okta.policy.RulePassword

Example coming soon!

Example coming soon!

name string

The unique name of the resource.

args RulePasswordArgs

The arguments to resource properties.

opts CustomResourceOptions

Bag of options to control resource's behavior.

resource_name str

The unique name of the resource.

args RulePasswordArgs

The arguments to resource properties.

opts ResourceOptions

Bag of options to control resource's behavior.

ctx Context

Context object for the current deployment.

name string

The unique name of the resource.

args RulePasswordArgs

The arguments to resource properties.

opts ResourceOption

Bag of options to control resource's behavior.

name string

The unique name of the resource.

args RulePasswordArgs

The arguments to resource properties.

opts CustomResourceOptions

Bag of options to control resource's behavior.

name String

The unique name of the resource.

args RulePasswordArgs

The arguments to resource properties.

options CustomResourceOptions

Bag of options to control resource's behavior.

GroupsExcludeds List<string>

Set of Group IDs to exclude from this rule.

GroupsIncludeds List<string>

Set of Group IDs to include in this rule.

Name string

Policy Rule Name

NetworkConnection string

Network selection mode: ANYWHERE, ZONE. Default: ANYWHERE

NetworkExcludes List<string>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

NetworkIncludes List<string>

Required if networkConnection = ZONE. Indicates the network zones to include.

PasswordChange string

Allow or deny a user to change their password: ALLOW or DENY. Default: ALLOW

PasswordReset string

Allow or deny a user to reset their password: ALLOW or DENY. Default: ALLOW

PasswordResetAccessControl string

Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: LEGACY, AUTH_POLICY.

PasswordResetRequirement RulePasswordPasswordResetRequirement

Self-service password reset (SSPR) requirement settings. Use only when passwordResetAccessControl = "LEGACY".

PasswordUnlock string

Allow or deny a user to unlock. Default: DENY

PolicyId string

Policy ID of the Rule

Priority int

Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.

Status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

UsersExcludeds List<string>

Set of User IDs to Exclude

UsersIncludeds List<string>

Set of User IDs to include in this rule.

GroupsExcludeds []string

Set of Group IDs to exclude from this rule.

GroupsIncludeds []string

Set of Group IDs to include in this rule.

Name string

Policy Rule Name

NetworkConnection string

Network selection mode: ANYWHERE, ZONE. Default: ANYWHERE

NetworkExcludes []string

Required if networkConnection = ZONE. Indicates the network zones to exclude.

NetworkIncludes []string

Required if networkConnection = ZONE. Indicates the network zones to include.

PasswordChange string

Allow or deny a user to change their password: ALLOW or DENY. Default: ALLOW

PasswordReset string

Allow or deny a user to reset their password: ALLOW or DENY. Default: ALLOW

PasswordResetAccessControl string

Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: LEGACY, AUTH_POLICY.

PasswordResetRequirement RulePasswordPasswordResetRequirementArgs

Self-service password reset (SSPR) requirement settings. Use only when passwordResetAccessControl = "LEGACY".

PasswordUnlock string

Allow or deny a user to unlock. Default: DENY

PolicyId string

Policy ID of the Rule

Priority int

Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.

Status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

UsersExcludeds []string

Set of User IDs to Exclude

UsersIncludeds []string

Set of User IDs to include in this rule.

groups_excludeds list(string)

Set of Group IDs to exclude from this rule.

groups_includeds list(string)

Set of Group IDs to include in this rule.

name string

Policy Rule Name

network_connection string

Network selection mode: ANYWHERE, ZONE. Default: ANYWHERE

network_excludes list(string)

Required if networkConnection = ZONE. Indicates the network zones to exclude.

network_includes list(string)

Required if networkConnection = ZONE. Indicates the network zones to include.

password_change string

Allow or deny a user to change their password: ALLOW or DENY. Default: ALLOW

password_reset string

Allow or deny a user to reset their password: ALLOW or DENY. Default: ALLOW

password_reset_access_control string

Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: LEGACY, AUTH_POLICY.

password_reset_requirement object

Self-service password reset (SSPR) requirement settings. Use only when passwordResetAccessControl = "LEGACY".

password_unlock string

Allow or deny a user to unlock. Default: DENY

policy_id string

Policy ID of the Rule

priority number

Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.

status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

users_excludeds list(string)

Set of User IDs to Exclude

users_includeds list(string)

Set of User IDs to include in this rule.

groupsExcludeds List<String>

Set of Group IDs to exclude from this rule.

groupsIncludeds List<String>

Set of Group IDs to include in this rule.

name String

Policy Rule Name

networkConnection String

Network selection mode: ANYWHERE, ZONE. Default: ANYWHERE

networkExcludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to include.

passwordChange String

Allow or deny a user to change their password: ALLOW or DENY. Default: ALLOW

passwordReset String

Allow or deny a user to reset their password: ALLOW or DENY. Default: ALLOW

passwordResetAccessControl String

Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: LEGACY, AUTH_POLICY.

passwordResetRequirement RulePasswordPasswordResetRequirement

Self-service password reset (SSPR) requirement settings. Use only when passwordResetAccessControl = "LEGACY".

passwordUnlock String

Allow or deny a user to unlock. Default: DENY

policyId String

Policy ID of the Rule

priority Integer

Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.

status String

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

usersExcludeds List<String>

Set of User IDs to Exclude

usersIncludeds List<String>

Set of User IDs to include in this rule.

groupsExcludeds string[]

Set of Group IDs to exclude from this rule.

groupsIncludeds string[]

Set of Group IDs to include in this rule.

name string

Policy Rule Name

networkConnection string

Network selection mode: ANYWHERE, ZONE. Default: ANYWHERE

networkExcludes string[]

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes string[]

Required if networkConnection = ZONE. Indicates the network zones to include.

passwordChange string

Allow or deny a user to change their password: ALLOW or DENY. Default: ALLOW

passwordReset string

Allow or deny a user to reset their password: ALLOW or DENY. Default: ALLOW

passwordResetAccessControl string

Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: LEGACY, AUTH_POLICY.

passwordResetRequirement RulePasswordPasswordResetRequirement

Self-service password reset (SSPR) requirement settings. Use only when passwordResetAccessControl = "LEGACY".

passwordUnlock string

Allow or deny a user to unlock. Default: DENY

policyId string

Policy ID of the Rule

priority number

Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.

status string

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

usersExcludeds string[]

Set of User IDs to Exclude

usersIncludeds string[]

Set of User IDs to include in this rule.

groups_excludeds Sequence[str]

Set of Group IDs to exclude from this rule.

groups_includeds Sequence[str]

Set of Group IDs to include in this rule.

name str

Policy Rule Name

network_connection str

Network selection mode: ANYWHERE, ZONE. Default: ANYWHERE

network_excludes Sequence[str]

Required if networkConnection = ZONE. Indicates the network zones to exclude.

network_includes Sequence[str]

Required if networkConnection = ZONE. Indicates the network zones to include.

password_change str

Allow or deny a user to change their password: ALLOW or DENY. Default: ALLOW

password_reset str

Allow or deny a user to reset their password: ALLOW or DENY. Default: ALLOW

password_reset_access_control str

Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: LEGACY, AUTH_POLICY.

password_reset_requirement RulePasswordPasswordResetRequirementArgs

Self-service password reset (SSPR) requirement settings. Use only when passwordResetAccessControl = "LEGACY".

password_unlock str

Allow or deny a user to unlock. Default: DENY

policy_id str

Policy ID of the Rule

priority int

Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.

status str

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

users_excludeds Sequence[str]

Set of User IDs to Exclude

users_includeds Sequence[str]

Set of User IDs to include in this rule.

groupsExcludeds List<String>

Set of Group IDs to exclude from this rule.

groupsIncludeds List<String>

Set of Group IDs to include in this rule.

name String

Policy Rule Name

networkConnection String

Network selection mode: ANYWHERE, ZONE. Default: ANYWHERE

networkExcludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to exclude.

networkIncludes List<String>

Required if networkConnection = ZONE. Indicates the network zones to include.

passwordChange String

Allow or deny a user to change their password: ALLOW or DENY. Default: ALLOW

passwordReset String

Allow or deny a user to reset their password: ALLOW or DENY. Default: ALLOW

passwordResetAccessControl String

Determines whether the Self-Service Password Reset (SSPR) access is governed by an authentication policy or legacy behavior. Options: LEGACY, AUTH_POLICY.

passwordResetRequirement Property Map

Self-service password reset (SSPR) requirement settings. Use only when passwordResetAccessControl = "LEGACY".

passwordUnlock String

Allow or deny a user to unlock. Default: DENY

policyId String

Policy ID of the Rule

priority Number

Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.

status String

Policy Rule Status: ACTIVE or INACTIVE. Default: ACTIVE

usersExcludeds List<String>

Set of User IDs to Exclude

usersIncludeds List<String>

Set of User IDs to include in this rule.

Id string

The provider-assigned unique ID for this managed resource.

Id string

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id str

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

resource_name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

MethodConstraints List<RulePasswordPasswordResetRequirementMethodConstraint>

Constraints on the values specified in the primaryMethods set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The otp method requires a constraint.

PrimaryMethods List<string>

Authenticator methods allowed for the initial authentication step of password recovery. Method otp requires a constraint limiting it to a Google authenticator. Options: otp, push, sms, email, voice.

StepUpEnabled bool

Whether a secondary authenticator is required for password reset (stepUp.required). The following are three valid configurations: required=false, required=true with no methods to use any SSO authenticator, and required=true with securityQuestion as the method. Default: false.

StepUpMethods List<string>

Authenticator methods required for the secondary authentication step of password recovery. Specify only when stepUpEnabled = true and securityQuestion is permitted for the secondary authentication. Items value: securityQuestion.

MethodConstraints []RulePasswordPasswordResetRequirementMethodConstraint

Constraints on the values specified in the primaryMethods set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The otp method requires a constraint.

PrimaryMethods []string

Authenticator methods allowed for the initial authentication step of password recovery. Method otp requires a constraint limiting it to a Google authenticator. Options: otp, push, sms, email, voice.

StepUpEnabled bool

Whether a secondary authenticator is required for password reset (stepUp.required). The following are three valid configurations: required=false, required=true with no methods to use any SSO authenticator, and required=true with securityQuestion as the method. Default: false.

StepUpMethods []string

Authenticator methods required for the secondary authentication step of password recovery. Specify only when stepUpEnabled = true and securityQuestion is permitted for the secondary authentication. Items value: securityQuestion.

method_constraints list(object)

Constraints on the values specified in the primaryMethods set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The otp method requires a constraint.

primary_methods list(string)

Authenticator methods allowed for the initial authentication step of password recovery. Method otp requires a constraint limiting it to a Google authenticator. Options: otp, push, sms, email, voice.

step_up_enabled bool

Whether a secondary authenticator is required for password reset (stepUp.required). The following are three valid configurations: required=false, required=true with no methods to use any SSO authenticator, and required=true with securityQuestion as the method. Default: false.

step_up_methods list(string)

Authenticator methods required for the secondary authentication step of password recovery. Specify only when stepUpEnabled = true and securityQuestion is permitted for the secondary authentication. Items value: securityQuestion.

methodConstraints List<RulePasswordPasswordResetRequirementMethodConstraint>

Constraints on the values specified in the primaryMethods set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The otp method requires a constraint.

primaryMethods List<String>

Authenticator methods allowed for the initial authentication step of password recovery. Method otp requires a constraint limiting it to a Google authenticator. Options: otp, push, sms, email, voice.

stepUpEnabled Boolean

Whether a secondary authenticator is required for password reset (stepUp.required). The following are three valid configurations: required=false, required=true with no methods to use any SSO authenticator, and required=true with securityQuestion as the method. Default: false.

stepUpMethods List<String>

Authenticator methods required for the secondary authentication step of password recovery. Specify only when stepUpEnabled = true and securityQuestion is permitted for the secondary authentication. Items value: securityQuestion.

methodConstraints RulePasswordPasswordResetRequirementMethodConstraint[]

Constraints on the values specified in the primaryMethods set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The otp method requires a constraint.

primaryMethods string[]

Authenticator methods allowed for the initial authentication step of password recovery. Method otp requires a constraint limiting it to a Google authenticator. Options: otp, push, sms, email, voice.

stepUpEnabled boolean

Whether a secondary authenticator is required for password reset (stepUp.required). The following are three valid configurations: required=false, required=true with no methods to use any SSO authenticator, and required=true with securityQuestion as the method. Default: false.

stepUpMethods string[]

Authenticator methods required for the secondary authentication step of password recovery. Specify only when stepUpEnabled = true and securityQuestion is permitted for the secondary authentication. Items value: securityQuestion.

method_constraints Sequence[RulePasswordPasswordResetRequirementMethodConstraint]

Constraints on the values specified in the primaryMethods set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The otp method requires a constraint.

primary_methods Sequence[str]

Authenticator methods allowed for the initial authentication step of password recovery. Method otp requires a constraint limiting it to a Google authenticator. Options: otp, push, sms, email, voice.

step_up_enabled bool

Whether a secondary authenticator is required for password reset (stepUp.required). The following are three valid configurations: required=false, required=true with no methods to use any SSO authenticator, and required=true with securityQuestion as the method. Default: false.

step_up_methods Sequence[str]

Authenticator methods required for the secondary authentication step of password recovery. Specify only when stepUpEnabled = true and securityQuestion is permitted for the secondary authentication. Items value: securityQuestion.

methodConstraints List<Property Map>

Constraints on the values specified in the primaryMethods set. Specifying a constraint limits methods to specific authenticator(s). Currently, Google OTP is the only accepted constraint. The otp method requires a constraint.

primaryMethods List<String>

Authenticator methods allowed for the initial authentication step of password recovery. Method otp requires a constraint limiting it to a Google authenticator. Options: otp, push, sms, email, voice.

stepUpEnabled Boolean

Whether a secondary authenticator is required for password reset (stepUp.required). The following are three valid configurations: required=false, required=true with no methods to use any SSO authenticator, and required=true with securityQuestion as the method. Default: false.

stepUpMethods List<String>

Authenticator methods required for the secondary authentication step of password recovery. Specify only when stepUpEnabled = true and securityQuestion is permitted for the secondary authentication. Items value: securityQuestion.

Method string

The method to constrain (e.g. otp).

AllowedAuthenticators List<string>

Keys of the authenticators allowed for this method (e.g. googleOtp).

Method string

The method to constrain (e.g. otp).

AllowedAuthenticators []string

Keys of the authenticators allowed for this method (e.g. googleOtp).

method string

The method to constrain (e.g. otp).

allowed_authenticators list(string)

Keys of the authenticators allowed for this method (e.g. googleOtp).

method String

The method to constrain (e.g. otp).

allowedAuthenticators List<String>

Keys of the authenticators allowed for this method (e.g. googleOtp).

method string

The method to constrain (e.g. otp).

allowedAuthenticators string[]

Keys of the authenticators allowed for this method (e.g. googleOtp).

method str

The method to constrain (e.g. otp).

allowed_authenticators Sequence[str]

Keys of the authenticators allowed for this method (e.g. googleOtp).

method String

The method to constrain (e.g. otp).

allowedAuthenticators List<String>

Keys of the authenticators allowed for this method (e.g. googleOtp).