Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Ibm Provider
  3. API Docs
  4. getIamUserMfaEnrollments
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

ibm.getIamUserMfaEnrollments

Explore with Pulumi AI

ibm logo
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

    Provides a read-only data source for iam_user_mfa_enrollments. You can then reference the fields of the data source in other resources within the same configuration using interpolation syntax.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";

const iamUserMfaEnrollments = ibm.getIamUserMfaEnrollments({
    accountId: "account_id",
    iamId: "iam_id",
});

    import pulumi
import pulumi_ibm as ibm

iam_user_mfa_enrollments = ibm.get_iam_user_mfa_enrollments(account_id="account_id",
    iam_id="iam_id")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ibm.GetIamUserMfaEnrollments(ctx, &ibm.GetIamUserMfaEnrollmentsArgs{
			AccountId: "account_id",
			IamId:     "iam_id",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;

return await Deployment.RunAsync(() => 
{
    var iamUserMfaEnrollments = Ibm.GetIamUserMfaEnrollments.Invoke(new()
    {
        AccountId = "account_id",
        IamId = "iam_id",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.IbmFunctions;
import com.pulumi.ibm.inputs.GetIamUserMfaEnrollmentsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var iamUserMfaEnrollments = IbmFunctions.getIamUserMfaEnrollments(GetIamUserMfaEnrollmentsArgs.builder()
            .accountId("account_id")
            .iamId("iam_id")
            .build());

    }
}

    variables:
  iamUserMfaEnrollments:
    fn::invoke:
      function: ibm:getIamUserMfaEnrollments
      arguments:
        accountId: account_id
        iamId: iam_id

    Using getIamUserMfaEnrollments

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getIamUserMfaEnrollments(args: GetIamUserMfaEnrollmentsArgs, opts?: InvokeOptions): Promise<GetIamUserMfaEnrollmentsResult>
function getIamUserMfaEnrollmentsOutput(args: GetIamUserMfaEnrollmentsOutputArgs, opts?: InvokeOptions): Output<GetIamUserMfaEnrollmentsResult>
    def get_iam_user_mfa_enrollments(account_id: Optional[str] = None,
                                 iam_id: Optional[str] = None,
                                 id: Optional[str] = None,
                                 opts: Optional[InvokeOptions] = None) -> GetIamUserMfaEnrollmentsResult
def get_iam_user_mfa_enrollments_output(account_id: Optional[pulumi.Input[str]] = None,
                                 iam_id: Optional[pulumi.Input[str]] = None,
                                 id: Optional[pulumi.Input[str]] = None,
                                 opts: Optional[InvokeOptions] = None) -> Output[GetIamUserMfaEnrollmentsResult]
    func GetIamUserMfaEnrollments(ctx *Context, args *GetIamUserMfaEnrollmentsArgs, opts ...InvokeOption) (*GetIamUserMfaEnrollmentsResult, error)
func GetIamUserMfaEnrollmentsOutput(ctx *Context, args *GetIamUserMfaEnrollmentsOutputArgs, opts ...InvokeOption) GetIamUserMfaEnrollmentsResultOutput

    > Note: This function is named GetIamUserMfaEnrollments in the Go SDK.

    public static class GetIamUserMfaEnrollments 
{
    public static Task<GetIamUserMfaEnrollmentsResult> InvokeAsync(GetIamUserMfaEnrollmentsArgs args, InvokeOptions? opts = null)
    public static Output<GetIamUserMfaEnrollmentsResult> Invoke(GetIamUserMfaEnrollmentsInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetIamUserMfaEnrollmentsResult> getIamUserMfaEnrollments(GetIamUserMfaEnrollmentsArgs args, InvokeOptions options)
public static Output<GetIamUserMfaEnrollmentsResult> getIamUserMfaEnrollments(GetIamUserMfaEnrollmentsArgs args, InvokeOptions options)

    fn::invoke:
  function: ibm:index/getIamUserMfaEnrollments:getIamUserMfaEnrollments
  arguments:
    # arguments dictionary

    The following arguments are supported:

    AccountId string
    ID of the account.
    IamId string
    iam_id of the user. This user must be the member of the account.
    Id string
    The unique identifier of the iam_user_mfa_enrollments.
    AccountId string
    ID of the account.
    IamId string
    iam_id of the user. This user must be the member of the account.
    Id string
    The unique identifier of the iam_user_mfa_enrollments.
    accountId String
    ID of the account.
    iamId String
    iam_id of the user. This user must be the member of the account.
    id String
    The unique identifier of the iam_user_mfa_enrollments.
    accountId string
    ID of the account.
    iamId string
    iam_id of the user. This user must be the member of the account.
    id string
    The unique identifier of the iam_user_mfa_enrollments.
    account_id str
    ID of the account.
    iam_id str
    iam_id of the user. This user must be the member of the account.
    id str
    The unique identifier of the iam_user_mfa_enrollments.
    accountId String
    ID of the account.
    iamId String
    iam_id of the user. This user must be the member of the account.
    id String
    The unique identifier of the iam_user_mfa_enrollments.

    getIamUserMfaEnrollments Result

    The following output properties are available:

    AccountBasedMfas List<GetIamUserMfaEnrollmentsAccountBasedMfa>
    (List) Nested scheme for account_based_mfa:
    AccountId string
    EffectiveMfaType string
    (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
    IamId string
    Id string
    The unique identifier of the iam_user_mfa_enrollments.
    IdBasedMfas List<GetIamUserMfaEnrollmentsIdBasedMfa>
    (List) Nested scheme for id_based_mfa:
    AccountBasedMfas []GetIamUserMfaEnrollmentsAccountBasedMfa
    (List) Nested scheme for account_based_mfa:
    AccountId string
    EffectiveMfaType string
    (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
    IamId string
    Id string
    The unique identifier of the iam_user_mfa_enrollments.
    IdBasedMfas []GetIamUserMfaEnrollmentsIdBasedMfa
    (List) Nested scheme for id_based_mfa:
    accountBasedMfas List<GetIamUserMfaEnrollmentsAccountBasedMfa>
    (List) Nested scheme for account_based_mfa:
    accountId String
    effectiveMfaType String
    (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
    iamId String
    id String
    The unique identifier of the iam_user_mfa_enrollments.
    idBasedMfas List<GetIamUserMfaEnrollmentsIdBasedMfa>
    (List) Nested scheme for id_based_mfa:
    accountBasedMfas GetIamUserMfaEnrollmentsAccountBasedMfa[]
    (List) Nested scheme for account_based_mfa:
    accountId string
    effectiveMfaType string
    (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
    iamId string
    id string
    The unique identifier of the iam_user_mfa_enrollments.
    idBasedMfas GetIamUserMfaEnrollmentsIdBasedMfa[]
    (List) Nested scheme for id_based_mfa:
    account_based_mfas Sequence[GetIamUserMfaEnrollmentsAccountBasedMfa]
    (List) Nested scheme for account_based_mfa:
    account_id str
    effective_mfa_type str
    (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
    iam_id str
    id str
    The unique identifier of the iam_user_mfa_enrollments.
    id_based_mfas Sequence[GetIamUserMfaEnrollmentsIdBasedMfa]
    (List) Nested scheme for id_based_mfa:
    accountBasedMfas List<Property Map>
    (List) Nested scheme for account_based_mfa:
    accountId String
    effectiveMfaType String
    (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
    iamId String
    id String
    The unique identifier of the iam_user_mfa_enrollments.
    idBasedMfas List<Property Map>
    (List) Nested scheme for id_based_mfa:

    Supporting Types

    GetIamUserMfaEnrollmentsAccountBasedMfa

    Complies bool
    (Boolean) The enrollment complies to the effective requirement.
    SecurityQuestions List<GetIamUserMfaEnrollmentsAccountBasedMfaSecurityQuestion>
    (List) Nested scheme for security_questions:
    Totps List<GetIamUserMfaEnrollmentsAccountBasedMfaTotp>
    (List) Nested scheme for totp:
    Verisigns List<GetIamUserMfaEnrollmentsAccountBasedMfaVerisign>
    (List) Nested scheme for verisign:
    Complies bool
    (Boolean) The enrollment complies to the effective requirement.
    SecurityQuestions []GetIamUserMfaEnrollmentsAccountBasedMfaSecurityQuestion
    (List) Nested scheme for security_questions:
    Totps []GetIamUserMfaEnrollmentsAccountBasedMfaTotp
    (List) Nested scheme for totp:
    Verisigns []GetIamUserMfaEnrollmentsAccountBasedMfaVerisign
    (List) Nested scheme for verisign:
    complies Boolean
    (Boolean) The enrollment complies to the effective requirement.
    securityQuestions List<GetIamUserMfaEnrollmentsAccountBasedMfaSecurityQuestion>
    (List) Nested scheme for security_questions:
    totps List<GetIamUserMfaEnrollmentsAccountBasedMfaTotp>
    (List) Nested scheme for totp:
    verisigns List<GetIamUserMfaEnrollmentsAccountBasedMfaVerisign>
    (List) Nested scheme for verisign:
    complies boolean
    (Boolean) The enrollment complies to the effective requirement.
    securityQuestions GetIamUserMfaEnrollmentsAccountBasedMfaSecurityQuestion[]
    (List) Nested scheme for security_questions:
    totps GetIamUserMfaEnrollmentsAccountBasedMfaTotp[]
    (List) Nested scheme for totp:
    verisigns GetIamUserMfaEnrollmentsAccountBasedMfaVerisign[]
    (List) Nested scheme for verisign:
    complies bool
    (Boolean) The enrollment complies to the effective requirement.
    security_questions Sequence[GetIamUserMfaEnrollmentsAccountBasedMfaSecurityQuestion]
    (List) Nested scheme for security_questions:
    totps Sequence[GetIamUserMfaEnrollmentsAccountBasedMfaTotp]
    (List) Nested scheme for totp:
    verisigns Sequence[GetIamUserMfaEnrollmentsAccountBasedMfaVerisign]
    (List) Nested scheme for verisign:
    complies Boolean
    (Boolean) The enrollment complies to the effective requirement.
    securityQuestions List<Property Map>
    (List) Nested scheme for security_questions:
    totps List<Property Map>
    (List) Nested scheme for totp:
    verisigns List<Property Map>
    (List) Nested scheme for verisign:

    GetIamUserMfaEnrollmentsAccountBasedMfaSecurityQuestion

    Enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    Required bool
    (Boolean) Describes whether the enrollment type is required.
    Enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    Required bool
    (Boolean) Describes whether the enrollment type is required.
    enrolled Boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required Boolean
    (Boolean) Describes whether the enrollment type is required.
    enrolled boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required boolean
    (Boolean) Describes whether the enrollment type is required.
    enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    required bool
    (Boolean) Describes whether the enrollment type is required.
    enrolled Boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required Boolean
    (Boolean) Describes whether the enrollment type is required.

    GetIamUserMfaEnrollmentsAccountBasedMfaTotp

    Enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    Required bool
    (Boolean) Describes whether the enrollment type is required.
    Enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    Required bool
    (Boolean) Describes whether the enrollment type is required.
    enrolled Boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required Boolean
    (Boolean) Describes whether the enrollment type is required.
    enrolled boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required boolean
    (Boolean) Describes whether the enrollment type is required.
    enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    required bool
    (Boolean) Describes whether the enrollment type is required.
    enrolled Boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required Boolean
    (Boolean) Describes whether the enrollment type is required.

    GetIamUserMfaEnrollmentsAccountBasedMfaVerisign

    Enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    Required bool
    (Boolean) Describes whether the enrollment type is required.
    Enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    Required bool
    (Boolean) Describes whether the enrollment type is required.
    enrolled Boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required Boolean
    (Boolean) Describes whether the enrollment type is required.
    enrolled boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required boolean
    (Boolean) Describes whether the enrollment type is required.
    enrolled bool
    (Boolean) Describes whether the enrollment type is enrolled.
    required bool
    (Boolean) Describes whether the enrollment type is required.
    enrolled Boolean
    (Boolean) Describes whether the enrollment type is enrolled.
    required Boolean
    (Boolean) Describes whether the enrollment type is required.

    GetIamUserMfaEnrollmentsIdBasedMfa

    Complies bool
    (Boolean) The enrollment complies to the effective requirement.
    TraitAccountDefault string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    TraitEffective string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    TraitUserSpecific string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    Complies bool
    (Boolean) The enrollment complies to the effective requirement.
    TraitAccountDefault string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    TraitEffective string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    TraitUserSpecific string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    complies Boolean
    (Boolean) The enrollment complies to the effective requirement.
    traitAccountDefault String
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    traitEffective String
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    traitUserSpecific String
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    complies boolean
    (Boolean) The enrollment complies to the effective requirement.
    traitAccountDefault string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    traitEffective string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    traitUserSpecific string
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    complies bool
    (Boolean) The enrollment complies to the effective requirement.
    trait_account_default str
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    trait_effective str
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    trait_user_specific str
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    complies Boolean
    (Boolean) The enrollment complies to the effective requirement.
    traitAccountDefault String
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    traitEffective String
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.
    traitUserSpecific String
    (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.

    • Constraints: Allowable values are: NONE, NONE_NO_ROPC, TOTP, TOTP4ALL, LEVEL1, LEVEL2, LEVEL3.

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    ibm logo
    ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
    ibm-cloud/terraform-provider-ibm