
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    OidcConformant bool
    Indicates whether this client will conform to strict OIDC specifications.
    OidcLogout ClientOidcLogoutArgs
    Configure OIDC logout for the Client
    OrganizationRequireBehavior string
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    OrganizationUsage string
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    RefreshToken ClientRefreshTokenArgs
    Configuration settings for the refresh tokens issued for this client.
    RequireProofOfPossession bool
    Makes the use of Proof-of-Possession mandatory for this client.
    RequirePushedAuthorizationRequests bool
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    SessionTransfer ClientSessionTransferArgs
    SigningKeys []map[string]string
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    Sso bool
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    SsoDisabled bool
    Indicates whether or not SSO is disabled.
    TokenExchange ClientTokenExchangeArgs
    Allows configuration for token exchange
    WebOrigins []string
    URLs that represent valid web origins for use with web message response mode.
    addons ClientAddons
    Addons enabled for this client and their associated configurations.
    allowedClients List<String>
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    allowedLogoutUrls List<String>
    URLs that Auth0 may redirect to after logout.
    allowedOrigins List<String>
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    appType String
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    callbacks List<String>
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    clientAliases List<String>
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    clientId String
    The ID of the client.
    clientMetadata Map<String,String>
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    complianceLevel String
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    crossOriginAuth Boolean
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    crossOriginLoc String
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    customLoginPage String
    The content (HTML, CSS, JS) of the custom login page.
    customLoginPageOn Boolean
    Indicates whether a custom login page is to be used.
    defaultOrganization ClientDefaultOrganization
    Configure and associate an organization with the Client
    description String
    Description of the purpose of the client.
    encryptionKey Map<String,String>
    Encryption used for WS-Fed responses with this client.
    formTemplate String
    HTML form template to be used for WS-Federation.
    grantTypes List<String>
    Types of grants that this client is authorized to use.
    initiateLoginUri String
    Initiate login URI. Must be HTTPS or an empty string.
    isFirstParty Boolean
    Indicates whether this client is a first-party client.Defaults to true from the API
    isTokenEndpointIpHeaderTrusted Boolean
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    jwtConfiguration ClientJwtConfiguration
    Configuration settings for the JWTs issued for this client.
    logoUri String
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    mobile ClientMobile
    Additional configuration for native mobile apps.
    name String
    Name of the client.
    nativeSocialLogin ClientNativeSocialLogin
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    oidcBackchannelLogoutUrls List<String>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    oidcConformant Boolean
    Indicates whether this client will conform to strict OIDC specifications.
    oidcLogout ClientOidcLogout
    Configure OIDC logout for the Client
    organizationRequireBehavior String
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    organizationUsage String
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    refreshToken ClientRefreshToken
    Configuration settings for the refresh tokens issued for this client.
    requireProofOfPossession Boolean
    Makes the use of Proof-of-Possession mandatory for this client.
    requirePushedAuthorizationRequests Boolean
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    sessionTransfer ClientSessionTransfer
    signingKeys List<Map<String,String>>
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    sso Boolean
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    ssoDisabled Boolean
    Indicates whether or not SSO is disabled.
    tokenExchange ClientTokenExchange
    Allows configuration for token exchange
    webOrigins List<String>
    URLs that represent valid web origins for use with web message response mode.
    addons ClientAddons
    Addons enabled for this client and their associated configurations.
    allowedClients string[]
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    allowedLogoutUrls string[]
    URLs that Auth0 may redirect to after logout.
    allowedOrigins string[]
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    appType string
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    callbacks string[]
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    clientAliases string[]
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    clientId string
    The ID of the client.
    clientMetadata {[key: string]: string}
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    complianceLevel string
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    crossOriginAuth boolean
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    crossOriginLoc string
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    customLoginPage string
    The content (HTML, CSS, JS) of the custom login page.
    customLoginPageOn boolean
    Indicates whether a custom login page is to be used.
    defaultOrganization ClientDefaultOrganization
    Configure and associate an organization with the Client
    description string
    Description of the purpose of the client.
    encryptionKey {[key: string]: string}
    Encryption used for WS-Fed responses with this client.
    formTemplate string
    HTML form template to be used for WS-Federation.
    grantTypes string[]
    Types of grants that this client is authorized to use.
    initiateLoginUri string
    Initiate login URI. Must be HTTPS or an empty string.
    isFirstParty boolean
    Indicates whether this client is a first-party client.Defaults to true from the API
    isTokenEndpointIpHeaderTrusted boolean
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    jwtConfiguration ClientJwtConfiguration
    Configuration settings for the JWTs issued for this client.
    logoUri string
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    mobile ClientMobile
    Additional configuration for native mobile apps.
    name string
    Name of the client.
    nativeSocialLogin ClientNativeSocialLogin
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    oidcBackchannelLogoutUrls string[]
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    oidcConformant boolean
    Indicates whether this client will conform to strict OIDC specifications.
    oidcLogout ClientOidcLogout
    Configure OIDC logout for the Client
    organizationRequireBehavior string
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    organizationUsage string
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    refreshToken ClientRefreshToken
    Configuration settings for the refresh tokens issued for this client.
    requireProofOfPossession boolean
    Makes the use of Proof-of-Possession mandatory for this client.
    requirePushedAuthorizationRequests boolean
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    sessionTransfer ClientSessionTransfer
    signingKeys {[key: string]: string}[]
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    sso boolean
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    ssoDisabled boolean
    Indicates whether or not SSO is disabled.
    tokenExchange ClientTokenExchange
    Allows configuration for token exchange
    webOrigins string[]
    URLs that represent valid web origins for use with web message response mode.
    addons ClientAddonsArgs
    Addons enabled for this client and their associated configurations.
    allowed_clients Sequence[str]
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    allowed_logout_urls Sequence[str]
    URLs that Auth0 may redirect to after logout.
    allowed_origins Sequence[str]
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    app_type str
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    callbacks Sequence[str]
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    client_aliases Sequence[str]
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    client_id str
    The ID of the client.
    client_metadata Mapping[str, str]
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    compliance_level str
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    cross_origin_auth bool
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    cross_origin_loc str
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    custom_login_page str
    The content (HTML, CSS, JS) of the custom login page.
    custom_login_page_on bool
    Indicates whether a custom login page is to be used.
    default_organization ClientDefaultOrganizationArgs
    Configure and associate an organization with the Client
    description str
    Description of the purpose of the client.
    encryption_key Mapping[str, str]
    Encryption used for WS-Fed responses with this client.
    form_template str
    HTML form template to be used for WS-Federation.
    grant_types Sequence[str]
    Types of grants that this client is authorized to use.
    initiate_login_uri str
    Initiate login URI. Must be HTTPS or an empty string.
    is_first_party bool
    Indicates whether this client is a first-party client.Defaults to true from the API
    is_token_endpoint_ip_header_trusted bool
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    jwt_configuration ClientJwtConfigurationArgs
    Configuration settings for the JWTs issued for this client.
    logo_uri str
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    mobile ClientMobileArgs
    Additional configuration for native mobile apps.
    name str
    Name of the client.
    native_social_login ClientNativeSocialLoginArgs
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    oidc_backchannel_logout_urls Sequence[str]
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    oidc_conformant bool
    Indicates whether this client will conform to strict OIDC specifications.
    oidc_logout ClientOidcLogoutArgs
    Configure OIDC logout for the Client
    organization_require_behavior str
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    organization_usage str
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    refresh_token ClientRefreshTokenArgs
    Configuration settings for the refresh tokens issued for this client.
    require_proof_of_possession bool
    Makes the use of Proof-of-Possession mandatory for this client.
    require_pushed_authorization_requests bool
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    session_transfer ClientSessionTransferArgs
    signing_keys Sequence[Mapping[str, str]]
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    sso bool
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    sso_disabled bool
    Indicates whether or not SSO is disabled.
    token_exchange ClientTokenExchangeArgs
    Allows configuration for token exchange
    web_origins Sequence[str]
    URLs that represent valid web origins for use with web message response mode.
    addons Property Map
    Addons enabled for this client and their associated configurations.
    allowedClients List<String>
    List of applications ID's that will be allowed to make delegation request. By default, all applications will be allowed.
    allowedLogoutUrls List<String>
    URLs that Auth0 may redirect to after logout.
    allowedOrigins List<String>
    URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
    appType String
    Type of application the client represents. Possible values are: native, spa, regular_web, non_interactive, sso_integration. Specific SSO integrations types accepted as well are: rms, box, cloudbees, concur, dropbox, mscrm, echosign, egnyte, newrelic, office365, salesforce, sentry, sharepoint, slack, springcm, zendesk, zoom.
    callbacks List<String>
    URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
    clientAliases List<String>
    List of audiences/realms for SAML protocol. Used by the wsfed addon.
    clientId String
    The ID of the client.
    clientMetadata Map<String>
    Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/\()<>@ [Tab] [Space].
    complianceLevel String
    Defines the compliance level for this client, which may restrict it's capabilities. Can be one of none, fapi1_adv_pkj_par, fapi1_adv_mtls_par.
    crossOriginAuth Boolean
    Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
    crossOriginLoc String
    URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
    customLoginPage String
    The content (HTML, CSS, JS) of the custom login page.
    customLoginPageOn Boolean
    Indicates whether a custom login page is to be used.
    defaultOrganization Property Map
    Configure and associate an organization with the Client
    description String
    Description of the purpose of the client.
    encryptionKey Map<String>
    Encryption used for WS-Fed responses with this client.
    formTemplate String
    HTML form template to be used for WS-Federation.
    grantTypes List<String>
    Types of grants that this client is authorized to use.
    initiateLoginUri String
    Initiate login URI. Must be HTTPS or an empty string.
    isFirstParty Boolean
    Indicates whether this client is a first-party client.Defaults to true from the API
    isTokenEndpointIpHeaderTrusted Boolean
    Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to client_secret_post or client_secret_basic. Setting this property when creating the resource, will default the authentication method to client_secret_post. To change the authentication method to client_secret_basic use the auth0.ClientCredentials resource.
    jwtConfiguration Property Map
    Configuration settings for the JWTs issued for this client.
    logoUri String
    URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
    mobile Property Map
    Additional configuration for native mobile apps.
    name String
    Name of the client.
    nativeSocialLogin Property Map
    Configuration settings to toggle native social login for mobile native applications. Once this is set it must stay set, with both resources set to false in order to change the app_type.
    oidcBackchannelLogoutUrls List<String>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.

    Deprecated: This resource is deprecated and will be removed in the next major version. Please use oidc_logout for managing OIDC backchannel logout URLs.

    oidcConformant Boolean
    Indicates whether this client will conform to strict OIDC specifications.
    oidcLogout Property Map
    Configure OIDC logout for the Client
    organizationRequireBehavior String
    Defines how to proceed during an authentication transaction when organization_usage = "require". Can be no_prompt (default), pre_login_prompt or post_login_prompt.
    organizationUsage String
    Defines how to proceed during an authentication transaction with regards to an organization. Can be deny (default), allow or require.
    refreshToken Property Map
    Configuration settings for the refresh tokens issued for this client.
    requireProofOfPossession Boolean
    Makes the use of Proof-of-Possession mandatory for this client.
    requirePushedAuthorizationRequests Boolean
    Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
    sessionTransfer Property Map
    signingKeys List<Map<String>>
    List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
    sso Boolean
    Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
    ssoDisabled Boolean
    Indicates whether or not SSO is disabled.
    tokenExchange Property Map
    Allows configuration for token exchange
    webOrigins List<String>
    URLs that represent valid web origins for use with web message response mode.

    Supporting Types

    ClientAddons, ClientAddonsArgs

    Aws ClientAddonsAws
    AWS Addon configuration.
    AzureBlob ClientAddonsAzureBlob
    Azure Blob Storage Addon configuration.
    AzureSb ClientAddonsAzureSb
    Azure Storage Bus Addon configuration.
    Box ClientAddonsBox
    Box SSO indicator (no configuration settings needed for Box SSO).
    Cloudbees ClientAddonsCloudbees
    CloudBees SSO indicator (no configuration settings needed for CloudBees SSO).
    Concur ClientAddonsConcur
    Concur SSO indicator (no configuration settings needed for Concur SSO).
    Dropbox ClientAddonsDropbox
    Dropbox SSO indicator (no configuration settings needed for Dropbox SSO).
    Echosign ClientAddonsEchosign
    Adobe EchoSign SSO configuration.
    Egnyte ClientAddonsEgnyte
    Egnyte SSO configuration.
    Firebase ClientAddonsFirebase
    Google Firebase addon configuration.
    Layer ClientAddonsLayer
    Layer addon configuration.
    Mscrm ClientAddonsMscrm
    Microsoft Dynamics CRM SSO configuration.
    Newrelic ClientAddonsNewrelic
    New Relic SSO configuration.
    Office365 ClientAddonsOffice365
    Microsoft Office 365 SSO configuration.
    Rms ClientAddonsRms
    Active Directory Rights Management Service SSO configuration.
    Salesforce ClientAddonsSalesforce
    Salesforce SSO configuration.
    SalesforceApi ClientAddonsSalesforceApi
    Salesforce API addon configuration.
    SalesforceSandboxApi ClientAddonsSalesforceSandboxApi
    Salesforce Sandbox addon configuration.
    Samlp ClientAddonsSamlp
    Configuration settings for a SAML add-on.
    SapApi ClientAddonsSapApi
    SAP API addon configuration.
    Sentry ClientAddonsSentry
    Sentry SSO configuration.
    Sharepoint ClientAddonsSharepoint
    SharePoint SSO configuration.
    Slack ClientAddonsSlack
    Slack team or workspace name usually first segment in your Slack URL, for example https://acme-org.slack.com would be acme-org.
    Springcm ClientAddonsSpringcm
    SpringCM SSO configuration.
    SsoIntegration ClientAddonsSsoIntegration
    Generic SSO configuration.
    Wams ClientAddonsWams
    Windows Azure Mobile Services addon configuration.
    Wsfed ClientAddonsWsfed
    WS-Fed (WIF) addon indicator. Actual configuration is stored in callback and client_aliases properties on the client.
    Zendesk ClientAddonsZendesk
    Zendesk SSO configuration.
    Zoom ClientAddonsZoom
    Zoom SSO configuration.
    Aws ClientAddonsAws
    AWS Addon configuration.
    AzureBlob ClientAddonsAzureBlob
    Azure Blob Storage Addon configuration.
    AzureSb ClientAddonsAzureSb
    Azure Storage Bus Addon configuration.
    Box ClientAddonsBox
    Box SSO indicator (no configuration settings needed for Box SSO).
    Cloudbees ClientAddonsCloudbees
    CloudBees SSO indicator (no configuration settings needed for CloudBees SSO).
    Concur ClientAddonsConcur
    Concur SSO indicator (no configuration settings needed for Concur SSO).
    Dropbox ClientAddonsDropbox
    Dropbox SSO indicator (no configuration settings needed for Dropbox SSO).
    Echosign ClientAddonsEchosign
    Adobe EchoSign SSO configuration.
    Egnyte ClientAddonsEgnyte
    Egnyte SSO configuration.
    Firebase ClientAddonsFirebase
    Google Firebase addon configuration.
    Layer ClientAddonsLayer
    Layer addon configuration.
    Mscrm ClientAddonsMscrm
    Microsoft Dynamics CRM SSO configuration.
    Newrelic ClientAddonsNewrelic
    New Relic SSO configuration.
    Office365 ClientAddonsOffice365
    Microsoft Office 365 SSO configuration.
    Rms ClientAddonsRms
    Active Directory Rights Management Service SSO configuration.
    Salesforce ClientAddonsSalesforce
    Salesforce SSO configuration.
    SalesforceApi ClientAddonsSalesforceApi
    Salesforce API addon configuration.
    SalesforceSandboxApi ClientAddonsSalesforceSandboxApi
    Salesforce Sandbox addon configuration.
    Samlp ClientAddonsSamlp
    Configuration settings for a SAML add-on.
    SapApi ClientAddonsSapApi
    SAP API addon configuration.
    Sentry ClientAddonsSentry
    Sentry SSO configuration.
    Sharepoint ClientAddonsSharepoint
    SharePoint SSO configuration.
    Slack ClientAddonsSlack
    Slack team or workspace name usually first segment in your Slack URL, for example https://acme-org.slack.com would be acme-org.
    Springcm ClientAddonsSpringcm
    SpringCM SSO configuration.
    SsoIntegration ClientAddonsSsoIntegration
    Generic SSO configuration.
    Wams ClientAddonsWams
    Windows Azure Mobile Services addon configuration.
    Wsfed ClientAddonsWsfed
    WS-Fed (WIF) addon indicator. Actual configuration is stored in callback and client_aliases properties on the client.
    Zendesk ClientAddonsZendesk
    Zendesk SSO configuration.
    Zoom ClientAddonsZoom
    Zoom SSO configuration.
    aws ClientAddonsAws
    AWS Addon configuration.
    azureBlob ClientAddonsAzureBlob
    Azure Blob Storage Addon configuration.
    azureSb ClientAddonsAzureSb
    Azure Storage Bus Addon configuration.
    box ClientAddonsBox
    Box SSO indicator (no configuration settings needed for Box SSO).
    cloudbees ClientAddonsCloudbees
    CloudBees SSO indicator (no configuration settings needed for CloudBees SSO).
    concur ClientAddonsConcur
    Concur SSO indicator (no configuration settings needed for Concur SSO).
    dropbox ClientAddonsDropbox
    Dropbox SSO indicator (no configuration settings needed for Dropbox SSO).
    echosign ClientAddonsEchosign
    Adobe EchoSign SSO configuration.
    egnyte ClientAddonsEgnyte
    Egnyte SSO configuration.
    firebase ClientAddonsFirebase
    Google Firebase addon configuration.
    layer ClientAddonsLayer
    Layer addon configuration.
    mscrm ClientAddonsMscrm
    Microsoft Dynamics CRM SSO configuration.
    newrelic ClientAddonsNewrelic
    New Relic SSO configuration.
    office365 ClientAddonsOffice365
    Microsoft Office 365 SSO configuration.
    rms ClientAddonsRms
    Active Directory Rights Management Service SSO configuration.
    salesforce ClientAddonsSalesforce
    Salesforce SSO configuration.
    salesforceApi ClientAddonsSalesforceApi
    Salesforce API addon configuration.
    salesforceSandboxApi ClientAddonsSalesforceSandboxApi
    Salesforce Sandbox addon configuration.
    samlp ClientAddonsSamlp
    Configuration settings for a SAML add-on.
    sapApi ClientAddonsSapApi
    SAP API addon configuration.
    sentry ClientAddonsSentry
    Sentry SSO configuration.
    sharepoint ClientAddonsSharepoint
    SharePoint SSO configuration.
    slack ClientAddonsSlack
    Slack team or workspace name usually first segment in your Slack URL, for example https://acme-org.slack.com would be acme-org.
    springcm ClientAddonsSpringcm
    SpringCM SSO configuration.
    ssoIntegration ClientAddonsSsoIntegration
    Generic SSO configuration.
    wams ClientAddonsWams
    Windows Azure Mobile Services addon configuration.
    wsfed ClientAddonsWsfed
    WS-Fed (WIF) addon indicator. Actual configuration is stored in callback and client_aliases properties on the client.
    zendesk ClientAddonsZendesk
    Zendesk SSO configuration.
    zoom ClientAddonsZoom
    Zoom SSO configuration.
    aws ClientAddonsAws
    AWS Addon configuration.
    azureBlob ClientAddonsAzureBlob
    Azure Blob Storage Addon configuration.
    azureSb ClientAddonsAzureSb
    Azure Storage Bus Addon configuration.
    box ClientAddonsBox
    Box SSO indicator (no configuration settings needed for Box SSO).
    cloudbees ClientAddonsCloudbees
    CloudBees SSO indicator (no configuration settings needed for CloudBees SSO).
    concur ClientAddonsConcur
    Concur SSO indicator (no configuration settings needed for Concur SSO).
    dropbox ClientAddonsDropbox
    Dropbox SSO indicator (no configuration settings needed for Dropbox SSO).
    echosign ClientAddonsEchosign
    Adobe EchoSign SSO configuration.
    egnyte ClientAddonsEgnyte
    Egnyte SSO configuration.
    firebase ClientAddonsFirebase
    Google Firebase addon configuration.
    layer ClientAddonsLayer
    Layer addon configuration.
    mscrm ClientAddonsMscrm
    Microsoft Dynamics CRM SSO configuration.
    newrelic ClientAddonsNewrelic
    New Relic SSO configuration.
    office365 ClientAddonsOffice365
    Microsoft Office 365 SSO configuration.
    rms ClientAddonsRms
    Active Directory Rights Management Service SSO configuration.
    salesforce ClientAddonsSalesforce
    Salesforce SSO configuration.
    salesforceApi ClientAddonsSalesforceApi
    Salesforce API addon configuration.
    salesforceSandboxApi ClientAddonsSalesforceSandboxApi
    Salesforce Sandbox addon configuration.
    samlp ClientAddonsSamlp
    Configuration settings for a SAML add-on.
    sapApi ClientAddonsSapApi
    SAP API addon configuration.
    sentry ClientAddonsSentry
    Sentry SSO configuration.
    sharepoint ClientAddonsSharepoint
    SharePoint SSO configuration.
    slack ClientAddonsSlack
    Slack team or workspace name usually first segment in your Slack URL, for example https://acme-org.slack.com would be acme-org.
    springcm ClientAddonsSpringcm
    SpringCM SSO configuration.
    ssoIntegration ClientAddonsSsoIntegration
    Generic SSO configuration.
    wams ClientAddonsWams
    Windows Azure Mobile Services addon configuration.
    wsfed ClientAddonsWsfed
    WS-Fed (WIF) addon indicator. Actual configuration is stored in callback and client_aliases properties on the client.
    zendesk ClientAddonsZendesk
    Zendesk SSO configuration.
    zoom ClientAddonsZoom
    Zoom SSO configuration.
    aws ClientAddonsAws
    AWS Addon configuration.
    azure_blob ClientAddonsAzureBlob
    Azure Blob Storage Addon configuration.
    azure_sb ClientAddonsAzureSb
    Azure Storage Bus Addon configuration.
    box ClientAddonsBox
    Box SSO indicator (no configuration settings needed for Box SSO).
    cloudbees ClientAddonsCloudbees
    CloudBees SSO indicator (no configuration settings needed for CloudBees SSO).
    concur ClientAddonsConcur
    Concur SSO indicator (no configuration settings needed for Concur SSO).
    dropbox ClientAddonsDropbox
    Dropbox SSO indicator (no configuration settings needed for Dropbox SSO).
    echosign ClientAddonsEchosign
    Adobe EchoSign SSO configuration.
    egnyte ClientAddonsEgnyte
    Egnyte SSO configuration.
    firebase ClientAddonsFirebase
    Google Firebase addon configuration.
    layer ClientAddonsLayer
    Layer addon configuration.
    mscrm ClientAddonsMscrm
    Microsoft Dynamics CRM SSO configuration.
    newrelic ClientAddonsNewrelic
    New Relic SSO configuration.
    office365 ClientAddonsOffice365
    Microsoft Office 365 SSO configuration.
    rms ClientAddonsRms
    Active Directory Rights Management Service SSO configuration.
    salesforce ClientAddonsSalesforce
    Salesforce SSO configuration.
    salesforce_api ClientAddonsSalesforceApi
    Salesforce API addon configuration.
    salesforce_sandbox_api ClientAddonsSalesforceSandboxApi
    Salesforce Sandbox addon configuration.
    samlp ClientAddonsSamlp
    Configuration settings for a SAML add-on.
    sap_api ClientAddonsSapApi
    SAP API addon configuration.
    sentry ClientAddonsSentry
    Sentry SSO configuration.
    sharepoint ClientAddonsSharepoint
    SharePoint SSO configuration.
    slack ClientAddonsSlack
    Slack team or workspace name usually first segment in your Slack URL, for example https://acme-org.slack.com would be acme-org.
    springcm ClientAddonsSpringcm
    SpringCM SSO configuration.
    sso_integration ClientAddonsSsoIntegration
    Generic SSO configuration.
    wams ClientAddonsWams
    Windows Azure Mobile Services addon configuration.
    wsfed ClientAddonsWsfed
    WS-Fed (WIF) addon indicator. Actual configuration is stored in callback and client_aliases properties on the client.
    zendesk ClientAddonsZendesk
    Zendesk SSO configuration.
    zoom ClientAddonsZoom
    Zoom SSO configuration.
    aws Property Map
    AWS Addon configuration.
    azureBlob Property Map
    Azure Blob Storage Addon configuration.
    azureSb Property Map
    Azure Storage Bus Addon configuration.
    box Property Map
    Box SSO indicator (no configuration settings needed for Box SSO).
    cloudbees Property Map
    CloudBees SSO indicator (no configuration settings needed for CloudBees SSO).
    concur Property Map
    Concur SSO indicator (no configuration settings needed for Concur SSO).
    dropbox Property Map
    Dropbox SSO indicator (no configuration settings needed for Dropbox SSO).
    echosign Property Map
    Adobe EchoSign SSO configuration.
    egnyte Property Map
    Egnyte SSO configuration.
    firebase Property Map
    Google Firebase addon configuration.
    layer Property Map
    Layer addon configuration.
    mscrm Property Map
    Microsoft Dynamics CRM SSO configuration.
    newrelic Property Map
    New Relic SSO configuration.
    office365 Property Map
    Microsoft Office 365 SSO configuration.
    rms Property Map
    Active Directory Rights Management Service SSO configuration.
    salesforce Property Map
    Salesforce SSO configuration.
    salesforceApi Property Map
    Salesforce API addon configuration.
    salesforceSandboxApi Property Map
    Salesforce Sandbox addon configuration.
    samlp Property Map
    Configuration settings for a SAML add-on.
    sapApi Property Map
    SAP API addon configuration.
    sentry Property Map
    Sentry SSO configuration.
    sharepoint Property Map
    SharePoint SSO configuration.
    slack Property Map
    Slack team or workspace name usually first segment in your Slack URL, for example https://acme-org.slack.com would be acme-org.
    springcm Property Map
    SpringCM SSO configuration.
    ssoIntegration Property Map
    Generic SSO configuration.
    wams Property Map
    Windows Azure Mobile Services addon configuration.
    wsfed Property Map
    WS-Fed (WIF) addon indicator. Actual configuration is stored in callback and client_aliases properties on the client.
    zendesk Property Map
    Zendesk SSO configuration.
    zoom Property Map
    Zoom SSO configuration.

    ClientAddonsAws, ClientAddonsAwsArgs

    LifetimeInSeconds int
    AWS token lifetime in seconds.
    Principal string
    AWS principal ARN, for example arn:aws:iam::010616021751:saml-provider/idpname.
    Role string
    AWS role ARN, for example arn:aws:iam::010616021751:role/foo.
    LifetimeInSeconds int
    AWS token lifetime in seconds.
    Principal string
    AWS principal ARN, for example arn:aws:iam::010616021751:saml-provider/idpname.
    Role string
    AWS role ARN, for example arn:aws:iam::010616021751:role/foo.
    lifetimeInSeconds Integer
    AWS token lifetime in seconds.
    principal String
    AWS principal ARN, for example arn:aws:iam::010616021751:saml-provider/idpname.
    role String
    AWS role ARN, for example arn:aws:iam::010616021751:role/foo.
    lifetimeInSeconds number
    AWS token lifetime in seconds.
    principal string
    AWS principal ARN, for example arn:aws:iam::010616021751:saml-provider/idpname.
    role string
    AWS role ARN, for example arn:aws:iam::010616021751:role/foo.
    lifetime_in_seconds int
    AWS token lifetime in seconds.
    principal str
    AWS principal ARN, for example arn:aws:iam::010616021751:saml-provider/idpname.
    role str
    AWS role ARN, for example arn:aws:iam::010616021751:role/foo.
    lifetimeInSeconds Number
    AWS token lifetime in seconds.
    principal String
    AWS principal ARN, for example arn:aws:iam::010616021751:saml-provider/idpname.
    role String
    AWS role ARN, for example arn:aws:iam::010616021751:role/foo.

    ClientAddonsAzureBlob, ClientAddonsAzureBlobArgs

    AccountName string
    Your Azure storage account name. Usually first segment in your Azure storage URL, for example https://acme-org.blob.core.windows.net would be the account name acme-org.
    BlobDelete bool
    Indicates if the issued token has permission to delete the blob.
    BlobName string
    Entity to request a token for, such as my-blob. If blank the computed SAS will apply to the entire storage container.
    BlobRead bool
    Indicates if the issued token has permission to read the content, properties, metadata and block list. Use the blob as the source of a copy operation.
    BlobWrite bool
    Indicates if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    ContainerDelete bool
    Indicates if issued token has permission to delete any blob in the container.
    ContainerList bool
    Indicates if the issued token has permission to list blobs in the container.
    ContainerName string
    Container to request a token for, such as my-container.
    ContainerRead bool
    Indicates if the issued token has permission to read the content, properties, metadata or block list of any blob in the container. Use any blob in the container as the source of a copy operation.
    ContainerWrite bool
    Indicates that for any blob in the container if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    Expiration int
    Expiration in minutes for the generated token (default of 5 minutes).
    SignedIdentifier string
    Shared access policy identifier defined in your storage account resource.
    StorageAccessKey string
    Access key associated with this storage account.
    AccountName string
    Your Azure storage account name. Usually first segment in your Azure storage URL, for example https://acme-org.blob.core.windows.net would be the account name acme-org.
    BlobDelete bool
    Indicates if the issued token has permission to delete the blob.
    BlobName string
    Entity to request a token for, such as my-blob. If blank the computed SAS will apply to the entire storage container.
    BlobRead bool
    Indicates if the issued token has permission to read the content, properties, metadata and block list. Use the blob as the source of a copy operation.
    BlobWrite bool
    Indicates if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    ContainerDelete bool
    Indicates if issued token has permission to delete any blob in the container.
    ContainerList bool
    Indicates if the issued token has permission to list blobs in the container.
    ContainerName string
    Container to request a token for, such as my-container.
    ContainerRead bool
    Indicates if the issued token has permission to read the content, properties, metadata or block list of any blob in the container. Use any blob in the container as the source of a copy operation.
    ContainerWrite bool
    Indicates that for any blob in the container if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    Expiration int
    Expiration in minutes for the generated token (default of 5 minutes).
    SignedIdentifier string
    Shared access policy identifier defined in your storage account resource.
    StorageAccessKey string
    Access key associated with this storage account.
    accountName String
    Your Azure storage account name. Usually first segment in your Azure storage URL, for example https://acme-org.blob.core.windows.net would be the account name acme-org.
    blobDelete Boolean
    Indicates if the issued token has permission to delete the blob.
    blobName String
    Entity to request a token for, such as my-blob. If blank the computed SAS will apply to the entire storage container.
    blobRead Boolean
    Indicates if the issued token has permission to read the content, properties, metadata and block list. Use the blob as the source of a copy operation.
    blobWrite Boolean
    Indicates if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    containerDelete Boolean
    Indicates if issued token has permission to delete any blob in the container.
    containerList Boolean
    Indicates if the issued token has permission to list blobs in the container.
    containerName String
    Container to request a token for, such as my-container.
    containerRead Boolean
    Indicates if the issued token has permission to read the content, properties, metadata or block list of any blob in the container. Use any blob in the container as the source of a copy operation.
    containerWrite Boolean
    Indicates that for any blob in the container if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    expiration Integer
    Expiration in minutes for the generated token (default of 5 minutes).
    signedIdentifier String
    Shared access policy identifier defined in your storage account resource.
    storageAccessKey String
    Access key associated with this storage account.
    accountName string
    Your Azure storage account name. Usually first segment in your Azure storage URL, for example https://acme-org.blob.core.windows.net would be the account name acme-org.
    blobDelete boolean
    Indicates if the issued token has permission to delete the blob.
    blobName string
    Entity to request a token for, such as my-blob. If blank the computed SAS will apply to the entire storage container.
    blobRead boolean
    Indicates if the issued token has permission to read the content, properties, metadata and block list. Use the blob as the source of a copy operation.
    blobWrite boolean
    Indicates if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    containerDelete boolean
    Indicates if issued token has permission to delete any blob in the container.
    containerList boolean
    Indicates if the issued token has permission to list blobs in the container.
    containerName string
    Container to request a token for, such as my-container.
    containerRead boolean
    Indicates if the issued token has permission to read the content, properties, metadata or block list of any blob in the container. Use any blob in the container as the source of a copy operation.
    containerWrite boolean
    Indicates that for any blob in the container if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    expiration number
    Expiration in minutes for the generated token (default of 5 minutes).
    signedIdentifier string
    Shared access policy identifier defined in your storage account resource.
    storageAccessKey string
    Access key associated with this storage account.
    account_name str
    Your Azure storage account name. Usually first segment in your Azure storage URL, for example https://acme-org.blob.core.windows.net would be the account name acme-org.
    blob_delete bool
    Indicates if the issued token has permission to delete the blob.
    blob_name str
    Entity to request a token for, such as my-blob. If blank the computed SAS will apply to the entire storage container.
    blob_read bool
    Indicates if the issued token has permission to read the content, properties, metadata and block list. Use the blob as the source of a copy operation.
    blob_write bool
    Indicates if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    container_delete bool
    Indicates if issued token has permission to delete any blob in the container.
    container_list bool
    Indicates if the issued token has permission to list blobs in the container.
    container_name str
    Container to request a token for, such as my-container.
    container_read bool
    Indicates if the issued token has permission to read the content, properties, metadata or block list of any blob in the container. Use any blob in the container as the source of a copy operation.
    container_write bool
    Indicates that for any blob in the container if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    expiration int
    Expiration in minutes for the generated token (default of 5 minutes).
    signed_identifier str
    Shared access policy identifier defined in your storage account resource.
    storage_access_key str
    Access key associated with this storage account.
    accountName String
    Your Azure storage account name. Usually first segment in your Azure storage URL, for example https://acme-org.blob.core.windows.net would be the account name acme-org.
    blobDelete Boolean
    Indicates if the issued token has permission to delete the blob.
    blobName String
    Entity to request a token for, such as my-blob. If blank the computed SAS will apply to the entire storage container.
    blobRead Boolean
    Indicates if the issued token has permission to read the content, properties, metadata and block list. Use the blob as the source of a copy operation.
    blobWrite Boolean
    Indicates if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    containerDelete Boolean
    Indicates if issued token has permission to delete any blob in the container.
    containerList Boolean
    Indicates if the issued token has permission to list blobs in the container.
    containerName String
    Container to request a token for, such as my-container.
    containerRead Boolean
    Indicates if the issued token has permission to read the content, properties, metadata or block list of any blob in the container. Use any blob in the container as the source of a copy operation.
    containerWrite Boolean
    Indicates that for any blob in the container if the issued token has permission to create or write content, properties, metadata, or block list. Snapshot or lease the blob. Resize the blob (page blob only). Use the blob as the destination of a copy operation within the same account.
    expiration Number
    Expiration in minutes for the generated token (default of 5 minutes).
    signedIdentifier String
    Shared access policy identifier defined in your storage account resource.
    storageAccessKey String
    Access key associated with this storage account.

    ClientAddonsAzureSb, ClientAddonsAzureSbArgs

    EntityPath string
    Entity you want to request a token for, such as my-queue.
    Expiration int
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    Namespace string
    Your Azure Service Bus namespace. Usually the first segment of your Service Bus URL (for example https://acme-org.servicebus.windows.net would be acme-org).
    SasKey string
    Primary Key associated with your shared access policy.
    SasKeyName string
    Your shared access policy name defined in your Service Bus entity.
    EntityPath string
    Entity you want to request a token for, such as my-queue.
    Expiration int
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    Namespace string
    Your Azure Service Bus namespace. Usually the first segment of your Service Bus URL (for example https://acme-org.servicebus.windows.net would be acme-org).
    SasKey string
    Primary Key associated with your shared access policy.
    SasKeyName string
    Your shared access policy name defined in your Service Bus entity.
    entityPath String
    Entity you want to request a token for, such as my-queue.
    expiration Integer
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    namespace String
    Your Azure Service Bus namespace. Usually the first segment of your Service Bus URL (for example https://acme-org.servicebus.windows.net would be acme-org).
    sasKey String
    Primary Key associated with your shared access policy.
    sasKeyName String
    Your shared access policy name defined in your Service Bus entity.
    entityPath string
    Entity you want to request a token for, such as my-queue.
    expiration number
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    namespace string
    Your Azure Service Bus namespace. Usually the first segment of your Service Bus URL (for example https://acme-org.servicebus.windows.net would be acme-org).
    sasKey string
    Primary Key associated with your shared access policy.
    sasKeyName string
    Your shared access policy name defined in your Service Bus entity.
    entity_path str
    Entity you want to request a token for, such as my-queue.
    expiration int
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    namespace str
    Your Azure Service Bus namespace. Usually the first segment of your Service Bus URL (for example https://acme-org.servicebus.windows.net would be acme-org).
    sas_key str
    Primary Key associated with your shared access policy.
    sas_key_name str
    Your shared access policy name defined in your Service Bus entity.
    entityPath String
    Entity you want to request a token for, such as my-queue.
    expiration Number
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    namespace String
    Your Azure Service Bus namespace. Usually the first segment of your Service Bus URL (for example https://acme-org.servicebus.windows.net would be acme-org).
    sasKey String
    Primary Key associated with your shared access policy.
    sasKeyName String
    Your shared access policy name defined in your Service Bus entity.

    ClientAddonsEchosign, ClientAddonsEchosignArgs

    Domain string
    Your custom domain found in your EchoSign URL, for example https://acme-org.echosign.com would be acme-org.
    Domain string
    Your custom domain found in your EchoSign URL, for example https://acme-org.echosign.com would be acme-org.
    domain String
    Your custom domain found in your EchoSign URL, for example https://acme-org.echosign.com would be acme-org.
    domain string
    Your custom domain found in your EchoSign URL, for example https://acme-org.echosign.com would be acme-org.
    domain str
    Your custom domain found in your EchoSign URL, for example https://acme-org.echosign.com would be acme-org.
    domain String
    Your custom domain found in your EchoSign URL, for example https://acme-org.echosign.com would be acme-org.

    ClientAddonsEgnyte, ClientAddonsEgnyteArgs

    Domain string
    Your custom domain found in your Egnyte URL, for example https://acme-org.echosign.com would be acme-org.
    Domain string
    Your custom domain found in your Egnyte URL, for example https://acme-org.echosign.com would be acme-org.
    domain String
    Your custom domain found in your Egnyte URL, for example https://acme-org.echosign.com would be acme-org.
    domain string
    Your custom domain found in your Egnyte URL, for example https://acme-org.echosign.com would be acme-org.
    domain str
    Your custom domain found in your Egnyte URL, for example https://acme-org.echosign.com would be acme-org.
    domain String
    Your custom domain found in your Egnyte URL, for example https://acme-org.echosign.com would be acme-org.

    ClientAddonsFirebase, ClientAddonsFirebaseArgs

    ClientEmail string
    ID of the Service Account you have created (shown as client_email in the generated JSON file, SDK v3+ tokens only).
    LifetimeInSeconds int
    Optional expiration in seconds for the generated token. Defaults to 3600 seconds (SDK v3+ tokens only).
    PrivateKey string
    Private Key for signing the token (SDK v3+ tokens only).
    PrivateKeyId string
    Optional ID of the private key to obtain the kid header claim from the issued token (SDK v3+ tokens only).
    Secret string
    Google Firebase Secret. (SDK v2 only).
    ClientEmail string
    ID of the Service Account you have created (shown as client_email in the generated JSON file, SDK v3+ tokens only).
    LifetimeInSeconds int
    Optional expiration in seconds for the generated token. Defaults to 3600 seconds (SDK v3+ tokens only).
    PrivateKey string
    Private Key for signing the token (SDK v3+ tokens only).
    PrivateKeyId string
    Optional ID of the private key to obtain the kid header claim from the issued token (SDK v3+ tokens only).
    Secret string
    Google Firebase Secret. (SDK v2 only).
    clientEmail String
    ID of the Service Account you have created (shown as client_email in the generated JSON file, SDK v3+ tokens only).
    lifetimeInSeconds Integer
    Optional expiration in seconds for the generated token. Defaults to 3600 seconds (SDK v3+ tokens only).
    privateKey String
    Private Key for signing the token (SDK v3+ tokens only).
    privateKeyId String
    Optional ID of the private key to obtain the kid header claim from the issued token (SDK v3+ tokens only).
    secret String
    Google Firebase Secret. (SDK v2 only).
    clientEmail string
    ID of the Service Account you have created (shown as client_email in the generated JSON file, SDK v3+ tokens only).
    lifetimeInSeconds number
    Optional expiration in seconds for the generated token. Defaults to 3600 seconds (SDK v3+ tokens only).
    privateKey string
    Private Key for signing the token (SDK v3+ tokens only).
    privateKeyId string
    Optional ID of the private key to obtain the kid header claim from the issued token (SDK v3+ tokens only).
    secret string
    Google Firebase Secret. (SDK v2 only).
    client_email str
    ID of the Service Account you have created (shown as client_email in the generated JSON file, SDK v3+ tokens only).
    lifetime_in_seconds int
    Optional expiration in seconds for the generated token. Defaults to 3600 seconds (SDK v3+ tokens only).
    private_key str
    Private Key for signing the token (SDK v3+ tokens only).
    private_key_id str
    Optional ID of the private key to obtain the kid header claim from the issued token (SDK v3+ tokens only).
    secret str
    Google Firebase Secret. (SDK v2 only).
    clientEmail String
    ID of the Service Account you have created (shown as client_email in the generated JSON file, SDK v3+ tokens only).
    lifetimeInSeconds Number
    Optional expiration in seconds for the generated token. Defaults to 3600 seconds (SDK v3+ tokens only).
    privateKey String
    Private Key for signing the token (SDK v3+ tokens only).
    privateKeyId String
    Optional ID of the private key to obtain the kid header claim from the issued token (SDK v3+ tokens only).
    secret String
    Google Firebase Secret. (SDK v2 only).

    ClientAddonsLayer, ClientAddonsLayerArgs

    KeyId string
    Authentication Key identifier used to sign the Layer token.
    PrivateKey string
    Private key for signing the Layer token.
    ProviderId string
    Provider ID of your Layer account.
    Expiration int
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    Principal string
    Name of the property used as the unique user ID in Layer. If not specified user_id is used.
    KeyId string
    Authentication Key identifier used to sign the Layer token.
    PrivateKey string
    Private key for signing the Layer token.
    ProviderId string
    Provider ID of your Layer account.
    Expiration int
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    Principal string
    Name of the property used as the unique user ID in Layer. If not specified user_id is used.
    keyId String
    Authentication Key identifier used to sign the Layer token.
    privateKey String
    Private key for signing the Layer token.
    providerId String
    Provider ID of your Layer account.
    expiration Integer
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    principal String
    Name of the property used as the unique user ID in Layer. If not specified user_id is used.
    keyId string
    Authentication Key identifier used to sign the Layer token.
    privateKey string
    Private key for signing the Layer token.
    providerId string
    Provider ID of your Layer account.
    expiration number
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    principal string
    Name of the property used as the unique user ID in Layer. If not specified user_id is used.
    key_id str
    Authentication Key identifier used to sign the Layer token.
    private_key str
    Private key for signing the Layer token.
    provider_id str
    Provider ID of your Layer account.
    expiration int
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    principal str
    Name of the property used as the unique user ID in Layer. If not specified user_id is used.
    keyId String
    Authentication Key identifier used to sign the Layer token.
    privateKey String
    Private key for signing the Layer token.
    providerId String
    Provider ID of your Layer account.
    expiration Number
    Optional expiration in minutes for the generated token. Defaults to 5 minutes.
    principal String
    Name of the property used as the unique user ID in Layer. If not specified user_id is used.

    ClientAddonsMscrm, ClientAddonsMscrmArgs

    Url string
    Microsoft Dynamics CRM application URL.
    Url string
    Microsoft Dynamics CRM application URL.
    url String
    Microsoft Dynamics CRM application URL.
    url string
    Microsoft Dynamics CRM application URL.
    url str
    Microsoft Dynamics CRM application URL.
    url String
    Microsoft Dynamics CRM application URL.

    ClientAddonsNewrelic, ClientAddonsNewrelicArgs

    Account string
    Your New Relic Account ID found in your New Relic URL after the /accounts/ path, for example https://rpm.newrelic.com/accounts/123456/query would be 123456.
    Account string
    Your New Relic Account ID found in your New Relic URL after the /accounts/ path, for example https://rpm.newrelic.com/accounts/123456/query would be 123456.
    account String
    Your New Relic Account ID found in your New Relic URL after the /accounts/ path, for example https://rpm.newrelic.com/accounts/123456/query would be 123456.
    account string
    Your New Relic Account ID found in your New Relic URL after the /accounts/ path, for example https://rpm.newrelic.com/accounts/123456/query would be 123456.
    account str
    Your New Relic Account ID found in your New Relic URL after the /accounts/ path, for example https://rpm.newrelic.com/accounts/123456/query would be 123456.
    account String
    Your New Relic Account ID found in your New Relic URL after the /accounts/ path, for example https://rpm.newrelic.com/accounts/123456/query would be 123456.

    ClientAddonsOffice365, ClientAddonsOffice365Args

    Connection string
    Optional Auth0 database connection for testing an already-configured Office 365 tenant.
    Domain string
    Your Office 365 domain name, for example acme-org.com.
    Connection string
    Optional Auth0 database connection for testing an already-configured Office 365 tenant.
    Domain string
    Your Office 365 domain name, for example acme-org.com.
    connection String
    Optional Auth0 database connection for testing an already-configured Office 365 tenant.
    domain String
    Your Office 365 domain name, for example acme-org.com.
    connection string
    Optional Auth0 database connection for testing an already-configured Office 365 tenant.
    domain string
    Your Office 365 domain name, for example acme-org.com.
    connection str
    Optional Auth0 database connection for testing an already-configured Office 365 tenant.
    domain str
    Your Office 365 domain name, for example acme-org.com.
    connection String
    Optional Auth0 database connection for testing an already-configured Office 365 tenant.
    domain String
    Your Office 365 domain name, for example acme-org.com.

    ClientAddonsRms, ClientAddonsRmsArgs

    Url string
    URL of your Rights Management Server. It can be internal or external, but users will have to be able to reach it.
    Url string
    URL of your Rights Management Server. It can be internal or external, but users will have to be able to reach it.
    url String
    URL of your Rights Management Server. It can be internal or external, but users will have to be able to reach it.
    url string
    URL of your Rights Management Server. It can be internal or external, but users will have to be able to reach it.
    url str
    URL of your Rights Management Server. It can be internal or external, but users will have to be able to reach it.
    url String
    URL of your Rights Management Server. It can be internal or external, but users will have to be able to reach it.

    ClientAddonsSalesforce, ClientAddonsSalesforceArgs

    EntityId string
    Arbitrary logical URL that identifies the Saleforce resource, for example https://acme-org.com.
    EntityId string
    Arbitrary logical URL that identifies the Saleforce resource, for example https://acme-org.com.
    entityId String
    Arbitrary logical URL that identifies the Saleforce resource, for example https://acme-org.com.
    entityId string
    Arbitrary logical URL that identifies the Saleforce resource, for example https://acme-org.com.
    entity_id str
    Arbitrary logical URL that identifies the Saleforce resource, for example https://acme-org.com.
    entityId String
    Arbitrary logical URL that identifies the Saleforce resource, for example https://acme-org.com.

    ClientAddonsSalesforceApi, ClientAddonsSalesforceApiArgs

    ClientId string
    Consumer Key assigned by Salesforce to the Connected App.
    CommunityName string
    Community name.
    CommunityUrlSection string
    Community URL section.
    Principal string
    Name of the property in the user object that maps to a Salesforce username, for example email.
    ClientId string
    Consumer Key assigned by Salesforce to the Connected App.
    CommunityName string
    Community name.
    CommunityUrlSection string
    Community URL section.
    Principal string
    Name of the property in the user object that maps to a Salesforce username, for example email.
    clientId String
    Consumer Key assigned by Salesforce to the Connected App.
    communityName String
    Community name.
    communityUrlSection String
    Community URL section.
    principal String
    Name of the property in the user object that maps to a Salesforce username, for example email.
    clientId string
    Consumer Key assigned by Salesforce to the Connected App.
    communityName string
    Community name.
    communityUrlSection string
    Community URL section.
    principal string
    Name of the property in the user object that maps to a Salesforce username, for example email.
    client_id str
    Consumer Key assigned by Salesforce to the Connected App.
    community_name str
    Community name.
    community_url_section str
    Community URL section.
    principal str
    Name of the property in the user object that maps to a Salesforce username, for example email.
    clientId String
    Consumer Key assigned by Salesforce to the Connected App.
    communityName String
    Community name.
    communityUrlSection String
    Community URL section.
    principal String
    Name of the property in the user object that maps to a Salesforce username, for example email.

    ClientAddonsSalesforceSandboxApi, ClientAddonsSalesforceSandboxApiArgs

    ClientId string
    Consumer Key assigned by Salesforce to the Connected App.
    CommunityName string
    Community name.
    CommunityUrlSection string
    Community URL section.
    Principal string
    Name of the property in the user object that maps to a Salesforce username, for example email.
    ClientId string
    Consumer Key assigned by Salesforce to the Connected App.
    CommunityName string
    Community name.
    CommunityUrlSection string
    Community URL section.
    Principal string
    Name of the property in the user object that maps to a Salesforce username, for example email.
    clientId String
    Consumer Key assigned by Salesforce to the Connected App.
    communityName String
    Community name.
    communityUrlSection String
    Community URL section.
    principal String
    Name of the property in the user object that maps to a Salesforce username, for example email.
    clientId string
    Consumer Key assigned by Salesforce to the Connected App.
    communityName string
    Community name.
    communityUrlSection string
    Community URL section.
    principal string
    Name of the property in the user object that maps to a Salesforce username, for example email.
    client_id str
    Consumer Key assigned by Salesforce to the Connected App.
    community_name str
    Community name.
    community_url_section str
    Community URL section.
    principal str
    Name of the property in the user object that maps to a Salesforce username, for example email.
    clientId String
    Consumer Key assigned by Salesforce to the Connected App.
    communityName String
    Community name.
    communityUrlSection String
    Community URL section.
    principal String
    Name of the property in the user object that maps to a Salesforce username, for example email.

    ClientAddonsSamlp, ClientAddonsSamlpArgs

    Audience string
    Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
    AuthnContextClassRef string
    Class reference of the authentication context.
    Binding string
    Protocol binding used for SAML logout responses.
    CreateUpnClaim bool
    Indicates whether a UPN claim should be created. Defaults to true.
    Destination string
    Destination of the SAML Response. If not specified, it will be AssertionConsumerUrl of SAMLRequest or callback URL if there was no SAMLRequest.
    DigestAlgorithm string
    Algorithm used to calculate the digest of the SAML Assertion or response. Options include sha1 and sha256. Defaults to sha1.
    FlexibleMappings string
    This is a supporting attribute to mappings field.Please note this is an experimental field. It should only be used when needed to send a map with keys as slices.
    IncludeAttributeNameFormat bool
    Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion. Defaults to true.
    Issuer string
    Issuer of the SAML Assertion.
    LifetimeInSeconds int
    Number of seconds during which the token is valid. Defaults to 3600 seconds.
    Logout ClientAddonsSamlpLogout
    Configuration settings for logout.
    MapIdentities bool
    Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available. Defaults to true.
    MapUnknownClaimsAsIs bool
    Indicates whether to add a prefix of http://schema.auth0.com to any claims that are not mapped to the common profile when passed through in the output assertion. Defaults to false.
    Mappings Dictionary<string, string>
    Mappings between the Auth0 user profile property name (name) and the output attributes on the SAML attribute in the assertion (value).
    NameIdentifierFormat string
    Format of the name identifier. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    NameIdentifierProbes List<string>
    Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
    PassthroughClaimsWithNoMapping bool
    Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion. Defaults to true.
    Recipient string
    Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or callback URL if no SAMLRequest was sent.
    SignResponse bool
    Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
    SignatureAlgorithm string
    Algorithm used to sign the SAML Assertion or response. Options include rsa-sha1 and rsa-sha256. Defaults to rsa-sha1.
    SigningCert string
    Optionally indicates the public key certificate used to validate SAML requests. If set, SAML requests will be required to be signed. A sample value would be -----BEGIN PUBLIC KEY-----\nMIGf...bpP/t3\n+JGNGIRMj1hF1rnb6QIDAQAB\n-----END PUBLIC KEY-----\n.
    TypedAttributes bool
    Indicates whether or not we should infer the xs:type of the element. Types include xs:string, xs:boolean, xs:double, and xs:anyType. When set to false, all xs:type are xs:anyType. Defaults to true.
    Audience string
    Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
    AuthnContextClassRef string
    Class reference of the authentication context.
    Binding string
    Protocol binding used for SAML logout responses.
    CreateUpnClaim bool
    Indicates whether a UPN claim should be created. Defaults to true.
    Destination string
    Destination of the SAML Response. If not specified, it will be AssertionConsumerUrl of SAMLRequest or callback URL if there was no SAMLRequest.
    DigestAlgorithm string
    Algorithm used to calculate the digest of the SAML Assertion or response. Options include sha1 and sha256. Defaults to sha1.
    FlexibleMappings string
    This is a supporting attribute to mappings field.Please note this is an experimental field. It should only be used when needed to send a map with keys as slices.
    IncludeAttributeNameFormat bool
    Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion. Defaults to true.
    Issuer string
    Issuer of the SAML Assertion.
    LifetimeInSeconds int
    Number of seconds during which the token is valid. Defaults to 3600 seconds.
    Logout ClientAddonsSamlpLogout
    Configuration settings for logout.
    MapIdentities bool
    Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available. Defaults to true.
    MapUnknownClaimsAsIs bool
    Indicates whether to add a prefix of http://schema.auth0.com to any claims that are not mapped to the common profile when passed through in the output assertion. Defaults to false.
    Mappings map[string]string
    Mappings between the Auth0 user profile property name (name) and the output attributes on the SAML attribute in the assertion (value).
    NameIdentifierFormat string
    Format of the name identifier. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    NameIdentifierProbes []string
    Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
    PassthroughClaimsWithNoMapping bool
    Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion. Defaults to true.
    Recipient string
    Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or callback URL if no SAMLRequest was sent.
    SignResponse bool
    Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
    SignatureAlgorithm string
    Algorithm used to sign the SAML Assertion or response. Options include rsa-sha1 and rsa-sha256. Defaults to rsa-sha1.
    SigningCert string
    Optionally indicates the public key certificate used to validate SAML requests. If set, SAML requests will be required to be signed. A sample value would be -----BEGIN PUBLIC KEY-----\nMIGf...bpP/t3\n+JGNGIRMj1hF1rnb6QIDAQAB\n-----END PUBLIC KEY-----\n.
    TypedAttributes bool
    Indicates whether or not we should infer the xs:type of the element. Types include xs:string, xs:boolean, xs:double, and xs:anyType. When set to false, all xs:type are xs:anyType. Defaults to true.
    audience String
    Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
    authnContextClassRef String
    Class reference of the authentication context.
    binding String
    Protocol binding used for SAML logout responses.
    createUpnClaim Boolean
    Indicates whether a UPN claim should be created. Defaults to true.
    destination String
    Destination of the SAML Response. If not specified, it will be AssertionConsumerUrl of SAMLRequest or callback URL if there was no SAMLRequest.
    digestAlgorithm String
    Algorithm used to calculate the digest of the SAML Assertion or response. Options include sha1 and sha256. Defaults to sha1.
    flexibleMappings String
    This is a supporting attribute to mappings field.Please note this is an experimental field. It should only be used when needed to send a map with keys as slices.
    includeAttributeNameFormat Boolean
    Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion. Defaults to true.
    issuer String
    Issuer of the SAML Assertion.
    lifetimeInSeconds Integer
    Number of seconds during which the token is valid. Defaults to 3600 seconds.
    logout ClientAddonsSamlpLogout
    Configuration settings for logout.
    mapIdentities Boolean
    Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available. Defaults to true.
    mapUnknownClaimsAsIs Boolean
    Indicates whether to add a prefix of http://schema.auth0.com to any claims that are not mapped to the common profile when passed through in the output assertion. Defaults to false.
    mappings Map<String,String>
    Mappings between the Auth0 user profile property name (name) and the output attributes on the SAML attribute in the assertion (value).
    nameIdentifierFormat String
    Format of the name identifier. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    nameIdentifierProbes List<String>
    Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
    passthroughClaimsWithNoMapping Boolean
    Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion. Defaults to true.
    recipient String
    Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or callback URL if no SAMLRequest was sent.
    signResponse Boolean
    Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
    signatureAlgorithm String
    Algorithm used to sign the SAML Assertion or response. Options include rsa-sha1 and rsa-sha256. Defaults to rsa-sha1.
    signingCert String
    Optionally indicates the public key certificate used to validate SAML requests. If set, SAML requests will be required to be signed. A sample value would be -----BEGIN PUBLIC KEY-----\nMIGf...bpP/t3\n+JGNGIRMj1hF1rnb6QIDAQAB\n-----END PUBLIC KEY-----\n.
    typedAttributes Boolean
    Indicates whether or not we should infer the xs:type of the element. Types include xs:string, xs:boolean, xs:double, and xs:anyType. When set to false, all xs:type are xs:anyType. Defaults to true.
    audience string
    Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
    authnContextClassRef string
    Class reference of the authentication context.
    binding string
    Protocol binding used for SAML logout responses.
    createUpnClaim boolean
    Indicates whether a UPN claim should be created. Defaults to true.
    destination string
    Destination of the SAML Response. If not specified, it will be AssertionConsumerUrl of SAMLRequest or callback URL if there was no SAMLRequest.
    digestAlgorithm string
    Algorithm used to calculate the digest of the SAML Assertion or response. Options include sha1 and sha256. Defaults to sha1.
    flexibleMappings string
    This is a supporting attribute to mappings field.Please note this is an experimental field. It should only be used when needed to send a map with keys as slices.
    includeAttributeNameFormat boolean
    Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion. Defaults to true.
    issuer string
    Issuer of the SAML Assertion.
    lifetimeInSeconds number
    Number of seconds during which the token is valid. Defaults to 3600 seconds.
    logout ClientAddonsSamlpLogout
    Configuration settings for logout.
    mapIdentities boolean
    Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available. Defaults to true.
    mapUnknownClaimsAsIs boolean
    Indicates whether to add a prefix of http://schema.auth0.com to any claims that are not mapped to the common profile when passed through in the output assertion. Defaults to false.
    mappings {[key: string]: string}
    Mappings between the Auth0 user profile property name (name) and the output attributes on the SAML attribute in the assertion (value).
    nameIdentifierFormat string
    Format of the name identifier. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    nameIdentifierProbes string[]
    Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
    passthroughClaimsWithNoMapping boolean
    Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion. Defaults to true.
    recipient string
    Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or callback URL if no SAMLRequest was sent.
    signResponse boolean
    Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
    signatureAlgorithm string
    Algorithm used to sign the SAML Assertion or response. Options include rsa-sha1 and rsa-sha256. Defaults to rsa-sha1.
    signingCert string
    Optionally indicates the public key certificate used to validate SAML requests. If set, SAML requests will be required to be signed. A sample value would be -----BEGIN PUBLIC KEY-----\nMIGf...bpP/t3\n+JGNGIRMj1hF1rnb6QIDAQAB\n-----END PUBLIC KEY-----\n.
    typedAttributes boolean
    Indicates whether or not we should infer the xs:type of the element. Types include xs:string, xs:boolean, xs:double, and xs:anyType. When set to false, all xs:type are xs:anyType. Defaults to true.
    audience str
    Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
    authn_context_class_ref str
    Class reference of the authentication context.
    binding str
    Protocol binding used for SAML logout responses.
    create_upn_claim bool
    Indicates whether a UPN claim should be created. Defaults to true.
    destination str
    Destination of the SAML Response. If not specified, it will be AssertionConsumerUrl of SAMLRequest or callback URL if there was no SAMLRequest.
    digest_algorithm str
    Algorithm used to calculate the digest of the SAML Assertion or response. Options include sha1 and sha256. Defaults to sha1.
    flexible_mappings str
    This is a supporting attribute to mappings field.Please note this is an experimental field. It should only be used when needed to send a map with keys as slices.
    include_attribute_name_format bool
    Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion. Defaults to true.
    issuer str
    Issuer of the SAML Assertion.
    lifetime_in_seconds int
    Number of seconds during which the token is valid. Defaults to 3600 seconds.
    logout ClientAddonsSamlpLogout
    Configuration settings for logout.
    map_identities bool
    Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available. Defaults to true.
    map_unknown_claims_as_is bool
    Indicates whether to add a prefix of http://schema.auth0.com to any claims that are not mapped to the common profile when passed through in the output assertion. Defaults to false.
    mappings Mapping[str, str]
    Mappings between the Auth0 user profile property name (name) and the output attributes on the SAML attribute in the assertion (value).
    name_identifier_format str
    Format of the name identifier. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    name_identifier_probes Sequence[str]
    Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
    passthrough_claims_with_no_mapping bool
    Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion. Defaults to true.
    recipient str
    Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or callback URL if no SAMLRequest was sent.
    sign_response bool
    Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
    signature_algorithm str
    Algorithm used to sign the SAML Assertion or response. Options include rsa-sha1 and rsa-sha256. Defaults to rsa-sha1.
    signing_cert str
    Optionally indicates the public key certificate used to validate SAML requests. If set, SAML requests will be required to be signed. A sample value would be -----BEGIN PUBLIC KEY-----\nMIGf...bpP/t3\n+JGNGIRMj1hF1rnb6QIDAQAB\n-----END PUBLIC KEY-----\n.
    typed_attributes bool
    Indicates whether or not we should infer the xs:type of the element. Types include xs:string, xs:boolean, xs:double, and xs:anyType. When set to false, all xs:type are xs:anyType. Defaults to true.
    audience String
    Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
    authnContextClassRef String
    Class reference of the authentication context.
    binding String
    Protocol binding used for SAML logout responses.
    createUpnClaim Boolean
    Indicates whether a UPN claim should be created. Defaults to true.
    destination String
    Destination of the SAML Response. If not specified, it will be AssertionConsumerUrl of SAMLRequest or callback URL if there was no SAMLRequest.
    digestAlgorithm String
    Algorithm used to calculate the digest of the SAML Assertion or response. Options include sha1 and sha256. Defaults to sha1.
    flexibleMappings String
    This is a supporting attribute to mappings field.Please note this is an experimental field. It should only be used when needed to send a map with keys as slices.
    includeAttributeNameFormat Boolean
    Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion. Defaults to true.
    issuer String
    Issuer of the SAML Assertion.
    lifetimeInSeconds Number
    Number of seconds during which the token is valid. Defaults to 3600 seconds.
    logout Property Map
    Configuration settings for logout.
    mapIdentities Boolean
    Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available. Defaults to true.
    mapUnknownClaimsAsIs Boolean
    Indicates whether to add a prefix of http://schema.auth0.com to any claims that are not mapped to the common profile when passed through in the output assertion. Defaults to false.
    mappings Map<String>
    Mappings between the Auth0 user profile property name (name) and the output attributes on the SAML attribute in the assertion (value).
    nameIdentifierFormat String
    Format of the name identifier. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    nameIdentifierProbes List<String>
    Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
    passthroughClaimsWithNoMapping Boolean
    Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion. Defaults to true.
    recipient String
    Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or callback URL if no SAMLRequest was sent.
    signResponse Boolean
    Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
    signatureAlgorithm String
    Algorithm used to sign the SAML Assertion or response. Options include rsa-sha1 and rsa-sha256. Defaults to rsa-sha1.
    signingCert String
    Optionally indicates the public key certificate used to validate SAML requests. If set, SAML requests will be required to be signed. A sample value would be -----BEGIN PUBLIC KEY-----\nMIGf...bpP/t3\n+JGNGIRMj1hF1rnb6QIDAQAB\n-----END PUBLIC KEY-----\n.
    typedAttributes Boolean
    Indicates whether or not we should infer the xs:type of the element. Types include xs:string, xs:boolean, xs:double, and xs:anyType. When set to false, all xs:type are xs:anyType. Defaults to true.

    ClientAddonsSamlpLogout, ClientAddonsSamlpLogoutArgs

    Callback string
    The service provider (client application)'s Single Logout Service URL, where Auth0 will send logout requests and responses.
    SloEnabled bool
    Controls whether Auth0 should notify service providers of session termination.
    Callback string
    The service provider (client application)'s Single Logout Service URL, where Auth0 will send logout requests and responses.
    SloEnabled bool
    Controls whether Auth0 should notify service providers of session termination.
    callback String
    The service provider (client application)'s Single Logout Service URL, where Auth0 will send logout requests and responses.
    sloEnabled Boolean
    Controls whether Auth0 should notify service providers of session termination.
    callback string
    The service provider (client application)'s Single Logout Service URL, where Auth0 will send logout requests and responses.
    sloEnabled boolean
    Controls whether Auth0 should notify service providers of session termination.
    callback str
    The service provider (client application)'s Single Logout Service URL, where Auth0 will send logout requests and responses.
    slo_enabled bool
    Controls whether Auth0 should notify service providers of session termination.
    callback String
    The service provider (client application)'s Single Logout Service URL, where Auth0 will send logout requests and responses.
    sloEnabled Boolean
    Controls whether Auth0 should notify service providers of session termination.

    ClientAddonsSapApi, ClientAddonsSapApiArgs

    ClientId string
    If activated in the OAuth 2.0 client configuration (transaction SOAUTH2) the SAML attributeclientidmust be set and equal theclientid` form parameter of the access token request.
    NameIdentifierFormat string
    NameID element of the Subject which can be used to express the user's identity. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    Scope string
    Requested scope for SAP APIs.
    ServicePassword string
    Service account password to use to authenticate API calls to the token endpoint.
    TokenEndpointUrl string
    The OAuth2 token endpoint URL of your SAP OData server.
    UsernameAttribute string
    Name of the property in the user object that maps to a SAP username, for example email.
    ClientId string
    If activated in the OAuth 2.0 client configuration (transaction SOAUTH2) the SAML attributeclientidmust be set and equal theclientid` form parameter of the access token request.
    NameIdentifierFormat string
    NameID element of the Subject which can be used to express the user's identity. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    Scope string
    Requested scope for SAP APIs.
    ServicePassword string
    Service account password to use to authenticate API calls to the token endpoint.
    TokenEndpointUrl string
    The OAuth2 token endpoint URL of your SAP OData server.
    UsernameAttribute string
    Name of the property in the user object that maps to a SAP username, for example email.
    clientId String
    If activated in the OAuth 2.0 client configuration (transaction SOAUTH2) the SAML attributeclientidmust be set and equal theclientid` form parameter of the access token request.
    nameIdentifierFormat String
    NameID element of the Subject which can be used to express the user's identity. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    scope String
    Requested scope for SAP APIs.
    servicePassword String
    Service account password to use to authenticate API calls to the token endpoint.
    tokenEndpointUrl String
    The OAuth2 token endpoint URL of your SAP OData server.
    usernameAttribute String
    Name of the property in the user object that maps to a SAP username, for example email.
    clientId string
    If activated in the OAuth 2.0 client configuration (transaction SOAUTH2) the SAML attributeclientidmust be set and equal theclientid` form parameter of the access token request.
    nameIdentifierFormat string
    NameID element of the Subject which can be used to express the user's identity. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    scope string
    Requested scope for SAP APIs.
    servicePassword string
    Service account password to use to authenticate API calls to the token endpoint.
    tokenEndpointUrl string
    The OAuth2 token endpoint URL of your SAP OData server.
    usernameAttribute string
    Name of the property in the user object that maps to a SAP username, for example email.
    client_id str
    If activated in the OAuth 2.0 client configuration (transaction SOAUTH2) the SAML attributeclientidmust be set and equal theclientid` form parameter of the access token request.
    name_identifier_format str
    NameID element of the Subject which can be used to express the user's identity. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    scope str
    Requested scope for SAP APIs.
    service_password str
    Service account password to use to authenticate API calls to the token endpoint.
    token_endpoint_url str
    The OAuth2 token endpoint URL of your SAP OData server.
    username_attribute str
    Name of the property in the user object that maps to a SAP username, for example email.
    clientId String
    If activated in the OAuth 2.0 client configuration (transaction SOAUTH2) the SAML attributeclientidmust be set and equal theclientid` form parameter of the access token request.
    nameIdentifierFormat String
    NameID element of the Subject which can be used to express the user's identity. Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
    scope String
    Requested scope for SAP APIs.
    servicePassword String
    Service account password to use to authenticate API calls to the token endpoint.
    tokenEndpointUrl String
    The OAuth2 token endpoint URL of your SAP OData server.
    usernameAttribute String
    Name of the property in the user object that maps to a SAP username, for example email.

    ClientAddonsSentry, ClientAddonsSentryArgs

    BaseUrl string
    URL prefix only if running Sentry Community Edition, otherwise leave empty.
    OrgSlug string
    Generated slug for your Sentry organization. Found in your Sentry URL, for example https://sentry.acme.com/acme-org/ would be acme-org.
    BaseUrl string
    URL prefix only if running Sentry Community Edition, otherwise leave empty.
    OrgSlug string
    Generated slug for your Sentry organization. Found in your Sentry URL, for example https://sentry.acme.com/acme-org/ would be acme-org.
    baseUrl String
    URL prefix only if running Sentry Community Edition, otherwise leave empty.
    orgSlug String
    Generated slug for your Sentry organization. Found in your Sentry URL, for example https://sentry.acme.com/acme-org/ would be acme-org.
    baseUrl string
    URL prefix only if running Sentry Community Edition, otherwise leave empty.
    orgSlug string
    Generated slug for your Sentry organization. Found in your Sentry URL, for example https://sentry.acme.com/acme-org/ would be acme-org.
    base_url str
    URL prefix only if running Sentry Community Edition, otherwise leave empty.
    org_slug str
    Generated slug for your Sentry organization. Found in your Sentry URL, for example https://sentry.acme.com/acme-org/ would be acme-org.
    baseUrl String
    URL prefix only if running Sentry Community Edition, otherwise leave empty.
    orgSlug String
    Generated slug for your Sentry organization. Found in your Sentry URL, for example https://sentry.acme.com/acme-org/ would be acme-org.

    ClientAddonsSharepoint, ClientAddonsSharepointArgs

    ExternalUrls List<string>
    External SharePoint application URLs if exposed to the Internet.
    Url string
    Internal SharePoint application URL.
    ExternalUrls []string
    External SharePoint application URLs if exposed to the Internet.
    Url string
    Internal SharePoint application URL.
    externalUrls List<String>
    External SharePoint application URLs if exposed to the Internet.
    url String
    Internal SharePoint application URL.
    externalUrls string[]
    External SharePoint application URLs if exposed to the Internet.
    url string
    Internal SharePoint application URL.
    external_urls Sequence[str]
    External SharePoint application URLs if exposed to the Internet.
    url str
    Internal SharePoint application URL.
    externalUrls List<String>
    External SharePoint application URLs if exposed to the Internet.
    url String
    Internal SharePoint application URL.

    ClientAddonsSlack, ClientAddonsSlackArgs

    Team string
    Slack team name.
    Team string
    Slack team name.
    team String
    Slack team name.
    team string
    Slack team name.
    team str
    Slack team name.
    team String
    Slack team name.

    ClientAddonsSpringcm, ClientAddonsSpringcmArgs

    AcsUrl string
    SpringCM ACS URL, for example https://na11.springcm.com/atlas/sso/SSOEndpoint.ashx.
    AcsUrl string
    SpringCM ACS URL, for example https://na11.springcm.com/atlas/sso/SSOEndpoint.ashx.
    acsUrl String
    SpringCM ACS URL, for example https://na11.springcm.com/atlas/sso/SSOEndpoint.ashx.
    acsUrl string
    SpringCM ACS URL, for example https://na11.springcm.com/atlas/sso/SSOEndpoint.ashx.
    acs_url str
    SpringCM ACS URL, for example https://na11.springcm.com/atlas/sso/SSOEndpoint.ashx.
    acsUrl String
    SpringCM ACS URL, for example https://na11.springcm.com/atlas/sso/SSOEndpoint.ashx.

    ClientAddonsSsoIntegration, ClientAddonsSsoIntegrationArgs

    Name string
    SSO integration name.
    Version string
    SSO integration version installed.
    Name string
    SSO integration name.
    Version string
    SSO integration version installed.
    name String
    SSO integration name.
    version String
    SSO integration version installed.
    name string
    SSO integration name.
    version string
    SSO integration version installed.
    name str
    SSO integration name.
    version str
    SSO integration version installed.
    name String
    SSO integration name.
    version String
    SSO integration version installed.

    ClientAddonsWams, ClientAddonsWamsArgs

    MasterKey string
    Your master key for Windows Azure Mobile Services.
    MasterKey string
    Your master key for Windows Azure Mobile Services.
    masterKey String
    Your master key for Windows Azure Mobile Services.
    masterKey string
    Your master key for Windows Azure Mobile Services.
    master_key str
    Your master key for Windows Azure Mobile Services.
    masterKey String
    Your master key for Windows Azure Mobile Services.

    ClientAddonsZendesk, ClientAddonsZendeskArgs

    AccountName string
    Zendesk account name. Usually the first segment in your Zendesk URL, for example https://acme-org.zendesk.com would be acme-org.
    AccountName string
    Zendesk account name. Usually the first segment in your Zendesk URL, for example https://acme-org.zendesk.com would be acme-org.
    accountName String
    Zendesk account name. Usually the first segment in your Zendesk URL, for example https://acme-org.zendesk.com would be acme-org.
    accountName string
    Zendesk account name. Usually the first segment in your Zendesk URL, for example https://acme-org.zendesk.com would be acme-org.
    account_name str
    Zendesk account name. Usually the first segment in your Zendesk URL, for example https://acme-org.zendesk.com would be acme-org.
    accountName String
    Zendesk account name. Usually the first segment in your Zendesk URL, for example https://acme-org.zendesk.com would be acme-org.

    ClientAddonsZoom, ClientAddonsZoomArgs

    Account string
    Zoom account name. Usually the first segment of your Zoom URL, for example https://acme-org.zoom.us would be acme-org.
    Account string
    Zoom account name. Usually the first segment of your Zoom URL, for example https://acme-org.zoom.us would be acme-org.
    account String
    Zoom account name. Usually the first segment of your Zoom URL, for example https://acme-org.zoom.us would be acme-org.
    account string
    Zoom account name. Usually the first segment of your Zoom URL, for example https://acme-org.zoom.us would be acme-org.
    account str
    Zoom account name. Usually the first segment of your Zoom URL, for example https://acme-org.zoom.us would be acme-org.
    account String
    Zoom account name. Usually the first segment of your Zoom URL, for example https://acme-org.zoom.us would be acme-org.

    ClientDefaultOrganization, ClientDefaultOrganizationArgs

    Disable bool
    If set, the default_organization will be removed.
    Flows List<string>
    Definition of the flow that needs to be configured. Eg. client_credentials
    OrganizationId string
    The unique identifier of the organization
    Disable bool
    If set, the default_organization will be removed.
    Flows []string
    Definition of the flow that needs to be configured. Eg. client_credentials
    OrganizationId string
    The unique identifier of the organization
    disable Boolean
    If set, the default_organization will be removed.
    flows List<String>
    Definition of the flow that needs to be configured. Eg. client_credentials
    organizationId String
    The unique identifier of the organization
    disable boolean
    If set, the default_organization will be removed.
    flows string[]
    Definition of the flow that needs to be configured. Eg. client_credentials
    organizationId string
    The unique identifier of the organization
    disable bool
    If set, the default_organization will be removed.
    flows Sequence[str]
    Definition of the flow that needs to be configured. Eg. client_credentials
    organization_id str
    The unique identifier of the organization
    disable Boolean
    If set, the default_organization will be removed.
    flows List<String>
    Definition of the flow that needs to be configured. Eg. client_credentials
    organizationId String
    The unique identifier of the organization

    ClientJwtConfiguration, ClientJwtConfigurationArgs

    Alg string
    Algorithm used to sign JWTs. Can be one of HS256, RS256, PS256.
    LifetimeInSeconds int
    Number of seconds during which the JWT will be valid.
    Scopes Dictionary<string, string>
    Permissions (scopes) included in JWTs.
    SecretEncoded bool
    Indicates whether the client secret is Base64-encoded.
    Alg string
    Algorithm used to sign JWTs. Can be one of HS256, RS256, PS256.
    LifetimeInSeconds int
    Number of seconds during which the JWT will be valid.
    Scopes map[string]string
    Permissions (scopes) included in JWTs.
    SecretEncoded bool
    Indicates whether the client secret is Base64-encoded.
    alg String
    Algorithm used to sign JWTs. Can be one of HS256, RS256, PS256.
    lifetimeInSeconds Integer
    Number of seconds during which the JWT will be valid.
    scopes Map<String,String>
    Permissions (scopes) included in JWTs.
    secretEncoded Boolean
    Indicates whether the client secret is Base64-encoded.
    alg string
    Algorithm used to sign JWTs. Can be one of HS256, RS256, PS256.
    lifetimeInSeconds number
    Number of seconds during which the JWT will be valid.
    scopes {[key: string]: string}
    Permissions (scopes) included in JWTs.
    secretEncoded boolean
    Indicates whether the client secret is Base64-encoded.
    alg str
    Algorithm used to sign JWTs. Can be one of HS256, RS256, PS256.
    lifetime_in_seconds int
    Number of seconds during which the JWT will be valid.
    scopes Mapping[str, str]
    Permissions (scopes) included in JWTs.
    secret_encoded bool
    Indicates whether the client secret is Base64-encoded.
    alg String
    Algorithm used to sign JWTs. Can be one of HS256, RS256, PS256.
    lifetimeInSeconds Number
    Number of seconds during which the JWT will be valid.
    scopes Map<String>
    Permissions (scopes) included in JWTs.
    secretEncoded Boolean
    Indicates whether the client secret is Base64-encoded.

    ClientMobile, ClientMobileArgs

    Android ClientMobileAndroid
    Configuration settings for Android native apps.
    Ios ClientMobileIos
    Configuration settings for i0S native apps.
    Android ClientMobileAndroid
    Configuration settings for Android native apps.
    Ios ClientMobileIos
    Configuration settings for i0S native apps.
    android ClientMobileAndroid
    Configuration settings for Android native apps.
    ios ClientMobileIos
    Configuration settings for i0S native apps.
    android ClientMobileAndroid
    Configuration settings for Android native apps.
    ios ClientMobileIos
    Configuration settings for i0S native apps.
    android ClientMobileAndroid
    Configuration settings for Android native apps.
    ios ClientMobileIos
    Configuration settings for i0S native apps.
    android Property Map
    Configuration settings for Android native apps.
    ios Property Map
    Configuration settings for i0S native apps.

    ClientMobileAndroid, ClientMobileAndroidArgs

    ClientMobileIos, ClientMobileIosArgs

    ClientNativeSocialLogin, ClientNativeSocialLoginArgs

    ClientNativeSocialLoginApple, ClientNativeSocialLoginAppleArgs

    Enabled bool
    Enabled bool
    enabled Boolean
    enabled boolean
    enabled bool
    enabled Boolean

    ClientNativeSocialLoginFacebook, ClientNativeSocialLoginFacebookArgs

    Enabled bool
    Enabled bool
    enabled Boolean
    enabled boolean
    enabled bool
    enabled Boolean

    ClientNativeSocialLoginGoogle, ClientNativeSocialLoginGoogleArgs

    Enabled bool
    Enabled bool
    enabled Boolean
    enabled boolean
    enabled bool
    enabled Boolean

    ClientOidcLogout, ClientOidcLogoutArgs

    BackchannelLogoutUrls List<string>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
    BackchannelLogoutInitiators ClientOidcLogoutBackchannelLogoutInitiators
    Configure OIDC logout initiators for the Client
    BackchannelLogoutUrls []string
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
    BackchannelLogoutInitiators ClientOidcLogoutBackchannelLogoutInitiators
    Configure OIDC logout initiators for the Client
    backchannelLogoutUrls List<String>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
    backchannelLogoutInitiators ClientOidcLogoutBackchannelLogoutInitiators
    Configure OIDC logout initiators for the Client
    backchannelLogoutUrls string[]
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
    backchannelLogoutInitiators ClientOidcLogoutBackchannelLogoutInitiators
    Configure OIDC logout initiators for the Client
    backchannel_logout_urls Sequence[str]
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
    backchannel_logout_initiators ClientOidcLogoutBackchannelLogoutInitiators
    Configure OIDC logout initiators for the Client
    backchannelLogoutUrls List<String>
    Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
    backchannelLogoutInitiators Property Map
    Configure OIDC logout initiators for the Client

    ClientOidcLogoutBackchannelLogoutInitiators, ClientOidcLogoutBackchannelLogoutInitiatorsArgs

    Mode string
    Determines the configuration method for enabling initiators. custom enables only the initiators listed in the backchannellogoutselected_initiators set, all enables all current and future initiators.
    SelectedInitiators List<string>
    Contains the list of initiators to be enabled for the given client.
    Mode string
    Determines the configuration method for enabling initiators. custom enables only the initiators listed in the backchannellogoutselected_initiators set, all enables all current and future initiators.
    SelectedInitiators []string
    Contains the list of initiators to be enabled for the given client.
    mode String
    Determines the configuration method for enabling initiators. custom enables only the initiators listed in the backchannellogoutselected_initiators set, all enables all current and future initiators.
    selectedInitiators List<String>
    Contains the list of initiators to be enabled for the given client.
    mode string
    Determines the configuration method for enabling initiators. custom enables only the initiators listed in the backchannellogoutselected_initiators set, all enables all current and future initiators.
    selectedInitiators string[]
    Contains the list of initiators to be enabled for the given client.
    mode str
    Determines the configuration method for enabling initiators. custom enables only the initiators listed in the backchannellogoutselected_initiators set, all enables all current and future initiators.
    selected_initiators Sequence[str]
    Contains the list of initiators to be enabled for the given client.
    mode String
    Determines the configuration method for enabling initiators. custom enables only the initiators listed in the backchannellogoutselected_initiators set, all enables all current and future initiators.
    selectedInitiators List<String>
    Contains the list of initiators to be enabled for the given client.

    ClientRefreshToken, ClientRefreshTokenArgs

    ExpirationType string
    Options include expiring, non-expiring. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is rotating, this must be set to expiring.
    RotationType string
    Options include rotating, non-rotating. When rotating, exchanging a refresh token will cause a new refresh token to be issued and the existing token will be invalidated. This allows for automatic detection of token reuse if the token is leaked.
    IdleTokenLifetime int
    The time in seconds after which inactive refresh tokens will expire.
    InfiniteIdleTokenLifetime bool
    Whether inactive refresh tokens should remain valid indefinitely.
    InfiniteTokenLifetime bool
    Whether refresh tokens should remain valid indefinitely. If false, token_lifetime should also be set.
    Leeway int
    The amount of time in seconds in which a refresh token may be reused without triggering reuse detection.
    Policies List<ClientRefreshTokenPolicy>
    A collection of policies governing multi-resource refresh token exchange (MRRT), defining how refresh tokens can be used across different resource servers
    TokenLifetime int
    The absolute lifetime of a refresh token in seconds.
    ExpirationType string
    Options include expiring, non-expiring. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is rotating, this must be set to expiring.
    RotationType string
    Options include rotating, non-rotating. When rotating, exchanging a refresh token will cause a new refresh token to be issued and the existing token will be invalidated. This allows for automatic detection of token reuse if the token is leaked.
    IdleTokenLifetime int
    The time in seconds after which inactive refresh tokens will expire.
    InfiniteIdleTokenLifetime bool
    Whether inactive refresh tokens should remain valid indefinitely.
    InfiniteTokenLifetime bool
    Whether refresh tokens should remain valid indefinitely. If false, token_lifetime should also be set.
    Leeway int
    The amount of time in seconds in which a refresh token may be reused without triggering reuse detection.
    Policies []ClientRefreshTokenPolicy
    A collection of policies governing multi-resource refresh token exchange (MRRT), defining how refresh tokens can be used across different resource servers
    TokenLifetime int
    The absolute lifetime of a refresh token in seconds.
    expirationType String
    Options include expiring, non-expiring. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is rotating, this must be set to expiring.
    rotationType String
    Options include rotating, non-rotating. When rotating, exchanging a refresh token will cause a new refresh token to be issued and the existing token will be invalidated. This allows for automatic detection of token reuse if the token is leaked.
    idleTokenLifetime Integer
    The time in seconds after which inactive refresh tokens will expire.
    infiniteIdleTokenLifetime Boolean
    Whether inactive refresh tokens should remain valid indefinitely.
    infiniteTokenLifetime Boolean
    Whether refresh tokens should remain valid indefinitely. If false, token_lifetime should also be set.
    leeway Integer
    The amount of time in seconds in which a refresh token may be reused without triggering reuse detection.
    policies List<ClientRefreshTokenPolicy>
    A collection of policies governing multi-resource refresh token exchange (MRRT), defining how refresh tokens can be used across different resource servers
    tokenLifetime Integer
    The absolute lifetime of a refresh token in seconds.
    expirationType string
    Options include expiring, non-expiring. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is rotating, this must be set to expiring.
    rotationType string
    Options include rotating, non-rotating. When rotating, exchanging a refresh token will cause a new refresh token to be issued and the existing token will be invalidated. This allows for automatic detection of token reuse if the token is leaked.
    idleTokenLifetime number
    The time in seconds after which inactive refresh tokens will expire.
    infiniteIdleTokenLifetime boolean
    Whether inactive refresh tokens should remain valid indefinitely.
    infiniteTokenLifetime boolean
    Whether refresh tokens should remain valid indefinitely. If false, token_lifetime should also be set.
    leeway number
    The amount of time in seconds in which a refresh token may be reused without triggering reuse detection.
    policies ClientRefreshTokenPolicy[]
    A collection of policies governing multi-resource refresh token exchange (MRRT), defining how refresh tokens can be used across different resource servers
    tokenLifetime number
    The absolute lifetime of a refresh token in seconds.
    expiration_type str
    Options include expiring, non-expiring. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is rotating, this must be set to expiring.
    rotation_type str
    Options include rotating, non-rotating. When rotating, exchanging a refresh token will cause a new refresh token to be issued and the existing token will be invalidated. This allows for automatic detection of token reuse if the token is leaked.
    idle_token_lifetime int
    The time in seconds after which inactive refresh tokens will expire.
    infinite_idle_token_lifetime bool
    Whether inactive refresh tokens should remain valid indefinitely.
    infinite_token_lifetime bool
    Whether refresh tokens should remain valid indefinitely. If false, token_lifetime should also be set.
    leeway int
    The amount of time in seconds in which a refresh token may be reused without triggering reuse detection.
    policies Sequence[ClientRefreshTokenPolicy]
    A collection of policies governing multi-resource refresh token exchange (MRRT), defining how refresh tokens can be used across different resource servers
    token_lifetime int
    The absolute lifetime of a refresh token in seconds.
    expirationType String
    Options include expiring, non-expiring. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is rotating, this must be set to expiring.
    rotationType String
    Options include rotating, non-rotating. When rotating, exchanging a refresh token will cause a new refresh token to be issued and the existing token will be invalidated. This allows for automatic detection of token reuse if the token is leaked.
    idleTokenLifetime Number
    The time in seconds after which inactive refresh tokens will expire.
    infiniteIdleTokenLifetime Boolean
    Whether inactive refresh tokens should remain valid indefinitely.
    infiniteTokenLifetime Boolean
    Whether refresh tokens should remain valid indefinitely. If false, token_lifetime should also be set.
    leeway Number
    The amount of time in seconds in which a refresh token may be reused without triggering reuse detection.
    policies List<Property Map>
    A collection of policies governing multi-resource refresh token exchange (MRRT), defining how refresh tokens can be used across different resource servers
    tokenLifetime Number
    The absolute lifetime of a refresh token in seconds.

    ClientRefreshTokenPolicy, ClientRefreshTokenPolicyArgs

    Audience string
    The identifier of the resource server to which the Multi Resource Refresh Token Policy applies
    Scopes List<string>
    The resource server permissions granted under the Multi Resource Refresh Token Policy, defining the context in which an access token can be used
    Audience string
    The identifier of the resource server to which the Multi Resource Refresh Token Policy applies
    Scopes []string
    The resource server permissions granted under the Multi Resource Refresh Token Policy, defining the context in which an access token can be used
    audience String
    The identifier of the resource server to which the Multi Resource Refresh Token Policy applies
    scopes List<String>
    The resource server permissions granted under the Multi Resource Refresh Token Policy, defining the context in which an access token can be used
    audience string
    The identifier of the resource server to which the Multi Resource Refresh Token Policy applies
    scopes string[]
    The resource server permissions granted under the Multi Resource Refresh Token Policy, defining the context in which an access token can be used
    audience str
    The identifier of the resource server to which the Multi Resource Refresh Token Policy applies
    scopes Sequence[str]
    The resource server permissions granted under the Multi Resource Refresh Token Policy, defining the context in which an access token can be used
    audience String
    The identifier of the resource server to which the Multi Resource Refresh Token Policy applies
    scopes List<String>
    The resource server permissions granted under the Multi Resource Refresh Token Policy, defining the context in which an access token can be used

    ClientSessionTransfer, ClientSessionTransferArgs

    AllowRefreshToken bool
    Indicates whether the application is allowed to use a refresh token when using a sessiontransfertoken session.
    AllowedAuthenticationMethods List<string>
    CanCreateSessionTransferToken bool
    Indicates whether the application(Native app) can use the Token Exchange endpoint to create a sessiontransfertoken
    EnforceDeviceBinding string
    Configures the level of device binding enforced when a sessiontransfertoken is consumed. Can be one of ip, asn or none.
    AllowRefreshToken bool
    Indicates whether the application is allowed to use a refresh token when using a sessiontransfertoken session.
    AllowedAuthenticationMethods []string
    CanCreateSessionTransferToken bool
    Indicates whether the application(Native app) can use the Token Exchange endpoint to create a sessiontransfertoken
    EnforceDeviceBinding string
    Configures the level of device binding enforced when a sessiontransfertoken is consumed. Can be one of ip, asn or none.
    allowRefreshToken Boolean
    Indicates whether the application is allowed to use a refresh token when using a sessiontransfertoken session.
    allowedAuthenticationMethods List<String>
    canCreateSessionTransferToken Boolean
    Indicates whether the application(Native app) can use the Token Exchange endpoint to create a sessiontransfertoken
    enforceDeviceBinding String
    Configures the level of device binding enforced when a sessiontransfertoken is consumed. Can be one of ip, asn or none.
    allowRefreshToken boolean
    Indicates whether the application is allowed to use a refresh token when using a sessiontransfertoken session.
    allowedAuthenticationMethods string[]
    canCreateSessionTransferToken boolean
    Indicates whether the application(Native app) can use the Token Exchange endpoint to create a sessiontransfertoken
    enforceDeviceBinding string
    Configures the level of device binding enforced when a sessiontransfertoken is consumed. Can be one of ip, asn or none.
    allow_refresh_token bool
    Indicates whether the application is allowed to use a refresh token when using a sessiontransfertoken session.
    allowed_authentication_methods Sequence[str]
    can_create_session_transfer_token bool
    Indicates whether the application(Native app) can use the Token Exchange endpoint to create a sessiontransfertoken
    enforce_device_binding str
    Configures the level of device binding enforced when a sessiontransfertoken is consumed. Can be one of ip, asn or none.
    allowRefreshToken Boolean
    Indicates whether the application is allowed to use a refresh token when using a sessiontransfertoken session.
    allowedAuthenticationMethods List<String>
    canCreateSessionTransferToken Boolean
    Indicates whether the application(Native app) can use the Token Exchange endpoint to create a sessiontransfertoken
    enforceDeviceBinding String
    Configures the level of device binding enforced when a sessiontransfertoken is consumed. Can be one of ip, asn or none.

    ClientTokenExchange, ClientTokenExchangeArgs

    AllowAnyProfileOfTypes List<string>
    List of allowed profile types for token exchange
    AllowAnyProfileOfTypes []string
    List of allowed profile types for token exchange
    allowAnyProfileOfTypes List<String>
    List of allowed profile types for token exchange
    allowAnyProfileOfTypes string[]
    List of allowed profile types for token exchange
    allow_any_profile_of_types Sequence[str]
    List of allowed profile types for token exchange
    allowAnyProfileOfTypes List<String>
    List of allowed profile types for token exchange

    Import

    This resource can be imported by specifying the client ID.

    Example:

    $ pulumi import auth0:index/client:Client my_client "AaiyAPdpYdesoKnqjj8HJqRn4T5titww"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Auth0 pulumi/pulumi-auth0
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the auth0 Terraform Provider.
    auth0 logo
    Auth0 v3.21.0 published on Friday, May 23, 2025 by Pulumi
    pulumi/pulumi-auth0