Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Okta Provider
  4. API Docs
  5. AuthenticatorWebauthnCustomAaguid
Viewing docs for Okta v6.9.0
published on Wednesday, Jul 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-okta

okta.AuthenticatorWebauthnCustomAaguid

okta logo
Viewing docs for Okta v6.9.0
published on Wednesday, Jul 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-okta

    WARNING: This feature is only available as a part of the Identity Engine. Contact support for further information.

    Manages a custom AAGUID (Authenticator Attestation Globally Unique Identifier) for a WebAuthn authenticator. Custom AAGUIDs allow administrators to register specific hardware security key models with the organization.

    NOTE: AAGUIDs that are registered in the FIDO Metadata Service (MDS) with attestation certificates require the attestationRootCertificate block(s) to be provided. If omitted for an MDS-registered AAGUID, the API will return a validation error. AAGUIDs not present in the MDS do not require certificates.

    Example Usage

    Basic (custom/non-MDS AAGUID)

    import * as pulumi from "@pulumi/pulumi";
import * as okta from "@pulumi/okta";

const webauthn = okta.getAuthenticator({
    key: "webauthn",
});
const customKey = new okta.AuthenticatorWebauthnCustomAaguid("custom_key", {
    authenticatorId: webauthn.then(webauthn => webauthn.id),
    aaguid: "00000000-0000-0000-0000-000000000001",
    name: "Custom Security Key",
    authenticatorCharacteristics: {
        hardwareProtected: true,
        platformAttached: false,
    },
});

    import pulumi
import pulumi_okta as okta

webauthn = okta.get_authenticator(key="webauthn")
custom_key = okta.AuthenticatorWebauthnCustomAaguid("custom_key",
    authenticator_id=webauthn.id,
    aaguid="00000000-0000-0000-0000-000000000001",
    name="Custom Security Key",
    authenticator_characteristics={
        "hardware_protected": True,
        "platform_attached": False,
    })

    package main

import (
	"github.com/pulumi/pulumi-okta/sdk/v6/go/okta"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		webauthn, err := okta.GetAuthenticator(ctx, &okta.LookupAuthenticatorArgs{
			Key: pulumi.StringRef("webauthn"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = okta.NewAuthenticatorWebauthnCustomAaguid(ctx, "custom_key", &okta.AuthenticatorWebauthnCustomAaguidArgs{
			AuthenticatorId: pulumi.String(webauthn.Id),
			Aaguid:          pulumi.String("00000000-0000-0000-0000-000000000001"),
			Name:            pulumi.String("Custom Security Key"),
			AuthenticatorCharacteristics: &okta.AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs{
				HardwareProtected: pulumi.Bool(true),
				PlatformAttached:  pulumi.Bool(false),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Okta = Pulumi.Okta;

return await Deployment.RunAsync(() => 
{
    var webauthn = Okta.GetAuthenticator.Invoke(new()
    {
        Key = "webauthn",
    });

    var customKey = new Okta.AuthenticatorWebauthnCustomAaguid("custom_key", new()
    {
        AuthenticatorId = webauthn.Apply(getAuthenticatorResult => getAuthenticatorResult.Id),
        Aaguid = "00000000-0000-0000-0000-000000000001",
        Name = "Custom Security Key",
        AuthenticatorCharacteristics = new Okta.Inputs.AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs
        {
            HardwareProtected = true,
            PlatformAttached = false,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.okta.OktaFunctions;
import com.pulumi.okta.inputs.GetAuthenticatorArgs;
import com.pulumi.okta.AuthenticatorWebauthnCustomAaguid;
import com.pulumi.okta.AuthenticatorWebauthnCustomAaguidArgs;
import com.pulumi.okta.inputs.AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var webauthn = OktaFunctions.getAuthenticator(GetAuthenticatorArgs.builder()
            .key("webauthn")
            .build());

        var customKey = new AuthenticatorWebauthnCustomAaguid("customKey", AuthenticatorWebauthnCustomAaguidArgs.builder()
            .authenticatorId(webauthn.id())
            .aaguid("00000000-0000-0000-0000-000000000001")
            .name("Custom Security Key")
            .authenticatorCharacteristics(AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs.builder()
                .hardwareProtected(true)
                .platformAttached(false)
                .build())
            .build());

    }
}

    resources:
  customKey:
    type: okta:AuthenticatorWebauthnCustomAaguid
    name: custom_key
    properties:
      authenticatorId: ${webauthn.id}
      aaguid: 00000000-0000-0000-0000-000000000001
      name: Custom Security Key
      authenticatorCharacteristics:
        hardwareProtected: true
        platformAttached: false
variables:
  webauthn:
    fn::invoke:
      function: okta:getAuthenticator
      arguments:
        key: webauthn

    pulumi {
  required_providers {
    okta = {
      source = "pulumi/okta"
    }
  }
}

data "okta_getauthenticator" "webauthn" {
  key = "webauthn"
}

resource "okta_authenticatorwebauthncustomaaguid" "custom_key" {
  authenticator_id = data.okta_getauthenticator.webauthn.id
  aaguid           = "00000000-0000-0000-0000-000000000001"
  name             = "Custom Security Key"
  authenticator_characteristics = {
    hardware_protected = true
    platform_attached  = false
  }
}

    With attestation certificates (MDS-registered AAGUID)

    import * as pulumi from "@pulumi/pulumi";
import * as okta from "@pulumi/okta";

const webauthn = okta.getAuthenticator({
    key: "webauthn",
});
const yubikey5 = new okta.AuthenticatorWebauthnCustomAaguid("yubikey5", {
    authenticatorId: webauthn.then(webauthn => webauthn.id),
    aaguid: "cb69481e-8ff7-4039-93ec-0a2729a154a8",
    name: "YubiKey 5 Series",
    authenticatorCharacteristics: {
        fipsCompliant: true,
        hardwareProtected: true,
        platformAttached: false,
    },
    attestationRootCertificates: [{
        x5c: "<base64-encoded-attestation-root-certificate>",
    }],
});

    import pulumi
import pulumi_okta as okta

webauthn = okta.get_authenticator(key="webauthn")
yubikey5 = okta.AuthenticatorWebauthnCustomAaguid("yubikey5",
    authenticator_id=webauthn.id,
    aaguid="cb69481e-8ff7-4039-93ec-0a2729a154a8",
    name="YubiKey 5 Series",
    authenticator_characteristics={
        "fips_compliant": True,
        "hardware_protected": True,
        "platform_attached": False,
    },
    attestation_root_certificates=[{
        "x5c": "<base64-encoded-attestation-root-certificate>",
    }])

    package main

import (
	"github.com/pulumi/pulumi-okta/sdk/v6/go/okta"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		webauthn, err := okta.GetAuthenticator(ctx, &okta.LookupAuthenticatorArgs{
			Key: pulumi.StringRef("webauthn"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = okta.NewAuthenticatorWebauthnCustomAaguid(ctx, "yubikey5", &okta.AuthenticatorWebauthnCustomAaguidArgs{
			AuthenticatorId: pulumi.String(webauthn.Id),
			Aaguid:          pulumi.String("cb69481e-8ff7-4039-93ec-0a2729a154a8"),
			Name:            pulumi.String("YubiKey 5 Series"),
			AuthenticatorCharacteristics: &okta.AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs{
				FipsCompliant:     pulumi.Bool(true),
				HardwareProtected: pulumi.Bool(true),
				PlatformAttached:  pulumi.Bool(false),
			},
			AttestationRootCertificates: okta.AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArray{
				&okta.AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs{
					X5c: pulumi.String("<base64-encoded-attestation-root-certificate>"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Okta = Pulumi.Okta;

return await Deployment.RunAsync(() => 
{
    var webauthn = Okta.GetAuthenticator.Invoke(new()
    {
        Key = "webauthn",
    });

    var yubikey5 = new Okta.AuthenticatorWebauthnCustomAaguid("yubikey5", new()
    {
        AuthenticatorId = webauthn.Apply(getAuthenticatorResult => getAuthenticatorResult.Id),
        Aaguid = "cb69481e-8ff7-4039-93ec-0a2729a154a8",
        Name = "YubiKey 5 Series",
        AuthenticatorCharacteristics = new Okta.Inputs.AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs
        {
            FipsCompliant = true,
            HardwareProtected = true,
            PlatformAttached = false,
        },
        AttestationRootCertificates = new[]
        {
            new Okta.Inputs.AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs
            {
                X5c = "<base64-encoded-attestation-root-certificate>",
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.okta.OktaFunctions;
import com.pulumi.okta.inputs.GetAuthenticatorArgs;
import com.pulumi.okta.AuthenticatorWebauthnCustomAaguid;
import com.pulumi.okta.AuthenticatorWebauthnCustomAaguidArgs;
import com.pulumi.okta.inputs.AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs;
import com.pulumi.okta.inputs.AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var webauthn = OktaFunctions.getAuthenticator(GetAuthenticatorArgs.builder()
            .key("webauthn")
            .build());

        var yubikey5 = new AuthenticatorWebauthnCustomAaguid("yubikey5", AuthenticatorWebauthnCustomAaguidArgs.builder()
            .authenticatorId(webauthn.id())
            .aaguid("cb69481e-8ff7-4039-93ec-0a2729a154a8")
            .name("YubiKey 5 Series")
            .authenticatorCharacteristics(AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs.builder()
                .fipsCompliant(true)
                .hardwareProtected(true)
                .platformAttached(false)
                .build())
            .attestationRootCertificates(AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs.builder()
                .x5c("<base64-encoded-attestation-root-certificate>")
                .build())
            .build());

    }
}

    resources:
  yubikey5:
    type: okta:AuthenticatorWebauthnCustomAaguid
    properties:
      authenticatorId: ${webauthn.id}
      aaguid: cb69481e-8ff7-4039-93ec-0a2729a154a8
      name: YubiKey 5 Series
      authenticatorCharacteristics:
        fipsCompliant: true
        hardwareProtected: true
        platformAttached: false
      attestationRootCertificates:
        - x5c: <base64-encoded-attestation-root-certificate>
variables:
  webauthn:
    fn::invoke:
      function: okta:getAuthenticator
      arguments:
        key: webauthn

    pulumi {
  required_providers {
    okta = {
      source = "pulumi/okta"
    }
  }
}

data "okta_getauthenticator" "webauthn" {
  key = "webauthn"
}

resource "okta_authenticatorwebauthncustomaaguid" "yubikey5" {
  authenticator_id = data.okta_getauthenticator.webauthn.id
  aaguid           = "cb69481e-8ff7-4039-93ec-0a2729a154a8"
  name             = "YubiKey 5 Series"
  authenticator_characteristics = {
    fips_compliant     = true
    hardware_protected = true
    platform_attached  = false
  }
  attestation_root_certificates {
    x5c = "<base64-encoded-attestation-root-certificate>"
  }
}

    Create AuthenticatorWebauthnCustomAaguid Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AuthenticatorWebauthnCustomAaguid(name: string, args: AuthenticatorWebauthnCustomAaguidArgs, opts?: CustomResourceOptions);
    @overload
def AuthenticatorWebauthnCustomAaguid(resource_name: str,
                                      args: AuthenticatorWebauthnCustomAaguidArgs,
                                      opts: Optional[ResourceOptions] = None)

@overload
def AuthenticatorWebauthnCustomAaguid(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      aaguid: Optional[str] = None,
                                      authenticator_id: Optional[str] = None,
                                      attestation_root_certificates: Optional[Sequence[AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs]] = None,
                                      authenticator_characteristics: Optional[AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs] = None,
                                      name: Optional[str] = None)
    func NewAuthenticatorWebauthnCustomAaguid(ctx *Context, name string, args AuthenticatorWebauthnCustomAaguidArgs, opts ...ResourceOption) (*AuthenticatorWebauthnCustomAaguid, error)
    public AuthenticatorWebauthnCustomAaguid(string name, AuthenticatorWebauthnCustomAaguidArgs args, CustomResourceOptions? opts = null)
    public AuthenticatorWebauthnCustomAaguid(String name, AuthenticatorWebauthnCustomAaguidArgs args)
public AuthenticatorWebauthnCustomAaguid(String name, AuthenticatorWebauthnCustomAaguidArgs args, CustomResourceOptions options)

    type: okta:AuthenticatorWebauthnCustomAaguid
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "okta_authenticator_webauthn_custom_aaguid" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args AuthenticatorWebauthnCustomAaguidArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AuthenticatorWebauthnCustomAaguidArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AuthenticatorWebauthnCustomAaguidArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AuthenticatorWebauthnCustomAaguidArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AuthenticatorWebauthnCustomAaguidArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var authenticatorWebauthnCustomAaguidResource = new Okta.AuthenticatorWebauthnCustomAaguid("authenticatorWebauthnCustomAaguidResource", new()
{
    Aaguid = "string",
    AuthenticatorId = "string",
    AttestationRootCertificates = new[]
    {
        new Okta.Inputs.AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs
        {
            X5c = "string",
            Expiry = "string",
            Issuer = "string",
            X5tS256 = "string",
        },
    },
    AuthenticatorCharacteristics = new Okta.Inputs.AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs
    {
        FipsCompliant = false,
        HardwareProtected = false,
        PlatformAttached = false,
    },
    Name = "string",
});

    example, err := okta.NewAuthenticatorWebauthnCustomAaguid(ctx, "authenticatorWebauthnCustomAaguidResource", &okta.AuthenticatorWebauthnCustomAaguidArgs{
	Aaguid:          pulumi.String("string"),
	AuthenticatorId: pulumi.String("string"),
	AttestationRootCertificates: okta.AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArray{
		&okta.AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs{
			X5c:     pulumi.String("string"),
			Expiry:  pulumi.String("string"),
			Issuer:  pulumi.String("string"),
			X5tS256: pulumi.String("string"),
		},
	},
	AuthenticatorCharacteristics: &okta.AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs{
		FipsCompliant:     pulumi.Bool(false),
		HardwareProtected: pulumi.Bool(false),
		PlatformAttached:  pulumi.Bool(false),
	},
	Name: pulumi.String("string"),
})

    resource "okta_authenticator_webauthn_custom_aaguid" "authenticatorWebauthnCustomAaguidResource" {
  lifecycle {
    create_before_destroy = true
  }
  aaguid           = "string"
  authenticator_id = "string"
  attestation_root_certificates {
    x5c      = "string"
    expiry   = "string"
    issuer   = "string"
    x5t_s256 = "string"
  }
  authenticator_characteristics = {
    fips_compliant     = false
    hardware_protected = false
    platform_attached  = false
  }
  name = "string"
}

    var authenticatorWebauthnCustomAaguidResource = new AuthenticatorWebauthnCustomAaguid("authenticatorWebauthnCustomAaguidResource", AuthenticatorWebauthnCustomAaguidArgs.builder()
    .aaguid("string")
    .authenticatorId("string")
    .attestationRootCertificates(AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs.builder()
        .x5c("string")
        .expiry("string")
        .issuer("string")
        .x5tS256("string")
        .build())
    .authenticatorCharacteristics(AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs.builder()
        .fipsCompliant(false)
        .hardwareProtected(false)
        .platformAttached(false)
        .build())
    .name("string")
    .build());

    authenticator_webauthn_custom_aaguid_resource = okta.AuthenticatorWebauthnCustomAaguid("authenticatorWebauthnCustomAaguidResource",
    aaguid="string",
    authenticator_id="string",
    attestation_root_certificates=[{
        "x5c": "string",
        "expiry": "string",
        "issuer": "string",
        "x5t_s256": "string",
    }],
    authenticator_characteristics={
        "fips_compliant": False,
        "hardware_protected": False,
        "platform_attached": False,
    },
    name="string")

    const authenticatorWebauthnCustomAaguidResource = new okta.AuthenticatorWebauthnCustomAaguid("authenticatorWebauthnCustomAaguidResource", {
    aaguid: "string",
    authenticatorId: "string",
    attestationRootCertificates: [{
        x5c: "string",
        expiry: "string",
        issuer: "string",
        x5tS256: "string",
    }],
    authenticatorCharacteristics: {
        fipsCompliant: false,
        hardwareProtected: false,
        platformAttached: false,
    },
    name: "string",
});

    type: okta:AuthenticatorWebauthnCustomAaguid
properties:
    aaguid: string
    attestationRootCertificates:
        - expiry: string
          issuer: string
          x5c: string
          x5tS256: string
    authenticatorCharacteristics:
        fipsCompliant: false
        hardwareProtected: false
        platformAttached: false
    authenticatorId: string
    name: string

    AuthenticatorWebauthnCustomAaguid Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AuthenticatorWebauthnCustomAaguid resource accepts the following input properties:

    Aaguid string
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    AuthenticatorId string
    The ID of the WebAuthn authenticator.
    AttestationRootCertificates List<AuthenticatorWebauthnCustomAaguidAttestationRootCertificate>
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    AuthenticatorCharacteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    Name string
    The product name associated with this AAGUID.
    Aaguid string
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    AuthenticatorId string
    The ID of the WebAuthn authenticator.
    AttestationRootCertificates []AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    AuthenticatorCharacteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs
    Properties of the custom AAGUID authenticator.
    Name string
    The product name associated with this AAGUID.
    aaguid string
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    authenticator_id string
    The ID of the WebAuthn authenticator.
    attestation_root_certificates list(object)
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticator_characteristics object
    Properties of the custom AAGUID authenticator.
    name string
    The product name associated with this AAGUID.
    aaguid String
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    authenticatorId String
    The ID of the WebAuthn authenticator.
    attestationRootCertificates List<AuthenticatorWebauthnCustomAaguidAttestationRootCertificate>
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticatorCharacteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    name String
    The product name associated with this AAGUID.
    aaguid string
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    authenticatorId string
    The ID of the WebAuthn authenticator.
    attestationRootCertificates AuthenticatorWebauthnCustomAaguidAttestationRootCertificate[]
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticatorCharacteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    name string
    The product name associated with this AAGUID.
    aaguid str
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    authenticator_id str
    The ID of the WebAuthn authenticator.
    attestation_root_certificates Sequence[AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs]
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticator_characteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs
    Properties of the custom AAGUID authenticator.
    name str
    The product name associated with this AAGUID.
    aaguid String
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    authenticatorId String
    The ID of the WebAuthn authenticator.
    attestationRootCertificates List<Property Map>
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticatorCharacteristics Property Map
    Properties of the custom AAGUID authenticator.
    name String
    The product name associated with this AAGUID.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AuthenticatorWebauthnCustomAaguid resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AuthenticatorWebauthnCustomAaguid Resource

    Get an existing AuthenticatorWebauthnCustomAaguid resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AuthenticatorWebauthnCustomAaguidState, opts?: CustomResourceOptions): AuthenticatorWebauthnCustomAaguid
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        aaguid: Optional[str] = None,
        attestation_root_certificates: Optional[Sequence[AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs]] = None,
        authenticator_characteristics: Optional[AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs] = None,
        authenticator_id: Optional[str] = None,
        name: Optional[str] = None) -> AuthenticatorWebauthnCustomAaguid
    func GetAuthenticatorWebauthnCustomAaguid(ctx *Context, name string, id IDInput, state *AuthenticatorWebauthnCustomAaguidState, opts ...ResourceOption) (*AuthenticatorWebauthnCustomAaguid, error)
    public static AuthenticatorWebauthnCustomAaguid Get(string name, Input<string> id, AuthenticatorWebauthnCustomAaguidState? state, CustomResourceOptions? opts = null)
    public static AuthenticatorWebauthnCustomAaguid get(String name, Output<String> id, AuthenticatorWebauthnCustomAaguidState state, CustomResourceOptions options)
    resources:  _:    type: okta:AuthenticatorWebauthnCustomAaguid    get:      id: ${id}
    import {
  to = okta_authenticator_webauthn_custom_aaguid.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Aaguid string
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    AttestationRootCertificates List<AuthenticatorWebauthnCustomAaguidAttestationRootCertificate>
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    AuthenticatorCharacteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    AuthenticatorId string
    The ID of the WebAuthn authenticator.
    Name string
    The product name associated with this AAGUID.
    Aaguid string
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    AttestationRootCertificates []AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    AuthenticatorCharacteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs
    Properties of the custom AAGUID authenticator.
    AuthenticatorId string
    The ID of the WebAuthn authenticator.
    Name string
    The product name associated with this AAGUID.
    aaguid string
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    attestation_root_certificates list(object)
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticator_characteristics object
    Properties of the custom AAGUID authenticator.
    authenticator_id string
    The ID of the WebAuthn authenticator.
    name string
    The product name associated with this AAGUID.
    aaguid String
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    attestationRootCertificates List<AuthenticatorWebauthnCustomAaguidAttestationRootCertificate>
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticatorCharacteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    authenticatorId String
    The ID of the WebAuthn authenticator.
    name String
    The product name associated with this AAGUID.
    aaguid string
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    attestationRootCertificates AuthenticatorWebauthnCustomAaguidAttestationRootCertificate[]
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticatorCharacteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    authenticatorId string
    The ID of the WebAuthn authenticator.
    name string
    The product name associated with this AAGUID.
    aaguid str
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    attestation_root_certificates Sequence[AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs]
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticator_characteristics AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs
    Properties of the custom AAGUID authenticator.
    authenticator_id str
    The ID of the WebAuthn authenticator.
    name str
    The product name associated with this AAGUID.
    aaguid String
    The Authenticator Attestation Globally Unique Identifier (AAGUID). A 128-bit identifier indicating the authenticator model.
    attestationRootCertificates List<Property Map>
    List of attestation root certificates. Required for AAGUIDs that exist in the FIDO Metadata Service (MDS) with certificates.
    authenticatorCharacteristics Property Map
    Properties of the custom AAGUID authenticator.
    authenticatorId String
    The ID of the WebAuthn authenticator.
    name String
    The product name associated with this AAGUID.

    Supporting Types

    AuthenticatorWebauthnCustomAaguidAttestationRootCertificate, AuthenticatorWebauthnCustomAaguidAttestationRootCertificateArgs

    X5c string
    X.509 certificate chain (base64-encoded).
    Expiry string
    Expiry date of the certificate.
    Issuer string
    Issuer of the certificate.
    X5tS256 string
    SHA-256 hash (thumbprint) of the X.509 certificate.
    X5c string
    X.509 certificate chain (base64-encoded).
    Expiry string
    Expiry date of the certificate.
    Issuer string
    Issuer of the certificate.
    X5tS256 string
    SHA-256 hash (thumbprint) of the X.509 certificate.
    x5c string
    X.509 certificate chain (base64-encoded).
    expiry string
    Expiry date of the certificate.
    issuer string
    Issuer of the certificate.
    x5t_s256 string
    SHA-256 hash (thumbprint) of the X.509 certificate.
    x5c String
    X.509 certificate chain (base64-encoded).
    expiry String
    Expiry date of the certificate.
    issuer String
    Issuer of the certificate.
    x5tS256 String
    SHA-256 hash (thumbprint) of the X.509 certificate.
    x5c string
    X.509 certificate chain (base64-encoded).
    expiry string
    Expiry date of the certificate.
    issuer string
    Issuer of the certificate.
    x5tS256 string
    SHA-256 hash (thumbprint) of the X.509 certificate.
    x5c str
    X.509 certificate chain (base64-encoded).
    expiry str
    Expiry date of the certificate.
    issuer str
    Issuer of the certificate.
    x5t_s256 str
    SHA-256 hash (thumbprint) of the X.509 certificate.
    x5c String
    X.509 certificate chain (base64-encoded).
    expiry String
    Expiry date of the certificate.
    issuer String
    Issuer of the certificate.
    x5tS256 String
    SHA-256 hash (thumbprint) of the X.509 certificate.

    AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristics, AuthenticatorWebauthnCustomAaguidAuthenticatorCharacteristicsArgs

    FipsCompliant bool
    Indicates whether the authenticator meets FIPS compliance requirements.
    HardwareProtected bool
    Indicates whether the authenticator stores the private key on a hardware component.
    PlatformAttached bool
    Indicates whether the custom AAGUID is built into the authenticator or is external.
    FipsCompliant bool
    Indicates whether the authenticator meets FIPS compliance requirements.
    HardwareProtected bool
    Indicates whether the authenticator stores the private key on a hardware component.
    PlatformAttached bool
    Indicates whether the custom AAGUID is built into the authenticator or is external.
    fips_compliant bool
    Indicates whether the authenticator meets FIPS compliance requirements.
    hardware_protected bool
    Indicates whether the authenticator stores the private key on a hardware component.
    platform_attached bool
    Indicates whether the custom AAGUID is built into the authenticator or is external.
    fipsCompliant Boolean
    Indicates whether the authenticator meets FIPS compliance requirements.
    hardwareProtected Boolean
    Indicates whether the authenticator stores the private key on a hardware component.
    platformAttached Boolean
    Indicates whether the custom AAGUID is built into the authenticator or is external.
    fipsCompliant boolean
    Indicates whether the authenticator meets FIPS compliance requirements.
    hardwareProtected boolean
    Indicates whether the authenticator stores the private key on a hardware component.
    platformAttached boolean
    Indicates whether the custom AAGUID is built into the authenticator or is external.
    fips_compliant bool
    Indicates whether the authenticator meets FIPS compliance requirements.
    hardware_protected bool
    Indicates whether the authenticator stores the private key on a hardware component.
    platform_attached bool
    Indicates whether the custom AAGUID is built into the authenticator or is external.
    fipsCompliant Boolean
    Indicates whether the authenticator meets FIPS compliance requirements.
    hardwareProtected Boolean
    Indicates whether the authenticator stores the private key on a hardware component.
    platformAttached Boolean
    Indicates whether the custom AAGUID is built into the authenticator or is external.

    Import

    A custom AAGUID can be imported using the format authenticator_id/aaguid:

    $ pulumi import okta:index/authenticatorWebauthnCustomAaguid:AuthenticatorWebauthnCustomAaguid example aut1234567890/cb69481e-8ff7-4039-93ec-0a2729a154a8

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Okta pulumi/pulumi-okta
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the okta Terraform Provider.
    okta logo
    Viewing docs for Okta v6.9.0
    published on Wednesday, Jul 1, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-okta

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial