1. Registry
  2. Packages
  3. Auth0 Provider
  4. API Docs
  5. ClientProfile
Viewing docs for Auth0 v3.56.0
published on Friday, Nov 6, 2026 by Pulumi
auth0 logo auth0 logo
Viewing docs for Auth0 v3.56.0
published on Friday, Nov 6, 2026 by Pulumi

    With this resource, you can manage the client profile (application profile) of a tenant. A client profile applies runtime policy to dynamically registered clients, such as clients registered through a Client ID Metadata Document (CIMD). A tenant can have only one client profile; if one already exists, import it instead of creating a new one. Destroying this resource deletes the tenant’s client profile, which immediately removes the governance it applies to all matched clients. The docs recommend preventDestroy, and the resource requires the create:client_profiles, read:client_profiles, update:client_profiles and delete:client_profiles scopes. This feature is available in Early Access only. (EA only)

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as auth0 from "@pulumi/auth0";
    
    // Early Access only. The Management API client needs the create, read, update and delete
    // `client_profiles` scopes.
    //
    // A tenant can have only one client profile. Destroying it removes the governance it applies
    // to all matched clients, so protect it from accidental deletion.
    // Minimal example.
    const minimal = new auth0.ClientProfile("minimal", {name: "Dynamic client profile"});
    // Full example.
    const full = new auth0.ClientProfile("full", {
        applyPolicy: {
            externalMetadataType: "cimd",
            externalMetadataCreatedBy: "client",
        },
        clientConfiguration: {
            refreshToken: {
                tokenLifetime: {
                    defaultValue: 2592000,
                },
                idleTokenLifetime: {
                    defaultValue: 1296000,
                },
                leeway: {
                    defaultValue: 0,
                },
            },
            organizationUsage: {
                defaultValue: "require",
            },
            organizationRequireBehavior: {
                defaultValue: "pre_login_prompt",
            },
            organizationDiscoveryMethods: {
                defaultValues: [
                    "email",
                    "organization_name",
                ],
            },
            requireProofOfPossession: {
                defaultValue: true,
            },
        },
        name: "Dynamic client profile",
        description: "Runtime policy for dynamically registered clients.",
    });
    
    import pulumi
    import pulumi_auth0 as auth0
    
    # Early Access only. The Management API client needs the create, read, update and delete
    # `client_profiles` scopes.
    #
    # A tenant can have only one client profile. Destroying it removes the governance it applies
    # to all matched clients, so protect it from accidental deletion.
    # Minimal example.
    minimal = auth0.ClientProfile("minimal", name="Dynamic client profile")
    # Full example.
    full = auth0.ClientProfile("full",
        apply_policy={
            "external_metadata_type": "cimd",
            "external_metadata_created_by": "client",
        },
        client_configuration={
            "refresh_token": {
                "token_lifetime": {
                    "default_value": 2592000,
                },
                "idle_token_lifetime": {
                    "default_value": 1296000,
                },
                "leeway": {
                    "default_value": 0,
                },
            },
            "organization_usage": {
                "default_value": "require",
            },
            "organization_require_behavior": {
                "default_value": "pre_login_prompt",
            },
            "organization_discovery_methods": {
                "default_values": [
                    "email",
                    "organization_name",
                ],
            },
            "require_proof_of_possession": {
                "default_value": True,
            },
        },
        name="Dynamic client profile",
        description="Runtime policy for dynamically registered clients.")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-auth0/sdk/v3/go/auth0"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		// Early Access only. The Management API client needs the create, read, update and delete
    		// `client_profiles` scopes.
    		//
    		// A tenant can have only one client profile. Destroying it removes the governance it applies
    		// to all matched clients, so protect it from accidental deletion.
    		// Minimal example.
    		_, err := auth0.NewClientProfile(ctx, "minimal", &auth0.ClientProfileArgs{
    			Name: pulumi.String("Dynamic client profile"),
    		})
    		if err != nil {
    			return err
    		}
    		// Full example.
    		_, err = auth0.NewClientProfile(ctx, "full", &auth0.ClientProfileArgs{
    			ApplyPolicy: &auth0.ClientProfileApplyPolicyArgs{
    				ExternalMetadataType:      pulumi.String("cimd"),
    				ExternalMetadataCreatedBy: pulumi.String("client"),
    			},
    			ClientConfiguration: &auth0.ClientProfileClientConfigurationArgs{
    				RefreshToken: &auth0.ClientProfileClientConfigurationRefreshTokenArgs{
    					TokenLifetime: &auth0.ClientProfileClientConfigurationRefreshTokenTokenLifetimeArgs{
    						DefaultValue: pulumi.Int(2592000),
    					},
    					IdleTokenLifetime: &auth0.ClientProfileClientConfigurationRefreshTokenIdleTokenLifetimeArgs{
    						DefaultValue: pulumi.Int(1296000),
    					},
    					Leeway: &auth0.ClientProfileClientConfigurationRefreshTokenLeewayArgs{
    						DefaultValue: pulumi.Int(0),
    					},
    				},
    				OrganizationUsage: &auth0.ClientProfileClientConfigurationOrganizationUsageArgs{
    					DefaultValue: pulumi.String("require"),
    				},
    				OrganizationRequireBehavior: &auth0.ClientProfileClientConfigurationOrganizationRequireBehaviorArgs{
    					DefaultValue: pulumi.String("pre_login_prompt"),
    				},
    				OrganizationDiscoveryMethods: &auth0.ClientProfileClientConfigurationOrganizationDiscoveryMethodsArgs{
    					DefaultValues: pulumi.StringArray{
    						pulumi.String("email"),
    						pulumi.String("organization_name"),
    					},
    				},
    				RequireProofOfPossession: &auth0.ClientProfileClientConfigurationRequireProofOfPossessionArgs{
    					DefaultValue: pulumi.Bool(true),
    				},
    			},
    			Name:        pulumi.String("Dynamic client profile"),
    			Description: pulumi.String("Runtime policy for dynamically registered clients."),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Auth0 = Pulumi.Auth0;
    
    return await Deployment.RunAsync(() => 
    {
        // Early Access only. The Management API client needs the create, read, update and delete
        // `client_profiles` scopes.
        //
        // A tenant can have only one client profile. Destroying it removes the governance it applies
        // to all matched clients, so protect it from accidental deletion.
        // Minimal example.
        var minimal = new Auth0.ClientProfile("minimal", new()
        {
            Name = "Dynamic client profile",
        });
    
        // Full example.
        var full = new Auth0.ClientProfile("full", new()
        {
            ApplyPolicy = new Auth0.Inputs.ClientProfileApplyPolicyArgs
            {
                ExternalMetadataType = "cimd",
                ExternalMetadataCreatedBy = "client",
            },
            ClientConfiguration = new Auth0.Inputs.ClientProfileClientConfigurationArgs
            {
                RefreshToken = new Auth0.Inputs.ClientProfileClientConfigurationRefreshTokenArgs
                {
                    TokenLifetime = new Auth0.Inputs.ClientProfileClientConfigurationRefreshTokenTokenLifetimeArgs
                    {
                        DefaultValue = 2592000,
                    },
                    IdleTokenLifetime = new Auth0.Inputs.ClientProfileClientConfigurationRefreshTokenIdleTokenLifetimeArgs
                    {
                        DefaultValue = 1296000,
                    },
                    Leeway = new Auth0.Inputs.ClientProfileClientConfigurationRefreshTokenLeewayArgs
                    {
                        DefaultValue = 0,
                    },
                },
                OrganizationUsage = new Auth0.Inputs.ClientProfileClientConfigurationOrganizationUsageArgs
                {
                    DefaultValue = "require",
                },
                OrganizationRequireBehavior = new Auth0.Inputs.ClientProfileClientConfigurationOrganizationRequireBehaviorArgs
                {
                    DefaultValue = "pre_login_prompt",
                },
                OrganizationDiscoveryMethods = new Auth0.Inputs.ClientProfileClientConfigurationOrganizationDiscoveryMethodsArgs
                {
                    DefaultValues = new[]
                    {
                        "email",
                        "organization_name",
                    },
                },
                RequireProofOfPossession = new Auth0.Inputs.ClientProfileClientConfigurationRequireProofOfPossessionArgs
                {
                    DefaultValue = true,
                },
            },
            Name = "Dynamic client profile",
            Description = "Runtime policy for dynamically registered clients.",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.auth0.ClientProfile;
    import com.pulumi.auth0.ClientProfileArgs;
    import com.pulumi.auth0.inputs.ClientProfileApplyPolicyArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationRefreshTokenArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationRefreshTokenTokenLifetimeArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationRefreshTokenIdleTokenLifetimeArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationRefreshTokenLeewayArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationOrganizationUsageArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationOrganizationRequireBehaviorArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationOrganizationDiscoveryMethodsArgs;
    import com.pulumi.auth0.inputs.ClientProfileClientConfigurationRequireProofOfPossessionArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            // Early Access only. The Management API client needs the create, read, update and delete
            // `client_profiles` scopes.
            //
            // A tenant can have only one client profile. Destroying it removes the governance it applies
            // to all matched clients, so protect it from accidental deletion.
            // Minimal example.
            var minimal = new ClientProfile("minimal", ClientProfileArgs.builder()
                .name("Dynamic client profile")
                .build());
    
            // Full example.
            var full = new ClientProfile("full", ClientProfileArgs.builder()
                .applyPolicy(ClientProfileApplyPolicyArgs.builder()
                    .externalMetadataType("cimd")
                    .externalMetadataCreatedBy("client")
                    .build())
                .clientConfiguration(ClientProfileClientConfigurationArgs.builder()
                    .refreshToken(ClientProfileClientConfigurationRefreshTokenArgs.builder()
                        .tokenLifetime(ClientProfileClientConfigurationRefreshTokenTokenLifetimeArgs.builder()
                            .defaultValue(2592000)
                            .build())
                        .idleTokenLifetime(ClientProfileClientConfigurationRefreshTokenIdleTokenLifetimeArgs.builder()
                            .defaultValue(1296000)
                            .build())
                        .leeway(ClientProfileClientConfigurationRefreshTokenLeewayArgs.builder()
                            .defaultValue(0)
                            .build())
                        .build())
                    .organizationUsage(ClientProfileClientConfigurationOrganizationUsageArgs.builder()
                        .defaultValue("require")
                        .build())
                    .organizationRequireBehavior(ClientProfileClientConfigurationOrganizationRequireBehaviorArgs.builder()
                        .defaultValue("pre_login_prompt")
                        .build())
                    .organizationDiscoveryMethods(ClientProfileClientConfigurationOrganizationDiscoveryMethodsArgs.builder()
                        .defaultValues(                    
                            "email",
                            "organization_name")
                        .build())
                    .requireProofOfPossession(ClientProfileClientConfigurationRequireProofOfPossessionArgs.builder()
                        .defaultValue(true)
                        .build())
                    .build())
                .name("Dynamic client profile")
                .description("Runtime policy for dynamically registered clients.")
                .build());
    
        }
    }
    
    resources:
      # Early Access only. The Management API client needs the create, read, update and delete
      # `client_profiles` scopes.
      #
      # A tenant can have only one client profile. Destroying it removes the governance it applies
      # to all matched clients, so protect it from accidental deletion.
    
      # Minimal example.
      minimal:
        type: auth0:ClientProfile
        properties:
          name: Dynamic client profile
      # Full example.
      full:
        type: auth0:ClientProfile
        properties:
          applyPolicy:
            externalMetadataType: cimd
            externalMetadataCreatedBy: client
          clientConfiguration:
            refreshToken:
              tokenLifetime:
                defaultValue: 2.592e+06
              idleTokenLifetime:
                defaultValue: 1.296e+06
              leeway:
                defaultValue: 0
            organizationUsage:
              defaultValue: require
            organizationRequireBehavior:
              defaultValue: pre_login_prompt
            organizationDiscoveryMethods:
              defaultValues:
                - email
                - organization_name
            requireProofOfPossession:
              defaultValue: true
          name: Dynamic client profile
          description: Runtime policy for dynamically registered clients.
    
    terraform {
      required_providers {
        auth0 = {
          source = "pulumi/auth0"
        }
      }
    }
    
    # Early Access only. The Management API client needs the create, read, update and delete
    # `client_profiles` scopes.
    #
    # A tenant can have only one client profile. Destroying it removes the governance it applies
    # to all matched clients, so protect it from accidental deletion.
    # Minimal example.
    resource "auth0_client_profile" "minimal" {
      lifecycle {
        create_before_destroy = true
      }
      name = "Dynamic client profile"
    }
    # Full example.
    resource "auth0_client_profile" "full" {
      lifecycle {
        create_before_destroy = true
      }
      apply_policy {
        external_metadata_type       = "cimd"
        external_metadata_created_by = "client"
      }
      client_configuration {
        refresh_token {
          token_lifetime {
            default_value = 2592000
          }
          idle_token_lifetime {
            default_value = 1296000
          }
          leeway {
            default_value = 0
          }
        }
        organization_usage {
          default_value = "require"
        }
        organization_require_behavior {
          default_value = "pre_login_prompt"
        }
        organization_discovery_methods {
          default_value = ["email", "organization_name"]
        }
        require_proof_of_possession {
          default_value = true
        }
      }
      # 30 days.
      # 15 days.
      name        = "Dynamic client profile"
      description = "Runtime policy for dynamically registered clients."
    }
    

    Create ClientProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ClientProfile(name: string, args?: ClientProfileArgs, opts?: CustomResourceOptions);
    @overload
    def ClientProfile(resource_name: str,
                      args: Optional[ClientProfileArgs] = None,
                      opts: Optional[ResourceOptions] = None)
    
    @overload
    def ClientProfile(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      apply_policy: Optional[ClientProfileApplyPolicyArgs] = None,
                      client_configuration: Optional[ClientProfileClientConfigurationArgs] = None,
                      description: Optional[str] = None,
                      name: Optional[str] = None)
    func NewClientProfile(ctx *Context, name string, args *ClientProfileArgs, opts ...ResourceOption) (*ClientProfile, error)
    public ClientProfile(string name, ClientProfileArgs? args = null, CustomResourceOptions? opts = null)
    public ClientProfile(String name, ClientProfileArgs args)
    public ClientProfile(String name, ClientProfileArgs args, CustomResourceOptions options)
    
    type: auth0:ClientProfile
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "auth0_client_profile" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args ClientProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ClientProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ClientProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ClientProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ClientProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var clientProfileResource = new Auth0.ClientProfile("clientProfileResource", new()
    {
        ApplyPolicy = new Auth0.Inputs.ClientProfileApplyPolicyArgs
        {
            ExternalMetadataCreatedBy = "string",
            ExternalMetadataType = "string",
        },
        ClientConfiguration = new Auth0.Inputs.ClientProfileClientConfigurationArgs
        {
            OrganizationDiscoveryMethods = new Auth0.Inputs.ClientProfileClientConfigurationOrganizationDiscoveryMethodsArgs
            {
                DefaultValues = new[]
                {
                    "string",
                },
            },
            OrganizationRequireBehavior = new Auth0.Inputs.ClientProfileClientConfigurationOrganizationRequireBehaviorArgs
            {
                DefaultValue = "string",
            },
            OrganizationUsage = new Auth0.Inputs.ClientProfileClientConfigurationOrganizationUsageArgs
            {
                DefaultValue = "string",
            },
            RefreshToken = new Auth0.Inputs.ClientProfileClientConfigurationRefreshTokenArgs
            {
                IdleTokenLifetime = new Auth0.Inputs.ClientProfileClientConfigurationRefreshTokenIdleTokenLifetimeArgs
                {
                    DefaultValue = 0,
                },
                Leeway = new Auth0.Inputs.ClientProfileClientConfigurationRefreshTokenLeewayArgs
                {
                    DefaultValue = 0,
                },
                TokenLifetime = new Auth0.Inputs.ClientProfileClientConfigurationRefreshTokenTokenLifetimeArgs
                {
                    DefaultValue = 0,
                },
            },
            RequireProofOfPossession = new Auth0.Inputs.ClientProfileClientConfigurationRequireProofOfPossessionArgs
            {
                DefaultValue = false,
            },
        },
        Description = "string",
        Name = "string",
    });
    
    example, err := auth0.NewClientProfile(ctx, "clientProfileResource", &auth0.ClientProfileArgs{
    	ApplyPolicy: &auth0.ClientProfileApplyPolicyArgs{
    		ExternalMetadataCreatedBy: pulumi.String("string"),
    		ExternalMetadataType:      pulumi.String("string"),
    	},
    	ClientConfiguration: &auth0.ClientProfileClientConfigurationArgs{
    		OrganizationDiscoveryMethods: &auth0.ClientProfileClientConfigurationOrganizationDiscoveryMethodsArgs{
    			DefaultValues: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    		},
    		OrganizationRequireBehavior: &auth0.ClientProfileClientConfigurationOrganizationRequireBehaviorArgs{
    			DefaultValue: pulumi.String("string"),
    		},
    		OrganizationUsage: &auth0.ClientProfileClientConfigurationOrganizationUsageArgs{
    			DefaultValue: pulumi.String("string"),
    		},
    		RefreshToken: &auth0.ClientProfileClientConfigurationRefreshTokenArgs{
    			IdleTokenLifetime: &auth0.ClientProfileClientConfigurationRefreshTokenIdleTokenLifetimeArgs{
    				DefaultValue: pulumi.Int(0),
    			},
    			Leeway: &auth0.ClientProfileClientConfigurationRefreshTokenLeewayArgs{
    				DefaultValue: pulumi.Int(0),
    			},
    			TokenLifetime: &auth0.ClientProfileClientConfigurationRefreshTokenTokenLifetimeArgs{
    				DefaultValue: pulumi.Int(0),
    			},
    		},
    		RequireProofOfPossession: &auth0.ClientProfileClientConfigurationRequireProofOfPossessionArgs{
    			DefaultValue: pulumi.Bool(false),
    		},
    	},
    	Description: pulumi.String("string"),
    	Name:        pulumi.String("string"),
    })
    
    resource "auth0_client_profile" "clientProfileResource" {
      lifecycle {
        create_before_destroy = true
      }
      apply_policy = {
        external_metadata_created_by = "string"
        external_metadata_type       = "string"
      }
      client_configuration = {
        organization_discovery_methods = {
          default_values = ["string"]
        }
        organization_require_behavior = {
          default_value = "string"
        }
        organization_usage = {
          default_value = "string"
        }
        refresh_token = {
          idle_token_lifetime = {
            default_value = 0
          }
          leeway = {
            default_value = 0
          }
          token_lifetime = {
            default_value = 0
          }
        }
        require_proof_of_possession = {
          default_value = false
        }
      }
      description = "string"
      name        = "string"
    }
    
    var clientProfileResource = new ClientProfile("clientProfileResource", ClientProfileArgs.builder()
        .applyPolicy(ClientProfileApplyPolicyArgs.builder()
            .externalMetadataCreatedBy("string")
            .externalMetadataType("string")
            .build())
        .clientConfiguration(ClientProfileClientConfigurationArgs.builder()
            .organizationDiscoveryMethods(ClientProfileClientConfigurationOrganizationDiscoveryMethodsArgs.builder()
                .defaultValues("string")
                .build())
            .organizationRequireBehavior(ClientProfileClientConfigurationOrganizationRequireBehaviorArgs.builder()
                .defaultValue("string")
                .build())
            .organizationUsage(ClientProfileClientConfigurationOrganizationUsageArgs.builder()
                .defaultValue("string")
                .build())
            .refreshToken(ClientProfileClientConfigurationRefreshTokenArgs.builder()
                .idleTokenLifetime(ClientProfileClientConfigurationRefreshTokenIdleTokenLifetimeArgs.builder()
                    .defaultValue(0)
                    .build())
                .leeway(ClientProfileClientConfigurationRefreshTokenLeewayArgs.builder()
                    .defaultValue(0)
                    .build())
                .tokenLifetime(ClientProfileClientConfigurationRefreshTokenTokenLifetimeArgs.builder()
                    .defaultValue(0)
                    .build())
                .build())
            .requireProofOfPossession(ClientProfileClientConfigurationRequireProofOfPossessionArgs.builder()
                .defaultValue(false)
                .build())
            .build())
        .description("string")
        .name("string")
        .build());
    
    client_profile_resource = auth0.ClientProfile("clientProfileResource",
        apply_policy={
            "external_metadata_created_by": "string",
            "external_metadata_type": "string",
        },
        client_configuration={
            "organization_discovery_methods": {
                "default_values": ["string"],
            },
            "organization_require_behavior": {
                "default_value": "string",
            },
            "organization_usage": {
                "default_value": "string",
            },
            "refresh_token": {
                "idle_token_lifetime": {
                    "default_value": 0,
                },
                "leeway": {
                    "default_value": 0,
                },
                "token_lifetime": {
                    "default_value": 0,
                },
            },
            "require_proof_of_possession": {
                "default_value": False,
            },
        },
        description="string",
        name="string")
    
    const clientProfileResource = new auth0.ClientProfile("clientProfileResource", {
        applyPolicy: {
            externalMetadataCreatedBy: "string",
            externalMetadataType: "string",
        },
        clientConfiguration: {
            organizationDiscoveryMethods: {
                defaultValues: ["string"],
            },
            organizationRequireBehavior: {
                defaultValue: "string",
            },
            organizationUsage: {
                defaultValue: "string",
            },
            refreshToken: {
                idleTokenLifetime: {
                    defaultValue: 0,
                },
                leeway: {
                    defaultValue: 0,
                },
                tokenLifetime: {
                    defaultValue: 0,
                },
            },
            requireProofOfPossession: {
                defaultValue: false,
            },
        },
        description: "string",
        name: "string",
    });
    
    type: auth0:ClientProfile
    properties:
        applyPolicy:
            externalMetadataCreatedBy: string
            externalMetadataType: string
        clientConfiguration:
            organizationDiscoveryMethods:
                defaultValues:
                    - string
            organizationRequireBehavior:
                defaultValue: string
            organizationUsage:
                defaultValue: string
            refreshToken:
                idleTokenLifetime:
                    defaultValue: 0
                leeway:
                    defaultValue: 0
                tokenLifetime:
                    defaultValue: 0
            requireProofOfPossession:
                defaultValue: false
        description: string
        name: string
    

    ClientProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ClientProfile resource accepts the following input properties:

    ApplyPolicy ClientProfileApplyPolicy
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    ClientConfiguration ClientProfileClientConfiguration
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    Description string
    The description of the client profile. Removing the attribute clears the description in Auth0.
    Name string
    The name of the client profile.
    ApplyPolicy ClientProfileApplyPolicyArgs
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    ClientConfiguration ClientProfileClientConfigurationArgs
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    Description string
    The description of the client profile. Removing the attribute clears the description in Auth0.
    Name string
    The name of the client profile.
    apply_policy object
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    client_configuration object
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    description string
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name string
    The name of the client profile.
    applyPolicy ClientProfileApplyPolicy
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    clientConfiguration ClientProfileClientConfiguration
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    description String
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name String
    The name of the client profile.
    applyPolicy ClientProfileApplyPolicy
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    clientConfiguration ClientProfileClientConfiguration
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    description string
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name string
    The name of the client profile.
    apply_policy ClientProfileApplyPolicyArgs
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    client_configuration ClientProfileClientConfigurationArgs
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    description str
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name str
    The name of the client profile.
    applyPolicy Property Map
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    clientConfiguration Property Map
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    description String
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name String
    The name of the client profile.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ClientProfile resource produces the following output properties:

    CreatedAt string
    The ISO 8601 formatted date the client profile was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    The ISO 8601 formatted date the client profile was updated.
    CreatedAt string
    The ISO 8601 formatted date the client profile was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    The ISO 8601 formatted date the client profile was updated.
    created_at string
    The ISO 8601 formatted date the client profile was created.
    id string
    The provider-assigned unique ID for this managed resource.
    updated_at string
    The ISO 8601 formatted date the client profile was updated.
    createdAt String
    The ISO 8601 formatted date the client profile was created.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    The ISO 8601 formatted date the client profile was updated.
    createdAt string
    The ISO 8601 formatted date the client profile was created.
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    The ISO 8601 formatted date the client profile was updated.
    created_at str
    The ISO 8601 formatted date the client profile was created.
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    The ISO 8601 formatted date the client profile was updated.
    createdAt String
    The ISO 8601 formatted date the client profile was created.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    The ISO 8601 formatted date the client profile was updated.

    Look up Existing ClientProfile Resource

    Get an existing ClientProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ClientProfileState, opts?: CustomResourceOptions): ClientProfile
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            apply_policy: Optional[ClientProfileApplyPolicyArgs] = None,
            client_configuration: Optional[ClientProfileClientConfigurationArgs] = None,
            created_at: Optional[str] = None,
            description: Optional[str] = None,
            name: Optional[str] = None,
            updated_at: Optional[str] = None) -> ClientProfile
    func GetClientProfile(ctx *Context, name string, id IDInput, state *ClientProfileState, opts ...ResourceOption) (*ClientProfile, error)
    public static ClientProfile Get(string name, Input<string> id, ClientProfileState? state, CustomResourceOptions? opts = null)
    public static ClientProfile get(String name, Output<String> id, ClientProfileState state, CustomResourceOptions options)
    resources:  _:    type: auth0:ClientProfile    get:      id: ${id}
    import {
      to = auth0_client_profile.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApplyPolicy ClientProfileApplyPolicy
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    ClientConfiguration ClientProfileClientConfiguration
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    CreatedAt string
    The ISO 8601 formatted date the client profile was created.
    Description string
    The description of the client profile. Removing the attribute clears the description in Auth0.
    Name string
    The name of the client profile.
    UpdatedAt string
    The ISO 8601 formatted date the client profile was updated.
    ApplyPolicy ClientProfileApplyPolicyArgs
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    ClientConfiguration ClientProfileClientConfigurationArgs
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    CreatedAt string
    The ISO 8601 formatted date the client profile was created.
    Description string
    The description of the client profile. Removing the attribute clears the description in Auth0.
    Name string
    The name of the client profile.
    UpdatedAt string
    The ISO 8601 formatted date the client profile was updated.
    apply_policy object
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    client_configuration object
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    created_at string
    The ISO 8601 formatted date the client profile was created.
    description string
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name string
    The name of the client profile.
    updated_at string
    The ISO 8601 formatted date the client profile was updated.
    applyPolicy ClientProfileApplyPolicy
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    clientConfiguration ClientProfileClientConfiguration
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    createdAt String
    The ISO 8601 formatted date the client profile was created.
    description String
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name String
    The name of the client profile.
    updatedAt String
    The ISO 8601 formatted date the client profile was updated.
    applyPolicy ClientProfileApplyPolicy
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    clientConfiguration ClientProfileClientConfiguration
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    createdAt string
    The ISO 8601 formatted date the client profile was created.
    description string
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name string
    The name of the client profile.
    updatedAt string
    The ISO 8601 formatted date the client profile was updated.
    apply_policy ClientProfileApplyPolicyArgs
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    client_configuration ClientProfileClientConfigurationArgs
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    created_at str
    The ISO 8601 formatted date the client profile was created.
    description str
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name str
    The name of the client profile.
    updated_at str
    The ISO 8601 formatted date the client profile was updated.
    applyPolicy Property Map
    Runtime matching rules that determine which clients this profile governs. Defaults to dynamically registered CIMD clients.
    clientConfiguration Property Map
    Runtime policy applied to matched clients. Omitted settings fall back to each client's own setting. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    createdAt String
    The ISO 8601 formatted date the client profile was created.
    description String
    The description of the client profile. Removing the attribute clears the description in Auth0.
    name String
    The name of the client profile.
    updatedAt String
    The ISO 8601 formatted date the client profile was updated.

    Supporting Types

    ClientProfileApplyPolicy, ClientProfileApplyPolicyArgs

    ExternalMetadataCreatedBy string
    The creator of the clients to match. Defaults to client, which means the client was registered dynamically. Possible values: [client].
    ExternalMetadataType string
    The type of external metadata of the clients to match. Defaults to cimd. Possible values: [cimd].
    ExternalMetadataCreatedBy string
    The creator of the clients to match. Defaults to client, which means the client was registered dynamically. Possible values: [client].
    ExternalMetadataType string
    The type of external metadata of the clients to match. Defaults to cimd. Possible values: [cimd].
    external_metadata_created_by string
    The creator of the clients to match. Defaults to client, which means the client was registered dynamically. Possible values: [client].
    external_metadata_type string
    The type of external metadata of the clients to match. Defaults to cimd. Possible values: [cimd].
    externalMetadataCreatedBy String
    The creator of the clients to match. Defaults to client, which means the client was registered dynamically. Possible values: [client].
    externalMetadataType String
    The type of external metadata of the clients to match. Defaults to cimd. Possible values: [cimd].
    externalMetadataCreatedBy string
    The creator of the clients to match. Defaults to client, which means the client was registered dynamically. Possible values: [client].
    externalMetadataType string
    The type of external metadata of the clients to match. Defaults to cimd. Possible values: [cimd].
    external_metadata_created_by str
    The creator of the clients to match. Defaults to client, which means the client was registered dynamically. Possible values: [client].
    external_metadata_type str
    The type of external metadata of the clients to match. Defaults to cimd. Possible values: [cimd].
    externalMetadataCreatedBy String
    The creator of the clients to match. Defaults to client, which means the client was registered dynamically. Possible values: [client].
    externalMetadataType String
    The type of external metadata of the clients to match. Defaults to cimd. Possible values: [cimd].

    ClientProfileClientConfiguration, ClientProfileClientConfigurationArgs

    OrganizationDiscoveryMethods ClientProfileClientConfigurationOrganizationDiscoveryMethods
    Methods used to discover the organization during login. Requires the organizationRequireBehavior default value to be preLoginPrompt.
    OrganizationRequireBehavior ClientProfileClientConfigurationOrganizationRequireBehavior
    Defines how to proceed during an authentication transaction when the organization usage is require.
    OrganizationUsage ClientProfileClientConfigurationOrganizationUsage
    Whether matched clients can use organizations.
    RefreshToken ClientProfileClientConfigurationRefreshToken
    Refresh token settings applied to matched clients. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    RequireProofOfPossession ClientProfileClientConfigurationRequireProofOfPossession
    Whether matched clients must use proof of possession (DPoP) for their tokens.
    OrganizationDiscoveryMethods ClientProfileClientConfigurationOrganizationDiscoveryMethods
    Methods used to discover the organization during login. Requires the organizationRequireBehavior default value to be preLoginPrompt.
    OrganizationRequireBehavior ClientProfileClientConfigurationOrganizationRequireBehavior
    Defines how to proceed during an authentication transaction when the organization usage is require.
    OrganizationUsage ClientProfileClientConfigurationOrganizationUsage
    Whether matched clients can use organizations.
    RefreshToken ClientProfileClientConfigurationRefreshToken
    Refresh token settings applied to matched clients. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    RequireProofOfPossession ClientProfileClientConfigurationRequireProofOfPossession
    Whether matched clients must use proof of possession (DPoP) for their tokens.
    organization_discovery_methods object
    Methods used to discover the organization during login. Requires the organizationRequireBehavior default value to be preLoginPrompt.
    organization_require_behavior object
    Defines how to proceed during an authentication transaction when the organization usage is require.
    organization_usage object
    Whether matched clients can use organizations.
    refresh_token object
    Refresh token settings applied to matched clients. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    require_proof_of_possession object
    Whether matched clients must use proof of possession (DPoP) for their tokens.
    organizationDiscoveryMethods ClientProfileClientConfigurationOrganizationDiscoveryMethods
    Methods used to discover the organization during login. Requires the organizationRequireBehavior default value to be preLoginPrompt.
    organizationRequireBehavior ClientProfileClientConfigurationOrganizationRequireBehavior
    Defines how to proceed during an authentication transaction when the organization usage is require.
    organizationUsage ClientProfileClientConfigurationOrganizationUsage
    Whether matched clients can use organizations.
    refreshToken ClientProfileClientConfigurationRefreshToken
    Refresh token settings applied to matched clients. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    requireProofOfPossession ClientProfileClientConfigurationRequireProofOfPossession
    Whether matched clients must use proof of possession (DPoP) for their tokens.
    organizationDiscoveryMethods ClientProfileClientConfigurationOrganizationDiscoveryMethods
    Methods used to discover the organization during login. Requires the organizationRequireBehavior default value to be preLoginPrompt.
    organizationRequireBehavior ClientProfileClientConfigurationOrganizationRequireBehavior
    Defines how to proceed during an authentication transaction when the organization usage is require.
    organizationUsage ClientProfileClientConfigurationOrganizationUsage
    Whether matched clients can use organizations.
    refreshToken ClientProfileClientConfigurationRefreshToken
    Refresh token settings applied to matched clients. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    requireProofOfPossession ClientProfileClientConfigurationRequireProofOfPossession
    Whether matched clients must use proof of possession (DPoP) for their tokens.
    organization_discovery_methods ClientProfileClientConfigurationOrganizationDiscoveryMethods
    Methods used to discover the organization during login. Requires the organizationRequireBehavior default value to be preLoginPrompt.
    organization_require_behavior ClientProfileClientConfigurationOrganizationRequireBehavior
    Defines how to proceed during an authentication transaction when the organization usage is require.
    organization_usage ClientProfileClientConfigurationOrganizationUsage
    Whether matched clients can use organizations.
    refresh_token ClientProfileClientConfigurationRefreshToken
    Refresh token settings applied to matched clients. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    require_proof_of_possession ClientProfileClientConfigurationRequireProofOfPossession
    Whether matched clients must use proof of possession (DPoP) for their tokens.
    organizationDiscoveryMethods Property Map
    Methods used to discover the organization during login. Requires the organizationRequireBehavior default value to be preLoginPrompt.
    organizationRequireBehavior Property Map
    Defines how to proceed during an authentication transaction when the organization usage is require.
    organizationUsage Property Map
    Whether matched clients can use organizations.
    refreshToken Property Map
    Refresh token settings applied to matched clients. Auth0 replaces this block as a whole, so removing it clears all of its settings.
    requireProofOfPossession Property Map
    Whether matched clients must use proof of possession (DPoP) for their tokens.

    ClientProfileClientConfigurationOrganizationDiscoveryMethods, ClientProfileClientConfigurationOrganizationDiscoveryMethodsArgs

    DefaultValues List<string>
    Possible values: [email organizationName].
    DefaultValues []string
    Possible values: [email organizationName].
    default_values list(string)
    Possible values: [email organizationName].
    defaultValues List<String>
    Possible values: [email organizationName].
    defaultValues string[]
    Possible values: [email organizationName].
    default_values Sequence[str]
    Possible values: [email organizationName].
    defaultValues List<String>
    Possible values: [email organizationName].

    ClientProfileClientConfigurationOrganizationRequireBehavior, ClientProfileClientConfigurationOrganizationRequireBehaviorArgs

    DefaultValue string
    Possible values: [noprompt preloginprompt postlogin_prompt].
    DefaultValue string
    Possible values: [noprompt preloginprompt postlogin_prompt].
    default_value string
    Possible values: [noprompt preloginprompt postlogin_prompt].
    defaultValue String
    Possible values: [noprompt preloginprompt postlogin_prompt].
    defaultValue string
    Possible values: [noprompt preloginprompt postlogin_prompt].
    default_value str
    Possible values: [noprompt preloginprompt postlogin_prompt].
    defaultValue String
    Possible values: [noprompt preloginprompt postlogin_prompt].

    ClientProfileClientConfigurationOrganizationUsage, ClientProfileClientConfigurationOrganizationUsageArgs

    DefaultValue string
    Possible values: [deny allow require].
    DefaultValue string
    Possible values: [deny allow require].
    default_value string
    Possible values: [deny allow require].
    defaultValue String
    Possible values: [deny allow require].
    defaultValue string
    Possible values: [deny allow require].
    default_value str
    Possible values: [deny allow require].
    defaultValue String
    Possible values: [deny allow require].

    ClientProfileClientConfigurationRefreshToken, ClientProfileClientConfigurationRefreshTokenArgs

    IdleTokenLifetime ClientProfileClientConfigurationRefreshTokenIdleTokenLifetime
    The inactivity lifetime of a refresh token. It must not exceed tokenLifetime. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    Leeway ClientProfileClientConfigurationRefreshTokenLeeway
    The period in which a refresh token may be reused without triggering reuse detection.
    TokenLifetime ClientProfileClientConfigurationRefreshTokenTokenLifetime
    The absolute lifetime of a refresh token. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    IdleTokenLifetime ClientProfileClientConfigurationRefreshTokenIdleTokenLifetime
    The inactivity lifetime of a refresh token. It must not exceed tokenLifetime. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    Leeway ClientProfileClientConfigurationRefreshTokenLeeway
    The period in which a refresh token may be reused without triggering reuse detection.
    TokenLifetime ClientProfileClientConfigurationRefreshTokenTokenLifetime
    The absolute lifetime of a refresh token. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    idle_token_lifetime object
    The inactivity lifetime of a refresh token. It must not exceed tokenLifetime. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    leeway object
    The period in which a refresh token may be reused without triggering reuse detection.
    token_lifetime object
    The absolute lifetime of a refresh token. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    idleTokenLifetime ClientProfileClientConfigurationRefreshTokenIdleTokenLifetime
    The inactivity lifetime of a refresh token. It must not exceed tokenLifetime. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    leeway ClientProfileClientConfigurationRefreshTokenLeeway
    The period in which a refresh token may be reused without triggering reuse detection.
    tokenLifetime ClientProfileClientConfigurationRefreshTokenTokenLifetime
    The absolute lifetime of a refresh token. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    idleTokenLifetime ClientProfileClientConfigurationRefreshTokenIdleTokenLifetime
    The inactivity lifetime of a refresh token. It must not exceed tokenLifetime. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    leeway ClientProfileClientConfigurationRefreshTokenLeeway
    The period in which a refresh token may be reused without triggering reuse detection.
    tokenLifetime ClientProfileClientConfigurationRefreshTokenTokenLifetime
    The absolute lifetime of a refresh token. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    idle_token_lifetime ClientProfileClientConfigurationRefreshTokenIdleTokenLifetime
    The inactivity lifetime of a refresh token. It must not exceed tokenLifetime. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    leeway ClientProfileClientConfigurationRefreshTokenLeeway
    The period in which a refresh token may be reused without triggering reuse detection.
    token_lifetime ClientProfileClientConfigurationRefreshTokenTokenLifetime
    The absolute lifetime of a refresh token. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    idleTokenLifetime Property Map
    The inactivity lifetime of a refresh token. It must not exceed tokenLifetime. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.
    leeway Property Map
    The period in which a refresh token may be reused without triggering reuse detection.
    tokenLifetime Property Map
    The absolute lifetime of a refresh token. If only one of tokenLifetime and idleTokenLifetime is set, Auth0 derives the other.

    ClientProfileClientConfigurationRefreshTokenIdleTokenLifetime, ClientProfileClientConfigurationRefreshTokenIdleTokenLifetimeArgs

    DefaultValue int
    The lifetime in seconds.
    DefaultValue int
    The lifetime in seconds.
    default_value number
    The lifetime in seconds.
    defaultValue Integer
    The lifetime in seconds.
    defaultValue number
    The lifetime in seconds.
    default_value int
    The lifetime in seconds.
    defaultValue Number
    The lifetime in seconds.

    ClientProfileClientConfigurationRefreshTokenLeeway, ClientProfileClientConfigurationRefreshTokenLeewayArgs

    DefaultValue int
    The leeway in seconds. 0 disables the leeway.
    DefaultValue int
    The leeway in seconds. 0 disables the leeway.
    default_value number
    The leeway in seconds. 0 disables the leeway.
    defaultValue Integer
    The leeway in seconds. 0 disables the leeway.
    defaultValue number
    The leeway in seconds. 0 disables the leeway.
    default_value int
    The leeway in seconds. 0 disables the leeway.
    defaultValue Number
    The leeway in seconds. 0 disables the leeway.

    ClientProfileClientConfigurationRefreshTokenTokenLifetime, ClientProfileClientConfigurationRefreshTokenTokenLifetimeArgs

    DefaultValue int
    The lifetime in seconds.
    DefaultValue int
    The lifetime in seconds.
    default_value number
    The lifetime in seconds.
    defaultValue Integer
    The lifetime in seconds.
    defaultValue number
    The lifetime in seconds.
    default_value int
    The lifetime in seconds.
    defaultValue Number
    The lifetime in seconds.

    ClientProfileClientConfigurationRequireProofOfPossession, ClientProfileClientConfigurationRequireProofOfPossessionArgs

    DefaultValue bool
    Whether proof of possession is required.
    DefaultValue bool
    Whether proof of possession is required.
    default_value bool
    Whether proof of possession is required.
    defaultValue Boolean
    Whether proof of possession is required.
    defaultValue boolean
    Whether proof of possession is required.
    default_value bool
    Whether proof of possession is required.
    defaultValue Boolean
    Whether proof of possession is required.

    Import

    A client profile can be imported using its ID.

    You can find the existing client profile ID using the Auth0 Management API. https://auth0.com/docs/api/management/v2#!/Client_Profiles/get_client_profiles

    Example:

    $ pulumi import auth0:index/clientProfile:ClientProfile full "cpr_XXXXXXXXXXXXXXXX"
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Auth0 pulumi/pulumi-auth0
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the auth0 Terraform Provider.
    auth0 logo auth0 logo
    Viewing docs for Auth0 v3.56.0
    published on Friday, Nov 6, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial