Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Juniper Mist Provider
  4. API Docs
  5. org
  6. NacPortal
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

junipermist.org.NacPortal

junipermist logo
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

    This resource manages Org NAC Portals.

    NAC Portal configuration defines the authentication portal for network access control.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";

const guestPortal = new junipermist.org.NacPortal("guest_portal", {
    orgId: terraformTest.id,
    name: "Guest Portal",
    type: "marvis_client",
    accessType: "wireless+wired",
    ssid: "Guest-Network",
    certExpireTime: 365,
    eapType: "wpa3",
    enableTelemetry: true,
    expiryNotificationTime: 30,
    notifyExpiry: true,
    tos: "By using this network, you agree to our terms of service and privacy policy.",
    additionalCacerts: [`-----BEGIN CERTIFICATE-----
MIIC...certificate...content
-----END CERTIFICATE-----`],
    additionalNacServerNames: [
        "nac1.example.com",
        "nac2.example.com",
    ],
    portal: {
        auth: "multi",
        expire: 43200,
        externalPortalUrl: "https://portal.example.com/external",
        forceReconnect: false,
        forward: true,
        forwardUrl: "https://example.com/portal/welcome",
        maxNumDevices: 10,
        privacy: true,
    },
    sso: {
        idpCert: `-----BEGIN CERTIFICATE-----
MIIC...idp...cert
-----END CERTIFICATE-----`,
        idpSignAlgo: "sha384",
        idpSsoUrl: "https://idp.example.com/saml/sso",
        issuer: "https://idp.example.com",
        nameidFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
        useSsoRoleForCert: false,
        ssoRoleMatchings: [
            {
                match: "Administrator",
                assigned: "full-access",
            },
            {
                match: "Manager",
                assigned: "manager-access",
            },
            {
                match: "Employee",
                assigned: "employee-access",
            },
            {
                match: "Guest",
                assigned: "guest-access",
            },
        ],
    },
});

    import pulumi
import pulumi_juniper_mist as junipermist

guest_portal = junipermist.org.NacPortal("guest_portal",
    org_id=terraform_test["id"],
    name="Guest Portal",
    type="marvis_client",
    access_type="wireless+wired",
    ssid="Guest-Network",
    cert_expire_time=365,
    eap_type="wpa3",
    enable_telemetry=True,
    expiry_notification_time=30,
    notify_expiry=True,
    tos="By using this network, you agree to our terms of service and privacy policy.",
    additional_cacerts=["""-----BEGIN CERTIFICATE-----
MIIC...certificate...content
-----END CERTIFICATE-----"""],
    additional_nac_server_names=[
        "nac1.example.com",
        "nac2.example.com",
    ],
    portal={
        "auth": "multi",
        "expire": 43200,
        "external_portal_url": "https://portal.example.com/external",
        "force_reconnect": False,
        "forward": True,
        "forward_url": "https://example.com/portal/welcome",
        "max_num_devices": 10,
        "privacy": True,
    },
    sso={
        "idp_cert": """-----BEGIN CERTIFICATE-----
MIIC...idp...cert
-----END CERTIFICATE-----""",
        "idp_sign_algo": "sha384",
        "idp_sso_url": "https://idp.example.com/saml/sso",
        "issuer": "https://idp.example.com",
        "nameid_format": "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
        "use_sso_role_for_cert": False,
        "sso_role_matchings": [
            {
                "match": "Administrator",
                "assigned": "full-access",
            },
            {
                "match": "Manager",
                "assigned": "manager-access",
            },
            {
                "match": "Employee",
                "assigned": "employee-access",
            },
            {
                "match": "Guest",
                "assigned": "guest-access",
            },
        ],
    })

    package main

import (
	"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := org.NewNacPortal(ctx, "guest_portal", &org.NacPortalArgs{
			OrgId:                  pulumi.Any(terraformTest.Id),
			Name:                   pulumi.String("Guest Portal"),
			Type:                   pulumi.String("marvis_client"),
			AccessType:             pulumi.String("wireless+wired"),
			Ssid:                   pulumi.String("Guest-Network"),
			CertExpireTime:         pulumi.Int(365),
			EapType:                pulumi.String("wpa3"),
			EnableTelemetry:        pulumi.Bool(true),
			ExpiryNotificationTime: pulumi.Int(30),
			NotifyExpiry:           pulumi.Bool(true),
			Tos:                    pulumi.String("By using this network, you agree to our terms of service and privacy policy."),
			AdditionalCacerts: pulumi.StringArray{
				pulumi.String("-----BEGIN CERTIFICATE-----\nMIIC...certificate...content\n-----END CERTIFICATE-----"),
			},
			AdditionalNacServerNames: pulumi.StringArray{
				pulumi.String("nac1.example.com"),
				pulumi.String("nac2.example.com"),
			},
			Portal: &org.NacPortalPortalArgs{
				Auth:              pulumi.String("multi"),
				Expire:            pulumi.Int(43200),
				ExternalPortalUrl: pulumi.String("https://portal.example.com/external"),
				ForceReconnect:    pulumi.Bool(false),
				Forward:           pulumi.Bool(true),
				ForwardUrl:        pulumi.String("https://example.com/portal/welcome"),
				MaxNumDevices:     pulumi.Int(10),
				Privacy:           pulumi.Bool(true),
			},
			Sso: &org.NacPortalSsoArgs{
				IdpCert:           pulumi.String("-----BEGIN CERTIFICATE-----\nMIIC...idp...cert\n-----END CERTIFICATE-----"),
				IdpSignAlgo:       pulumi.String("sha384"),
				IdpSsoUrl:         pulumi.String("https://idp.example.com/saml/sso"),
				Issuer:            pulumi.String("https://idp.example.com"),
				NameidFormat:      pulumi.String("urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"),
				UseSsoRoleForCert: pulumi.Bool(false),
				SsoRoleMatchings: org.NacPortalSsoSsoRoleMatchingArray{
					&org.NacPortalSsoSsoRoleMatchingArgs{
						Match:    pulumi.String("Administrator"),
						Assigned: pulumi.String("full-access"),
					},
					&org.NacPortalSsoSsoRoleMatchingArgs{
						Match:    pulumi.String("Manager"),
						Assigned: pulumi.String("manager-access"),
					},
					&org.NacPortalSsoSsoRoleMatchingArgs{
						Match:    pulumi.String("Employee"),
						Assigned: pulumi.String("employee-access"),
					},
					&org.NacPortalSsoSsoRoleMatchingArgs{
						Match:    pulumi.String("Guest"),
						Assigned: pulumi.String("guest-access"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;

return await Deployment.RunAsync(() => 
{
    var guestPortal = new JuniperMist.Org.NacPortal("guest_portal", new()
    {
        OrgId = terraformTest.Id,
        Name = "Guest Portal",
        Type = "marvis_client",
        AccessType = "wireless+wired",
        Ssid = "Guest-Network",
        CertExpireTime = 365,
        EapType = "wpa3",
        EnableTelemetry = true,
        ExpiryNotificationTime = 30,
        NotifyExpiry = true,
        Tos = "By using this network, you agree to our terms of service and privacy policy.",
        AdditionalCacerts = new[]
        {
            @"-----BEGIN CERTIFICATE-----
MIIC...certificate...content
-----END CERTIFICATE-----",
        },
        AdditionalNacServerNames = new[]
        {
            "nac1.example.com",
            "nac2.example.com",
        },
        Portal = new JuniperMist.Org.Inputs.NacPortalPortalArgs
        {
            Auth = "multi",
            Expire = 43200,
            ExternalPortalUrl = "https://portal.example.com/external",
            ForceReconnect = false,
            Forward = true,
            ForwardUrl = "https://example.com/portal/welcome",
            MaxNumDevices = 10,
            Privacy = true,
        },
        Sso = new JuniperMist.Org.Inputs.NacPortalSsoArgs
        {
            IdpCert = @"-----BEGIN CERTIFICATE-----
MIIC...idp...cert
-----END CERTIFICATE-----",
            IdpSignAlgo = "sha384",
            IdpSsoUrl = "https://idp.example.com/saml/sso",
            Issuer = "https://idp.example.com",
            NameidFormat = "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
            UseSsoRoleForCert = false,
            SsoRoleMatchings = new[]
            {
                new JuniperMist.Org.Inputs.NacPortalSsoSsoRoleMatchingArgs
                {
                    Match = "Administrator",
                    Assigned = "full-access",
                },
                new JuniperMist.Org.Inputs.NacPortalSsoSsoRoleMatchingArgs
                {
                    Match = "Manager",
                    Assigned = "manager-access",
                },
                new JuniperMist.Org.Inputs.NacPortalSsoSsoRoleMatchingArgs
                {
                    Match = "Employee",
                    Assigned = "employee-access",
                },
                new JuniperMist.Org.Inputs.NacPortalSsoSsoRoleMatchingArgs
                {
                    Match = "Guest",
                    Assigned = "guest-access",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.NacPortal;
import com.pulumi.junipermist.org.NacPortalArgs;
import com.pulumi.junipermist.org.inputs.NacPortalPortalArgs;
import com.pulumi.junipermist.org.inputs.NacPortalSsoArgs;
import com.pulumi.junipermist.org.inputs.NacPortalSsoSsoRoleMatchingArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var guestPortal = new NacPortal("guestPortal", NacPortalArgs.builder()
            .orgId(terraformTest.id())
            .name("Guest Portal")
            .type("marvis_client")
            .accessType("wireless+wired")
            .ssid("Guest-Network")
            .certExpireTime(365)
            .eapType("wpa3")
            .enableTelemetry(true)
            .expiryNotificationTime(30)
            .notifyExpiry(true)
            .tos("By using this network, you agree to our terms of service and privacy policy.")
            .additionalCacerts("""
-----BEGIN CERTIFICATE-----
MIIC...certificate...content
-----END CERTIFICATE-----            """)
            .additionalNacServerNames(            
                "nac1.example.com",
                "nac2.example.com")
            .portal(NacPortalPortalArgs.builder()
                .auth("multi")
                .expire(43200)
                .externalPortalUrl("https://portal.example.com/external")
                .forceReconnect(false)
                .forward(true)
                .forwardUrl("https://example.com/portal/welcome")
                .maxNumDevices(10)
                .privacy(true)
                .build())
            .sso(NacPortalSsoArgs.builder()
                .idpCert("""
-----BEGIN CERTIFICATE-----
MIIC...idp...cert
-----END CERTIFICATE-----                """)
                .idpSignAlgo("sha384")
                .idpSsoUrl("https://idp.example.com/saml/sso")
                .issuer("https://idp.example.com")
                .nameidFormat("urn:oasis:names:tc:SAML:2.0:nameid-format:persistent")
                .useSsoRoleForCert(false)
                .ssoRoleMatchings(                
                    NacPortalSsoSsoRoleMatchingArgs.builder()
                        .match("Administrator")
                        .assigned("full-access")
                        .build(),
                    NacPortalSsoSsoRoleMatchingArgs.builder()
                        .match("Manager")
                        .assigned("manager-access")
                        .build(),
                    NacPortalSsoSsoRoleMatchingArgs.builder()
                        .match("Employee")
                        .assigned("employee-access")
                        .build(),
                    NacPortalSsoSsoRoleMatchingArgs.builder()
                        .match("Guest")
                        .assigned("guest-access")
                        .build())
                .build())
            .build());

    }
}

    resources:
  guestPortal:
    type: junipermist:org:NacPortal
    name: guest_portal
    properties:
      orgId: ${terraformTest.id}
      name: Guest Portal
      type: marvis_client
      accessType: wireless+wired
      ssid: Guest-Network
      certExpireTime: 365
      eapType: wpa3
      enableTelemetry: true
      expiryNotificationTime: 30
      notifyExpiry: true
      tos: By using this network, you agree to our terms of service and privacy policy.
      additionalCacerts:
        - |-
          -----BEGIN CERTIFICATE-----
          MIIC...certificate...content
          -----END CERTIFICATE-----
      additionalNacServerNames:
        - nac1.example.com
        - nac2.example.com
      portal:
        auth: multi
        expire: 43200
        externalPortalUrl: https://portal.example.com/external
        forceReconnect: false
        forward: true
        forwardUrl: https://example.com/portal/welcome
        maxNumDevices: 10
        privacy: true
      sso:
        idpCert: |-
          -----BEGIN CERTIFICATE-----
          MIIC...idp...cert
          -----END CERTIFICATE-----
        idpSignAlgo: sha384
        idpSsoUrl: https://idp.example.com/saml/sso
        issuer: https://idp.example.com
        nameidFormat: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
        useSsoRoleForCert: false
        ssoRoleMatchings:
          - match: Administrator
            assigned: full-access
          - match: Manager
            assigned: manager-access
          - match: Employee
            assigned: employee-access
          - match: Guest
            assigned: guest-access

    pulumi {
  required_providers {
    junipermist = {
      source = "pulumi/junipermist"
    }
  }
}

resource "junipermist_org_nacportal" "guest_portal" {
  org_id                      = terraformTest.id
  name                        = "Guest Portal"
  type                        = "marvis_client"
  access_type                 = "wireless+wired"
  ssid                        = "Guest-Network"
  cert_expire_time            = 365
  eap_type                    = "wpa3"
  enable_telemetry            = true
  expiry_notification_time    = 30
  notify_expiry               = true
  tos                         = "By using this network, you agree to our terms of service and privacy policy."
  additional_cacerts          = ["-----BEGIN CERTIFICATE-----\nMIIC...certificate...content\n-----END CERTIFICATE-----"]
  additional_nac_server_names = ["nac1.example.com", "nac2.example.com"]
  portal = {
    auth                = "multi"
    expire              = 43200
    external_portal_url = "https://portal.example.com/external"
    force_reconnect     = false
    forward             = true
    forward_url         = "https://example.com/portal/welcome"
    max_num_devices     = 10
    privacy             = true
  }
  sso = {
    idp_cert              = "-----BEGIN CERTIFICATE-----\nMIIC...idp...cert\n-----END CERTIFICATE-----"
    idp_sign_algo         = "sha384"
    idp_sso_url           = "https://idp.example.com/saml/sso"
    issuer                = "https://idp.example.com"
    nameid_format         = "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
    use_sso_role_for_cert = false
    sso_role_matchings = [{
      "match"    = "Administrator"
      "assigned" = "full-access"
      }, {
      "match"    = "Manager"
      "assigned" = "manager-access"
      }, {
      "match"    = "Employee"
      "assigned" = "employee-access"
      }, {
      "match"    = "Guest"
      "assigned" = "guest-access"
    }]
  }
}

    Create NacPortal Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NacPortal(name: string, args: NacPortalArgs, opts?: CustomResourceOptions);
    @overload
def NacPortal(resource_name: str,
              args: NacPortalArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def NacPortal(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              org_id: Optional[str] = None,
              cert_expire_time: Optional[int] = None,
              notify_expiry: Optional[bool] = None,
              access_type: Optional[str] = None,
              eap_type: Optional[str] = None,
              enable_telemetry: Optional[bool] = None,
              expiry_notification_time: Optional[int] = None,
              name: Optional[str] = None,
              additional_nac_server_names: Optional[Sequence[str]] = None,
              additional_cacerts: Optional[Sequence[str]] = None,
              portal: Optional[NacPortalPortalArgs] = None,
              ssid: Optional[str] = None,
              sso: Optional[NacPortalSsoArgs] = None,
              tos: Optional[str] = None,
              type: Optional[str] = None)
    func NewNacPortal(ctx *Context, name string, args NacPortalArgs, opts ...ResourceOption) (*NacPortal, error)
    public NacPortal(string name, NacPortalArgs args, CustomResourceOptions? opts = null)
    public NacPortal(String name, NacPortalArgs args)
public NacPortal(String name, NacPortalArgs args, CustomResourceOptions options)

    type: junipermist:org:NacPortal
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "junipermist_org_nac_portal" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args NacPortalArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NacPortalArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NacPortalArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NacPortalArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NacPortalArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var nacPortalResource = new JuniperMist.Org.NacPortal("nacPortalResource", new()
{
    OrgId = "string",
    CertExpireTime = 0,
    NotifyExpiry = false,
    AccessType = "string",
    EapType = "string",
    EnableTelemetry = false,
    ExpiryNotificationTime = 0,
    Name = "string",
    AdditionalNacServerNames = new[]
    {
        "string",
    },
    AdditionalCacerts = new[]
    {
        "string",
    },
    Portal = new JuniperMist.Org.Inputs.NacPortalPortalArgs
    {
        Auth = "string",
        Expire = 0,
        ExternalPortalUrl = "string",
        ForceReconnect = false,
        Forward = false,
        ForwardUrl = "string",
        MaxNumDevices = 0,
        Privacy = false,
    },
    Ssid = "string",
    Sso = new JuniperMist.Org.Inputs.NacPortalSsoArgs
    {
        IdpCert = "string",
        IdpSignAlgo = "string",
        IdpSsoUrl = "string",
        Issuer = "string",
        NameidFormat = "string",
        SsoRoleMatchings = new[]
        {
            new JuniperMist.Org.Inputs.NacPortalSsoSsoRoleMatchingArgs
            {
                Assigned = "string",
                Match = "string",
            },
        },
        UseSsoRoleForCert = false,
    },
    Tos = "string",
    Type = "string",
});

    example, err := org.NewNacPortal(ctx, "nacPortalResource", &org.NacPortalArgs{
	OrgId:                  pulumi.String("string"),
	CertExpireTime:         pulumi.Int(0),
	NotifyExpiry:           pulumi.Bool(false),
	AccessType:             pulumi.String("string"),
	EapType:                pulumi.String("string"),
	EnableTelemetry:        pulumi.Bool(false),
	ExpiryNotificationTime: pulumi.Int(0),
	Name:                   pulumi.String("string"),
	AdditionalNacServerNames: pulumi.StringArray{
		pulumi.String("string"),
	},
	AdditionalCacerts: pulumi.StringArray{
		pulumi.String("string"),
	},
	Portal: &org.NacPortalPortalArgs{
		Auth:              pulumi.String("string"),
		Expire:            pulumi.Int(0),
		ExternalPortalUrl: pulumi.String("string"),
		ForceReconnect:    pulumi.Bool(false),
		Forward:           pulumi.Bool(false),
		ForwardUrl:        pulumi.String("string"),
		MaxNumDevices:     pulumi.Int(0),
		Privacy:           pulumi.Bool(false),
	},
	Ssid: pulumi.String("string"),
	Sso: &org.NacPortalSsoArgs{
		IdpCert:      pulumi.String("string"),
		IdpSignAlgo:  pulumi.String("string"),
		IdpSsoUrl:    pulumi.String("string"),
		Issuer:       pulumi.String("string"),
		NameidFormat: pulumi.String("string"),
		SsoRoleMatchings: org.NacPortalSsoSsoRoleMatchingArray{
			&org.NacPortalSsoSsoRoleMatchingArgs{
				Assigned: pulumi.String("string"),
				Match:    pulumi.String("string"),
			},
		},
		UseSsoRoleForCert: pulumi.Bool(false),
	},
	Tos:  pulumi.String("string"),
	Type: pulumi.String("string"),
})

    resource "junipermist_org_nac_portal" "nacPortalResource" {
  lifecycle {
    create_before_destroy = true
  }
  org_id                      = "string"
  cert_expire_time            = 0
  notify_expiry               = false
  access_type                 = "string"
  eap_type                    = "string"
  enable_telemetry            = false
  expiry_notification_time    = 0
  name                        = "string"
  additional_nac_server_names = ["string"]
  additional_cacerts          = ["string"]
  portal = {
    auth                = "string"
    expire              = 0
    external_portal_url = "string"
    force_reconnect     = false
    forward             = false
    forward_url         = "string"
    max_num_devices     = 0
    privacy             = false
  }
  ssid = "string"
  sso = {
    idp_cert      = "string"
    idp_sign_algo = "string"
    idp_sso_url   = "string"
    issuer        = "string"
    nameid_format = "string"
    sso_role_matchings = [{
      assigned = "string"
      match    = "string"
    }]
    use_sso_role_for_cert = false
  }
  tos  = "string"
  type = "string"
}

    var nacPortalResource = new NacPortal("nacPortalResource", NacPortalArgs.builder()
    .orgId("string")
    .certExpireTime(0)
    .notifyExpiry(false)
    .accessType("string")
    .eapType("string")
    .enableTelemetry(false)
    .expiryNotificationTime(0)
    .name("string")
    .additionalNacServerNames("string")
    .additionalCacerts("string")
    .portal(NacPortalPortalArgs.builder()
        .auth("string")
        .expire(0)
        .externalPortalUrl("string")
        .forceReconnect(false)
        .forward(false)
        .forwardUrl("string")
        .maxNumDevices(0)
        .privacy(false)
        .build())
    .ssid("string")
    .sso(NacPortalSsoArgs.builder()
        .idpCert("string")
        .idpSignAlgo("string")
        .idpSsoUrl("string")
        .issuer("string")
        .nameidFormat("string")
        .ssoRoleMatchings(NacPortalSsoSsoRoleMatchingArgs.builder()
            .assigned("string")
            .match("string")
            .build())
        .useSsoRoleForCert(false)
        .build())
    .tos("string")
    .type("string")
    .build());

    nac_portal_resource = junipermist.org.NacPortal("nacPortalResource",
    org_id="string",
    cert_expire_time=0,
    notify_expiry=False,
    access_type="string",
    eap_type="string",
    enable_telemetry=False,
    expiry_notification_time=0,
    name="string",
    additional_nac_server_names=["string"],
    additional_cacerts=["string"],
    portal={
        "auth": "string",
        "expire": 0,
        "external_portal_url": "string",
        "force_reconnect": False,
        "forward": False,
        "forward_url": "string",
        "max_num_devices": 0,
        "privacy": False,
    },
    ssid="string",
    sso={
        "idp_cert": "string",
        "idp_sign_algo": "string",
        "idp_sso_url": "string",
        "issuer": "string",
        "nameid_format": "string",
        "sso_role_matchings": [{
            "assigned": "string",
            "match": "string",
        }],
        "use_sso_role_for_cert": False,
    },
    tos="string",
    type="string")

    const nacPortalResource = new junipermist.org.NacPortal("nacPortalResource", {
    orgId: "string",
    certExpireTime: 0,
    notifyExpiry: false,
    accessType: "string",
    eapType: "string",
    enableTelemetry: false,
    expiryNotificationTime: 0,
    name: "string",
    additionalNacServerNames: ["string"],
    additionalCacerts: ["string"],
    portal: {
        auth: "string",
        expire: 0,
        externalPortalUrl: "string",
        forceReconnect: false,
        forward: false,
        forwardUrl: "string",
        maxNumDevices: 0,
        privacy: false,
    },
    ssid: "string",
    sso: {
        idpCert: "string",
        idpSignAlgo: "string",
        idpSsoUrl: "string",
        issuer: "string",
        nameidFormat: "string",
        ssoRoleMatchings: [{
            assigned: "string",
            match: "string",
        }],
        useSsoRoleForCert: false,
    },
    tos: "string",
    type: "string",
});

    type: junipermist:org:NacPortal
properties:
    accessType: string
    additionalCacerts:
        - string
    additionalNacServerNames:
        - string
    certExpireTime: 0
    eapType: string
    enableTelemetry: false
    expiryNotificationTime: 0
    name: string
    notifyExpiry: false
    orgId: string
    portal:
        auth: string
        expire: 0
        externalPortalUrl: string
        forceReconnect: false
        forward: false
        forwardUrl: string
        maxNumDevices: 0
        privacy: false
    ssid: string
    sso:
        idpCert: string
        idpSignAlgo: string
        idpSsoUrl: string
        issuer: string
        nameidFormat: string
        ssoRoleMatchings:
            - assigned: string
              match: string
        useSsoRoleForCert: false
    tos: string
    type: string

    NacPortal Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The NacPortal resource accepts the following input properties:

    OrgId string
    Organization that owns this NAC portal
    AccessType string
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    AdditionalCacerts List<string>
    Additional CA certificates trusted during NAC portal certificate onboarding
    AdditionalNacServerNames List<string>
    Optional list of additional NAC server names
    CertExpireTime int
    Validity duration for portal-issued client certificates, in days
    EapType string
    EAP mode used when onboarding wireless clients through the NAC portal
    EnableTelemetry bool
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    ExpiryNotificationTime int
    Number of days before certificate expiration to start sending reminder notifications
    Name string
    Human-readable name of the NAC portal
    NotifyExpiry bool
    Whether to send reminder notifications before portal-issued certificates expire
    Portal Pulumi.JuniperMist.Org.Inputs.NacPortalPortal
    Guest portal settings used when type==guestPortal
    Ssid string
    Wireless SSID associated with the NAC portal
    Sso Pulumi.JuniperMist.Org.Inputs.NacPortalSso
    SAML SSO settings for NAC portal authentication and role mapping
    Tos string
    Terms of service text shown in the NAC portal
    Type string
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    OrgId string
    Organization that owns this NAC portal
    AccessType string
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    AdditionalCacerts []string
    Additional CA certificates trusted during NAC portal certificate onboarding
    AdditionalNacServerNames []string
    Optional list of additional NAC server names
    CertExpireTime int
    Validity duration for portal-issued client certificates, in days
    EapType string
    EAP mode used when onboarding wireless clients through the NAC portal
    EnableTelemetry bool
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    ExpiryNotificationTime int
    Number of days before certificate expiration to start sending reminder notifications
    Name string
    Human-readable name of the NAC portal
    NotifyExpiry bool
    Whether to send reminder notifications before portal-issued certificates expire
    Portal NacPortalPortalArgs
    Guest portal settings used when type==guestPortal
    Ssid string
    Wireless SSID associated with the NAC portal
    Sso NacPortalSsoArgs
    SAML SSO settings for NAC portal authentication and role mapping
    Tos string
    Terms of service text shown in the NAC portal
    Type string
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    org_id string
    Organization that owns this NAC portal
    access_type string
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additional_cacerts list(string)
    Additional CA certificates trusted during NAC portal certificate onboarding
    additional_nac_server_names list(string)
    Optional list of additional NAC server names
    cert_expire_time number
    Validity duration for portal-issued client certificates, in days
    eap_type string
    EAP mode used when onboarding wireless clients through the NAC portal
    enable_telemetry bool
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiry_notification_time number
    Number of days before certificate expiration to start sending reminder notifications
    name string
    Human-readable name of the NAC portal
    notify_expiry bool
    Whether to send reminder notifications before portal-issued certificates expire
    portal object
    Guest portal settings used when type==guestPortal
    ssid string
    Wireless SSID associated with the NAC portal
    sso object
    SAML SSO settings for NAC portal authentication and role mapping
    tos string
    Terms of service text shown in the NAC portal
    type string
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    orgId String
    Organization that owns this NAC portal
    accessType String
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additionalCacerts List<String>
    Additional CA certificates trusted during NAC portal certificate onboarding
    additionalNacServerNames List<String>
    Optional list of additional NAC server names
    certExpireTime Integer
    Validity duration for portal-issued client certificates, in days
    eapType String
    EAP mode used when onboarding wireless clients through the NAC portal
    enableTelemetry Boolean
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiryNotificationTime Integer
    Number of days before certificate expiration to start sending reminder notifications
    name String
    Human-readable name of the NAC portal
    notifyExpiry Boolean
    Whether to send reminder notifications before portal-issued certificates expire
    portal NacPortalPortal
    Guest portal settings used when type==guestPortal
    ssid String
    Wireless SSID associated with the NAC portal
    sso NacPortalSso
    SAML SSO settings for NAC portal authentication and role mapping
    tos String
    Terms of service text shown in the NAC portal
    type String
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    orgId string
    Organization that owns this NAC portal
    accessType string
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additionalCacerts string[]
    Additional CA certificates trusted during NAC portal certificate onboarding
    additionalNacServerNames string[]
    Optional list of additional NAC server names
    certExpireTime number
    Validity duration for portal-issued client certificates, in days
    eapType string
    EAP mode used when onboarding wireless clients through the NAC portal
    enableTelemetry boolean
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiryNotificationTime number
    Number of days before certificate expiration to start sending reminder notifications
    name string
    Human-readable name of the NAC portal
    notifyExpiry boolean
    Whether to send reminder notifications before portal-issued certificates expire
    portal NacPortalPortal
    Guest portal settings used when type==guestPortal
    ssid string
    Wireless SSID associated with the NAC portal
    sso NacPortalSso
    SAML SSO settings for NAC portal authentication and role mapping
    tos string
    Terms of service text shown in the NAC portal
    type string
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    org_id str
    Organization that owns this NAC portal
    access_type str
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additional_cacerts Sequence[str]
    Additional CA certificates trusted during NAC portal certificate onboarding
    additional_nac_server_names Sequence[str]
    Optional list of additional NAC server names
    cert_expire_time int
    Validity duration for portal-issued client certificates, in days
    eap_type str
    EAP mode used when onboarding wireless clients through the NAC portal
    enable_telemetry bool
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiry_notification_time int
    Number of days before certificate expiration to start sending reminder notifications
    name str
    Human-readable name of the NAC portal
    notify_expiry bool
    Whether to send reminder notifications before portal-issued certificates expire
    portal NacPortalPortalArgs
    Guest portal settings used when type==guestPortal
    ssid str
    Wireless SSID associated with the NAC portal
    sso NacPortalSsoArgs
    SAML SSO settings for NAC portal authentication and role mapping
    tos str
    Terms of service text shown in the NAC portal
    type str
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    orgId String
    Organization that owns this NAC portal
    accessType String
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additionalCacerts List<String>
    Additional CA certificates trusted during NAC portal certificate onboarding
    additionalNacServerNames List<String>
    Optional list of additional NAC server names
    certExpireTime Number
    Validity duration for portal-issued client certificates, in days
    eapType String
    EAP mode used when onboarding wireless clients through the NAC portal
    enableTelemetry Boolean
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiryNotificationTime Number
    Number of days before certificate expiration to start sending reminder notifications
    name String
    Human-readable name of the NAC portal
    notifyExpiry Boolean
    Whether to send reminder notifications before portal-issued certificates expire
    portal Property Map
    Guest portal settings used when type==guestPortal
    ssid String
    Wireless SSID associated with the NAC portal
    sso Property Map
    SAML SSO settings for NAC portal authentication and role mapping
    tos String
    Terms of service text shown in the NAC portal
    type String
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NacPortal resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing NacPortal Resource

    Get an existing NacPortal resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NacPortalState, opts?: CustomResourceOptions): NacPortal
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_type: Optional[str] = None,
        additional_cacerts: Optional[Sequence[str]] = None,
        additional_nac_server_names: Optional[Sequence[str]] = None,
        cert_expire_time: Optional[int] = None,
        eap_type: Optional[str] = None,
        enable_telemetry: Optional[bool] = None,
        expiry_notification_time: Optional[int] = None,
        name: Optional[str] = None,
        notify_expiry: Optional[bool] = None,
        org_id: Optional[str] = None,
        portal: Optional[NacPortalPortalArgs] = None,
        ssid: Optional[str] = None,
        sso: Optional[NacPortalSsoArgs] = None,
        tos: Optional[str] = None,
        type: Optional[str] = None) -> NacPortal
    func GetNacPortal(ctx *Context, name string, id IDInput, state *NacPortalState, opts ...ResourceOption) (*NacPortal, error)
    public static NacPortal Get(string name, Input<string> id, NacPortalState? state, CustomResourceOptions? opts = null)
    public static NacPortal get(String name, Output<String> id, NacPortalState state, CustomResourceOptions options)
    resources:  _:    type: junipermist:org:NacPortal    get:      id: ${id}
    import {
  to = junipermist_org_nac_portal.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccessType string
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    AdditionalCacerts List<string>
    Additional CA certificates trusted during NAC portal certificate onboarding
    AdditionalNacServerNames List<string>
    Optional list of additional NAC server names
    CertExpireTime int
    Validity duration for portal-issued client certificates, in days
    EapType string
    EAP mode used when onboarding wireless clients through the NAC portal
    EnableTelemetry bool
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    ExpiryNotificationTime int
    Number of days before certificate expiration to start sending reminder notifications
    Name string
    Human-readable name of the NAC portal
    NotifyExpiry bool
    Whether to send reminder notifications before portal-issued certificates expire
    OrgId string
    Organization that owns this NAC portal
    Portal Pulumi.JuniperMist.Org.Inputs.NacPortalPortal
    Guest portal settings used when type==guestPortal
    Ssid string
    Wireless SSID associated with the NAC portal
    Sso Pulumi.JuniperMist.Org.Inputs.NacPortalSso
    SAML SSO settings for NAC portal authentication and role mapping
    Tos string
    Terms of service text shown in the NAC portal
    Type string
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    AccessType string
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    AdditionalCacerts []string
    Additional CA certificates trusted during NAC portal certificate onboarding
    AdditionalNacServerNames []string
    Optional list of additional NAC server names
    CertExpireTime int
    Validity duration for portal-issued client certificates, in days
    EapType string
    EAP mode used when onboarding wireless clients through the NAC portal
    EnableTelemetry bool
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    ExpiryNotificationTime int
    Number of days before certificate expiration to start sending reminder notifications
    Name string
    Human-readable name of the NAC portal
    NotifyExpiry bool
    Whether to send reminder notifications before portal-issued certificates expire
    OrgId string
    Organization that owns this NAC portal
    Portal NacPortalPortalArgs
    Guest portal settings used when type==guestPortal
    Ssid string
    Wireless SSID associated with the NAC portal
    Sso NacPortalSsoArgs
    SAML SSO settings for NAC portal authentication and role mapping
    Tos string
    Terms of service text shown in the NAC portal
    Type string
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    access_type string
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additional_cacerts list(string)
    Additional CA certificates trusted during NAC portal certificate onboarding
    additional_nac_server_names list(string)
    Optional list of additional NAC server names
    cert_expire_time number
    Validity duration for portal-issued client certificates, in days
    eap_type string
    EAP mode used when onboarding wireless clients through the NAC portal
    enable_telemetry bool
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiry_notification_time number
    Number of days before certificate expiration to start sending reminder notifications
    name string
    Human-readable name of the NAC portal
    notify_expiry bool
    Whether to send reminder notifications before portal-issued certificates expire
    org_id string
    Organization that owns this NAC portal
    portal object
    Guest portal settings used when type==guestPortal
    ssid string
    Wireless SSID associated with the NAC portal
    sso object
    SAML SSO settings for NAC portal authentication and role mapping
    tos string
    Terms of service text shown in the NAC portal
    type string
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    accessType String
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additionalCacerts List<String>
    Additional CA certificates trusted during NAC portal certificate onboarding
    additionalNacServerNames List<String>
    Optional list of additional NAC server names
    certExpireTime Integer
    Validity duration for portal-issued client certificates, in days
    eapType String
    EAP mode used when onboarding wireless clients through the NAC portal
    enableTelemetry Boolean
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiryNotificationTime Integer
    Number of days before certificate expiration to start sending reminder notifications
    name String
    Human-readable name of the NAC portal
    notifyExpiry Boolean
    Whether to send reminder notifications before portal-issued certificates expire
    orgId String
    Organization that owns this NAC portal
    portal NacPortalPortal
    Guest portal settings used when type==guestPortal
    ssid String
    Wireless SSID associated with the NAC portal
    sso NacPortalSso
    SAML SSO settings for NAC portal authentication and role mapping
    tos String
    Terms of service text shown in the NAC portal
    type String
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    accessType string
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additionalCacerts string[]
    Additional CA certificates trusted during NAC portal certificate onboarding
    additionalNacServerNames string[]
    Optional list of additional NAC server names
    certExpireTime number
    Validity duration for portal-issued client certificates, in days
    eapType string
    EAP mode used when onboarding wireless clients through the NAC portal
    enableTelemetry boolean
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiryNotificationTime number
    Number of days before certificate expiration to start sending reminder notifications
    name string
    Human-readable name of the NAC portal
    notifyExpiry boolean
    Whether to send reminder notifications before portal-issued certificates expire
    orgId string
    Organization that owns this NAC portal
    portal NacPortalPortal
    Guest portal settings used when type==guestPortal
    ssid string
    Wireless SSID associated with the NAC portal
    sso NacPortalSso
    SAML SSO settings for NAC portal authentication and role mapping
    tos string
    Terms of service text shown in the NAC portal
    type string
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    access_type str
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additional_cacerts Sequence[str]
    Additional CA certificates trusted during NAC portal certificate onboarding
    additional_nac_server_names Sequence[str]
    Optional list of additional NAC server names
    cert_expire_time int
    Validity duration for portal-issued client certificates, in days
    eap_type str
    EAP mode used when onboarding wireless clients through the NAC portal
    enable_telemetry bool
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiry_notification_time int
    Number of days before certificate expiration to start sending reminder notifications
    name str
    Human-readable name of the NAC portal
    notify_expiry bool
    Whether to send reminder notifications before portal-issued certificates expire
    org_id str
    Organization that owns this NAC portal
    portal NacPortalPortalArgs
    Guest portal settings used when type==guestPortal
    ssid str
    Wireless SSID associated with the NAC portal
    sso NacPortalSsoArgs
    SAML SSO settings for NAC portal authentication and role mapping
    tos str
    Terms of service text shown in the NAC portal
    type str
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding
    accessType String
    If type==marvisClient, whether onboarding applies to wireless clients or both wireless and wired clients
    additionalCacerts List<String>
    Additional CA certificates trusted during NAC portal certificate onboarding
    additionalNacServerNames List<String>
    Optional list of additional NAC server names
    certExpireTime Number
    Validity duration for portal-issued client certificates, in days
    eapType String
    EAP mode used when onboarding wireless clients through the NAC portal
    enableTelemetry Boolean
    Model, version, fingering, events (connecting, disconnect, roaming), which ap
    expiryNotificationTime Number
    Number of days before certificate expiration to start sending reminder notifications
    name String
    Human-readable name of the NAC portal
    notifyExpiry Boolean
    Whether to send reminder notifications before portal-issued certificates expire
    orgId String
    Organization that owns this NAC portal
    portal Property Map
    Guest portal settings used when type==guestPortal
    ssid String
    Wireless SSID associated with the NAC portal
    sso Property Map
    SAML SSO settings for NAC portal authentication and role mapping
    tos String
    Terms of service text shown in the NAC portal
    type String
    NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding

    Supporting Types

    NacPortalPortal, NacPortalPortalArgs

    Auth string
    Mode presented by the NAC guest portal for user authentication
    Expire int
    If auth==none or auth==multi, whether to expire the guest after a certain time
    ExternalPortalUrl string
    If auth==external, the URL to redirect the user to for authentication
    ForceReconnect bool
    Disconnect client (workaround for reauth issues)
    Forward bool
    If auth==none or auth==multi, whether to forward the user to the guest portal after authentication
    ForwardUrl string
    If auth==none or auth==multi, URL to forward the user to after authentication
    MaxNumDevices int
    Maximum number of clients allowed per guest. 0 (default, unlimited), 1-100 range
    Privacy bool
    If auth==none or auth==multi, whether to show the privacy policy
    Auth string
    Mode presented by the NAC guest portal for user authentication
    Expire int
    If auth==none or auth==multi, whether to expire the guest after a certain time
    ExternalPortalUrl string
    If auth==external, the URL to redirect the user to for authentication
    ForceReconnect bool
    Disconnect client (workaround for reauth issues)
    Forward bool
    If auth==none or auth==multi, whether to forward the user to the guest portal after authentication
    ForwardUrl string
    If auth==none or auth==multi, URL to forward the user to after authentication
    MaxNumDevices int
    Maximum number of clients allowed per guest. 0 (default, unlimited), 1-100 range
    Privacy bool
    If auth==none or auth==multi, whether to show the privacy policy
    auth string
    Mode presented by the NAC guest portal for user authentication
    expire number
    If auth==none or auth==multi, whether to expire the guest after a certain time
    external_portal_url string
    If auth==external, the URL to redirect the user to for authentication
    force_reconnect bool
    Disconnect client (workaround for reauth issues)
    forward bool
    If auth==none or auth==multi, whether to forward the user to the guest portal after authentication
    forward_url string
    If auth==none or auth==multi, URL to forward the user to after authentication
    max_num_devices number
    Maximum number of clients allowed per guest. 0 (default, unlimited), 1-100 range
    privacy bool
    If auth==none or auth==multi, whether to show the privacy policy
    auth String
    Mode presented by the NAC guest portal for user authentication
    expire Integer
    If auth==none or auth==multi, whether to expire the guest after a certain time
    externalPortalUrl String
    If auth==external, the URL to redirect the user to for authentication
    forceReconnect Boolean
    Disconnect client (workaround for reauth issues)
    forward Boolean
    If auth==none or auth==multi, whether to forward the user to the guest portal after authentication
    forwardUrl String
    If auth==none or auth==multi, URL to forward the user to after authentication
    maxNumDevices Integer
    Maximum number of clients allowed per guest. 0 (default, unlimited), 1-100 range
    privacy Boolean
    If auth==none or auth==multi, whether to show the privacy policy
    auth string
    Mode presented by the NAC guest portal for user authentication
    expire number
    If auth==none or auth==multi, whether to expire the guest after a certain time
    externalPortalUrl string
    If auth==external, the URL to redirect the user to for authentication
    forceReconnect boolean
    Disconnect client (workaround for reauth issues)
    forward boolean
    If auth==none or auth==multi, whether to forward the user to the guest portal after authentication
    forwardUrl string
    If auth==none or auth==multi, URL to forward the user to after authentication
    maxNumDevices number
    Maximum number of clients allowed per guest. 0 (default, unlimited), 1-100 range
    privacy boolean
    If auth==none or auth==multi, whether to show the privacy policy
    auth str
    Mode presented by the NAC guest portal for user authentication
    expire int
    If auth==none or auth==multi, whether to expire the guest after a certain time
    external_portal_url str
    If auth==external, the URL to redirect the user to for authentication
    force_reconnect bool
    Disconnect client (workaround for reauth issues)
    forward bool
    If auth==none or auth==multi, whether to forward the user to the guest portal after authentication
    forward_url str
    If auth==none or auth==multi, URL to forward the user to after authentication
    max_num_devices int
    Maximum number of clients allowed per guest. 0 (default, unlimited), 1-100 range
    privacy bool
    If auth==none or auth==multi, whether to show the privacy policy
    auth String
    Mode presented by the NAC guest portal for user authentication
    expire Number
    If auth==none or auth==multi, whether to expire the guest after a certain time
    externalPortalUrl String
    If auth==external, the URL to redirect the user to for authentication
    forceReconnect Boolean
    Disconnect client (workaround for reauth issues)
    forward Boolean
    If auth==none or auth==multi, whether to forward the user to the guest portal after authentication
    forwardUrl String
    If auth==none or auth==multi, URL to forward the user to after authentication
    maxNumDevices Number
    Maximum number of clients allowed per guest. 0 (default, unlimited), 1-100 range
    privacy Boolean
    If auth==none or auth==multi, whether to show the privacy policy

    NacPortalSso, NacPortalSsoArgs

    IdpCert string
    Identity provider certificate used to verify signed SAML responses
    IdpSignAlgo string
    Signing algorithm expected for SAML assertions from the identity provider
    IdpSsoUrl string
    Identity provider Single Sign-On URL for SAML authentication
    Issuer string
    Identity provider issuer URL for SAML authentication
    NameidFormat string
    SAML NameID format expected from the identity provider
    SsoRoleMatchings List<Pulumi.JuniperMist.Org.Inputs.NacPortalSsoSsoRoleMatching>
    Rules that map SSO role values from the identity provider to NAC portal roles
    UseSsoRoleForCert bool
    Whether to include the matched SSO role in the issued certificate subject for later policy matching
    IdpCert string
    Identity provider certificate used to verify signed SAML responses
    IdpSignAlgo string
    Signing algorithm expected for SAML assertions from the identity provider
    IdpSsoUrl string
    Identity provider Single Sign-On URL for SAML authentication
    Issuer string
    Identity provider issuer URL for SAML authentication
    NameidFormat string
    SAML NameID format expected from the identity provider
    SsoRoleMatchings []NacPortalSsoSsoRoleMatching
    Rules that map SSO role values from the identity provider to NAC portal roles
    UseSsoRoleForCert bool
    Whether to include the matched SSO role in the issued certificate subject for later policy matching
    idp_cert string
    Identity provider certificate used to verify signed SAML responses
    idp_sign_algo string
    Signing algorithm expected for SAML assertions from the identity provider
    idp_sso_url string
    Identity provider Single Sign-On URL for SAML authentication
    issuer string
    Identity provider issuer URL for SAML authentication
    nameid_format string
    SAML NameID format expected from the identity provider
    sso_role_matchings list(object)
    Rules that map SSO role values from the identity provider to NAC portal roles
    use_sso_role_for_cert bool
    Whether to include the matched SSO role in the issued certificate subject for later policy matching
    idpCert String
    Identity provider certificate used to verify signed SAML responses
    idpSignAlgo String
    Signing algorithm expected for SAML assertions from the identity provider
    idpSsoUrl String
    Identity provider Single Sign-On URL for SAML authentication
    issuer String
    Identity provider issuer URL for SAML authentication
    nameidFormat String
    SAML NameID format expected from the identity provider
    ssoRoleMatchings List<NacPortalSsoSsoRoleMatching>
    Rules that map SSO role values from the identity provider to NAC portal roles
    useSsoRoleForCert Boolean
    Whether to include the matched SSO role in the issued certificate subject for later policy matching
    idpCert string
    Identity provider certificate used to verify signed SAML responses
    idpSignAlgo string
    Signing algorithm expected for SAML assertions from the identity provider
    idpSsoUrl string
    Identity provider Single Sign-On URL for SAML authentication
    issuer string
    Identity provider issuer URL for SAML authentication
    nameidFormat string
    SAML NameID format expected from the identity provider
    ssoRoleMatchings NacPortalSsoSsoRoleMatching[]
    Rules that map SSO role values from the identity provider to NAC portal roles
    useSsoRoleForCert boolean
    Whether to include the matched SSO role in the issued certificate subject for later policy matching
    idp_cert str
    Identity provider certificate used to verify signed SAML responses
    idp_sign_algo str
    Signing algorithm expected for SAML assertions from the identity provider
    idp_sso_url str
    Identity provider Single Sign-On URL for SAML authentication
    issuer str
    Identity provider issuer URL for SAML authentication
    nameid_format str
    SAML NameID format expected from the identity provider
    sso_role_matchings Sequence[NacPortalSsoSsoRoleMatching]
    Rules that map SSO role values from the identity provider to NAC portal roles
    use_sso_role_for_cert bool
    Whether to include the matched SSO role in the issued certificate subject for later policy matching
    idpCert String
    Identity provider certificate used to verify signed SAML responses
    idpSignAlgo String
    Signing algorithm expected for SAML assertions from the identity provider
    idpSsoUrl String
    Identity provider Single Sign-On URL for SAML authentication
    issuer String
    Identity provider issuer URL for SAML authentication
    nameidFormat String
    SAML NameID format expected from the identity provider
    ssoRoleMatchings List<Property Map>
    Rules that map SSO role values from the identity provider to NAC portal roles
    useSsoRoleForCert Boolean
    Whether to include the matched SSO role in the issued certificate subject for later policy matching

    NacPortalSsoSsoRoleMatching, NacPortalSsoSsoRoleMatchingArgs

    Assigned string
    NAC portal role assigned when the SSO role value matches
    Match string
    SSO role value to match from the SAML assertion
    Assigned string
    NAC portal role assigned when the SSO role value matches
    Match string
    SSO role value to match from the SAML assertion
    assigned string
    NAC portal role assigned when the SSO role value matches
    match string
    SSO role value to match from the SAML assertion
    assigned String
    NAC portal role assigned when the SSO role value matches
    match String
    SSO role value to match from the SAML assertion
    assigned string
    NAC portal role assigned when the SSO role value matches
    match string
    SSO role value to match from the SAML assertion
    assigned str
    NAC portal role assigned when the SSO role value matches
    match str
    SSO role value to match from the SAML assertion
    assigned String
    NAC portal role assigned when the SSO role value matches
    match String
    SSO role value to match from the SAML assertion

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Viewing docs for Juniper Mist v0.11.2
    published on Saturday, Jul 11, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-junipermist

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial