1. Packages
  2. Packages
  3. Okta Provider
  4. API Docs
  5. getAuthenticatorWebauthnCustomAaguids
Viewing docs for Okta v6.9.0
published on Wednesday, Jul 1, 2026 by Pulumi
okta logo
Viewing docs for Okta v6.9.0
published on Wednesday, Jul 1, 2026 by Pulumi

    WARNING: This feature is only available as a part of the Identity Engine. Contact support for further information.

    Lists all custom AAGUIDs (Authenticator Attestation Globally Unique Identifiers) configured for a WebAuthn authenticator. Only custom AAGUIDs that an admin has created are returned.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as okta from "@pulumi/okta";
    
    const webauthn = okta.getAuthenticator({
        key: "webauthn",
    });
    const all = webauthn.then(webauthn => okta.getAuthenticatorWebauthnCustomAaguids({
        authenticatorId: webauthn.id,
    }));
    
    import pulumi
    import pulumi_okta as okta
    
    webauthn = okta.get_authenticator(key="webauthn")
    all = okta.get_authenticator_webauthn_custom_aaguids(authenticator_id=webauthn.id)
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-okta/sdk/v6/go/okta"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		webauthn, err := okta.GetAuthenticator(ctx, &okta.LookupAuthenticatorArgs{
    			Key: pulumi.StringRef("webauthn"),
    		}, nil)
    		if err != nil {
    			return err
    		}
    		_, err = okta.GetAuthenticatorWebauthnCustomAaguids(ctx, &okta.GetAuthenticatorWebauthnCustomAaguidsArgs{
    			AuthenticatorId: webauthn.Id,
    		}, nil)
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Okta = Pulumi.Okta;
    
    return await Deployment.RunAsync(() => 
    {
        var webauthn = Okta.GetAuthenticator.Invoke(new()
        {
            Key = "webauthn",
        });
    
        var all = Okta.GetAuthenticatorWebauthnCustomAaguids.Invoke(new()
        {
            AuthenticatorId = webauthn.Apply(getAuthenticatorResult => getAuthenticatorResult.Id),
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.okta.OktaFunctions;
    import com.pulumi.okta.inputs.GetAuthenticatorArgs;
    import com.pulumi.okta.inputs.GetAuthenticatorWebauthnCustomAaguidsArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var webauthn = OktaFunctions.getAuthenticator(GetAuthenticatorArgs.builder()
                .key("webauthn")
                .build());
    
            final var all = OktaFunctions.getAuthenticatorWebauthnCustomAaguids(GetAuthenticatorWebauthnCustomAaguidsArgs.builder()
                .authenticatorId(webauthn.id())
                .build());
    
        }
    }
    
    variables:
      webauthn:
        fn::invoke:
          function: okta:getAuthenticator
          arguments:
            key: webauthn
      all:
        fn::invoke:
          function: okta:getAuthenticatorWebauthnCustomAaguids
          arguments:
            authenticatorId: ${webauthn.id}
    
    pulumi {
      required_providers {
        okta = {
          source = "pulumi/okta"
        }
      }
    }
    
    data "okta_getauthenticator" "webauthn" {
      key = "webauthn"
    }
    data "okta_getauthenticatorwebauthncustomaaguids" "all" {
      authenticator_id = data.okta_getauthenticator.webauthn.id
    }
    

    Using getAuthenticatorWebauthnCustomAaguids

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAuthenticatorWebauthnCustomAaguids(args: GetAuthenticatorWebauthnCustomAaguidsArgs, opts?: InvokeOptions): Promise<GetAuthenticatorWebauthnCustomAaguidsResult>
    function getAuthenticatorWebauthnCustomAaguidsOutput(args: GetAuthenticatorWebauthnCustomAaguidsOutputArgs, opts?: InvokeOptions): Output<GetAuthenticatorWebauthnCustomAaguidsResult>
    def get_authenticator_webauthn_custom_aaguids(authenticator_id: Optional[str] = None,
                                                  custom_aaguids: Optional[Sequence[GetAuthenticatorWebauthnCustomAaguidsCustomAaguid]] = None,
                                                  opts: Optional[InvokeOptions] = None) -> GetAuthenticatorWebauthnCustomAaguidsResult
    def get_authenticator_webauthn_custom_aaguids_output(authenticator_id: pulumi.Input[Optional[str]] = None,
                                                  custom_aaguids: pulumi.Input[Optional[Sequence[pulumi.Input[GetAuthenticatorWebauthnCustomAaguidsCustomAaguidArgs]]]] = None,
                                                  opts: Optional[InvokeOptions] = None) -> Output[GetAuthenticatorWebauthnCustomAaguidsResult]
    func GetAuthenticatorWebauthnCustomAaguids(ctx *Context, args *GetAuthenticatorWebauthnCustomAaguidsArgs, opts ...InvokeOption) (*GetAuthenticatorWebauthnCustomAaguidsResult, error)
    func GetAuthenticatorWebauthnCustomAaguidsOutput(ctx *Context, args *GetAuthenticatorWebauthnCustomAaguidsOutputArgs, opts ...InvokeOption) GetAuthenticatorWebauthnCustomAaguidsResultOutput

    > Note: This function is named GetAuthenticatorWebauthnCustomAaguids in the Go SDK.

    public static class GetAuthenticatorWebauthnCustomAaguids 
    {
        public static Task<GetAuthenticatorWebauthnCustomAaguidsResult> InvokeAsync(GetAuthenticatorWebauthnCustomAaguidsArgs args, InvokeOptions? opts = null)
        public static Output<GetAuthenticatorWebauthnCustomAaguidsResult> Invoke(GetAuthenticatorWebauthnCustomAaguidsInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetAuthenticatorWebauthnCustomAaguidsResult> getAuthenticatorWebauthnCustomAaguids(GetAuthenticatorWebauthnCustomAaguidsArgs args, InvokeOptions options)
    public static Output<GetAuthenticatorWebauthnCustomAaguidsResult> getAuthenticatorWebauthnCustomAaguids(GetAuthenticatorWebauthnCustomAaguidsArgs args, InvokeOptions options)
    
    fn::invoke:
      function: okta:index/getAuthenticatorWebauthnCustomAaguids:getAuthenticatorWebauthnCustomAaguids
      arguments:
        # arguments dictionary
    data "okta_getauthenticatorwebauthncustomaaguids" "name" {
        # arguments
    }

    The following arguments are supported:

    AuthenticatorId string
    The ID of the WebAuthn authenticator.
    CustomAaguids List<GetAuthenticatorWebauthnCustomAaguidsCustomAaguid>
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    AuthenticatorId string
    The ID of the WebAuthn authenticator.
    CustomAaguids []GetAuthenticatorWebauthnCustomAaguidsCustomAaguid
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticator_id string
    The ID of the WebAuthn authenticator.
    custom_aaguids list(object)
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticatorId String
    The ID of the WebAuthn authenticator.
    customAaguids List<GetAuthenticatorWebauthnCustomAaguidsCustomAaguid>
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticatorId string
    The ID of the WebAuthn authenticator.
    customAaguids GetAuthenticatorWebauthnCustomAaguidsCustomAaguid[]
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticator_id str
    The ID of the WebAuthn authenticator.
    custom_aaguids Sequence[GetAuthenticatorWebauthnCustomAaguidsCustomAaguid]
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticatorId String
    The ID of the WebAuthn authenticator.
    customAaguids List<Property Map>
    List of custom AAGUIDs configured for this authenticator. Each element contains:

    getAuthenticatorWebauthnCustomAaguids Result

    The following output properties are available:

    AuthenticatorId string
    Id string
    CustomAaguids List<GetAuthenticatorWebauthnCustomAaguidsCustomAaguid>
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    AuthenticatorId string
    Id string
    CustomAaguids []GetAuthenticatorWebauthnCustomAaguidsCustomAaguid
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticator_id string
    id string
    custom_aaguids list(object)
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticatorId String
    id String
    customAaguids List<GetAuthenticatorWebauthnCustomAaguidsCustomAaguid>
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticatorId string
    id string
    customAaguids GetAuthenticatorWebauthnCustomAaguidsCustomAaguid[]
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticator_id str
    id str
    custom_aaguids Sequence[GetAuthenticatorWebauthnCustomAaguidsCustomAaguid]
    List of custom AAGUIDs configured for this authenticator. Each element contains:
    authenticatorId String
    id String
    customAaguids List<Property Map>
    List of custom AAGUIDs configured for this authenticator. Each element contains:

    Supporting Types

    GetAuthenticatorWebauthnCustomAaguidsCustomAaguid

    Aaguid string
    The AAGUID identifier.
    Name string
    The product name associated with the AAGUID.
    AuthenticatorCharacteristics GetAuthenticatorWebauthnCustomAaguidsCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    Aaguid string
    The AAGUID identifier.
    Name string
    The product name associated with the AAGUID.
    AuthenticatorCharacteristics GetAuthenticatorWebauthnCustomAaguidsCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    aaguid string
    The AAGUID identifier.
    name string
    The product name associated with the AAGUID.
    authenticator_characteristics object
    Properties of the custom AAGUID authenticator.
    aaguid String
    The AAGUID identifier.
    name String
    The product name associated with the AAGUID.
    authenticatorCharacteristics GetAuthenticatorWebauthnCustomAaguidsCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    aaguid string
    The AAGUID identifier.
    name string
    The product name associated with the AAGUID.
    authenticatorCharacteristics GetAuthenticatorWebauthnCustomAaguidsCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    aaguid str
    The AAGUID identifier.
    name str
    The product name associated with the AAGUID.
    authenticator_characteristics GetAuthenticatorWebauthnCustomAaguidsCustomAaguidAuthenticatorCharacteristics
    Properties of the custom AAGUID authenticator.
    aaguid String
    The AAGUID identifier.
    name String
    The product name associated with the AAGUID.
    authenticatorCharacteristics Property Map
    Properties of the custom AAGUID authenticator.

    GetAuthenticatorWebauthnCustomAaguidsCustomAaguidAuthenticatorCharacteristics

    FipsCompliant bool
    Whether the authenticator meets FIPS compliance requirements.
    HardwareProtected bool
    Whether the authenticator stores the private key on hardware.
    PlatformAttached bool
    Whether the AAGUID is built into the authenticator or is external.
    FipsCompliant bool
    Whether the authenticator meets FIPS compliance requirements.
    HardwareProtected bool
    Whether the authenticator stores the private key on hardware.
    PlatformAttached bool
    Whether the AAGUID is built into the authenticator or is external.
    fips_compliant bool
    Whether the authenticator meets FIPS compliance requirements.
    hardware_protected bool
    Whether the authenticator stores the private key on hardware.
    platform_attached bool
    Whether the AAGUID is built into the authenticator or is external.
    fipsCompliant Boolean
    Whether the authenticator meets FIPS compliance requirements.
    hardwareProtected Boolean
    Whether the authenticator stores the private key on hardware.
    platformAttached Boolean
    Whether the AAGUID is built into the authenticator or is external.
    fipsCompliant boolean
    Whether the authenticator meets FIPS compliance requirements.
    hardwareProtected boolean
    Whether the authenticator stores the private key on hardware.
    platformAttached boolean
    Whether the AAGUID is built into the authenticator or is external.
    fips_compliant bool
    Whether the authenticator meets FIPS compliance requirements.
    hardware_protected bool
    Whether the authenticator stores the private key on hardware.
    platform_attached bool
    Whether the AAGUID is built into the authenticator or is external.
    fipsCompliant Boolean
    Whether the authenticator meets FIPS compliance requirements.
    hardwareProtected Boolean
    Whether the authenticator stores the private key on hardware.
    platformAttached Boolean
    Whether the AAGUID is built into the authenticator or is external.

    Package Details

    Repository
    Okta pulumi/pulumi-okta
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the okta Terraform Provider.
    okta logo
    Viewing docs for Okta v6.9.0
    published on Wednesday, Jul 1, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial