Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. ZeroTrustOrganization
Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
pulumi/pulumi-cloudflare

cloudflare.ZeroTrustOrganization

Explore with Pulumi AI

cloudflare logo
Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
pulumi/pulumi-cloudflare

    Example Usage

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    resources:
  exampleZeroTrustOrganization:
    type: cloudflare:ZeroTrustOrganization
    name: example_zero_trust_organization
    properties:
      zoneId: zone_id
      allowAuthenticateViaWarp: true
      authDomain: test.cloudflareaccess.com
      autoRedirectToIdentity: true
      customPages:
        forbidden: 699d98642c564d2e855e9661899b7252
        identity_denied: 699d98642c564d2e855e9661899b7252
      isUiReadOnly: true
      loginDesign:
        background_color: '#c5ed1b'
        footer_text: This is an example description.
        header_text: This is an example description.
        logo_path: https://example.com/logo.png
        text_color: '#c5ed1b'
      name: Widget Corps Internal Applications
      sessionDuration: 24h
      uiReadOnlyToggleReason: Temporarily turn off the UI read only lock to make a change via the UI
      userSeatExpirationInactiveTime: 730h
      warpAuthSessionDuration: 24h

    Create ZeroTrustOrganization Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZeroTrustOrganization(name: string, args?: ZeroTrustOrganizationArgs, opts?: CustomResourceOptions);
    @overload
def ZeroTrustOrganization(resource_name: str,
                          args: Optional[ZeroTrustOrganizationArgs] = None,
                          opts: Optional[ResourceOptions] = None)

@overload
def ZeroTrustOrganization(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          account_id: Optional[str] = None,
                          allow_authenticate_via_warp: Optional[bool] = None,
                          auth_domain: Optional[str] = None,
                          auto_redirect_to_identity: Optional[bool] = None,
                          custom_pages: Optional[ZeroTrustOrganizationCustomPagesArgs] = None,
                          is_ui_read_only: Optional[bool] = None,
                          login_design: Optional[ZeroTrustOrganizationLoginDesignArgs] = None,
                          name: Optional[str] = None,
                          session_duration: Optional[str] = None,
                          ui_read_only_toggle_reason: Optional[str] = None,
                          user_seat_expiration_inactive_time: Optional[str] = None,
                          warp_auth_session_duration: Optional[str] = None,
                          zone_id: Optional[str] = None)
    func NewZeroTrustOrganization(ctx *Context, name string, args *ZeroTrustOrganizationArgs, opts ...ResourceOption) (*ZeroTrustOrganization, error)
    public ZeroTrustOrganization(string name, ZeroTrustOrganizationArgs? args = null, CustomResourceOptions? opts = null)
    public ZeroTrustOrganization(String name, ZeroTrustOrganizationArgs args)
public ZeroTrustOrganization(String name, ZeroTrustOrganizationArgs args, CustomResourceOptions options)

    type: cloudflare:ZeroTrustOrganization
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ZeroTrustOrganizationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZeroTrustOrganizationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZeroTrustOrganizationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZeroTrustOrganizationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZeroTrustOrganizationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var zeroTrustOrganizationResource = new Cloudflare.ZeroTrustOrganization("zeroTrustOrganizationResource", new()
{
    AccountId = "string",
    AllowAuthenticateViaWarp = false,
    AuthDomain = "string",
    AutoRedirectToIdentity = false,
    CustomPages = new Cloudflare.Inputs.ZeroTrustOrganizationCustomPagesArgs
    {
        Forbidden = "string",
        IdentityDenied = "string",
    },
    IsUiReadOnly = false,
    LoginDesign = new Cloudflare.Inputs.ZeroTrustOrganizationLoginDesignArgs
    {
        BackgroundColor = "string",
        FooterText = "string",
        HeaderText = "string",
        LogoPath = "string",
        TextColor = "string",
    },
    Name = "string",
    SessionDuration = "string",
    UiReadOnlyToggleReason = "string",
    UserSeatExpirationInactiveTime = "string",
    WarpAuthSessionDuration = "string",
    ZoneId = "string",
});

    example, err := cloudflare.NewZeroTrustOrganization(ctx, "zeroTrustOrganizationResource", &cloudflare.ZeroTrustOrganizationArgs{
	AccountId:                pulumi.String("string"),
	AllowAuthenticateViaWarp: pulumi.Bool(false),
	AuthDomain:               pulumi.String("string"),
	AutoRedirectToIdentity:   pulumi.Bool(false),
	CustomPages: &cloudflare.ZeroTrustOrganizationCustomPagesArgs{
		Forbidden:      pulumi.String("string"),
		IdentityDenied: pulumi.String("string"),
	},
	IsUiReadOnly: pulumi.Bool(false),
	LoginDesign: &cloudflare.ZeroTrustOrganizationLoginDesignArgs{
		BackgroundColor: pulumi.String("string"),
		FooterText:      pulumi.String("string"),
		HeaderText:      pulumi.String("string"),
		LogoPath:        pulumi.String("string"),
		TextColor:       pulumi.String("string"),
	},
	Name:                           pulumi.String("string"),
	SessionDuration:                pulumi.String("string"),
	UiReadOnlyToggleReason:         pulumi.String("string"),
	UserSeatExpirationInactiveTime: pulumi.String("string"),
	WarpAuthSessionDuration:        pulumi.String("string"),
	ZoneId:                         pulumi.String("string"),
})

    var zeroTrustOrganizationResource = new ZeroTrustOrganization("zeroTrustOrganizationResource", ZeroTrustOrganizationArgs.builder()
    .accountId("string")
    .allowAuthenticateViaWarp(false)
    .authDomain("string")
    .autoRedirectToIdentity(false)
    .customPages(ZeroTrustOrganizationCustomPagesArgs.builder()
        .forbidden("string")
        .identityDenied("string")
        .build())
    .isUiReadOnly(false)
    .loginDesign(ZeroTrustOrganizationLoginDesignArgs.builder()
        .backgroundColor("string")
        .footerText("string")
        .headerText("string")
        .logoPath("string")
        .textColor("string")
        .build())
    .name("string")
    .sessionDuration("string")
    .uiReadOnlyToggleReason("string")
    .userSeatExpirationInactiveTime("string")
    .warpAuthSessionDuration("string")
    .zoneId("string")
    .build());

    zero_trust_organization_resource = cloudflare.ZeroTrustOrganization("zeroTrustOrganizationResource",
    account_id="string",
    allow_authenticate_via_warp=False,
    auth_domain="string",
    auto_redirect_to_identity=False,
    custom_pages={
        "forbidden": "string",
        "identity_denied": "string",
    },
    is_ui_read_only=False,
    login_design={
        "background_color": "string",
        "footer_text": "string",
        "header_text": "string",
        "logo_path": "string",
        "text_color": "string",
    },
    name="string",
    session_duration="string",
    ui_read_only_toggle_reason="string",
    user_seat_expiration_inactive_time="string",
    warp_auth_session_duration="string",
    zone_id="string")

    const zeroTrustOrganizationResource = new cloudflare.ZeroTrustOrganization("zeroTrustOrganizationResource", {
    accountId: "string",
    allowAuthenticateViaWarp: false,
    authDomain: "string",
    autoRedirectToIdentity: false,
    customPages: {
        forbidden: "string",
        identityDenied: "string",
    },
    isUiReadOnly: false,
    loginDesign: {
        backgroundColor: "string",
        footerText: "string",
        headerText: "string",
        logoPath: "string",
        textColor: "string",
    },
    name: "string",
    sessionDuration: "string",
    uiReadOnlyToggleReason: "string",
    userSeatExpirationInactiveTime: "string",
    warpAuthSessionDuration: "string",
    zoneId: "string",
});

    type: cloudflare:ZeroTrustOrganization
properties:
    accountId: string
    allowAuthenticateViaWarp: false
    authDomain: string
    autoRedirectToIdentity: false
    customPages:
        forbidden: string
        identityDenied: string
    isUiReadOnly: false
    loginDesign:
        backgroundColor: string
        footerText: string
        headerText: string
        logoPath: string
        textColor: string
    name: string
    sessionDuration: string
    uiReadOnlyToggleReason: string
    userSeatExpirationInactiveTime: string
    warpAuthSessionDuration: string
    zoneId: string

    ZeroTrustOrganization Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZeroTrustOrganization resource accepts the following input properties:

    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    AllowAuthenticateViaWarp bool
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    AuthDomain string
    The unique subdomain assigned to your Zero Trust organization.
    AutoRedirectToIdentity bool
    When set to true, users skip the identity provider selection step during login.
    CustomPages ZeroTrustOrganizationCustomPages
    IsUiReadOnly bool
    LoginDesign ZeroTrustOrganizationLoginDesign
    Name string
    The name of your Zero Trust organization.
    SessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    UiReadOnlyToggleReason string
    A description of the reason why the UI read only field is being toggled.
    UserSeatExpirationInactiveTime string
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    WarpAuthSessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    AllowAuthenticateViaWarp bool
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    AuthDomain string
    The unique subdomain assigned to your Zero Trust organization.
    AutoRedirectToIdentity bool
    When set to true, users skip the identity provider selection step during login.
    CustomPages ZeroTrustOrganizationCustomPagesArgs
    IsUiReadOnly bool
    LoginDesign ZeroTrustOrganizationLoginDesignArgs
    Name string
    The name of your Zero Trust organization.
    SessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    UiReadOnlyToggleReason string
    A description of the reason why the UI read only field is being toggled.
    UserSeatExpirationInactiveTime string
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    WarpAuthSessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    allowAuthenticateViaWarp Boolean
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    authDomain String
    The unique subdomain assigned to your Zero Trust organization.
    autoRedirectToIdentity Boolean
    When set to true, users skip the identity provider selection step during login.
    customPages ZeroTrustOrganizationCustomPages
    isUiReadOnly Boolean
    loginDesign ZeroTrustOrganizationLoginDesign
    name String
    The name of your Zero Trust organization.
    sessionDuration String
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    uiReadOnlyToggleReason String
    A description of the reason why the UI read only field is being toggled.
    userSeatExpirationInactiveTime String
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    warpAuthSessionDuration String
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    allowAuthenticateViaWarp boolean
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    authDomain string
    The unique subdomain assigned to your Zero Trust organization.
    autoRedirectToIdentity boolean
    When set to true, users skip the identity provider selection step during login.
    customPages ZeroTrustOrganizationCustomPages
    isUiReadOnly boolean
    loginDesign ZeroTrustOrganizationLoginDesign
    name string
    The name of your Zero Trust organization.
    sessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    uiReadOnlyToggleReason string
    A description of the reason why the UI read only field is being toggled.
    userSeatExpirationInactiveTime string
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    warpAuthSessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    zoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    account_id str
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    allow_authenticate_via_warp bool
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    auth_domain str
    The unique subdomain assigned to your Zero Trust organization.
    auto_redirect_to_identity bool
    When set to true, users skip the identity provider selection step during login.
    custom_pages ZeroTrustOrganizationCustomPagesArgs
    is_ui_read_only bool
    login_design ZeroTrustOrganizationLoginDesignArgs
    name str
    The name of your Zero Trust organization.
    session_duration str
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    ui_read_only_toggle_reason str
    A description of the reason why the UI read only field is being toggled.
    user_seat_expiration_inactive_time str
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    warp_auth_session_duration str
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    zone_id str
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    allowAuthenticateViaWarp Boolean
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    authDomain String
    The unique subdomain assigned to your Zero Trust organization.
    autoRedirectToIdentity Boolean
    When set to true, users skip the identity provider selection step during login.
    customPages Property Map
    isUiReadOnly Boolean
    loginDesign Property Map
    name String
    The name of your Zero Trust organization.
    sessionDuration String
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    uiReadOnlyToggleReason String
    A description of the reason why the UI read only field is being toggled.
    userSeatExpirationInactiveTime String
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    warpAuthSessionDuration String
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZeroTrustOrganization resource produces the following output properties:

    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    createdAt string
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    created_at str
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String

    Look up Existing ZeroTrustOrganization Resource

    Get an existing ZeroTrustOrganization resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZeroTrustOrganizationState, opts?: CustomResourceOptions): ZeroTrustOrganization
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        allow_authenticate_via_warp: Optional[bool] = None,
        auth_domain: Optional[str] = None,
        auto_redirect_to_identity: Optional[bool] = None,
        created_at: Optional[str] = None,
        custom_pages: Optional[ZeroTrustOrganizationCustomPagesArgs] = None,
        is_ui_read_only: Optional[bool] = None,
        login_design: Optional[ZeroTrustOrganizationLoginDesignArgs] = None,
        name: Optional[str] = None,
        session_duration: Optional[str] = None,
        ui_read_only_toggle_reason: Optional[str] = None,
        updated_at: Optional[str] = None,
        user_seat_expiration_inactive_time: Optional[str] = None,
        warp_auth_session_duration: Optional[str] = None,
        zone_id: Optional[str] = None) -> ZeroTrustOrganization
    func GetZeroTrustOrganization(ctx *Context, name string, id IDInput, state *ZeroTrustOrganizationState, opts ...ResourceOption) (*ZeroTrustOrganization, error)
    public static ZeroTrustOrganization Get(string name, Input<string> id, ZeroTrustOrganizationState? state, CustomResourceOptions? opts = null)
    public static ZeroTrustOrganization get(String name, Output<String> id, ZeroTrustOrganizationState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:ZeroTrustOrganization    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    AllowAuthenticateViaWarp bool
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    AuthDomain string
    The unique subdomain assigned to your Zero Trust organization.
    AutoRedirectToIdentity bool
    When set to true, users skip the identity provider selection step during login.
    CreatedAt string
    CustomPages ZeroTrustOrganizationCustomPages
    IsUiReadOnly bool
    LoginDesign ZeroTrustOrganizationLoginDesign
    Name string
    The name of your Zero Trust organization.
    SessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    UiReadOnlyToggleReason string
    A description of the reason why the UI read only field is being toggled.
    UpdatedAt string
    UserSeatExpirationInactiveTime string
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    WarpAuthSessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    AllowAuthenticateViaWarp bool
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    AuthDomain string
    The unique subdomain assigned to your Zero Trust organization.
    AutoRedirectToIdentity bool
    When set to true, users skip the identity provider selection step during login.
    CreatedAt string
    CustomPages ZeroTrustOrganizationCustomPagesArgs
    IsUiReadOnly bool
    LoginDesign ZeroTrustOrganizationLoginDesignArgs
    Name string
    The name of your Zero Trust organization.
    SessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    UiReadOnlyToggleReason string
    A description of the reason why the UI read only field is being toggled.
    UpdatedAt string
    UserSeatExpirationInactiveTime string
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    WarpAuthSessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    allowAuthenticateViaWarp Boolean
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    authDomain String
    The unique subdomain assigned to your Zero Trust organization.
    autoRedirectToIdentity Boolean
    When set to true, users skip the identity provider selection step during login.
    createdAt String
    customPages ZeroTrustOrganizationCustomPages
    isUiReadOnly Boolean
    loginDesign ZeroTrustOrganizationLoginDesign
    name String
    The name of your Zero Trust organization.
    sessionDuration String
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    uiReadOnlyToggleReason String
    A description of the reason why the UI read only field is being toggled.
    updatedAt String
    userSeatExpirationInactiveTime String
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    warpAuthSessionDuration String
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    allowAuthenticateViaWarp boolean
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    authDomain string
    The unique subdomain assigned to your Zero Trust organization.
    autoRedirectToIdentity boolean
    When set to true, users skip the identity provider selection step during login.
    createdAt string
    customPages ZeroTrustOrganizationCustomPages
    isUiReadOnly boolean
    loginDesign ZeroTrustOrganizationLoginDesign
    name string
    The name of your Zero Trust organization.
    sessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    uiReadOnlyToggleReason string
    A description of the reason why the UI read only field is being toggled.
    updatedAt string
    userSeatExpirationInactiveTime string
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    warpAuthSessionDuration string
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    zoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    account_id str
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    allow_authenticate_via_warp bool
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    auth_domain str
    The unique subdomain assigned to your Zero Trust organization.
    auto_redirect_to_identity bool
    When set to true, users skip the identity provider selection step during login.
    created_at str
    custom_pages ZeroTrustOrganizationCustomPagesArgs
    is_ui_read_only bool
    login_design ZeroTrustOrganizationLoginDesignArgs
    name str
    The name of your Zero Trust organization.
    session_duration str
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    ui_read_only_toggle_reason str
    A description of the reason why the UI read only field is being toggled.
    updated_at str
    user_seat_expiration_inactive_time str
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    warp_auth_session_duration str
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    zone_id str
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    allowAuthenticateViaWarp Boolean
    When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value.
    authDomain String
    The unique subdomain assigned to your Zero Trust organization.
    autoRedirectToIdentity Boolean
    When set to true, users skip the identity provider selection step during login.
    createdAt String
    customPages Property Map
    isUiReadOnly Boolean
    loginDesign Property Map
    name String
    The name of your Zero Trust organization.
    sessionDuration String
    The amount of time that tokens issued for applications will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    uiReadOnlyToggleReason String
    A description of the reason why the UI read only field is being toggled.
    updatedAt String
    userSeatExpirationInactiveTime String
    The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    warpAuthSessionDuration String
    The amount of time that tokens issued for applications will be valid. Must be in the format 30m or 2h45m. Valid time units are: m, h.
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

    Supporting Types

    ZeroTrustOrganizationCustomPages, ZeroTrustOrganizationCustomPagesArgs

    Forbidden string
    The uid of the custom page to use when a user is denied access after failing a non-identity rule.
    IdentityDenied string
    The uid of the custom page to use when a user is denied access.
    Forbidden string
    The uid of the custom page to use when a user is denied access after failing a non-identity rule.
    IdentityDenied string
    The uid of the custom page to use when a user is denied access.
    forbidden String
    The uid of the custom page to use when a user is denied access after failing a non-identity rule.
    identityDenied String
    The uid of the custom page to use when a user is denied access.
    forbidden string
    The uid of the custom page to use when a user is denied access after failing a non-identity rule.
    identityDenied string
    The uid of the custom page to use when a user is denied access.
    forbidden str
    The uid of the custom page to use when a user is denied access after failing a non-identity rule.
    identity_denied str
    The uid of the custom page to use when a user is denied access.
    forbidden String
    The uid of the custom page to use when a user is denied access after failing a non-identity rule.
    identityDenied String
    The uid of the custom page to use when a user is denied access.

    ZeroTrustOrganizationLoginDesign, ZeroTrustOrganizationLoginDesignArgs

    BackgroundColor string
    The background color on your login page.
    FooterText string
    The text at the bottom of your login page.
    HeaderText string
    The text at the top of your login page.
    LogoPath string
    The URL of the logo on your login page.
    TextColor string
    The text color on your login page.
    BackgroundColor string
    The background color on your login page.
    FooterText string
    The text at the bottom of your login page.
    HeaderText string
    The text at the top of your login page.
    LogoPath string
    The URL of the logo on your login page.
    TextColor string
    The text color on your login page.
    backgroundColor String
    The background color on your login page.
    footerText String
    The text at the bottom of your login page.
    headerText String
    The text at the top of your login page.
    logoPath String
    The URL of the logo on your login page.
    textColor String
    The text color on your login page.
    backgroundColor string
    The background color on your login page.
    footerText string
    The text at the bottom of your login page.
    headerText string
    The text at the top of your login page.
    logoPath string
    The URL of the logo on your login page.
    textColor string
    The text color on your login page.
    background_color str
    The background color on your login page.
    footer_text str
    The text at the bottom of your login page.
    header_text str
    The text at the top of your login page.
    logo_path str
    The URL of the logo on your login page.
    text_color str
    The text color on your login page.
    backgroundColor String
    The background color on your login page.
    footerText String
    The text at the bottom of your login page.
    headerText String
    The text at the top of your login page.
    logoPath String
    The URL of the logo on your login page.
    textColor String
    The text color on your login page.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
    pulumi/pulumi-cloudflare