okta.policy.RuleIdpDiscovery

PlatformIncludes List<RuleIdpDiscoveryPlatformInclude>

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

NetworkExcludes List<string>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

NetworkIncludes List<string>

Required if networkConnection = ZONE. Indicates the network zones to include.

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

PolicyId string

Policy ID of the Rule

Priority int

Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.

PropertyName string

The IdP property that the evaluated expression should match against when selectionType is DYNAMIC. Maps to actions.idp.matchCriteria[0].propertyName in the API. If not set, the API default is used and the value is stored in state.

An Okta Expression Language expression that is evaluated against the Login Context and used to dynamically select an IdP. Only applicable when selectionType is DYNAMIC. Maps to actions.idp.matchCriteria[0].providerExpression in the API. Example: login.identifier.substringAfter('@')

SelectionType string

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

Status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

UserIdentifierPatterns List<RuleIdpDiscoveryUserIdentifierPattern>

Profile attribute matching can only have a single value that describes the type indicated in userIdentifierType. This is the attribute or identifier that the userIdentifierPatterns are checked against.

Specifies a User Identifier pattern condition to match against. If 'match_type' of 'EXPRESSION' is used, only a single element can be set, otherwise multiple elements of matching patterns may be provided.

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

AppExcludes []RuleIdpDiscoveryAppExcludeArgs

One of: IDENTIFIER, ATTRIBUTE

Applications to exclude in discovery. See appInclude for details.

AppIncludes []RuleIdpDiscoveryAppIncludeArgs

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

IdpProviders []RuleIdpDiscoveryIdpProviderArgs

Name string

Policy Rule Name

PlatformIncludes []RuleIdpDiscoveryPlatformIncludeArgs

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

NetworkExcludes []string

Required if networkConnection = ZONE. Indicates the network zones to exclude.

NetworkIncludes []string

Required if networkConnection = ZONE. Indicates the network zones to include.

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

PolicyId string

Policy ID of the Rule

Priority int

PropertyName string

SelectionType string

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

Status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

UserIdentifierPatterns []RuleIdpDiscoveryUserIdentifierPatternArgs

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

app_excludes list(object)

One of: IDENTIFIER, ATTRIBUTE

Applications to exclude in discovery. See appInclude for details.

app_includes list(object)

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idp_providers list(object)

name string

Policy Rule Name

network_connection string

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

network_excludes list(string)

Required if networkConnection = ZONE. Indicates the network zones to exclude.

network_includes list(string)

Required if networkConnection = ZONE. Indicates the network zones to include.

platform_includes list(object)

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policy_id string

Policy ID of the Rule

priority number

property_name string

provider_expression string

selection_type string

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

user_identifier_patterns list(object)

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

user_identifier_attribute string

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

user_identifier_type string

One of: IDENTIFIER, ATTRIBUTE

appExcludes List<RuleIdpDiscoveryAppExclude>

Applications to exclude in discovery. See appInclude for details.

appIncludes List<RuleIdpDiscoveryAppInclude>

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idpProviders List<RuleIdpDiscoveryIdpProvider>

name String

Policy Rule Name

platformIncludes List<RuleIdpDiscoveryPlatformInclude>

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

networkExcludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to include.

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policyId String

Policy ID of the Rule

priority Integer

propertyName String

selectionType String

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status String

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

userIdentifierPatterns List<RuleIdpDiscoveryUserIdentifierPattern>

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

appExcludes RuleIdpDiscoveryAppExclude[]

One of: IDENTIFIER, ATTRIBUTE

Applications to exclude in discovery. See appInclude for details.

appIncludes RuleIdpDiscoveryAppInclude[]

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idpProviders RuleIdpDiscoveryIdpProvider[]

name string

Policy Rule Name

networkConnection string

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

networkExcludes string[]

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes string[]

Required if networkConnection = ZONE. Indicates the network zones to include.

platformIncludes RuleIdpDiscoveryPlatformInclude[]

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policyId string

Policy ID of the Rule

priority number

propertyName string

providerExpression string

selectionType string

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

shouldFallBackToOkta boolean

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

userIdentifierAttribute string

userIdentifierPatterns RuleIdpDiscoveryUserIdentifierPattern[]

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

userIdentifierType string

One of: IDENTIFIER, ATTRIBUTE

app_excludes Sequence[RuleIdpDiscoveryAppExcludeArgs]

Applications to exclude in discovery. See appInclude for details.

app_includes Sequence[RuleIdpDiscoveryAppIncludeArgs]

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idp_providers Sequence[RuleIdpDiscoveryIdpProviderArgs]

name str

Policy Rule Name

network_connection str

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

network_excludes Sequence[str]

Required if networkConnection = ZONE. Indicates the network zones to exclude.

network_includes Sequence[str]

Required if networkConnection = ZONE. Indicates the network zones to include.

platform_includes Sequence[RuleIdpDiscoveryPlatformIncludeArgs]

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policy_id str

Policy ID of the Rule

priority int

property_name str

provider_expression str

selection_type str

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

user_identifier_patterns Sequence[RuleIdpDiscoveryUserIdentifierPatternArgs]

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status str

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

user_identifier_attribute str

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

user_identifier_type str

One of: IDENTIFIER, ATTRIBUTE

appExcludes List<Property Map>

Applications to exclude in discovery. See appInclude for details.

appIncludes List<Property Map>

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idpProviders List<Property Map>

name String

Policy Rule Name

platformIncludes List<Property Map>

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

networkExcludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to include.

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policyId String

Policy ID of the Rule

priority Number

propertyName String

selectionType String

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status String

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

userIdentifierPatterns List<Property Map>

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

AppExcludes List<RuleIdpDiscoveryAppExclude>

One of: IDENTIFIER, ATTRIBUTE

Outputs

All input properties are implicitly available as output properties. Additionally, the RuleIdpDiscovery resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing RuleIdpDiscovery Resource

Get an existing RuleIdpDiscovery resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: RuleIdpDiscoveryState, opts?: CustomResourceOptions): RuleIdpDiscovery

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        app_excludes: Optional[Sequence[RuleIdpDiscoveryAppExcludeArgs]] = None,
        app_includes: Optional[Sequence[RuleIdpDiscoveryAppIncludeArgs]] = None,
        idp_providers: Optional[Sequence[RuleIdpDiscoveryIdpProviderArgs]] = None,
        name: Optional[str] = None,
        network_connection: Optional[str] = None,
        network_excludes: Optional[Sequence[str]] = None,
        network_includes: Optional[Sequence[str]] = None,
        platform_includes: Optional[Sequence[RuleIdpDiscoveryPlatformIncludeArgs]] = None,
        policy_id: Optional[str] = None,
        priority: Optional[int] = None,
        property_name: Optional[str] = None,
        provider_expression: Optional[str] = None,
        selection_type: Optional[str] = None,
        should_fall_back_to_okta: Optional[bool] = None,
        status: Optional[str] = None,
        user_identifier_attribute: Optional[str] = None,
        user_identifier_patterns: Optional[Sequence[RuleIdpDiscoveryUserIdentifierPatternArgs]] = None,
        user_identifier_type: Optional[str] = None) -> RuleIdpDiscovery

func GetRuleIdpDiscovery(ctx *Context, name string, id IDInput, state *RuleIdpDiscoveryState, opts ...ResourceOption) (*RuleIdpDiscovery, error)

public static RuleIdpDiscovery Get(string name, Input<string> id, RuleIdpDiscoveryState? state, CustomResourceOptions? opts = null)

public static RuleIdpDiscovery get(String name, Output<String> id, RuleIdpDiscoveryState state, CustomResourceOptions options)

resources:  _:    type: okta:policy:RuleIdpDiscovery    get:      id: ${id}

import {
  to = okta_policy_ruleidpdiscovery.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Applications to exclude in discovery. See appInclude for details.

AppIncludes List<RuleIdpDiscoveryAppInclude>

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

IdpProviders List<RuleIdpDiscoveryIdpProvider>

Name string

Policy Rule Name

PlatformIncludes List<RuleIdpDiscoveryPlatformInclude>

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

NetworkExcludes List<string>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

NetworkIncludes List<string>

Required if networkConnection = ZONE. Indicates the network zones to include.

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

PolicyId string

Policy ID of the Rule

Priority int

PropertyName string

SelectionType string

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

Status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

UserIdentifierPatterns List<RuleIdpDiscoveryUserIdentifierPattern>

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

AppExcludes []RuleIdpDiscoveryAppExcludeArgs

One of: IDENTIFIER, ATTRIBUTE

Applications to exclude in discovery. See appInclude for details.

AppIncludes []RuleIdpDiscoveryAppIncludeArgs

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

IdpProviders []RuleIdpDiscoveryIdpProviderArgs

Name string

Policy Rule Name

PlatformIncludes []RuleIdpDiscoveryPlatformIncludeArgs

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

NetworkExcludes []string

Required if networkConnection = ZONE. Indicates the network zones to exclude.

NetworkIncludes []string

Required if networkConnection = ZONE. Indicates the network zones to include.

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

PolicyId string

Policy ID of the Rule

Priority int

PropertyName string

SelectionType string

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

Status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

UserIdentifierPatterns []RuleIdpDiscoveryUserIdentifierPatternArgs

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

app_excludes list(object)

One of: IDENTIFIER, ATTRIBUTE

Applications to exclude in discovery. See appInclude for details.

app_includes list(object)

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idp_providers list(object)

name string

Policy Rule Name

network_connection string

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

network_excludes list(string)

Required if networkConnection = ZONE. Indicates the network zones to exclude.

network_includes list(string)

Required if networkConnection = ZONE. Indicates the network zones to include.

platform_includes list(object)

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policy_id string

Policy ID of the Rule

priority number

property_name string

provider_expression string

selection_type string

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

user_identifier_patterns list(object)

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

user_identifier_attribute string

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

user_identifier_type string

One of: IDENTIFIER, ATTRIBUTE

appExcludes List<RuleIdpDiscoveryAppExclude>

Applications to exclude in discovery. See appInclude for details.

appIncludes List<RuleIdpDiscoveryAppInclude>

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idpProviders List<RuleIdpDiscoveryIdpProvider>

name String

Policy Rule Name

platformIncludes List<RuleIdpDiscoveryPlatformInclude>

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

networkExcludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to include.

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policyId String

Policy ID of the Rule

priority Integer

propertyName String

selectionType String

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status String

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

userIdentifierPatterns List<RuleIdpDiscoveryUserIdentifierPattern>

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

appExcludes RuleIdpDiscoveryAppExclude[]

One of: IDENTIFIER, ATTRIBUTE

Applications to exclude in discovery. See appInclude for details.

appIncludes RuleIdpDiscoveryAppInclude[]

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idpProviders RuleIdpDiscoveryIdpProvider[]

name string

Policy Rule Name

networkConnection string

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

networkExcludes string[]

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes string[]

Required if networkConnection = ZONE. Indicates the network zones to include.

platformIncludes RuleIdpDiscoveryPlatformInclude[]

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policyId string

Policy ID of the Rule

priority number

propertyName string

providerExpression string

selectionType string

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

shouldFallBackToOkta boolean

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

userIdentifierAttribute string

userIdentifierPatterns RuleIdpDiscoveryUserIdentifierPattern[]

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

userIdentifierType string

One of: IDENTIFIER, ATTRIBUTE

app_excludes Sequence[RuleIdpDiscoveryAppExcludeArgs]

Applications to exclude in discovery. See appInclude for details.

app_includes Sequence[RuleIdpDiscoveryAppIncludeArgs]

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idp_providers Sequence[RuleIdpDiscoveryIdpProviderArgs]

name str

Policy Rule Name

network_connection str

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

network_excludes Sequence[str]

Required if networkConnection = ZONE. Indicates the network zones to exclude.

network_includes Sequence[str]

Required if networkConnection = ZONE. Indicates the network zones to include.

platform_includes Sequence[RuleIdpDiscoveryPlatformIncludeArgs]

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policy_id str

Policy ID of the Rule

priority int

property_name str

provider_expression str

selection_type str

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

user_identifier_patterns Sequence[RuleIdpDiscoveryUserIdentifierPatternArgs]

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status str

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

user_identifier_attribute str

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.

user_identifier_type str

One of: IDENTIFIER, ATTRIBUTE

appExcludes List<Property Map>

Applications to exclude in discovery. See appInclude for details.

appIncludes List<Property Map>

Applications to include in discovery rule.

'id' - (Optional) Use if 'type' is 'APP' to indicate the application id to include.
'name' - (Optional) Use if the 'type' is 'APP_TYPE' to indicate the type of application(s) to include in instances where an entire group (i.e. 'yahoo_mail') of applications should be included.
'type' - (Required) One of: 'APP', 'APP_TYPE'

idpProviders List<Property Map>

name String

Policy Rule Name

platformIncludes List<Property Map>

Network selection mode: ANYWHERE, ZONE, ON_NETWORK, or OFF_NETWORK. Default: ANYWHERE

networkExcludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to include.

Platform to include in discovery rule.

'type' - (Optional) One of: 'ANY', 'MOBILE', 'DESKTOP'
'os_expression - (Optional) Only available when using osType = 'OTHER'
'os_type' - (Optional) One of: 'ANY', 'IOS', 'WINDOWS', 'ANDROID', 'OTHER', 'OSX'

policyId String

Policy ID of the Rule

priority Number

propertyName String

selectionType String

Determines how the IdP is selected. One of: SPECIFIC, DYNAMIC. Default: SPECIFIC. When DYNAMIC, the IdP is selected based on the evaluated providerExpression.

Specifies whether to fall back to Okta if authentication with the matched IdP fails. Only applicable when selectionType is DYNAMIC. Default: false.

status String

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

userIdentifierPatterns List<Property Map>

'match_type' - (Optional) The kind of pattern. For regex, use 'EXPRESSION'. For simple string matches, use one of the following: 'SUFFIX', 'EQUALS', 'STARTS_WITH', 'CONTAINS'
'value' - (Optional) The regex or simple match string to match against.