1. Registry
  2. Packages
  3. Onelogin Provider
  4. API Docs
  5. Apps
Viewing docs for onelogin 1.11.0
published on Friday, Oct 23, 2026 by onelogin
onelogin logo onelogin logo
Viewing docs for onelogin 1.11.0
published on Friday, Oct 23, 2026 by onelogin

    Creates a Basic Application.

    This resource allows you to create and configure a Basic (non-SAML non-OIDC) Application.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    
    const myApp = new onelogin.Apps("my_app", {
        connectorId: 12345,
        description: "basic app",
        name: "example",
        notes: "basic app",
        visible: true,
        allowAssumedSignin: false,
        provisioning: {
            enabled: false,
        },
        parameters: [{
            safeEntitlementsEnabled: false,
            userAttributeMappings: "",
            provisionedEntitlements: false,
            skipIfBlank: false,
            userAttributeMacros: "",
            attributesTransformations: "",
            defaultValues: ["default"],
            includeInSamlAssertion: false,
            label: "username",
            paramKeyName: "user name",
            values: ["user.email"],
        }],
    });
    
    import pulumi
    import pulumi_onelogin as onelogin
    
    my_app = onelogin.Apps("my_app",
        connector_id=12345,
        description="basic app",
        name="example",
        notes="basic app",
        visible=True,
        allow_assumed_signin=False,
        provisioning={
            "enabled": False,
        },
        parameters=[{
            "safe_entitlements_enabled": False,
            "user_attribute_mappings": "",
            "provisioned_entitlements": False,
            "skip_if_blank": False,
            "user_attribute_macros": "",
            "attributes_transformations": "",
            "default_values": ["default"],
            "include_in_saml_assertion": False,
            "label": "username",
            "param_key_name": "user name",
            "values": ["user.email"],
        }])
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := onelogin.NewApps(ctx, "my_app", &onelogin.AppsArgs{
    			ConnectorId:        pulumi.Float64(12345),
    			Description:        pulumi.String("basic app"),
    			Name:               pulumi.String("example"),
    			Notes:              pulumi.String("basic app"),
    			Visible:            pulumi.Bool(true),
    			AllowAssumedSignin: pulumi.Bool(false),
    			Provisioning: pulumi.BoolMap{
    				"enabled": pulumi.Bool(false),
    			},
    			Parameters: onelogin.AppsParameterArray{
    				&onelogin.AppsParameterArgs{
    					SafeEntitlementsEnabled:   pulumi.Bool(false),
    					UserAttributeMappings:     pulumi.String(""),
    					ProvisionedEntitlements:   pulumi.Bool(false),
    					SkipIfBlank:               pulumi.Bool(false),
    					UserAttributeMacros:       pulumi.String(""),
    					AttributesTransformations: pulumi.String(""),
    					DefaultValues: pulumi.StringArray{
    						pulumi.String("default"),
    					},
    					IncludeInSamlAssertion: pulumi.Bool(false),
    					Label:                  pulumi.String("username"),
    					ParamKeyName:           pulumi.String("user name"),
    					Values: pulumi.StringArray{
    						pulumi.String("user.email"),
    					},
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var myApp = new Onelogin.Apps("my_app", new()
        {
            ConnectorId = 12345,
            Description = "basic app",
            Name = "example",
            Notes = "basic app",
            Visible = true,
            AllowAssumedSignin = false,
            Provisioning = 
            {
                { "enabled", false },
            },
            Parameters = new[]
            {
                new Onelogin.Inputs.AppsParameterArgs
                {
                    SafeEntitlementsEnabled = false,
                    UserAttributeMappings = "",
                    ProvisionedEntitlements = false,
                    SkipIfBlank = false,
                    UserAttributeMacros = "",
                    AttributesTransformations = "",
                    DefaultValues = new[]
                    {
                        "default",
                    },
                    IncludeInSamlAssertion = false,
                    Label = "username",
                    ParamKeyName = "user name",
                    Values = new[]
                    {
                        "user.email",
                    },
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import com.pulumi.onelogin.inputs.AppsParameterArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var myApp = new Apps("myApp", AppsArgs.builder()
                .connectorId(12345.0)
                .description("basic app")
                .name("example")
                .notes("basic app")
                .visible(true)
                .allowAssumedSignin(false)
                .provisioning(Map.of("enabled", false))
                .parameters(AppsParameterArgs.builder()
                    .safeEntitlementsEnabled(false)
                    .userAttributeMappings("")
                    .provisionedEntitlements(false)
                    .skipIfBlank(false)
                    .userAttributeMacros("")
                    .attributesTransformations("")
                    .defaultValues("default")
                    .includeInSamlAssertion(false)
                    .label("username")
                    .paramKeyName("user name")
                    .values("user.email")
                    .build())
                .build());
    
        }
    }
    
    resources:
      myApp:
        type: onelogin:Apps
        name: my_app
        properties:
          connectorId: 12345
          description: basic app
          name: example
          notes: basic app
          visible: true
          allowAssumedSignin: false
          provisioning:
            enabled: false
          parameters:
            - safeEntitlementsEnabled: false
              userAttributeMappings: ""
              provisionedEntitlements: false
              skipIfBlank: false
              userAttributeMacros: ""
              attributesTransformations: ""
              defaultValues:
                - default
              includeInSamlAssertion: false
              label: username
              paramKeyName: user name
              values:
                - user.email
    
    Example coming soon!
    

    Create Apps Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Apps(name: string, args: AppsArgs, opts?: CustomResourceOptions);
    @overload
    def Apps(resource_name: str,
             args: AppsArgs,
             opts: Optional[ResourceOptions] = None)
    
    @overload
    def Apps(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             connector_id: Optional[float] = None,
             allow_assumed_signin: Optional[bool] = None,
             apps_id: Optional[str] = None,
             brand_id: Optional[float] = None,
             description: Optional[str] = None,
             name: Optional[str] = None,
             notes: Optional[str] = None,
             parameters: Optional[Sequence[AppsParameterArgs]] = None,
             policy_id: Optional[float] = None,
             provisioning: Optional[Mapping[str, bool]] = None,
             role_ids: Optional[Sequence[float]] = None,
             visible: Optional[bool] = None)
    func NewApps(ctx *Context, name string, args AppsArgs, opts ...ResourceOption) (*Apps, error)
    public Apps(string name, AppsArgs args, CustomResourceOptions? opts = null)
    public Apps(String name, AppsArgs args)
    public Apps(String name, AppsArgs args, CustomResourceOptions options)
    
    type: onelogin:Apps
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "onelogin_apps" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args AppsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AppsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AppsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AppsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AppsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var appsResource = new Onelogin.Apps("appsResource", new()
    {
        ConnectorId = 0.0,
        AllowAssumedSignin = false,
        AppsId = "string",
        BrandId = 0.0,
        Description = "string",
        Name = "string",
        Notes = "string",
        Parameters = new[]
        {
            new Onelogin.Inputs.AppsParameterArgs
            {
                ParamKeyName = "string",
                AttributesTransformations = "string",
                DefaultValues = new[]
                {
                    "string",
                },
                IncludeInSamlAssertion = false,
                Label = "string",
                ParamId = 0.0,
                ProvisionedEntitlements = false,
                SafeEntitlementsEnabled = false,
                SkipIfBlank = false,
                UserAttributeMacros = "string",
                UserAttributeMappings = "string",
                Values = new[]
                {
                    "string",
                },
            },
        },
        PolicyId = 0.0,
        Provisioning = 
        {
            { "string", false },
        },
        RoleIds = new[]
        {
            0.0,
        },
        Visible = false,
    });
    
    example, err := onelogin.NewApps(ctx, "appsResource", &onelogin.AppsArgs{
    	ConnectorId:        pulumi.Float64(0),
    	AllowAssumedSignin: pulumi.Bool(false),
    	AppsId:             pulumi.String("string"),
    	BrandId:            pulumi.Float64(0),
    	Description:        pulumi.String("string"),
    	Name:               pulumi.String("string"),
    	Notes:              pulumi.String("string"),
    	Parameters: onelogin.AppsParameterArray{
    		&onelogin.AppsParameterArgs{
    			ParamKeyName:              pulumi.String("string"),
    			AttributesTransformations: pulumi.String("string"),
    			DefaultValues: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			IncludeInSamlAssertion:  pulumi.Bool(false),
    			Label:                   pulumi.String("string"),
    			ParamId:                 pulumi.Float64(0),
    			ProvisionedEntitlements: pulumi.Bool(false),
    			SafeEntitlementsEnabled: pulumi.Bool(false),
    			SkipIfBlank:             pulumi.Bool(false),
    			UserAttributeMacros:     pulumi.String("string"),
    			UserAttributeMappings:   pulumi.String("string"),
    			Values: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    		},
    	},
    	PolicyId: pulumi.Float64(0),
    	Provisioning: pulumi.BoolMap{
    		"string": pulumi.Bool(false),
    	},
    	RoleIds: pulumi.Float64Array{
    		pulumi.Float64(0),
    	},
    	Visible: pulumi.Bool(false),
    })
    
    resource "onelogin_apps" "appsResource" {
      lifecycle {
        create_before_destroy = true
      }
      connector_id         = 0
      allow_assumed_signin = false
      apps_id              = "string"
      brand_id             = 0
      description          = "string"
      name                 = "string"
      notes                = "string"
      parameters {
        param_key_name             = "string"
        attributes_transformations = "string"
        default_values             = ["string"]
        include_in_saml_assertion  = false
        label                      = "string"
        param_id                   = 0
        provisioned_entitlements   = false
        safe_entitlements_enabled  = false
        skip_if_blank              = false
        user_attribute_macros      = "string"
        user_attribute_mappings    = "string"
        values                     = ["string"]
      }
      policy_id = 0
      provisioning = {
        "string" = false
      }
      role_ids = [0]
      visible  = false
    }
    
    var appsResource = new Apps("appsResource", AppsArgs.builder()
        .connectorId(0.0)
        .allowAssumedSignin(false)
        .appsId("string")
        .brandId(0.0)
        .description("string")
        .name("string")
        .notes("string")
        .parameters(AppsParameterArgs.builder()
            .paramKeyName("string")
            .attributesTransformations("string")
            .defaultValues("string")
            .includeInSamlAssertion(false)
            .label("string")
            .paramId(0.0)
            .provisionedEntitlements(false)
            .safeEntitlementsEnabled(false)
            .skipIfBlank(false)
            .userAttributeMacros("string")
            .userAttributeMappings("string")
            .values("string")
            .build())
        .policyId(0.0)
        .provisioning(Map.of("string", false))
        .roleIds(0.0)
        .visible(false)
        .build());
    
    apps_resource = onelogin.Apps("appsResource",
        connector_id=float(0),
        allow_assumed_signin=False,
        apps_id="string",
        brand_id=float(0),
        description="string",
        name="string",
        notes="string",
        parameters=[{
            "param_key_name": "string",
            "attributes_transformations": "string",
            "default_values": ["string"],
            "include_in_saml_assertion": False,
            "label": "string",
            "param_id": float(0),
            "provisioned_entitlements": False,
            "safe_entitlements_enabled": False,
            "skip_if_blank": False,
            "user_attribute_macros": "string",
            "user_attribute_mappings": "string",
            "values": ["string"],
        }],
        policy_id=float(0),
        provisioning={
            "string": False,
        },
        role_ids=[float(0)],
        visible=False)
    
    const appsResource = new onelogin.Apps("appsResource", {
        connectorId: 0,
        allowAssumedSignin: false,
        appsId: "string",
        brandId: 0,
        description: "string",
        name: "string",
        notes: "string",
        parameters: [{
            paramKeyName: "string",
            attributesTransformations: "string",
            defaultValues: ["string"],
            includeInSamlAssertion: false,
            label: "string",
            paramId: 0,
            provisionedEntitlements: false,
            safeEntitlementsEnabled: false,
            skipIfBlank: false,
            userAttributeMacros: "string",
            userAttributeMappings: "string",
            values: ["string"],
        }],
        policyId: 0,
        provisioning: {
            string: false,
        },
        roleIds: [0],
        visible: false,
    });
    
    type: onelogin:Apps
    properties:
        allowAssumedSignin: false
        appsId: string
        brandId: 0
        connectorId: 0
        description: string
        name: string
        notes: string
        parameters:
            - attributesTransformations: string
              defaultValues:
                - string
              includeInSamlAssertion: false
              label: string
              paramId: 0
              paramKeyName: string
              provisionedEntitlements: false
              safeEntitlementsEnabled: false
              skipIfBlank: false
              userAttributeMacros: string
              userAttributeMappings: string
              values:
                - string
        policyId: 0
        provisioning:
            string: false
        roleIds:
            - 0
        visible: false
    

    Apps Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Apps resource accepts the following input properties:

    ConnectorId double
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    AllowAssumedSignin bool
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    AppsId string
    App's unique ID in OneLogin.
    BrandId double

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    Description string
    App description.
    Name string
    The app's name.
    Notes string
    Notes about the app.
    Parameters List<AppsParameter>
    a list of custom parameters for this app.
    PolicyId double

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    Provisioning Dictionary<string, bool>
    Settings regarding the app's provisioning ability.
    RoleIds List<double>

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    Visible bool
    Determine if app should be visible in OneLogin portal. Defaults to true.
    ConnectorId float64
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    AllowAssumedSignin bool
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    AppsId string
    App's unique ID in OneLogin.
    BrandId float64

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    Description string
    App description.
    Name string
    The app's name.
    Notes string
    Notes about the app.
    Parameters []AppsParameterArgs
    a list of custom parameters for this app.
    PolicyId float64

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    Provisioning map[string]bool
    Settings regarding the app's provisioning ability.
    RoleIds []float64

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    Visible bool
    Determine if app should be visible in OneLogin portal. Defaults to true.
    connector_id number
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    allow_assumed_signin bool
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    apps_id string
    App's unique ID in OneLogin.
    brand_id number

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    description string
    App description.
    name string
    The app's name.
    notes string
    Notes about the app.
    parameters list(object)
    a list of custom parameters for this app.
    policy_id number

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning map(bool)
    Settings regarding the app's provisioning ability.
    role_ids list(number)

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    visible bool
    Determine if app should be visible in OneLogin portal. Defaults to true.
    connectorId Double
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    allowAssumedSignin Boolean
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    appsId String
    App's unique ID in OneLogin.
    brandId Double

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    description String
    App description.
    name String
    The app's name.
    notes String
    Notes about the app.
    parameters List<AppsParameter>
    a list of custom parameters for this app.
    policyId Double

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning Map<String,Boolean>
    Settings regarding the app's provisioning ability.
    roleIds List<Double>

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    visible Boolean
    Determine if app should be visible in OneLogin portal. Defaults to true.
    connectorId number
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    allowAssumedSignin boolean
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    appsId string
    App's unique ID in OneLogin.
    brandId number

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    description string
    App description.
    name string
    The app's name.
    notes string
    Notes about the app.
    parameters AppsParameter[]
    a list of custom parameters for this app.
    policyId number

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning {[key: string]: boolean}
    Settings regarding the app's provisioning ability.
    roleIds number[]

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    visible boolean
    Determine if app should be visible in OneLogin portal. Defaults to true.
    connector_id float
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    allow_assumed_signin bool
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    apps_id str
    App's unique ID in OneLogin.
    brand_id float

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    description str
    App description.
    name str
    The app's name.
    notes str
    Notes about the app.
    parameters Sequence[AppsParameterArgs]
    a list of custom parameters for this app.
    policy_id float

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning Mapping[str, bool]
    Settings regarding the app's provisioning ability.
    role_ids Sequence[float]

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    visible bool
    Determine if app should be visible in OneLogin portal. Defaults to true.
    connectorId Number
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    allowAssumedSignin Boolean
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    appsId String
    App's unique ID in OneLogin.
    brandId Number

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    description String
    App description.
    name String
    The app's name.
    notes String
    Notes about the app.
    parameters List<Property Map>
    a list of custom parameters for this app.
    policyId Number

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning Map<Boolean>
    Settings regarding the app's provisioning ability.
    roleIds List<Number>

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    visible Boolean
    Determine if app should be visible in OneLogin portal. Defaults to true.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Apps resource produces the following output properties:

    AuthMethod double
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    CreatedAt string
    Timestamp for app's creation.
    IconUrl string
    The url for the app's icon.
    Id string
    The provider-assigned unique ID for this managed resource.
    TabId double
    The tab in which to display in OneLogin portal.
    UpdatedAt string
    Timestamp for app's last update.
    AuthMethod float64
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    CreatedAt string
    Timestamp for app's creation.
    IconUrl string
    The url for the app's icon.
    Id string
    The provider-assigned unique ID for this managed resource.
    TabId float64
    The tab in which to display in OneLogin portal.
    UpdatedAt string
    Timestamp for app's last update.
    auth_method number
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    created_at string
    Timestamp for app's creation.
    icon_url string
    The url for the app's icon.
    id string
    The provider-assigned unique ID for this managed resource.
    tab_id number
    The tab in which to display in OneLogin portal.
    updated_at string
    Timestamp for app's last update.
    authMethod Double
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    createdAt String
    Timestamp for app's creation.
    iconUrl String
    The url for the app's icon.
    id String
    The provider-assigned unique ID for this managed resource.
    tabId Double
    The tab in which to display in OneLogin portal.
    updatedAt String
    Timestamp for app's last update.
    authMethod number
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    createdAt string
    Timestamp for app's creation.
    iconUrl string
    The url for the app's icon.
    id string
    The provider-assigned unique ID for this managed resource.
    tabId number
    The tab in which to display in OneLogin portal.
    updatedAt string
    Timestamp for app's last update.
    auth_method float
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    created_at str
    Timestamp for app's creation.
    icon_url str
    The url for the app's icon.
    id str
    The provider-assigned unique ID for this managed resource.
    tab_id float
    The tab in which to display in OneLogin portal.
    updated_at str
    Timestamp for app's last update.
    authMethod Number
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    createdAt String
    Timestamp for app's creation.
    iconUrl String
    The url for the app's icon.
    id String
    The provider-assigned unique ID for this managed resource.
    tabId Number
    The tab in which to display in OneLogin portal.
    updatedAt String
    Timestamp for app's last update.

    Look up Existing Apps Resource

    Get an existing Apps resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AppsState, opts?: CustomResourceOptions): Apps
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            allow_assumed_signin: Optional[bool] = None,
            apps_id: Optional[str] = None,
            auth_method: Optional[float] = None,
            brand_id: Optional[float] = None,
            connector_id: Optional[float] = None,
            created_at: Optional[str] = None,
            description: Optional[str] = None,
            icon_url: Optional[str] = None,
            name: Optional[str] = None,
            notes: Optional[str] = None,
            parameters: Optional[Sequence[AppsParameterArgs]] = None,
            policy_id: Optional[float] = None,
            provisioning: Optional[Mapping[str, bool]] = None,
            role_ids: Optional[Sequence[float]] = None,
            tab_id: Optional[float] = None,
            updated_at: Optional[str] = None,
            visible: Optional[bool] = None) -> Apps
    func GetApps(ctx *Context, name string, id IDInput, state *AppsState, opts ...ResourceOption) (*Apps, error)
    public static Apps Get(string name, Input<string> id, AppsState? state, CustomResourceOptions? opts = null)
    public static Apps get(String name, Output<String> id, AppsState state, CustomResourceOptions options)
    resources:  _:    type: onelogin:Apps    get:      id: ${id}
    import {
      to = onelogin_apps.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowAssumedSignin bool
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    AppsId string
    App's unique ID in OneLogin.
    AuthMethod double
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    BrandId double

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    ConnectorId double
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    CreatedAt string
    Timestamp for app's creation.
    Description string
    App description.
    IconUrl string
    The url for the app's icon.
    Name string
    The app's name.
    Notes string
    Notes about the app.
    Parameters List<AppsParameter>
    a list of custom parameters for this app.
    PolicyId double

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    Provisioning Dictionary<string, bool>
    Settings regarding the app's provisioning ability.
    RoleIds List<double>

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    TabId double
    The tab in which to display in OneLogin portal.
    UpdatedAt string
    Timestamp for app's last update.
    Visible bool
    Determine if app should be visible in OneLogin portal. Defaults to true.
    AllowAssumedSignin bool
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    AppsId string
    App's unique ID in OneLogin.
    AuthMethod float64
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    BrandId float64

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    ConnectorId float64
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    CreatedAt string
    Timestamp for app's creation.
    Description string
    App description.
    IconUrl string
    The url for the app's icon.
    Name string
    The app's name.
    Notes string
    Notes about the app.
    Parameters []AppsParameterArgs
    a list of custom parameters for this app.
    PolicyId float64

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    Provisioning map[string]bool
    Settings regarding the app's provisioning ability.
    RoleIds []float64

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    TabId float64
    The tab in which to display in OneLogin portal.
    UpdatedAt string
    Timestamp for app's last update.
    Visible bool
    Determine if app should be visible in OneLogin portal. Defaults to true.
    allow_assumed_signin bool
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    apps_id string
    App's unique ID in OneLogin.
    auth_method number
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    brand_id number

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    connector_id number
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    created_at string
    Timestamp for app's creation.
    description string
    App description.
    icon_url string
    The url for the app's icon.
    name string
    The app's name.
    notes string
    Notes about the app.
    parameters list(object)
    a list of custom parameters for this app.
    policy_id number

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning map(bool)
    Settings regarding the app's provisioning ability.
    role_ids list(number)

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    tab_id number
    The tab in which to display in OneLogin portal.
    updated_at string
    Timestamp for app's last update.
    visible bool
    Determine if app should be visible in OneLogin portal. Defaults to true.
    allowAssumedSignin Boolean
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    appsId String
    App's unique ID in OneLogin.
    authMethod Double
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    brandId Double

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    connectorId Double
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    createdAt String
    Timestamp for app's creation.
    description String
    App description.
    iconUrl String
    The url for the app's icon.
    name String
    The app's name.
    notes String
    Notes about the app.
    parameters List<AppsParameter>
    a list of custom parameters for this app.
    policyId Double

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning Map<String,Boolean>
    Settings regarding the app's provisioning ability.
    roleIds List<Double>

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    tabId Double
    The tab in which to display in OneLogin portal.
    updatedAt String
    Timestamp for app's last update.
    visible Boolean
    Determine if app should be visible in OneLogin portal. Defaults to true.
    allowAssumedSignin boolean
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    appsId string
    App's unique ID in OneLogin.
    authMethod number
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    brandId number

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    connectorId number
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    createdAt string
    Timestamp for app's creation.
    description string
    App description.
    iconUrl string
    The url for the app's icon.
    name string
    The app's name.
    notes string
    Notes about the app.
    parameters AppsParameter[]
    a list of custom parameters for this app.
    policyId number

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning {[key: string]: boolean}
    Settings regarding the app's provisioning ability.
    roleIds number[]

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    tabId number
    The tab in which to display in OneLogin portal.
    updatedAt string
    Timestamp for app's last update.
    visible boolean
    Determine if app should be visible in OneLogin portal. Defaults to true.
    allow_assumed_signin bool
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    apps_id str
    App's unique ID in OneLogin.
    auth_method float
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    brand_id float

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    connector_id float
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    created_at str
    Timestamp for app's creation.
    description str
    App description.
    icon_url str
    The url for the app's icon.
    name str
    The app's name.
    notes str
    Notes about the app.
    parameters Sequence[AppsParameterArgs]
    a list of custom parameters for this app.
    policy_id float

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning Mapping[str, bool]
    Settings regarding the app's provisioning ability.
    role_ids Sequence[float]

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    tab_id float
    The tab in which to display in OneLogin portal.
    updated_at str
    Timestamp for app's last update.
    visible bool
    Determine if app should be visible in OneLogin portal. Defaults to true.
    allowAssumedSignin Boolean
    Enable sign in when user has been assumed by the account owner. Defaults to false.
    appsId String
    App's unique ID in OneLogin.
    authMethod Number
    The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
    brandId Number

    ID of the brand whose login page this app uses. Omit to fall back to the account default brand.

    Like policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mention brand_id, and removing the argument does not unassign it. Write brand_id = 0 to unassign; OneLogin refuses a literal 0 and wants null, which the provider sends on your behalf.

    connectorId Number
    The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
    createdAt String
    Timestamp for app's creation.
    description String
    App description.
    iconUrl String
    The url for the app's icon.
    name String
    The app's name.
    notes String
    Notes about the app.
    parameters List<Property Map>
    a list of custom parameters for this app.
    policyId Number

    ID of the app policy enforced when users sign in to this app. Create one with onelogin.Policies.

    Only app policies can be assigned. A user policy is refused with The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.

    The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Write policy_id = 0 to unassign. OneLogin refuses a literal 0 and wants null for this, so the provider sends the null on your behalf.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.Apps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });

    import pulumi
    import pulumi_onelogin as onelogin
    
    finance_app = onelogin.Policies("finance_app",
        name="Finance app step-up",
        kind="app",
        force_authn=True,
        app_force_authn_offset=60)
    finance = onelogin.Apps("finance",
        name="Finance",
        connector_id=108419,
        policy_id=finance_app.policies_id)
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var financeApp = new Onelogin.Policies("finance_app", new()
        {
            Name = "Finance app step-up",
            Kind = "app",
            ForceAuthn = true,
            AppForceAuthnOffset = 60,
        });
    
        var finance = new Onelogin.Apps("finance", new()
        {
            Name = "Finance",
            ConnectorId = 108419,
            PolicyId = financeApp.PoliciesId,
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{
    			Name:                pulumi.String("Finance app step-up"),
    			Kind:                pulumi.String("app"),
    			ForceAuthn:          pulumi.Bool(true),
    			AppForceAuthnOffset: pulumi.Float64(60),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "finance", &onelogin.AppsArgs{
    			Name:        pulumi.String("Finance"),
    			ConnectorId: pulumi.Float64(108419),
    			PolicyId:    financeApp.PoliciesId,
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Policies;
    import com.pulumi.onelogin.PoliciesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var financeApp = new Policies("financeApp", PoliciesArgs.builder()
                .name("Finance app step-up")
                .kind("app")
                .forceAuthn(true)
                .appForceAuthnOffset(60.0)
                .build());
    
            var finance = new Apps("finance", AppsArgs.builder()
                .name("Finance")
                .connectorId(108419.0)
                .policyId(financeApp.policiesId())
                .build());
    
        }
    }
    
    resources:
      financeApp:
        type: onelogin:Policies
        name: finance_app
        properties:
          name: Finance app step-up
          kind: app
          forceAuthn: true
          appForceAuthnOffset: 60
      finance:
        type: onelogin:Apps
        properties:
          name: Finance
          connectorId: 108419
          policyId: ${financeApp.policiesId}
    
    provisioning Map<Boolean>
    Settings regarding the app's provisioning ability.
    roleIds List<Number>

    IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one onelogin.AppRoleAttachments per role when assigning several roles to the same app.

    The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention role_ids, and removing the argument leaves the current roles in place. Write role_ids = [] to remove every role.

    Once role_ids is set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI, onelogin.AppRoleAttachments, or the apps argument of onelogin.Roles) is drift, and the next apply takes it off. Do not combine role_ids with those on the same app.

    A role managed by onelogin.Roles without an apps argument leaves this app alone. Add skip_membership_refresh = ["apps"] to that role to skip reading its apps as well.

    import * as pulumi from "@pulumi/pulumi";
    import * as onelogin from "@pulumi/onelogin";
    

    const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.Apps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });

    import pulumi
    import pulumi_onelogin as onelogin
    
    engineering = onelogin.Roles("engineering",
        name="Engineering",
        skip_membership_refreshes=["apps"])
    support = onelogin.Roles("support",
        name="Support",
        skip_membership_refreshes=["apps"])
    example = onelogin.Apps("example",
        name="Example",
        connector_id=108419,
        role_ids=[
            engineering.roles_id,
            support.roles_id,
        ])
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Onelogin = Pulumi.Onelogin;
    
    return await Deployment.RunAsync(() => 
    {
        var engineering = new Onelogin.Roles("engineering", new()
        {
            Name = "Engineering",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var support = new Onelogin.Roles("support", new()
        {
            Name = "Support",
            SkipMembershipRefreshes = new[]
            {
                "apps",
            },
        });
    
        var example = new Onelogin.Apps("example", new()
        {
            Name = "Example",
            ConnectorId = 108419,
            RoleIds = new[]
            {
                engineering.RolesId,
                support.RolesId,
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{
    			Name: pulumi.String("Engineering"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{
    			Name: pulumi.String("Support"),
    			SkipMembershipRefreshes: pulumi.StringArray{
    				pulumi.String("apps"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = onelogin.NewApps(ctx, "example", &onelogin.AppsArgs{
    			Name:        pulumi.String("Example"),
    			ConnectorId: pulumi.Float64(108419),
    			RoleIds: pulumi.Float64Array{
    				engineering.RolesId,
    				support.RolesId,
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.onelogin.Roles;
    import com.pulumi.onelogin.RolesArgs;
    import com.pulumi.onelogin.Apps;
    import com.pulumi.onelogin.AppsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var engineering = new Roles("engineering", RolesArgs.builder()
                .name("Engineering")
                .skipMembershipRefreshes("apps")
                .build());
    
            var support = new Roles("support", RolesArgs.builder()
                .name("Support")
                .skipMembershipRefreshes("apps")
                .build());
    
            var example = new Apps("example", AppsArgs.builder()
                .name("Example")
                .connectorId(108419.0)
                .roleIds(            
                    engineering.rolesId(),
                    support.rolesId())
                .build());
    
        }
    }
    
    resources:
      engineering:
        type: onelogin:Roles
        properties:
          name: Engineering
          skipMembershipRefreshes:
            - apps
      support:
        type: onelogin:Roles
        properties:
          name: Support
          skipMembershipRefreshes:
            - apps
      example:
        type: onelogin:Apps
        properties:
          name: Example
          connectorId: 108419
          roleIds:
            - ${engineering.rolesId}
            - ${support.rolesId}
    
    tabId Number
    The tab in which to display in OneLogin portal.
    updatedAt String
    Timestamp for app's last update.
    visible Boolean
    Determine if app should be visible in OneLogin portal. Defaults to true.

    Supporting Types

    AppsParameter, AppsParameterArgs

    ParamKeyName string
    Name to represent the parameter in OneLogin.
    AttributesTransformations string
    Describes how the app's attributes should be transformed.
    DefaultValues List<string>
    A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    IncludeInSamlAssertion bool
    When true, this parameter will be included in a SAML assertion payload.
    Label string
    The can only be set when creating a new parameter. It can not be updated.
    ParamId double
    The parameter ID.
    ProvisionedEntitlements bool
    Provisioned access entitlements for the app. Defaults to false.
    SafeEntitlementsEnabled bool
    Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to false.
    SkipIfBlank bool
    Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to false.
    UserAttributeMacros string
    When user_attribute_mappings is set to _macro_ this macro will be used to assign the parameter value.
    UserAttributeMappings string
    A user attribute to map values from. For custom attributes prefix the name of the attribute with custom_attribute_.
    Values List<string>
    A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    ParamKeyName string
    Name to represent the parameter in OneLogin.
    AttributesTransformations string
    Describes how the app's attributes should be transformed.
    DefaultValues []string
    A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    IncludeInSamlAssertion bool
    When true, this parameter will be included in a SAML assertion payload.
    Label string
    The can only be set when creating a new parameter. It can not be updated.
    ParamId float64
    The parameter ID.
    ProvisionedEntitlements bool
    Provisioned access entitlements for the app. Defaults to false.
    SafeEntitlementsEnabled bool
    Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to false.
    SkipIfBlank bool
    Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to false.
    UserAttributeMacros string
    When user_attribute_mappings is set to _macro_ this macro will be used to assign the parameter value.
    UserAttributeMappings string
    A user attribute to map values from. For custom attributes prefix the name of the attribute with custom_attribute_.
    Values []string
    A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    param_key_name string
    Name to represent the parameter in OneLogin.
    attributes_transformations string
    Describes how the app's attributes should be transformed.
    default_values list(string)
    A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    include_in_saml_assertion bool
    When true, this parameter will be included in a SAML assertion payload.
    label string
    The can only be set when creating a new parameter. It can not be updated.
    param_id number
    The parameter ID.
    provisioned_entitlements bool
    Provisioned access entitlements for the app. Defaults to false.
    safe_entitlements_enabled bool
    Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to false.
    skip_if_blank bool
    Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to false.
    user_attribute_macros string
    When user_attribute_mappings is set to _macro_ this macro will be used to assign the parameter value.
    user_attribute_mappings string
    A user attribute to map values from. For custom attributes prefix the name of the attribute with custom_attribute_.
    values list(string)
    A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    paramKeyName String
    Name to represent the parameter in OneLogin.
    attributesTransformations String
    Describes how the app's attributes should be transformed.
    defaultValues List<String>
    A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    includeInSamlAssertion Boolean
    When true, this parameter will be included in a SAML assertion payload.
    label String
    The can only be set when creating a new parameter. It can not be updated.
    paramId Double
    The parameter ID.
    provisionedEntitlements Boolean
    Provisioned access entitlements for the app. Defaults to false.
    safeEntitlementsEnabled Boolean
    Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to false.
    skipIfBlank Boolean
    Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to false.
    userAttributeMacros String
    When user_attribute_mappings is set to _macro_ this macro will be used to assign the parameter value.
    userAttributeMappings String
    A user attribute to map values from. For custom attributes prefix the name of the attribute with custom_attribute_.
    values List<String>
    A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    paramKeyName string
    Name to represent the parameter in OneLogin.
    attributesTransformations string
    Describes how the app's attributes should be transformed.
    defaultValues string[]
    A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    includeInSamlAssertion boolean
    When true, this parameter will be included in a SAML assertion payload.
    label string
    The can only be set when creating a new parameter. It can not be updated.
    paramId number
    The parameter ID.
    provisionedEntitlements boolean
    Provisioned access entitlements for the app. Defaults to false.
    safeEntitlementsEnabled boolean
    Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to false.
    skipIfBlank boolean
    Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to false.
    userAttributeMacros string
    When user_attribute_mappings is set to _macro_ this macro will be used to assign the parameter value.
    userAttributeMappings string
    A user attribute to map values from. For custom attributes prefix the name of the attribute with custom_attribute_.
    values string[]
    A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    param_key_name str
    Name to represent the parameter in OneLogin.
    attributes_transformations str
    Describes how the app's attributes should be transformed.
    default_values Sequence[str]
    A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    include_in_saml_assertion bool
    When true, this parameter will be included in a SAML assertion payload.
    label str
    The can only be set when creating a new parameter. It can not be updated.
    param_id float
    The parameter ID.
    provisioned_entitlements bool
    Provisioned access entitlements for the app. Defaults to false.
    safe_entitlements_enabled bool
    Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to false.
    skip_if_blank bool
    Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to false.
    user_attribute_macros str
    When user_attribute_mappings is set to _macro_ this macro will be used to assign the parameter value.
    user_attribute_mappings str
    A user attribute to map values from. For custom attributes prefix the name of the attribute with custom_attribute_.
    values Sequence[str]
    A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    paramKeyName String
    Name to represent the parameter in OneLogin.
    attributesTransformations String
    Describes how the app's attributes should be transformed.
    defaultValues List<String>
    A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
    includeInSamlAssertion Boolean
    When true, this parameter will be included in a SAML assertion payload.
    label String
    The can only be set when creating a new parameter. It can not be updated.
    paramId Number
    The parameter ID.
    provisionedEntitlements Boolean
    Provisioned access entitlements for the app. Defaults to false.
    safeEntitlementsEnabled Boolean
    Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to false.
    skipIfBlank Boolean
    Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to false.
    userAttributeMacros String
    When user_attribute_mappings is set to _macro_ this macro will be used to assign the parameter value.
    userAttributeMappings String
    A user attribute to map values from. For custom attributes prefix the name of the attribute with custom_attribute_.
    values List<String>
    A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.

    Import

    An App can be imported via the OneLogin App ID.

    $ pulumi import onelogin:index/apps:Apps my_app <app id>
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    onelogin onelogin/terraform-provider-onelogin
    License
    Notes
    This Pulumi package is based on the onelogin Terraform Provider.
    onelogin logo onelogin logo
    Viewing docs for onelogin 1.11.0
    published on Friday, Oct 23, 2026 by onelogin

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial