Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Juniper Mist Provider
  4. API Docs
  5. org
  6. Nacidp
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

junipermist.org.Nacidp

junipermist logo
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

    This resource manages NAC IDPs (Identity Providers).

    The NAC IDPs are used to validate NAC client accounts against an IDP with OAuth2.0, LDAP/LDAPS, or a local Mist Edge.
    Mist Access Assurance can also retrieve group membership from the IDP, and use this information in the NAC Rules (junipermist.org.Nacrule resource)

    IMPORTANT:

    • Once created, the NAC IDP must be registered in the junipermist.org.Setting resource (full path: mist_org_setting.mist_nac.idps).
    • The associated REALMS are configured under mist_org_setting.mist_nac.idps
    • To make the IDP the Default IDP, set the IDP ID under mist_org_setting.mist_nac.default_idp_id

    For SAML IDP, the NAC IDP Metadata can be retrieved with the junipermist.org.getNacidpMetadata data source.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";

// OAuth with Azure Example
const idpAzure = new junipermist.org.Nacidp("idp_azure", {
    orgId: terraformTest.id,
    name: "idp_azure",
    idpType: "oauth",
    oauthCcClientId: "client_id",
    oauthCcClientSecret: "-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----",
    oauthRopcClientId: "ropc_client_id",
    oauthRopcClientSecret: "ropc_client_secret",
    oauthTenantId: "tenant_id",
    oauthType: "azure",
});
// Custom LDAP Example
const idpLdap = new junipermist.org.Nacidp("idp_ldap", {
    orgId: terraformTest.id,
    name: "idp_ldap",
    idpType: "ldap",
    ldapType: "custom",
    groupFilter: "memberOf",
    memberFilter: "memberOf",
    ldapUserFilter: "(mail=%s)",
    ldapServerHosts: [
        "ldap.mycorp.com",
        "1.2.3.4",
    ],
    ldapBaseDn: "DC=abc,DC=com",
    ldapBindDn: "CN=admin,CN=users,DC=abc,DC=com",
    ldapBindPassword: "secret!password",
    ldapCacerts: [
        `-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
-----END CERTIFICATE-----`,
        `-----BEGIN CERTIFICATE-----
BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----`,
    ],
    ldapClientCert: `-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
-----END CERTIFICATE-----`,
    ldapClientKey: "-----BEGIN PRI...",
});

    import pulumi
import pulumi_juniper_mist as junipermist

# OAuth with Azure Example
idp_azure = junipermist.org.Nacidp("idp_azure",
    org_id=terraform_test["id"],
    name="idp_azure",
    idp_type="oauth",
    oauth_cc_client_id="client_id",
    oauth_cc_client_secret="-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----",
    oauth_ropc_client_id="ropc_client_id",
    oauth_ropc_client_secret="ropc_client_secret",
    oauth_tenant_id="tenant_id",
    oauth_type="azure")
# Custom LDAP Example
idp_ldap = junipermist.org.Nacidp("idp_ldap",
    org_id=terraform_test["id"],
    name="idp_ldap",
    idp_type="ldap",
    ldap_type="custom",
    group_filter="memberOf",
    member_filter="memberOf",
    ldap_user_filter="(mail=%s)",
    ldap_server_hosts=[
        "ldap.mycorp.com",
        "1.2.3.4",
    ],
    ldap_base_dn="DC=abc,DC=com",
    ldap_bind_dn="CN=admin,CN=users,DC=abc,DC=com",
    ldap_bind_password="secret!password",
    ldap_cacerts=[
        """-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
-----END CERTIFICATE-----""",
        """-----BEGIN CERTIFICATE-----
BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----""",
    ],
    ldap_client_cert="""-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
-----END CERTIFICATE-----""",
    ldap_client_key="-----BEGIN PRI...")

    package main

import (
	"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// OAuth with Azure Example
		_, err := org.NewNacidp(ctx, "idp_azure", &org.NacidpArgs{
			OrgId:                 pulumi.Any(terraformTest.Id),
			Name:                  pulumi.String("idp_azure"),
			IdpType:               pulumi.String("oauth"),
			OauthCcClientId:       pulumi.String("client_id"),
			OauthCcClientSecret:   pulumi.String("-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----"),
			OauthRopcClientId:     pulumi.String("ropc_client_id"),
			OauthRopcClientSecret: pulumi.String("ropc_client_secret"),
			OauthTenantId:         pulumi.String("tenant_id"),
			OauthType:             pulumi.String("azure"),
		})
		if err != nil {
			return err
		}
		// Custom LDAP Example
		_, err = org.NewNacidp(ctx, "idp_ldap", &org.NacidpArgs{
			OrgId:          pulumi.Any(terraformTest.Id),
			Name:           pulumi.String("idp_ldap"),
			IdpType:        pulumi.String("ldap"),
			LdapType:       pulumi.String("custom"),
			GroupFilter:    pulumi.String("memberOf"),
			MemberFilter:   pulumi.String("memberOf"),
			LdapUserFilter: pulumi.String("(mail=%s)"),
			LdapServerHosts: pulumi.StringArray{
				pulumi.String("ldap.mycorp.com"),
				pulumi.String("1.2.3.4"),
			},
			LdapBaseDn:       pulumi.String("DC=abc,DC=com"),
			LdapBindDn:       pulumi.String("CN=admin,CN=users,DC=abc,DC=com"),
			LdapBindPassword: pulumi.String("secret!password"),
			LdapCacerts: pulumi.StringArray{
				pulumi.String("-----BEGIN CERTIFICATE-----\nMIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE\n-----END CERTIFICATE-----"),
				pulumi.String("-----BEGIN CERTIFICATE-----\nBhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----"),
			},
			LdapClientCert: pulumi.String("-----BEGIN CERTIFICATE-----\nMIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE\n-----END CERTIFICATE-----"),
			LdapClientKey:  pulumi.String("-----BEGIN PRI..."),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;

return await Deployment.RunAsync(() => 
{
    // OAuth with Azure Example
    var idpAzure = new JuniperMist.Org.Nacidp("idp_azure", new()
    {
        OrgId = terraformTest.Id,
        Name = "idp_azure",
        IdpType = "oauth",
        OauthCcClientId = "client_id",
        OauthCcClientSecret = "-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----",
        OauthRopcClientId = "ropc_client_id",
        OauthRopcClientSecret = "ropc_client_secret",
        OauthTenantId = "tenant_id",
        OauthType = "azure",
    });

    // Custom LDAP Example
    var idpLdap = new JuniperMist.Org.Nacidp("idp_ldap", new()
    {
        OrgId = terraformTest.Id,
        Name = "idp_ldap",
        IdpType = "ldap",
        LdapType = "custom",
        GroupFilter = "memberOf",
        MemberFilter = "memberOf",
        LdapUserFilter = "(mail=%s)",
        LdapServerHosts = new[]
        {
            "ldap.mycorp.com",
            "1.2.3.4",
        },
        LdapBaseDn = "DC=abc,DC=com",
        LdapBindDn = "CN=admin,CN=users,DC=abc,DC=com",
        LdapBindPassword = "secret!password",
        LdapCacerts = new[]
        {
            @"-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
-----END CERTIFICATE-----",
            @"-----BEGIN CERTIFICATE-----
BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----",
        },
        LdapClientCert = @"-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
-----END CERTIFICATE-----",
        LdapClientKey = "-----BEGIN PRI...",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Nacidp;
import com.pulumi.junipermist.org.NacidpArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // OAuth with Azure Example
        var idpAzure = new Nacidp("idpAzure", NacidpArgs.builder()
            .orgId(terraformTest.id())
            .name("idp_azure")
            .idpType("oauth")
            .oauthCcClientId("client_id")
            .oauthCcClientSecret("-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----")
            .oauthRopcClientId("ropc_client_id")
            .oauthRopcClientSecret("ropc_client_secret")
            .oauthTenantId("tenant_id")
            .oauthType("azure")
            .build());

        // Custom LDAP Example
        var idpLdap = new Nacidp("idpLdap", NacidpArgs.builder()
            .orgId(terraformTest.id())
            .name("idp_ldap")
            .idpType("ldap")
            .ldapType("custom")
            .groupFilter("memberOf")
            .memberFilter("memberOf")
            .ldapUserFilter("(mail=%s)")
            .ldapServerHosts(            
                "ldap.mycorp.com",
                "1.2.3.4")
            .ldapBaseDn("DC=abc,DC=com")
            .ldapBindDn("CN=admin,CN=users,DC=abc,DC=com")
            .ldapBindPassword("secret!password")
            .ldapCacerts(            
                """
-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
-----END CERTIFICATE-----                """,
                """
-----BEGIN CERTIFICATE-----
BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----                """)
            .ldapClientCert("""
-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
-----END CERTIFICATE-----            """)
            .ldapClientKey("-----BEGIN PRI...")
            .build());

    }
}

    resources:
  # OAuth with Azure Example
  idpAzure:
    type: junipermist:org:Nacidp
    name: idp_azure
    properties:
      orgId: ${terraformTest.id}
      name: idp_azure
      idpType: oauth
      oauthCcClientId: client_id
      oauthCcClientSecret: '-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----'
      oauthRopcClientId: ropc_client_id
      oauthRopcClientSecret: ropc_client_secret
      oauthTenantId: tenant_id
      oauthType: azure
  # Custom LDAP Example
  idpLdap:
    type: junipermist:org:Nacidp
    name: idp_ldap
    properties:
      orgId: ${terraformTest.id}
      name: idp_ldap
      idpType: ldap
      ldapType: custom
      groupFilter: memberOf
      memberFilter: memberOf
      ldapUserFilter: (mail=%s)
      ldapServerHosts:
        - ldap.mycorp.com
        - 1.2.3.4
      ldapBaseDn: DC=abc,DC=com
      ldapBindDn: CN=admin,CN=users,DC=abc,DC=com
      ldapBindPassword: secret!password
      ldapCacerts:
        - |-
          -----BEGIN CERTIFICATE-----
          MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
          -----END CERTIFICATE-----
        - |-
          -----BEGIN CERTIFICATE-----
          BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----
      ldapClientCert: |-
        -----BEGIN CERTIFICATE-----
        MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
        -----END CERTIFICATE-----
      ldapClientKey: '-----BEGIN PRI...'

    pulumi {
  required_providers {
    junipermist = {
      source = "pulumi/junipermist"
    }
  }
}

// OAuth with Azure Example
resource "junipermist_org_nacidp" "idp_azure" {
  org_id                   = terraformTest.id
  name                     = "idp_azure"
  idp_type                 = "oauth"
  oauth_cc_client_id       = "client_id"
  oauth_cc_client_secret   = "-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----"
  oauth_ropc_client_id     = "ropc_client_id"
  oauth_ropc_client_secret = "ropc_client_secret"
  oauth_tenant_id          = "tenant_id"
  oauth_type               = "azure"
}
// Custom LDAP Example
resource "junipermist_org_nacidp" "idp_ldap" {
  org_id             = terraformTest.id
  name               = "idp_ldap"
  idp_type           = "ldap"
  ldap_type          = "custom"
  group_filter       = "memberOf"
  member_filter      = "memberOf"
  ldap_user_filter   = "(mail=%s)"
  ldap_server_hosts  = ["ldap.mycorp.com", "1.2.3.4"]
  ldap_base_dn       = "DC=abc,DC=com"
  ldap_bind_dn       = "CN=admin,CN=users,DC=abc,DC=com"
  ldap_bind_password = "secret!password"
  ldap_cacerts       = ["-----BEGIN CERTIFICATE-----\nMIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE\n-----END CERTIFICATE-----", "-----BEGIN CERTIFICATE-----\nBhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----"]
  ldap_client_cert   = "-----BEGIN CERTIFICATE-----\nMIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE\n-----END CERTIFICATE-----"
  ldap_client_key    = "-----BEGIN PRI..."
}

    Create Nacidp Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Nacidp(name: string, args: NacidpArgs, opts?: CustomResourceOptions);
    @overload
def Nacidp(resource_name: str,
           args: NacidpArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Nacidp(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           org_id: Optional[str] = None,
           idp_type: Optional[str] = None,
           member_filter: Optional[str] = None,
           oauth_ropc_client_id: Optional[str] = None,
           ldap_bind_password: Optional[str] = None,
           ldap_cacerts: Optional[Sequence[str]] = None,
           ldap_client_cert: Optional[str] = None,
           ldap_client_key: Optional[str] = None,
           ldap_group_attr: Optional[str] = None,
           ldap_group_dn: Optional[str] = None,
           ldap_resolve_groups: Optional[bool] = None,
           ldap_server_hosts: Optional[Sequence[str]] = None,
           ldap_type: Optional[str] = None,
           ldap_user_filter: Optional[str] = None,
           group_filter: Optional[str] = None,
           name: Optional[str] = None,
           ldap_bind_dn: Optional[str] = None,
           oauth_discovery_url: Optional[str] = None,
           oauth_cc_client_id: Optional[str] = None,
           oauth_ping_identity_region: Optional[str] = None,
           oauth_provider_domain: Optional[str] = None,
           oauth_cc_client_secret: Optional[str] = None,
           oauth_ropc_client_secret: Optional[str] = None,
           oauth_tenant_id: Optional[str] = None,
           oauth_type: Optional[str] = None,
           openroaming_ssids: Optional[Sequence[str]] = None,
           openroaming_wba_client_cert: Optional[str] = None,
           openroaming_wba_client_key: Optional[str] = None,
           ldap_base_dn: Optional[str] = None,
           scim_enabled: Optional[bool] = None,
           scim_secret_token: Optional[str] = None)
    func NewNacidp(ctx *Context, name string, args NacidpArgs, opts ...ResourceOption) (*Nacidp, error)
    public Nacidp(string name, NacidpArgs args, CustomResourceOptions? opts = null)
    public Nacidp(String name, NacidpArgs args)
public Nacidp(String name, NacidpArgs args, CustomResourceOptions options)

    type: junipermist:org:Nacidp
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "junipermist_org_nacidp" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args NacidpArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NacidpArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NacidpArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NacidpArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NacidpArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var nacidpResource = new JuniperMist.Org.Nacidp("nacidpResource", new()
{
    OrgId = "string",
    IdpType = "string",
    MemberFilter = "string",
    OauthRopcClientId = "string",
    LdapBindPassword = "string",
    LdapCacerts = new[]
    {
        "string",
    },
    LdapClientCert = "string",
    LdapClientKey = "string",
    LdapGroupAttr = "string",
    LdapGroupDn = "string",
    LdapResolveGroups = false,
    LdapServerHosts = new[]
    {
        "string",
    },
    LdapType = "string",
    LdapUserFilter = "string",
    GroupFilter = "string",
    Name = "string",
    LdapBindDn = "string",
    OauthDiscoveryUrl = "string",
    OauthCcClientId = "string",
    OauthPingIdentityRegion = "string",
    OauthProviderDomain = "string",
    OauthCcClientSecret = "string",
    OauthRopcClientSecret = "string",
    OauthTenantId = "string",
    OauthType = "string",
    OpenroamingSsids = new[]
    {
        "string",
    },
    OpenroamingWbaClientCert = "string",
    OpenroamingWbaClientKey = "string",
    LdapBaseDn = "string",
    ScimEnabled = false,
    ScimSecretToken = "string",
});

    example, err := org.NewNacidp(ctx, "nacidpResource", &org.NacidpArgs{
	OrgId:             pulumi.String("string"),
	IdpType:           pulumi.String("string"),
	MemberFilter:      pulumi.String("string"),
	OauthRopcClientId: pulumi.String("string"),
	LdapBindPassword:  pulumi.String("string"),
	LdapCacerts: pulumi.StringArray{
		pulumi.String("string"),
	},
	LdapClientCert:    pulumi.String("string"),
	LdapClientKey:     pulumi.String("string"),
	LdapGroupAttr:     pulumi.String("string"),
	LdapGroupDn:       pulumi.String("string"),
	LdapResolveGroups: pulumi.Bool(false),
	LdapServerHosts: pulumi.StringArray{
		pulumi.String("string"),
	},
	LdapType:                pulumi.String("string"),
	LdapUserFilter:          pulumi.String("string"),
	GroupFilter:             pulumi.String("string"),
	Name:                    pulumi.String("string"),
	LdapBindDn:              pulumi.String("string"),
	OauthDiscoveryUrl:       pulumi.String("string"),
	OauthCcClientId:         pulumi.String("string"),
	OauthPingIdentityRegion: pulumi.String("string"),
	OauthProviderDomain:     pulumi.String("string"),
	OauthCcClientSecret:     pulumi.String("string"),
	OauthRopcClientSecret:   pulumi.String("string"),
	OauthTenantId:           pulumi.String("string"),
	OauthType:               pulumi.String("string"),
	OpenroamingSsids: pulumi.StringArray{
		pulumi.String("string"),
	},
	OpenroamingWbaClientCert: pulumi.String("string"),
	OpenroamingWbaClientKey:  pulumi.String("string"),
	LdapBaseDn:               pulumi.String("string"),
	ScimEnabled:              pulumi.Bool(false),
	ScimSecretToken:          pulumi.String("string"),
})

    resource "junipermist_org_nacidp" "nacidpResource" {
  lifecycle {
    create_before_destroy = true
  }
  org_id                      = "string"
  idp_type                    = "string"
  member_filter               = "string"
  oauth_ropc_client_id        = "string"
  ldap_bind_password          = "string"
  ldap_cacerts                = ["string"]
  ldap_client_cert            = "string"
  ldap_client_key             = "string"
  ldap_group_attr             = "string"
  ldap_group_dn               = "string"
  ldap_resolve_groups         = false
  ldap_server_hosts           = ["string"]
  ldap_type                   = "string"
  ldap_user_filter            = "string"
  group_filter                = "string"
  name                        = "string"
  ldap_bind_dn                = "string"
  oauth_discovery_url         = "string"
  oauth_cc_client_id          = "string"
  oauth_ping_identity_region  = "string"
  oauth_provider_domain       = "string"
  oauth_cc_client_secret      = "string"
  oauth_ropc_client_secret    = "string"
  oauth_tenant_id             = "string"
  oauth_type                  = "string"
  openroaming_ssids           = ["string"]
  openroaming_wba_client_cert = "string"
  openroaming_wba_client_key  = "string"
  ldap_base_dn                = "string"
  scim_enabled                = false
  scim_secret_token           = "string"
}

    var nacidpResource = new Nacidp("nacidpResource", NacidpArgs.builder()
    .orgId("string")
    .idpType("string")
    .memberFilter("string")
    .oauthRopcClientId("string")
    .ldapBindPassword("string")
    .ldapCacerts("string")
    .ldapClientCert("string")
    .ldapClientKey("string")
    .ldapGroupAttr("string")
    .ldapGroupDn("string")
    .ldapResolveGroups(false)
    .ldapServerHosts("string")
    .ldapType("string")
    .ldapUserFilter("string")
    .groupFilter("string")
    .name("string")
    .ldapBindDn("string")
    .oauthDiscoveryUrl("string")
    .oauthCcClientId("string")
    .oauthPingIdentityRegion("string")
    .oauthProviderDomain("string")
    .oauthCcClientSecret("string")
    .oauthRopcClientSecret("string")
    .oauthTenantId("string")
    .oauthType("string")
    .openroamingSsids("string")
    .openroamingWbaClientCert("string")
    .openroamingWbaClientKey("string")
    .ldapBaseDn("string")
    .scimEnabled(false)
    .scimSecretToken("string")
    .build());

    nacidp_resource = junipermist.org.Nacidp("nacidpResource",
    org_id="string",
    idp_type="string",
    member_filter="string",
    oauth_ropc_client_id="string",
    ldap_bind_password="string",
    ldap_cacerts=["string"],
    ldap_client_cert="string",
    ldap_client_key="string",
    ldap_group_attr="string",
    ldap_group_dn="string",
    ldap_resolve_groups=False,
    ldap_server_hosts=["string"],
    ldap_type="string",
    ldap_user_filter="string",
    group_filter="string",
    name="string",
    ldap_bind_dn="string",
    oauth_discovery_url="string",
    oauth_cc_client_id="string",
    oauth_ping_identity_region="string",
    oauth_provider_domain="string",
    oauth_cc_client_secret="string",
    oauth_ropc_client_secret="string",
    oauth_tenant_id="string",
    oauth_type="string",
    openroaming_ssids=["string"],
    openroaming_wba_client_cert="string",
    openroaming_wba_client_key="string",
    ldap_base_dn="string",
    scim_enabled=False,
    scim_secret_token="string")

    const nacidpResource = new junipermist.org.Nacidp("nacidpResource", {
    orgId: "string",
    idpType: "string",
    memberFilter: "string",
    oauthRopcClientId: "string",
    ldapBindPassword: "string",
    ldapCacerts: ["string"],
    ldapClientCert: "string",
    ldapClientKey: "string",
    ldapGroupAttr: "string",
    ldapGroupDn: "string",
    ldapResolveGroups: false,
    ldapServerHosts: ["string"],
    ldapType: "string",
    ldapUserFilter: "string",
    groupFilter: "string",
    name: "string",
    ldapBindDn: "string",
    oauthDiscoveryUrl: "string",
    oauthCcClientId: "string",
    oauthPingIdentityRegion: "string",
    oauthProviderDomain: "string",
    oauthCcClientSecret: "string",
    oauthRopcClientSecret: "string",
    oauthTenantId: "string",
    oauthType: "string",
    openroamingSsids: ["string"],
    openroamingWbaClientCert: "string",
    openroamingWbaClientKey: "string",
    ldapBaseDn: "string",
    scimEnabled: false,
    scimSecretToken: "string",
});

    type: junipermist:org:Nacidp
properties:
    groupFilter: string
    idpType: string
    ldapBaseDn: string
    ldapBindDn: string
    ldapBindPassword: string
    ldapCacerts:
        - string
    ldapClientCert: string
    ldapClientKey: string
    ldapGroupAttr: string
    ldapGroupDn: string
    ldapResolveGroups: false
    ldapServerHosts:
        - string
    ldapType: string
    ldapUserFilter: string
    memberFilter: string
    name: string
    oauthCcClientId: string
    oauthCcClientSecret: string
    oauthDiscoveryUrl: string
    oauthPingIdentityRegion: string
    oauthProviderDomain: string
    oauthRopcClientId: string
    oauthRopcClientSecret: string
    oauthTenantId: string
    oauthType: string
    openroamingSsids:
        - string
    openroamingWbaClientCert: string
    openroamingWbaClientKey: string
    orgId: string
    scimEnabled: false
    scimSecretToken: string

    Nacidp Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Nacidp resource accepts the following input properties:

    IdpType string
    enum: ldap, mxedgeProxy, oauth, openroaming
    OrgId string
    Owning organization identifier for this NAC IDP configuration
    GroupFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of group
    LdapBaseDn string
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    LdapBindDn string
    Required if idpType==ldap, the account used to authenticate against the LDAP
    LdapBindPassword string
    Required if idpType==ldap, the password used to authenticate against the LDAP
    LdapCacerts List<string>
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    LdapClientCert string
    If idpType==ldap, LDAPS Client certificate
    LdapClientKey string
    If idpType==ldap, Key for the ldapClientCert
    LdapGroupAttr string
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    LdapGroupDn string
    Group search base used for custom LDAP group lookup. If ldapType==custom
    LdapResolveGroups bool
    If idpType==ldap, whether to recursively resolve LDAP groups
    LdapServerHosts List<string>
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    LdapType string
    Provider template for LDAP SSO when idpType==ldap
    LdapUserFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of user
    MemberFilter string
    Required if ldapType==custom,LDAP filter that will identify the type of member
    Name string
    Display name of the NAC IDP configuration
    OauthCcClientId string
    Required if idpType==oauth, Client Credentials
    OauthCcClientSecret string
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    OauthDiscoveryUrl string
    OAuth discovery document URL used when idpType==oauth
    OauthPingIdentityRegion string
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    OauthProviderDomain string
    Provider domain for Okta OAuth SSO when oauthType==okta
    OauthRopcClientId string
    If idpType==oauth, ropc = Resource Owner Password Credentials
    OauthRopcClientSecret string
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    OauthTenantId string
    Required if idpType==oauth, oauthtenantid
    OauthType string
    Provider type for OAuth SSO when idpType==oauth
    OpenroamingSsids List<string>
    SSIDs that support OpenRoaming, used when idpType==openroaming
    OpenroamingWbaClientCert string
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    OpenroamingWbaClientKey string
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    ScimEnabled bool
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    ScimSecretToken string
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    IdpType string
    enum: ldap, mxedgeProxy, oauth, openroaming
    OrgId string
    Owning organization identifier for this NAC IDP configuration
    GroupFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of group
    LdapBaseDn string
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    LdapBindDn string
    Required if idpType==ldap, the account used to authenticate against the LDAP
    LdapBindPassword string
    Required if idpType==ldap, the password used to authenticate against the LDAP
    LdapCacerts []string
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    LdapClientCert string
    If idpType==ldap, LDAPS Client certificate
    LdapClientKey string
    If idpType==ldap, Key for the ldapClientCert
    LdapGroupAttr string
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    LdapGroupDn string
    Group search base used for custom LDAP group lookup. If ldapType==custom
    LdapResolveGroups bool
    If idpType==ldap, whether to recursively resolve LDAP groups
    LdapServerHosts []string
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    LdapType string
    Provider template for LDAP SSO when idpType==ldap
    LdapUserFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of user
    MemberFilter string
    Required if ldapType==custom,LDAP filter that will identify the type of member
    Name string
    Display name of the NAC IDP configuration
    OauthCcClientId string
    Required if idpType==oauth, Client Credentials
    OauthCcClientSecret string
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    OauthDiscoveryUrl string
    OAuth discovery document URL used when idpType==oauth
    OauthPingIdentityRegion string
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    OauthProviderDomain string
    Provider domain for Okta OAuth SSO when oauthType==okta
    OauthRopcClientId string
    If idpType==oauth, ropc = Resource Owner Password Credentials
    OauthRopcClientSecret string
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    OauthTenantId string
    Required if idpType==oauth, oauthtenantid
    OauthType string
    Provider type for OAuth SSO when idpType==oauth
    OpenroamingSsids []string
    SSIDs that support OpenRoaming, used when idpType==openroaming
    OpenroamingWbaClientCert string
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    OpenroamingWbaClientKey string
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    ScimEnabled bool
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    ScimSecretToken string
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    idp_type string
    enum: ldap, mxedgeProxy, oauth, openroaming
    org_id string
    Owning organization identifier for this NAC IDP configuration
    group_filter string
    Required if ldapType==custom, LDAP filter that will identify the type of group
    ldap_base_dn string
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldap_bind_dn string
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldap_bind_password string
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldap_cacerts list(string)
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldap_client_cert string
    If idpType==ldap, LDAPS Client certificate
    ldap_client_key string
    If idpType==ldap, Key for the ldapClientCert
    ldap_group_attr string
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldap_group_dn string
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldap_resolve_groups bool
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldap_server_hosts list(string)
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldap_type string
    Provider template for LDAP SSO when idpType==ldap
    ldap_user_filter string
    Required if ldapType==custom, LDAP filter that will identify the type of user
    member_filter string
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name string
    Display name of the NAC IDP configuration
    oauth_cc_client_id string
    Required if idpType==oauth, Client Credentials
    oauth_cc_client_secret string
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauth_discovery_url string
    OAuth discovery document URL used when idpType==oauth
    oauth_ping_identity_region string
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauth_provider_domain string
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauth_ropc_client_id string
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauth_ropc_client_secret string
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauth_tenant_id string
    Required if idpType==oauth, oauthtenantid
    oauth_type string
    Provider type for OAuth SSO when idpType==oauth
    openroaming_ssids list(string)
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroaming_wba_client_cert string
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroaming_wba_client_key string
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    scim_enabled bool
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scim_secret_token string
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    idpType String
    enum: ldap, mxedgeProxy, oauth, openroaming
    orgId String
    Owning organization identifier for this NAC IDP configuration
    groupFilter String
    Required if ldapType==custom, LDAP filter that will identify the type of group
    ldapBaseDn String
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldapBindDn String
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldapBindPassword String
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldapCacerts List<String>
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldapClientCert String
    If idpType==ldap, LDAPS Client certificate
    ldapClientKey String
    If idpType==ldap, Key for the ldapClientCert
    ldapGroupAttr String
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldapGroupDn String
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldapResolveGroups Boolean
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldapServerHosts List<String>
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldapType String
    Provider template for LDAP SSO when idpType==ldap
    ldapUserFilter String
    Required if ldapType==custom, LDAP filter that will identify the type of user
    memberFilter String
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name String
    Display name of the NAC IDP configuration
    oauthCcClientId String
    Required if idpType==oauth, Client Credentials
    oauthCcClientSecret String
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauthDiscoveryUrl String
    OAuth discovery document URL used when idpType==oauth
    oauthPingIdentityRegion String
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauthProviderDomain String
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauthRopcClientId String
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauthRopcClientSecret String
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauthTenantId String
    Required if idpType==oauth, oauthtenantid
    oauthType String
    Provider type for OAuth SSO when idpType==oauth
    openroamingSsids List<String>
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroamingWbaClientCert String
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroamingWbaClientKey String
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    scimEnabled Boolean
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scimSecretToken String
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    idpType string
    enum: ldap, mxedgeProxy, oauth, openroaming
    orgId string
    Owning organization identifier for this NAC IDP configuration
    groupFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of group
    ldapBaseDn string
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldapBindDn string
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldapBindPassword string
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldapCacerts string[]
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldapClientCert string
    If idpType==ldap, LDAPS Client certificate
    ldapClientKey string
    If idpType==ldap, Key for the ldapClientCert
    ldapGroupAttr string
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldapGroupDn string
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldapResolveGroups boolean
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldapServerHosts string[]
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldapType string
    Provider template for LDAP SSO when idpType==ldap
    ldapUserFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of user
    memberFilter string
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name string
    Display name of the NAC IDP configuration
    oauthCcClientId string
    Required if idpType==oauth, Client Credentials
    oauthCcClientSecret string
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauthDiscoveryUrl string
    OAuth discovery document URL used when idpType==oauth
    oauthPingIdentityRegion string
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauthProviderDomain string
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauthRopcClientId string
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauthRopcClientSecret string
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauthTenantId string
    Required if idpType==oauth, oauthtenantid
    oauthType string
    Provider type for OAuth SSO when idpType==oauth
    openroamingSsids string[]
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroamingWbaClientCert string
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroamingWbaClientKey string
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    scimEnabled boolean
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scimSecretToken string
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    idp_type str
    enum: ldap, mxedgeProxy, oauth, openroaming
    org_id str
    Owning organization identifier for this NAC IDP configuration
    group_filter str
    Required if ldapType==custom, LDAP filter that will identify the type of group
    ldap_base_dn str
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldap_bind_dn str
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldap_bind_password str
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldap_cacerts Sequence[str]
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldap_client_cert str
    If idpType==ldap, LDAPS Client certificate
    ldap_client_key str
    If idpType==ldap, Key for the ldapClientCert
    ldap_group_attr str
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldap_group_dn str
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldap_resolve_groups bool
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldap_server_hosts Sequence[str]
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldap_type str
    Provider template for LDAP SSO when idpType==ldap
    ldap_user_filter str
    Required if ldapType==custom, LDAP filter that will identify the type of user
    member_filter str
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name str
    Display name of the NAC IDP configuration
    oauth_cc_client_id str
    Required if idpType==oauth, Client Credentials
    oauth_cc_client_secret str
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauth_discovery_url str
    OAuth discovery document URL used when idpType==oauth
    oauth_ping_identity_region str
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauth_provider_domain str
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauth_ropc_client_id str
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauth_ropc_client_secret str
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauth_tenant_id str
    Required if idpType==oauth, oauthtenantid
    oauth_type str
    Provider type for OAuth SSO when idpType==oauth
    openroaming_ssids Sequence[str]
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroaming_wba_client_cert str
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroaming_wba_client_key str
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    scim_enabled bool
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scim_secret_token str
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    idpType String
    enum: ldap, mxedgeProxy, oauth, openroaming
    orgId String
    Owning organization identifier for this NAC IDP configuration
    groupFilter String
    Required if ldapType==custom, LDAP filter that will identify the type of group
    ldapBaseDn String
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldapBindDn String
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldapBindPassword String
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldapCacerts List<String>
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldapClientCert String
    If idpType==ldap, LDAPS Client certificate
    ldapClientKey String
    If idpType==ldap, Key for the ldapClientCert
    ldapGroupAttr String
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldapGroupDn String
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldapResolveGroups Boolean
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldapServerHosts List<String>
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldapType String
    Provider template for LDAP SSO when idpType==ldap
    ldapUserFilter String
    Required if ldapType==custom, LDAP filter that will identify the type of user
    memberFilter String
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name String
    Display name of the NAC IDP configuration
    oauthCcClientId String
    Required if idpType==oauth, Client Credentials
    oauthCcClientSecret String
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauthDiscoveryUrl String
    OAuth discovery document URL used when idpType==oauth
    oauthPingIdentityRegion String
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauthProviderDomain String
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauthRopcClientId String
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauthRopcClientSecret String
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauthTenantId String
    Required if idpType==oauth, oauthtenantid
    oauthType String
    Provider type for OAuth SSO when idpType==oauth
    openroamingSsids List<String>
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroamingWbaClientCert String
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroamingWbaClientKey String
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    scimEnabled Boolean
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scimSecretToken String
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Nacidp resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Nacidp Resource

    Get an existing Nacidp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NacidpState, opts?: CustomResourceOptions): Nacidp
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        group_filter: Optional[str] = None,
        idp_type: Optional[str] = None,
        ldap_base_dn: Optional[str] = None,
        ldap_bind_dn: Optional[str] = None,
        ldap_bind_password: Optional[str] = None,
        ldap_cacerts: Optional[Sequence[str]] = None,
        ldap_client_cert: Optional[str] = None,
        ldap_client_key: Optional[str] = None,
        ldap_group_attr: Optional[str] = None,
        ldap_group_dn: Optional[str] = None,
        ldap_resolve_groups: Optional[bool] = None,
        ldap_server_hosts: Optional[Sequence[str]] = None,
        ldap_type: Optional[str] = None,
        ldap_user_filter: Optional[str] = None,
        member_filter: Optional[str] = None,
        name: Optional[str] = None,
        oauth_cc_client_id: Optional[str] = None,
        oauth_cc_client_secret: Optional[str] = None,
        oauth_discovery_url: Optional[str] = None,
        oauth_ping_identity_region: Optional[str] = None,
        oauth_provider_domain: Optional[str] = None,
        oauth_ropc_client_id: Optional[str] = None,
        oauth_ropc_client_secret: Optional[str] = None,
        oauth_tenant_id: Optional[str] = None,
        oauth_type: Optional[str] = None,
        openroaming_ssids: Optional[Sequence[str]] = None,
        openroaming_wba_client_cert: Optional[str] = None,
        openroaming_wba_client_key: Optional[str] = None,
        org_id: Optional[str] = None,
        scim_enabled: Optional[bool] = None,
        scim_secret_token: Optional[str] = None) -> Nacidp
    func GetNacidp(ctx *Context, name string, id IDInput, state *NacidpState, opts ...ResourceOption) (*Nacidp, error)
    public static Nacidp Get(string name, Input<string> id, NacidpState? state, CustomResourceOptions? opts = null)
    public static Nacidp get(String name, Output<String> id, NacidpState state, CustomResourceOptions options)
    resources:  _:    type: junipermist:org:Nacidp    get:      id: ${id}
    import {
  to = junipermist_org_nacidp.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    GroupFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of group
    IdpType string
    enum: ldap, mxedgeProxy, oauth, openroaming
    LdapBaseDn string
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    LdapBindDn string
    Required if idpType==ldap, the account used to authenticate against the LDAP
    LdapBindPassword string
    Required if idpType==ldap, the password used to authenticate against the LDAP
    LdapCacerts List<string>
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    LdapClientCert string
    If idpType==ldap, LDAPS Client certificate
    LdapClientKey string
    If idpType==ldap, Key for the ldapClientCert
    LdapGroupAttr string
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    LdapGroupDn string
    Group search base used for custom LDAP group lookup. If ldapType==custom
    LdapResolveGroups bool
    If idpType==ldap, whether to recursively resolve LDAP groups
    LdapServerHosts List<string>
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    LdapType string
    Provider template for LDAP SSO when idpType==ldap
    LdapUserFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of user
    MemberFilter string
    Required if ldapType==custom,LDAP filter that will identify the type of member
    Name string
    Display name of the NAC IDP configuration
    OauthCcClientId string
    Required if idpType==oauth, Client Credentials
    OauthCcClientSecret string
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    OauthDiscoveryUrl string
    OAuth discovery document URL used when idpType==oauth
    OauthPingIdentityRegion string
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    OauthProviderDomain string
    Provider domain for Okta OAuth SSO when oauthType==okta
    OauthRopcClientId string
    If idpType==oauth, ropc = Resource Owner Password Credentials
    OauthRopcClientSecret string
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    OauthTenantId string
    Required if idpType==oauth, oauthtenantid
    OauthType string
    Provider type for OAuth SSO when idpType==oauth
    OpenroamingSsids List<string>
    SSIDs that support OpenRoaming, used when idpType==openroaming
    OpenroamingWbaClientCert string
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    OpenroamingWbaClientKey string
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    OrgId string
    Owning organization identifier for this NAC IDP configuration
    ScimEnabled bool
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    ScimSecretToken string
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    GroupFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of group
    IdpType string
    enum: ldap, mxedgeProxy, oauth, openroaming
    LdapBaseDn string
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    LdapBindDn string
    Required if idpType==ldap, the account used to authenticate against the LDAP
    LdapBindPassword string
    Required if idpType==ldap, the password used to authenticate against the LDAP
    LdapCacerts []string
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    LdapClientCert string
    If idpType==ldap, LDAPS Client certificate
    LdapClientKey string
    If idpType==ldap, Key for the ldapClientCert
    LdapGroupAttr string
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    LdapGroupDn string
    Group search base used for custom LDAP group lookup. If ldapType==custom
    LdapResolveGroups bool
    If idpType==ldap, whether to recursively resolve LDAP groups
    LdapServerHosts []string
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    LdapType string
    Provider template for LDAP SSO when idpType==ldap
    LdapUserFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of user
    MemberFilter string
    Required if ldapType==custom,LDAP filter that will identify the type of member
    Name string
    Display name of the NAC IDP configuration
    OauthCcClientId string
    Required if idpType==oauth, Client Credentials
    OauthCcClientSecret string
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    OauthDiscoveryUrl string
    OAuth discovery document URL used when idpType==oauth
    OauthPingIdentityRegion string
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    OauthProviderDomain string
    Provider domain for Okta OAuth SSO when oauthType==okta
    OauthRopcClientId string
    If idpType==oauth, ropc = Resource Owner Password Credentials
    OauthRopcClientSecret string
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    OauthTenantId string
    Required if idpType==oauth, oauthtenantid
    OauthType string
    Provider type for OAuth SSO when idpType==oauth
    OpenroamingSsids []string
    SSIDs that support OpenRoaming, used when idpType==openroaming
    OpenroamingWbaClientCert string
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    OpenroamingWbaClientKey string
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    OrgId string
    Owning organization identifier for this NAC IDP configuration
    ScimEnabled bool
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    ScimSecretToken string
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    group_filter string
    Required if ldapType==custom, LDAP filter that will identify the type of group
    idp_type string
    enum: ldap, mxedgeProxy, oauth, openroaming
    ldap_base_dn string
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldap_bind_dn string
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldap_bind_password string
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldap_cacerts list(string)
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldap_client_cert string
    If idpType==ldap, LDAPS Client certificate
    ldap_client_key string
    If idpType==ldap, Key for the ldapClientCert
    ldap_group_attr string
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldap_group_dn string
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldap_resolve_groups bool
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldap_server_hosts list(string)
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldap_type string
    Provider template for LDAP SSO when idpType==ldap
    ldap_user_filter string
    Required if ldapType==custom, LDAP filter that will identify the type of user
    member_filter string
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name string
    Display name of the NAC IDP configuration
    oauth_cc_client_id string
    Required if idpType==oauth, Client Credentials
    oauth_cc_client_secret string
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauth_discovery_url string
    OAuth discovery document URL used when idpType==oauth
    oauth_ping_identity_region string
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauth_provider_domain string
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauth_ropc_client_id string
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauth_ropc_client_secret string
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauth_tenant_id string
    Required if idpType==oauth, oauthtenantid
    oauth_type string
    Provider type for OAuth SSO when idpType==oauth
    openroaming_ssids list(string)
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroaming_wba_client_cert string
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroaming_wba_client_key string
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    org_id string
    Owning organization identifier for this NAC IDP configuration
    scim_enabled bool
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scim_secret_token string
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    groupFilter String
    Required if ldapType==custom, LDAP filter that will identify the type of group
    idpType String
    enum: ldap, mxedgeProxy, oauth, openroaming
    ldapBaseDn String
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldapBindDn String
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldapBindPassword String
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldapCacerts List<String>
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldapClientCert String
    If idpType==ldap, LDAPS Client certificate
    ldapClientKey String
    If idpType==ldap, Key for the ldapClientCert
    ldapGroupAttr String
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldapGroupDn String
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldapResolveGroups Boolean
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldapServerHosts List<String>
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldapType String
    Provider template for LDAP SSO when idpType==ldap
    ldapUserFilter String
    Required if ldapType==custom, LDAP filter that will identify the type of user
    memberFilter String
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name String
    Display name of the NAC IDP configuration
    oauthCcClientId String
    Required if idpType==oauth, Client Credentials
    oauthCcClientSecret String
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauthDiscoveryUrl String
    OAuth discovery document URL used when idpType==oauth
    oauthPingIdentityRegion String
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauthProviderDomain String
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauthRopcClientId String
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauthRopcClientSecret String
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauthTenantId String
    Required if idpType==oauth, oauthtenantid
    oauthType String
    Provider type for OAuth SSO when idpType==oauth
    openroamingSsids List<String>
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroamingWbaClientCert String
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroamingWbaClientKey String
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    orgId String
    Owning organization identifier for this NAC IDP configuration
    scimEnabled Boolean
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scimSecretToken String
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    groupFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of group
    idpType string
    enum: ldap, mxedgeProxy, oauth, openroaming
    ldapBaseDn string
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldapBindDn string
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldapBindPassword string
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldapCacerts string[]
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldapClientCert string
    If idpType==ldap, LDAPS Client certificate
    ldapClientKey string
    If idpType==ldap, Key for the ldapClientCert
    ldapGroupAttr string
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldapGroupDn string
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldapResolveGroups boolean
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldapServerHosts string[]
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldapType string
    Provider template for LDAP SSO when idpType==ldap
    ldapUserFilter string
    Required if ldapType==custom, LDAP filter that will identify the type of user
    memberFilter string
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name string
    Display name of the NAC IDP configuration
    oauthCcClientId string
    Required if idpType==oauth, Client Credentials
    oauthCcClientSecret string
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauthDiscoveryUrl string
    OAuth discovery document URL used when idpType==oauth
    oauthPingIdentityRegion string
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauthProviderDomain string
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauthRopcClientId string
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauthRopcClientSecret string
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauthTenantId string
    Required if idpType==oauth, oauthtenantid
    oauthType string
    Provider type for OAuth SSO when idpType==oauth
    openroamingSsids string[]
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroamingWbaClientCert string
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroamingWbaClientKey string
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    orgId string
    Owning organization identifier for this NAC IDP configuration
    scimEnabled boolean
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scimSecretToken string
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    group_filter str
    Required if ldapType==custom, LDAP filter that will identify the type of group
    idp_type str
    enum: ldap, mxedgeProxy, oauth, openroaming
    ldap_base_dn str
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldap_bind_dn str
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldap_bind_password str
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldap_cacerts Sequence[str]
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldap_client_cert str
    If idpType==ldap, LDAPS Client certificate
    ldap_client_key str
    If idpType==ldap, Key for the ldapClientCert
    ldap_group_attr str
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldap_group_dn str
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldap_resolve_groups bool
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldap_server_hosts Sequence[str]
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldap_type str
    Provider template for LDAP SSO when idpType==ldap
    ldap_user_filter str
    Required if ldapType==custom, LDAP filter that will identify the type of user
    member_filter str
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name str
    Display name of the NAC IDP configuration
    oauth_cc_client_id str
    Required if idpType==oauth, Client Credentials
    oauth_cc_client_secret str
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauth_discovery_url str
    OAuth discovery document URL used when idpType==oauth
    oauth_ping_identity_region str
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauth_provider_domain str
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauth_ropc_client_id str
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauth_ropc_client_secret str
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauth_tenant_id str
    Required if idpType==oauth, oauthtenantid
    oauth_type str
    Provider type for OAuth SSO when idpType==oauth
    openroaming_ssids Sequence[str]
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroaming_wba_client_cert str
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroaming_wba_client_key str
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    org_id str
    Owning organization identifier for this NAC IDP configuration
    scim_enabled bool
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scim_secret_token str
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP
    groupFilter String
    Required if ldapType==custom, LDAP filter that will identify the type of group
    idpType String
    enum: ldap, mxedgeProxy, oauth, openroaming
    ldapBaseDn String
    Required if idpType==ldap, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
    ldapBindDn String
    Required if idpType==ldap, the account used to authenticate against the LDAP
    ldapBindPassword String
    Required if idpType==ldap, the password used to authenticate against the LDAP
    ldapCacerts List<String>
    CA certificates used to validate LDAP or LDAPS server certificates. Required if idpType==ldap
    ldapClientCert String
    If idpType==ldap, LDAPS Client certificate
    ldapClientKey String
    If idpType==ldap, Key for the ldapClientCert
    ldapGroupAttr String
    Group attribute used to resolve LDAP memberships. If ldapType==custom
    ldapGroupDn String
    Group search base used for custom LDAP group lookup. If ldapType==custom
    ldapResolveGroups Boolean
    If idpType==ldap, whether to recursively resolve LDAP groups
    ldapServerHosts List<String>
    Server hostnames or IP addresses for LDAP or LDAPS when idpType==ldap
    ldapType String
    Provider template for LDAP SSO when idpType==ldap
    ldapUserFilter String
    Required if ldapType==custom, LDAP filter that will identify the type of user
    memberFilter String
    Required if ldapType==custom,LDAP filter that will identify the type of member
    name String
    Display name of the NAC IDP configuration
    oauthCcClientId String
    Required if idpType==oauth, Client Credentials
    oauthCcClientSecret String
    Required if idpType==oauth, oauthccclient_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
    oauthDiscoveryUrl String
    OAuth discovery document URL used when idpType==oauth
    oauthPingIdentityRegion String
    Ping Identity region for OAuth SSO when oauthType==pingIdentity
    oauthProviderDomain String
    Provider domain for Okta OAuth SSO when oauthType==okta
    oauthRopcClientId String
    If idpType==oauth, ropc = Resource Owner Password Credentials
    oauthRopcClientSecret String
    If oauthType==azure or oauthType==azure-gov. oauthropcclient_secret can be empty
    oauthTenantId String
    Required if idpType==oauth, oauthtenantid
    oauthType String
    Provider type for OAuth SSO when idpType==oauth
    openroamingSsids List<String>
    SSIDs that support OpenRoaming, used when idpType==openroaming
    openroamingWbaClientCert String
    Optional WBA-issued client certificate for OpenRoaming. If not provided, the default WBA-issued certificate for Juniper will be used.
    openroamingWbaClientKey String
    Optional WBA-issued client private key for OpenRoaming. If not provided, the default WBA-issued key for Juniper will be used.
    orgId String
    Owning organization identifier for this NAC IDP configuration
    scimEnabled Boolean
    If idpType==oauth, indicates if SCIM provisioning is enabled for the OAuth IDP
    scimSecretToken String
    If idpType==oauth, scimsecrettoken (auto-generated when not provided by caller and scimEnabled==true, empty string when scimEnabled==false) is used as the Bearer token in the Authorization header of SCIM provisioning requests by the IDP

    Import

    Using pulumi import, import junipermist.org.Nacidp with: Org PSK can be imported by specifying the orgId and the nacidpId

    $ pulumi import junipermist:org/nacidp:Nacidp idp_azure 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Viewing docs for Juniper Mist v0.11.2
    published on Saturday, Jul 11, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-junipermist

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial