Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Descope Provider
  4. API Docs
  5. InboundApp
Viewing docs for Descope v0.3.13
published on Tuesday, Jul 14, 2026 by Descope
Schema (JSON)
descope/pulumi-descope

descope.InboundApp

descope logo
Viewing docs for Descope v0.3.13
published on Tuesday, Jul 14, 2026 by Descope
Schema (JSON)
descope/pulumi-descope

    Create InboundApp Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new InboundApp(name: string, args: InboundAppArgs, opts?: CustomResourceOptions);
    @overload
def InboundApp(resource_name: str,
               args: InboundAppArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def InboundApp(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               project_id: Optional[str] = None,
               force_add_all_authorization_info: Optional[bool] = None,
               login_page_url: Optional[str] = None,
               client_id: Optional[str] = None,
               client_secret: Optional[str] = None,
               connections_scopes: Optional[Sequence[InboundAppConnectionsScopeArgs]] = None,
               default_audience: Optional[str] = None,
               audience_whitelists: Optional[Sequence[str]] = None,
               description: Optional[str] = None,
               force_pkce: Optional[bool] = None,
               approved_callback_urls: Optional[Sequence[str]] = None,
               logo_url: Optional[str] = None,
               name: Optional[str] = None,
               non_confidential_client: Optional[bool] = None,
               permissions_scopes: Optional[Sequence[InboundAppPermissionsScopeArgs]] = None,
               attributes_scopes: Optional[Sequence[InboundAppAttributesScopeArgs]] = None,
               session_settings: Optional[InboundAppSessionSettingsArgs] = None)
    func NewInboundApp(ctx *Context, name string, args InboundAppArgs, opts ...ResourceOption) (*InboundApp, error)
    public InboundApp(string name, InboundAppArgs args, CustomResourceOptions? opts = null)
    public InboundApp(String name, InboundAppArgs args)
public InboundApp(String name, InboundAppArgs args, CustomResourceOptions options)

    type: descope:InboundApp
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "descope_inbound_app" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args InboundAppArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args InboundAppArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args InboundAppArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args InboundAppArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args InboundAppArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var inboundAppResource = new Descope.InboundApp("inboundAppResource", new()
{
    ProjectId = "string",
    ForceAddAllAuthorizationInfo = false,
    LoginPageUrl = "string",
    ClientId = "string",
    ClientSecret = "string",
    ConnectionsScopes = new[]
    {
        new Descope.Inputs.InboundAppConnectionsScopeArgs
        {
            Description = "string",
            Name = "string",
            Optional = false,
            Values = new[]
            {
                "string",
            },
        },
    },
    DefaultAudience = "string",
    AudienceWhitelists = new[]
    {
        "string",
    },
    Description = "string",
    ForcePkce = false,
    ApprovedCallbackUrls = new[]
    {
        "string",
    },
    LogoUrl = "string",
    Name = "string",
    NonConfidentialClient = false,
    PermissionsScopes = new[]
    {
        new Descope.Inputs.InboundAppPermissionsScopeArgs
        {
            Description = "string",
            Name = "string",
            Optional = false,
            Values = new[]
            {
                "string",
            },
        },
    },
    AttributesScopes = new[]
    {
        new Descope.Inputs.InboundAppAttributesScopeArgs
        {
            Description = "string",
            Name = "string",
            Optional = false,
            Values = new[]
            {
                "string",
            },
        },
    },
    SessionSettings = new Descope.Inputs.InboundAppSessionSettingsArgs
    {
        Enabled = false,
        KeySessionTokenExpiration = "string",
        KeyTemplateId = "string",
        RefreshTokenExpiration = "string",
        SessionTokenExpiration = "string",
        UserTemplateId = "string",
    },
});

    example, err := descope.NewInboundApp(ctx, "inboundAppResource", &descope.InboundAppArgs{
	ProjectId:                    pulumi.String("string"),
	ForceAddAllAuthorizationInfo: pulumi.Bool(false),
	LoginPageUrl:                 pulumi.String("string"),
	ClientId:                     pulumi.String("string"),
	ClientSecret:                 pulumi.String("string"),
	ConnectionsScopes: descope.InboundAppConnectionsScopeArray{
		&descope.InboundAppConnectionsScopeArgs{
			Description: pulumi.String("string"),
			Name:        pulumi.String("string"),
			Optional:    pulumi.Bool(false),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	DefaultAudience: pulumi.String("string"),
	AudienceWhitelists: pulumi.StringArray{
		pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	ForcePkce:   pulumi.Bool(false),
	ApprovedCallbackUrls: pulumi.StringArray{
		pulumi.String("string"),
	},
	LogoUrl:               pulumi.String("string"),
	Name:                  pulumi.String("string"),
	NonConfidentialClient: pulumi.Bool(false),
	PermissionsScopes: descope.InboundAppPermissionsScopeArray{
		&descope.InboundAppPermissionsScopeArgs{
			Description: pulumi.String("string"),
			Name:        pulumi.String("string"),
			Optional:    pulumi.Bool(false),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	AttributesScopes: descope.InboundAppAttributesScopeArray{
		&descope.InboundAppAttributesScopeArgs{
			Description: pulumi.String("string"),
			Name:        pulumi.String("string"),
			Optional:    pulumi.Bool(false),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	SessionSettings: &descope.InboundAppSessionSettingsArgs{
		Enabled:                   pulumi.Bool(false),
		KeySessionTokenExpiration: pulumi.String("string"),
		KeyTemplateId:             pulumi.String("string"),
		RefreshTokenExpiration:    pulumi.String("string"),
		SessionTokenExpiration:    pulumi.String("string"),
		UserTemplateId:            pulumi.String("string"),
	},
})

    resource "descope_inbound_app" "inboundAppResource" {
  lifecycle {
    create_before_destroy = true
  }
  project_id                       = "string"
  force_add_all_authorization_info = false
  login_page_url                   = "string"
  client_id                        = "string"
  client_secret                    = "string"
  connections_scopes {
    description = "string"
    name        = "string"
    optional    = false
    values      = ["string"]
  }
  default_audience        = "string"
  audience_whitelists     = ["string"]
  description             = "string"
  force_pkce              = false
  approved_callback_urls  = ["string"]
  logo_url                = "string"
  name                    = "string"
  non_confidential_client = false
  permissions_scopes {
    description = "string"
    name        = "string"
    optional    = false
    values      = ["string"]
  }
  attributes_scopes {
    description = "string"
    name        = "string"
    optional    = false
    values      = ["string"]
  }
  session_settings = {
    enabled                      = false
    key_session_token_expiration = "string"
    key_template_id              = "string"
    refresh_token_expiration     = "string"
    session_token_expiration     = "string"
    user_template_id             = "string"
  }
}

    var inboundAppResource = new InboundApp("inboundAppResource", InboundAppArgs.builder()
    .projectId("string")
    .forceAddAllAuthorizationInfo(false)
    .loginPageUrl("string")
    .clientId("string")
    .clientSecret("string")
    .connectionsScopes(InboundAppConnectionsScopeArgs.builder()
        .description("string")
        .name("string")
        .optional(false)
        .values("string")
        .build())
    .defaultAudience("string")
    .audienceWhitelists("string")
    .description("string")
    .forcePkce(false)
    .approvedCallbackUrls("string")
    .logoUrl("string")
    .name("string")
    .nonConfidentialClient(false)
    .permissionsScopes(InboundAppPermissionsScopeArgs.builder()
        .description("string")
        .name("string")
        .optional(false)
        .values("string")
        .build())
    .attributesScopes(InboundAppAttributesScopeArgs.builder()
        .description("string")
        .name("string")
        .optional(false)
        .values("string")
        .build())
    .sessionSettings(InboundAppSessionSettingsArgs.builder()
        .enabled(false)
        .keySessionTokenExpiration("string")
        .keyTemplateId("string")
        .refreshTokenExpiration("string")
        .sessionTokenExpiration("string")
        .userTemplateId("string")
        .build())
    .build());

    inbound_app_resource = descope.InboundApp("inboundAppResource",
    project_id="string",
    force_add_all_authorization_info=False,
    login_page_url="string",
    client_id="string",
    client_secret="string",
    connections_scopes=[{
        "description": "string",
        "name": "string",
        "optional": False,
        "values": ["string"],
    }],
    default_audience="string",
    audience_whitelists=["string"],
    description="string",
    force_pkce=False,
    approved_callback_urls=["string"],
    logo_url="string",
    name="string",
    non_confidential_client=False,
    permissions_scopes=[{
        "description": "string",
        "name": "string",
        "optional": False,
        "values": ["string"],
    }],
    attributes_scopes=[{
        "description": "string",
        "name": "string",
        "optional": False,
        "values": ["string"],
    }],
    session_settings={
        "enabled": False,
        "key_session_token_expiration": "string",
        "key_template_id": "string",
        "refresh_token_expiration": "string",
        "session_token_expiration": "string",
        "user_template_id": "string",
    })

    const inboundAppResource = new descope.InboundApp("inboundAppResource", {
    projectId: "string",
    forceAddAllAuthorizationInfo: false,
    loginPageUrl: "string",
    clientId: "string",
    clientSecret: "string",
    connectionsScopes: [{
        description: "string",
        name: "string",
        optional: false,
        values: ["string"],
    }],
    defaultAudience: "string",
    audienceWhitelists: ["string"],
    description: "string",
    forcePkce: false,
    approvedCallbackUrls: ["string"],
    logoUrl: "string",
    name: "string",
    nonConfidentialClient: false,
    permissionsScopes: [{
        description: "string",
        name: "string",
        optional: false,
        values: ["string"],
    }],
    attributesScopes: [{
        description: "string",
        name: "string",
        optional: false,
        values: ["string"],
    }],
    sessionSettings: {
        enabled: false,
        keySessionTokenExpiration: "string",
        keyTemplateId: "string",
        refreshTokenExpiration: "string",
        sessionTokenExpiration: "string",
        userTemplateId: "string",
    },
});

    type: descope:InboundApp
properties:
    approvedCallbackUrls:
        - string
    attributesScopes:
        - description: string
          name: string
          optional: false
          values:
            - string
    audienceWhitelists:
        - string
    clientId: string
    clientSecret: string
    connectionsScopes:
        - description: string
          name: string
          optional: false
          values:
            - string
    defaultAudience: string
    description: string
    forceAddAllAuthorizationInfo: false
    forcePkce: false
    loginPageUrl: string
    logoUrl: string
    name: string
    nonConfidentialClient: false
    permissionsScopes:
        - description: string
          name: string
          optional: false
          values:
            - string
    projectId: string
    sessionSettings:
        enabled: false
        keySessionTokenExpiration: string
        keyTemplateId: string
        refreshTokenExpiration: string
        sessionTokenExpiration: string
        userTemplateId: string

    InboundApp Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The InboundApp resource accepts the following input properties:

    ProjectId string
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    ApprovedCallbackUrls List<string>
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    AttributesScopes List<Descope.InboundAppAttributesScope>
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    AudienceWhitelists List<string>
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    ClientId string
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    ClientSecret string
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    ConnectionsScopes List<Descope.InboundAppConnectionsScope>
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    DefaultAudience string
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    Description string
    A description for the inbound app.
    ForceAddAllAuthorizationInfo bool
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    ForcePkce bool
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    LoginPageUrl string
    The Flow Hosting URL.
    LogoUrl string
    A URL to the inbound app's logo image.
    Name string
    A name for the inbound app.
    NonConfidentialClient bool
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    PermissionsScopes List<Descope.InboundAppPermissionsScope>
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    SessionSettings Descope.InboundAppSessionSettings
    Custom session management settings for this inbound app, overriding the project defaults.
    ProjectId string
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    ApprovedCallbackUrls []string
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    AttributesScopes []InboundAppAttributesScopeArgs
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    AudienceWhitelists []string
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    ClientId string
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    ClientSecret string
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    ConnectionsScopes []InboundAppConnectionsScopeArgs
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    DefaultAudience string
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    Description string
    A description for the inbound app.
    ForceAddAllAuthorizationInfo bool
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    ForcePkce bool
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    LoginPageUrl string
    The Flow Hosting URL.
    LogoUrl string
    A URL to the inbound app's logo image.
    Name string
    A name for the inbound app.
    NonConfidentialClient bool
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    PermissionsScopes []InboundAppPermissionsScopeArgs
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    SessionSettings InboundAppSessionSettingsArgs
    Custom session management settings for this inbound app, overriding the project defaults.
    project_id string
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    approved_callback_urls list(string)
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributes_scopes list(object)
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audience_whitelists list(string)
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    client_id string
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    client_secret string
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connections_scopes list(object)
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    default_audience string
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description string
    A description for the inbound app.
    force_add_all_authorization_info bool
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    force_pkce bool
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    login_page_url string
    The Flow Hosting URL.
    logo_url string
    A URL to the inbound app's logo image.
    name string
    A name for the inbound app.
    non_confidential_client bool
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissions_scopes list(object)
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    session_settings object
    Custom session management settings for this inbound app, overriding the project defaults.
    projectId String
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    approvedCallbackUrls List<String>
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributesScopes List<InboundAppAttributesScope>
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audienceWhitelists List<String>
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    clientId String
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    clientSecret String
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connectionsScopes List<InboundAppConnectionsScope>
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    defaultAudience String
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description String
    A description for the inbound app.
    forceAddAllAuthorizationInfo Boolean
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    forcePkce Boolean
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    loginPageUrl String
    The Flow Hosting URL.
    logoUrl String
    A URL to the inbound app's logo image.
    name String
    A name for the inbound app.
    nonConfidentialClient Boolean
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissionsScopes List<InboundAppPermissionsScope>
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    sessionSettings InboundAppSessionSettings
    Custom session management settings for this inbound app, overriding the project defaults.
    projectId string
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    approvedCallbackUrls string[]
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributesScopes InboundAppAttributesScope[]
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audienceWhitelists string[]
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    clientId string
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    clientSecret string
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connectionsScopes InboundAppConnectionsScope[]
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    defaultAudience string
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description string
    A description for the inbound app.
    forceAddAllAuthorizationInfo boolean
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    forcePkce boolean
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    loginPageUrl string
    The Flow Hosting URL.
    logoUrl string
    A URL to the inbound app's logo image.
    name string
    A name for the inbound app.
    nonConfidentialClient boolean
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissionsScopes InboundAppPermissionsScope[]
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    sessionSettings InboundAppSessionSettings
    Custom session management settings for this inbound app, overriding the project defaults.
    project_id str
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    approved_callback_urls Sequence[str]
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributes_scopes Sequence[InboundAppAttributesScopeArgs]
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audience_whitelists Sequence[str]
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    client_id str
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    client_secret str
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connections_scopes Sequence[InboundAppConnectionsScopeArgs]
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    default_audience str
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description str
    A description for the inbound app.
    force_add_all_authorization_info bool
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    force_pkce bool
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    login_page_url str
    The Flow Hosting URL.
    logo_url str
    A URL to the inbound app's logo image.
    name str
    A name for the inbound app.
    non_confidential_client bool
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissions_scopes Sequence[InboundAppPermissionsScopeArgs]
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    session_settings InboundAppSessionSettingsArgs
    Custom session management settings for this inbound app, overriding the project defaults.
    projectId String
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    approvedCallbackUrls List<String>
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributesScopes List<Property Map>
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audienceWhitelists List<String>
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    clientId String
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    clientSecret String
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connectionsScopes List<Property Map>
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    defaultAudience String
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description String
    A description for the inbound app.
    forceAddAllAuthorizationInfo Boolean
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    forcePkce Boolean
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    loginPageUrl String
    The Flow Hosting URL.
    logoUrl String
    A URL to the inbound app's logo image.
    name String
    A name for the inbound app.
    nonConfidentialClient Boolean
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissionsScopes List<Property Map>
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    sessionSettings Property Map
    Custom session management settings for this inbound app, overriding the project defaults.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the InboundApp resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing InboundApp Resource

    Get an existing InboundApp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: InboundAppState, opts?: CustomResourceOptions): InboundApp
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        approved_callback_urls: Optional[Sequence[str]] = None,
        attributes_scopes: Optional[Sequence[InboundAppAttributesScopeArgs]] = None,
        audience_whitelists: Optional[Sequence[str]] = None,
        client_id: Optional[str] = None,
        client_secret: Optional[str] = None,
        connections_scopes: Optional[Sequence[InboundAppConnectionsScopeArgs]] = None,
        default_audience: Optional[str] = None,
        description: Optional[str] = None,
        force_add_all_authorization_info: Optional[bool] = None,
        force_pkce: Optional[bool] = None,
        login_page_url: Optional[str] = None,
        logo_url: Optional[str] = None,
        name: Optional[str] = None,
        non_confidential_client: Optional[bool] = None,
        permissions_scopes: Optional[Sequence[InboundAppPermissionsScopeArgs]] = None,
        project_id: Optional[str] = None,
        session_settings: Optional[InboundAppSessionSettingsArgs] = None) -> InboundApp
    func GetInboundApp(ctx *Context, name string, id IDInput, state *InboundAppState, opts ...ResourceOption) (*InboundApp, error)
    public static InboundApp Get(string name, Input<string> id, InboundAppState? state, CustomResourceOptions? opts = null)
    public static InboundApp get(String name, Output<String> id, InboundAppState state, CustomResourceOptions options)
    resources:  _:    type: descope:InboundApp    get:      id: ${id}
    import {
  to = descope_inbound_app.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApprovedCallbackUrls List<string>
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    AttributesScopes List<Descope.InboundAppAttributesScope>
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    AudienceWhitelists List<string>
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    ClientId string
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    ClientSecret string
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    ConnectionsScopes List<Descope.InboundAppConnectionsScope>
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    DefaultAudience string
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    Description string
    A description for the inbound app.
    ForceAddAllAuthorizationInfo bool
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    ForcePkce bool
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    LoginPageUrl string
    The Flow Hosting URL.
    LogoUrl string
    A URL to the inbound app's logo image.
    Name string
    A name for the inbound app.
    NonConfidentialClient bool
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    PermissionsScopes List<Descope.InboundAppPermissionsScope>
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    ProjectId string
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    SessionSettings Descope.InboundAppSessionSettings
    Custom session management settings for this inbound app, overriding the project defaults.
    ApprovedCallbackUrls []string
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    AttributesScopes []InboundAppAttributesScopeArgs
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    AudienceWhitelists []string
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    ClientId string
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    ClientSecret string
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    ConnectionsScopes []InboundAppConnectionsScopeArgs
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    DefaultAudience string
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    Description string
    A description for the inbound app.
    ForceAddAllAuthorizationInfo bool
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    ForcePkce bool
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    LoginPageUrl string
    The Flow Hosting URL.
    LogoUrl string
    A URL to the inbound app's logo image.
    Name string
    A name for the inbound app.
    NonConfidentialClient bool
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    PermissionsScopes []InboundAppPermissionsScopeArgs
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    ProjectId string
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    SessionSettings InboundAppSessionSettingsArgs
    Custom session management settings for this inbound app, overriding the project defaults.
    approved_callback_urls list(string)
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributes_scopes list(object)
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audience_whitelists list(string)
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    client_id string
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    client_secret string
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connections_scopes list(object)
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    default_audience string
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description string
    A description for the inbound app.
    force_add_all_authorization_info bool
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    force_pkce bool
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    login_page_url string
    The Flow Hosting URL.
    logo_url string
    A URL to the inbound app's logo image.
    name string
    A name for the inbound app.
    non_confidential_client bool
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissions_scopes list(object)
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    project_id string
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    session_settings object
    Custom session management settings for this inbound app, overriding the project defaults.
    approvedCallbackUrls List<String>
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributesScopes List<InboundAppAttributesScope>
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audienceWhitelists List<String>
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    clientId String
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    clientSecret String
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connectionsScopes List<InboundAppConnectionsScope>
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    defaultAudience String
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description String
    A description for the inbound app.
    forceAddAllAuthorizationInfo Boolean
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    forcePkce Boolean
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    loginPageUrl String
    The Flow Hosting URL.
    logoUrl String
    A URL to the inbound app's logo image.
    name String
    A name for the inbound app.
    nonConfidentialClient Boolean
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissionsScopes List<InboundAppPermissionsScope>
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    projectId String
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    sessionSettings InboundAppSessionSettings
    Custom session management settings for this inbound app, overriding the project defaults.
    approvedCallbackUrls string[]
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributesScopes InboundAppAttributesScope[]
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audienceWhitelists string[]
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    clientId string
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    clientSecret string
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connectionsScopes InboundAppConnectionsScope[]
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    defaultAudience string
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description string
    A description for the inbound app.
    forceAddAllAuthorizationInfo boolean
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    forcePkce boolean
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    loginPageUrl string
    The Flow Hosting URL.
    logoUrl string
    A URL to the inbound app's logo image.
    name string
    A name for the inbound app.
    nonConfidentialClient boolean
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissionsScopes InboundAppPermissionsScope[]
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    projectId string
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    sessionSettings InboundAppSessionSettings
    Custom session management settings for this inbound app, overriding the project defaults.
    approved_callback_urls Sequence[str]
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributes_scopes Sequence[InboundAppAttributesScopeArgs]
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audience_whitelists Sequence[str]
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    client_id str
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    client_secret str
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connections_scopes Sequence[InboundAppConnectionsScopeArgs]
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    default_audience str
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description str
    A description for the inbound app.
    force_add_all_authorization_info bool
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    force_pkce bool
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    login_page_url str
    The Flow Hosting URL.
    logo_url str
    A URL to the inbound app's logo image.
    name str
    A name for the inbound app.
    non_confidential_client bool
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissions_scopes Sequence[InboundAppPermissionsScopeArgs]
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    project_id str
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    session_settings InboundAppSessionSettingsArgs
    Custom session management settings for this inbound app, overriding the project defaults.
    approvedCallbackUrls List<String>
    A set of approved redirect URIs that the inbound app is allowed to redirect to after authorization.
    attributesScopes List<Property Map>
    A list of user information scopes that the inbound app can request. Attribute scopes provide the app with access to user profile data such as email, phone, or custom attributes.
    audienceWhitelists List<String>
    A set of allowed custom aud claim values that the inbound app can request via the resource parameter, per RFC 8707.
    clientId String
    A custom client ID for the inbound app. If not set, an ID will be generated automatically. Changing this value after creation will require the resource to be replaced.
    clientSecret String
    The client secret for authenticating this inbound app. This value is generated automatically and cannot be retrieved after the resource is created. Store this value securely.
    connectionsScopes List<Property Map>
    A list of connection scopes that the inbound app can request. Connection scopes provide the app with the ability to access external tokens based on the mapped scopes.
    defaultAudience String
    The default aud claim to include in tokens issued for this app. Use projectId to set the project ID as the audience, clientId to set the app's client ID, or leave empty to include both.
    description String
    A description for the inbound app.
    forceAddAllAuthorizationInfo Boolean
    When enabled, all of the user's tenants, roles, and permissions will always be included in issued tokens.
    forcePkce Boolean
    When enabled, the authorization code flow requires PKCE in addition to the normal client authentication. A confidential client must then present both its client secret and a valid PKCE code_verifier. Public clients always use PKCE regardless of this setting.
    loginPageUrl String
    The Flow Hosting URL.
    logoUrl String
    A URL to the inbound app's logo image.
    name String
    A name for the inbound app.
    nonConfidentialClient Boolean
    Whether this is a public (non-confidential) client that does not use a client secret. Changing this value after creation will require the resource to be replaced.
    permissionsScopes List<Property Map>
    A list of permission scopes that the inbound app can request. Permission scopes provide the app with the ability to act on behalf of a user based on their roles and permissions.
    projectId String
    The ID of the Descope project this inbound app belongs to. Changing this value will require the resource to be deleted and recreated.
    sessionSettings Property Map
    Custom session management settings for this inbound app, overriding the project defaults.

    Supporting Types

    InboundAppAttributesScope, InboundAppAttributesScopeArgs

    Description string
    A description for the scope.
    Name string
    A name for the scope.
    Optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    Values List<string>
    The identifiers of the relevant permission, attribute or connection scopes.
    Description string
    A description for the scope.
    Name string
    A name for the scope.
    Optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    Values []string
    The identifiers of the relevant permission, attribute or connection scopes.
    description string
    A description for the scope.
    name string
    A name for the scope.
    optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values list(string)
    The identifiers of the relevant permission, attribute or connection scopes.
    description String
    A description for the scope.
    name String
    A name for the scope.
    optional Boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values List<String>
    The identifiers of the relevant permission, attribute or connection scopes.
    description string
    A description for the scope.
    name string
    A name for the scope.
    optional boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values string[]
    The identifiers of the relevant permission, attribute or connection scopes.
    description str
    A description for the scope.
    name str
    A name for the scope.
    optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values Sequence[str]
    The identifiers of the relevant permission, attribute or connection scopes.
    description String
    A description for the scope.
    name String
    A name for the scope.
    optional Boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values List<String>
    The identifiers of the relevant permission, attribute or connection scopes.

    InboundAppConnectionsScope, InboundAppConnectionsScopeArgs

    Description string
    A description for the scope.
    Name string
    A name for the scope.
    Optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    Values List<string>
    The identifiers of the relevant permission, attribute or connection scopes.
    Description string
    A description for the scope.
    Name string
    A name for the scope.
    Optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    Values []string
    The identifiers of the relevant permission, attribute or connection scopes.
    description string
    A description for the scope.
    name string
    A name for the scope.
    optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values list(string)
    The identifiers of the relevant permission, attribute or connection scopes.
    description String
    A description for the scope.
    name String
    A name for the scope.
    optional Boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values List<String>
    The identifiers of the relevant permission, attribute or connection scopes.
    description string
    A description for the scope.
    name string
    A name for the scope.
    optional boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values string[]
    The identifiers of the relevant permission, attribute or connection scopes.
    description str
    A description for the scope.
    name str
    A name for the scope.
    optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values Sequence[str]
    The identifiers of the relevant permission, attribute or connection scopes.
    description String
    A description for the scope.
    name String
    A name for the scope.
    optional Boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values List<String>
    The identifiers of the relevant permission, attribute or connection scopes.

    InboundAppPermissionsScope, InboundAppPermissionsScopeArgs

    Description string
    A description for the scope.
    Name string
    A name for the scope.
    Optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    Values List<string>
    The identifiers of the relevant permission, attribute or connection scopes.
    Description string
    A description for the scope.
    Name string
    A name for the scope.
    Optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    Values []string
    The identifiers of the relevant permission, attribute or connection scopes.
    description string
    A description for the scope.
    name string
    A name for the scope.
    optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values list(string)
    The identifiers of the relevant permission, attribute or connection scopes.
    description String
    A description for the scope.
    name String
    A name for the scope.
    optional Boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values List<String>
    The identifiers of the relevant permission, attribute or connection scopes.
    description string
    A description for the scope.
    name string
    A name for the scope.
    optional boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values string[]
    The identifiers of the relevant permission, attribute or connection scopes.
    description str
    A description for the scope.
    name str
    A name for the scope.
    optional bool
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values Sequence[str]
    The identifiers of the relevant permission, attribute or connection scopes.
    description String
    A description for the scope.
    name String
    A name for the scope.
    optional Boolean
    Whether this scope is optional. When false, the scope is mandatory and must be granted during authorization. When true, the user may choose to withhold it.
    values List<String>
    The identifiers of the relevant permission, attribute or connection scopes.

    InboundAppSessionSettings, InboundAppSessionSettingsArgs

    Enabled bool
    Whether to override the project's session settings.
    KeySessionTokenExpiration string
    The expiration duration for access key session tokens. Must be between 3 minutes and one month.
    KeyTemplateId string
    The ID of the JWT template to use for access key JWTs issued to this inbound app.
    RefreshTokenExpiration string
    The expiration duration for refresh tokens issued to this inbound app.
    SessionTokenExpiration string
    The expiration duration for session tokens issued to this inbound app.
    UserTemplateId string
    The ID of the JWT template to use for user JWTs issued to this inbound app.
    Enabled bool
    Whether to override the project's session settings.
    KeySessionTokenExpiration string
    The expiration duration for access key session tokens. Must be between 3 minutes and one month.
    KeyTemplateId string
    The ID of the JWT template to use for access key JWTs issued to this inbound app.
    RefreshTokenExpiration string
    The expiration duration for refresh tokens issued to this inbound app.
    SessionTokenExpiration string
    The expiration duration for session tokens issued to this inbound app.
    UserTemplateId string
    The ID of the JWT template to use for user JWTs issued to this inbound app.
    enabled bool
    Whether to override the project's session settings.
    key_session_token_expiration string
    The expiration duration for access key session tokens. Must be between 3 minutes and one month.
    key_template_id string
    The ID of the JWT template to use for access key JWTs issued to this inbound app.
    refresh_token_expiration string
    The expiration duration for refresh tokens issued to this inbound app.
    session_token_expiration string
    The expiration duration for session tokens issued to this inbound app.
    user_template_id string
    The ID of the JWT template to use for user JWTs issued to this inbound app.
    enabled Boolean
    Whether to override the project's session settings.
    keySessionTokenExpiration String
    The expiration duration for access key session tokens. Must be between 3 minutes and one month.
    keyTemplateId String
    The ID of the JWT template to use for access key JWTs issued to this inbound app.
    refreshTokenExpiration String
    The expiration duration for refresh tokens issued to this inbound app.
    sessionTokenExpiration String
    The expiration duration for session tokens issued to this inbound app.
    userTemplateId String
    The ID of the JWT template to use for user JWTs issued to this inbound app.
    enabled boolean
    Whether to override the project's session settings.
    keySessionTokenExpiration string
    The expiration duration for access key session tokens. Must be between 3 minutes and one month.
    keyTemplateId string
    The ID of the JWT template to use for access key JWTs issued to this inbound app.
    refreshTokenExpiration string
    The expiration duration for refresh tokens issued to this inbound app.
    sessionTokenExpiration string
    The expiration duration for session tokens issued to this inbound app.
    userTemplateId string
    The ID of the JWT template to use for user JWTs issued to this inbound app.
    enabled bool
    Whether to override the project's session settings.
    key_session_token_expiration str
    The expiration duration for access key session tokens. Must be between 3 minutes and one month.
    key_template_id str
    The ID of the JWT template to use for access key JWTs issued to this inbound app.
    refresh_token_expiration str
    The expiration duration for refresh tokens issued to this inbound app.
    session_token_expiration str
    The expiration duration for session tokens issued to this inbound app.
    user_template_id str
    The ID of the JWT template to use for user JWTs issued to this inbound app.
    enabled Boolean
    Whether to override the project's session settings.
    keySessionTokenExpiration String
    The expiration duration for access key session tokens. Must be between 3 minutes and one month.
    keyTemplateId String
    The ID of the JWT template to use for access key JWTs issued to this inbound app.
    refreshTokenExpiration String
    The expiration duration for refresh tokens issued to this inbound app.
    sessionTokenExpiration String
    The expiration duration for session tokens issued to this inbound app.
    userTemplateId String
    The ID of the JWT template to use for user JWTs issued to this inbound app.

    Package Details

    Repository
    descope descope/pulumi-descope
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the descope Terraform Provider.
    descope logo
    Viewing docs for Descope v0.3.13
    published on Tuesday, Jul 14, 2026 by Descope
    Schema (JSON)
    descope/pulumi-descope

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial