published on Friday, Oct 23, 2026 by onelogin
published on Friday, Oct 23, 2026 by onelogin
Creates an OIDC Application.
This resource allows you to create and configure an OIDC Application.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as onelogin from "@pulumi/onelogin";
const myOidcApp = new onelogin.OidcApps("my_oidc_app", {
name: "my OIDC APP",
notes: "example",
visible: true,
allowAssumedSignin: false,
connectorId: 123456,
description: "example OIDC app",
configuration: {
post_logout_redirect_uri: "https://www.example.com/logout",
login_url: "https://www.example.com",
oidc_application_type: "0",
redirect_uri: "https://example.com/example",
refresh_token_expiration_minutes: "1",
token_endpoint_auth_method: "1",
access_token_expiration_minutes: "1",
},
provisioning: {
enabled: false,
},
parameters: [{
provisionedEntitlements: false,
userAttributeMacros: "",
userAttributeMappings: "",
values: ["user.email"],
attributesTransformations: "",
defaultValues: ["default"],
includeInSamlAssertion: false,
label: "example app parameter ",
paramKeyName: "example",
safeEntitlementsEnabled: false,
skipIfBlank: false,
}],
});
import pulumi
import pulumi_onelogin as onelogin
my_oidc_app = onelogin.OidcApps("my_oidc_app",
name="my OIDC APP",
notes="example",
visible=True,
allow_assumed_signin=False,
connector_id=123456,
description="example OIDC app",
configuration={
"post_logout_redirect_uri": "https://www.example.com/logout",
"login_url": "https://www.example.com",
"oidc_application_type": "0",
"redirect_uri": "https://example.com/example",
"refresh_token_expiration_minutes": "1",
"token_endpoint_auth_method": "1",
"access_token_expiration_minutes": "1",
},
provisioning={
"enabled": False,
},
parameters=[{
"provisioned_entitlements": False,
"user_attribute_macros": "",
"user_attribute_mappings": "",
"values": ["user.email"],
"attributes_transformations": "",
"default_values": ["default"],
"include_in_saml_assertion": False,
"label": "example app parameter ",
"param_key_name": "example",
"safe_entitlements_enabled": False,
"skip_if_blank": False,
}])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := onelogin.NewOidcApps(ctx, "my_oidc_app", &onelogin.OidcAppsArgs{
Name: pulumi.String("my OIDC APP"),
Notes: pulumi.String("example"),
Visible: pulumi.Bool(true),
AllowAssumedSignin: pulumi.Bool(false),
ConnectorId: pulumi.Float64(123456),
Description: pulumi.String("example OIDC app"),
Configuration: pulumi.StringMap{
"post_logout_redirect_uri": pulumi.String("https://www.example.com/logout"),
"login_url": pulumi.String("https://www.example.com"),
"oidc_application_type": pulumi.String("0"),
"redirect_uri": pulumi.String("https://example.com/example"),
"refresh_token_expiration_minutes": pulumi.String("1"),
"token_endpoint_auth_method": pulumi.String("1"),
"access_token_expiration_minutes": pulumi.String("1"),
},
Provisioning: pulumi.BoolMap{
"enabled": pulumi.Bool(false),
},
Parameters: onelogin.OidcAppsParameterArray{
&onelogin.OidcAppsParameterArgs{
ProvisionedEntitlements: pulumi.Bool(false),
UserAttributeMacros: pulumi.String(""),
UserAttributeMappings: pulumi.String(""),
Values: pulumi.StringArray{
pulumi.String("user.email"),
},
AttributesTransformations: pulumi.String(""),
DefaultValues: pulumi.StringArray{
pulumi.String("default"),
},
IncludeInSamlAssertion: pulumi.Bool(false),
Label: pulumi.String("example app parameter "),
ParamKeyName: pulumi.String("example"),
SafeEntitlementsEnabled: pulumi.Bool(false),
SkipIfBlank: pulumi.Bool(false),
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Onelogin = Pulumi.Onelogin;
return await Deployment.RunAsync(() =>
{
var myOidcApp = new Onelogin.OidcApps("my_oidc_app", new()
{
Name = "my OIDC APP",
Notes = "example",
Visible = true,
AllowAssumedSignin = false,
ConnectorId = 123456,
Description = "example OIDC app",
Configuration =
{
{ "post_logout_redirect_uri", "https://www.example.com/logout" },
{ "login_url", "https://www.example.com" },
{ "oidc_application_type", "0" },
{ "redirect_uri", "https://example.com/example" },
{ "refresh_token_expiration_minutes", "1" },
{ "token_endpoint_auth_method", "1" },
{ "access_token_expiration_minutes", "1" },
},
Provisioning =
{
{ "enabled", false },
},
Parameters = new[]
{
new Onelogin.Inputs.OidcAppsParameterArgs
{
ProvisionedEntitlements = false,
UserAttributeMacros = "",
UserAttributeMappings = "",
Values = new[]
{
"user.email",
},
AttributesTransformations = "",
DefaultValues = new[]
{
"default",
},
IncludeInSamlAssertion = false,
Label = "example app parameter ",
ParamKeyName = "example",
SafeEntitlementsEnabled = false,
SkipIfBlank = false,
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.onelogin.OidcApps;
import com.pulumi.onelogin.OidcAppsArgs;
import com.pulumi.onelogin.inputs.OidcAppsParameterArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var myOidcApp = new OidcApps("myOidcApp", OidcAppsArgs.builder()
.name("my OIDC APP")
.notes("example")
.visible(true)
.allowAssumedSignin(false)
.connectorId(123456.0)
.description("example OIDC app")
.configuration(Map.ofEntries(
Map.entry("post_logout_redirect_uri", "https://www.example.com/logout"),
Map.entry("login_url", "https://www.example.com"),
Map.entry("oidc_application_type", "0"),
Map.entry("redirect_uri", "https://example.com/example"),
Map.entry("refresh_token_expiration_minutes", "1"),
Map.entry("token_endpoint_auth_method", "1"),
Map.entry("access_token_expiration_minutes", "1")
))
.provisioning(Map.of("enabled", false))
.parameters(OidcAppsParameterArgs.builder()
.provisionedEntitlements(false)
.userAttributeMacros("")
.userAttributeMappings("")
.values("user.email")
.attributesTransformations("")
.defaultValues("default")
.includeInSamlAssertion(false)
.label("example app parameter ")
.paramKeyName("example")
.safeEntitlementsEnabled(false)
.skipIfBlank(false)
.build())
.build());
}
}
resources:
myOidcApp:
type: onelogin:OidcApps
name: my_oidc_app
properties:
name: my OIDC APP
notes: example
visible: true
allowAssumedSignin: false
connectorId: 123456
description: example OIDC app
configuration:
post_logout_redirect_uri: https://www.example.com/logout
login_url: https://www.example.com
oidc_application_type: 0
redirect_uri: https://example.com/example
refresh_token_expiration_minutes: 1
token_endpoint_auth_method: 1
access_token_expiration_minutes: 1
provisioning:
enabled: false
parameters:
- provisionedEntitlements: false
userAttributeMacros: ""
userAttributeMappings: ""
values:
- user.email
attributesTransformations: ""
defaultValues:
- default
includeInSamlAssertion: false
label: 'example app parameter '
paramKeyName: example
safeEntitlementsEnabled: false
skipIfBlank: false
Example coming soon!
Create OidcApps Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new OidcApps(name: string, args: OidcAppsArgs, opts?: CustomResourceOptions);@overload
def OidcApps(resource_name: str,
args: OidcAppsArgs,
opts: Optional[ResourceOptions] = None)
@overload
def OidcApps(resource_name: str,
opts: Optional[ResourceOptions] = None,
connector_id: Optional[float] = None,
notes: Optional[str] = None,
configuration: Optional[Mapping[str, str]] = None,
brand_id: Optional[float] = None,
description: Optional[str] = None,
name: Optional[str] = None,
allow_assumed_signin: Optional[bool] = None,
oidc_apps_id: Optional[str] = None,
parameters: Optional[Sequence[OidcAppsParameterArgs]] = None,
policy_id: Optional[float] = None,
provisioning: Optional[Mapping[str, bool]] = None,
role_ids: Optional[Sequence[float]] = None,
visible: Optional[bool] = None)func NewOidcApps(ctx *Context, name string, args OidcAppsArgs, opts ...ResourceOption) (*OidcApps, error)public OidcApps(string name, OidcAppsArgs args, CustomResourceOptions? opts = null)
public OidcApps(String name, OidcAppsArgs args)
public OidcApps(String name, OidcAppsArgs args, CustomResourceOptions options)
type: onelogin:OidcApps
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "onelogin_oidc_apps" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args OidcAppsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args OidcAppsArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args OidcAppsArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args OidcAppsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args OidcAppsArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var oidcAppsResource = new Onelogin.OidcApps("oidcAppsResource", new()
{
ConnectorId = 0.0,
Notes = "string",
Configuration =
{
{ "string", "string" },
},
BrandId = 0.0,
Description = "string",
Name = "string",
AllowAssumedSignin = false,
OidcAppsId = "string",
Parameters = new[]
{
new Onelogin.Inputs.OidcAppsParameterArgs
{
ParamKeyName = "string",
AttributesTransformations = "string",
DefaultValues = new[]
{
"string",
},
IncludeInSamlAssertion = false,
Label = "string",
ParamId = 0.0,
ProvisionedEntitlements = false,
SafeEntitlementsEnabled = false,
SkipIfBlank = false,
UserAttributeMacros = "string",
UserAttributeMappings = "string",
Values = new[]
{
"string",
},
},
},
PolicyId = 0.0,
Provisioning =
{
{ "string", false },
},
RoleIds = new[]
{
0.0,
},
Visible = false,
});
example, err := onelogin.NewOidcApps(ctx, "oidcAppsResource", &onelogin.OidcAppsArgs{
ConnectorId: pulumi.Float64(0),
Notes: pulumi.String("string"),
Configuration: pulumi.StringMap{
"string": pulumi.String("string"),
},
BrandId: pulumi.Float64(0),
Description: pulumi.String("string"),
Name: pulumi.String("string"),
AllowAssumedSignin: pulumi.Bool(false),
OidcAppsId: pulumi.String("string"),
Parameters: onelogin.OidcAppsParameterArray{
&onelogin.OidcAppsParameterArgs{
ParamKeyName: pulumi.String("string"),
AttributesTransformations: pulumi.String("string"),
DefaultValues: pulumi.StringArray{
pulumi.String("string"),
},
IncludeInSamlAssertion: pulumi.Bool(false),
Label: pulumi.String("string"),
ParamId: pulumi.Float64(0),
ProvisionedEntitlements: pulumi.Bool(false),
SafeEntitlementsEnabled: pulumi.Bool(false),
SkipIfBlank: pulumi.Bool(false),
UserAttributeMacros: pulumi.String("string"),
UserAttributeMappings: pulumi.String("string"),
Values: pulumi.StringArray{
pulumi.String("string"),
},
},
},
PolicyId: pulumi.Float64(0),
Provisioning: pulumi.BoolMap{
"string": pulumi.Bool(false),
},
RoleIds: pulumi.Float64Array{
pulumi.Float64(0),
},
Visible: pulumi.Bool(false),
})
resource "onelogin_oidc_apps" "oidcAppsResource" {
lifecycle {
create_before_destroy = true
}
connector_id = 0
notes = "string"
configuration = {
"string" = "string"
}
brand_id = 0
description = "string"
name = "string"
allow_assumed_signin = false
oidc_apps_id = "string"
parameters {
param_key_name = "string"
attributes_transformations = "string"
default_values = ["string"]
include_in_saml_assertion = false
label = "string"
param_id = 0
provisioned_entitlements = false
safe_entitlements_enabled = false
skip_if_blank = false
user_attribute_macros = "string"
user_attribute_mappings = "string"
values = ["string"]
}
policy_id = 0
provisioning = {
"string" = false
}
role_ids = [0]
visible = false
}
var oidcAppsResource = new OidcApps("oidcAppsResource", OidcAppsArgs.builder()
.connectorId(0.0)
.notes("string")
.configuration(Map.of("string", "string"))
.brandId(0.0)
.description("string")
.name("string")
.allowAssumedSignin(false)
.oidcAppsId("string")
.parameters(OidcAppsParameterArgs.builder()
.paramKeyName("string")
.attributesTransformations("string")
.defaultValues("string")
.includeInSamlAssertion(false)
.label("string")
.paramId(0.0)
.provisionedEntitlements(false)
.safeEntitlementsEnabled(false)
.skipIfBlank(false)
.userAttributeMacros("string")
.userAttributeMappings("string")
.values("string")
.build())
.policyId(0.0)
.provisioning(Map.of("string", false))
.roleIds(0.0)
.visible(false)
.build());
oidc_apps_resource = onelogin.OidcApps("oidcAppsResource",
connector_id=float(0),
notes="string",
configuration={
"string": "string",
},
brand_id=float(0),
description="string",
name="string",
allow_assumed_signin=False,
oidc_apps_id="string",
parameters=[{
"param_key_name": "string",
"attributes_transformations": "string",
"default_values": ["string"],
"include_in_saml_assertion": False,
"label": "string",
"param_id": float(0),
"provisioned_entitlements": False,
"safe_entitlements_enabled": False,
"skip_if_blank": False,
"user_attribute_macros": "string",
"user_attribute_mappings": "string",
"values": ["string"],
}],
policy_id=float(0),
provisioning={
"string": False,
},
role_ids=[float(0)],
visible=False)
const oidcAppsResource = new onelogin.OidcApps("oidcAppsResource", {
connectorId: 0,
notes: "string",
configuration: {
string: "string",
},
brandId: 0,
description: "string",
name: "string",
allowAssumedSignin: false,
oidcAppsId: "string",
parameters: [{
paramKeyName: "string",
attributesTransformations: "string",
defaultValues: ["string"],
includeInSamlAssertion: false,
label: "string",
paramId: 0,
provisionedEntitlements: false,
safeEntitlementsEnabled: false,
skipIfBlank: false,
userAttributeMacros: "string",
userAttributeMappings: "string",
values: ["string"],
}],
policyId: 0,
provisioning: {
string: false,
},
roleIds: [0],
visible: false,
});
type: onelogin:OidcApps
properties:
allowAssumedSignin: false
brandId: 0
configuration:
string: string
connectorId: 0
description: string
name: string
notes: string
oidcAppsId: string
parameters:
- attributesTransformations: string
defaultValues:
- string
includeInSamlAssertion: false
label: string
paramId: 0
paramKeyName: string
provisionedEntitlements: false
safeEntitlementsEnabled: false
skipIfBlank: false
userAttributeMacros: string
userAttributeMappings: string
values:
- string
policyId: 0
provisioning:
string: false
roleIds:
- 0
visible: false
OidcApps Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The OidcApps resource accepts the following input properties:
- Connector
Id double - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- Allow
Assumed boolSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - Brand
Id double ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- Configuration Dictionary<string, string>
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- Description string
- App description.
- Name string
- The app's name.
- Notes string
- Notes about the app.
- Oidc
Apps stringId - App's unique ID in OneLogin.
- Parameters
List<Oidc
Apps Parameter> - a list of custom parameters for this app.
- Policy
Id double ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- Provisioning Dictionary<string, bool>
- Settings regarding the app's provisioning ability.
- Role
Ids List<double> IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- Visible bool
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- Connector
Id float64 - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- Allow
Assumed boolSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - Brand
Id float64 ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- Configuration map[string]string
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- Description string
- App description.
- Name string
- The app's name.
- Notes string
- Notes about the app.
- Oidc
Apps stringId - App's unique ID in OneLogin.
- Parameters
[]Oidc
Apps Parameter Args - a list of custom parameters for this app.
- Policy
Id float64 ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- Provisioning map[string]bool
- Settings regarding the app's provisioning ability.
- Role
Ids []float64 IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- Visible bool
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- connector_
id number - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- allow_
assumed_ boolsignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - brand_
id number ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration map(string)
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- description string
- App description.
- name string
- The app's name.
- notes string
- Notes about the app.
- oidc_
apps_ stringid - App's unique ID in OneLogin.
- parameters list(object)
- a list of custom parameters for this app.
- policy_
id number ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning map(bool)
- Settings regarding the app's provisioning ability.
- role_
ids list(number) IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- visible bool
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- connector
Id Double - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- allow
Assumed BooleanSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - brand
Id Double ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration Map<String,String>
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- description String
- App description.
- name String
- The app's name.
- notes String
- Notes about the app.
- oidc
Apps StringId - App's unique ID in OneLogin.
- parameters
List<Oidc
Apps Parameter> - a list of custom parameters for this app.
- policy
Id Double ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning Map<String,Boolean>
- Settings regarding the app's provisioning ability.
- role
Ids List<Double> IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- visible Boolean
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- connector
Id number - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- allow
Assumed booleanSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - brand
Id number ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration {[key: string]: string}
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- description string
- App description.
- name string
- The app's name.
- notes string
- Notes about the app.
- oidc
Apps stringId - App's unique ID in OneLogin.
- parameters
Oidc
Apps Parameter[] - a list of custom parameters for this app.
- policy
Id number ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning {[key: string]: boolean}
- Settings regarding the app's provisioning ability.
- role
Ids number[] IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- visible boolean
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- connector_
id float - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- allow_
assumed_ boolsignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - brand_
id float ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration Mapping[str, str]
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- description str
- App description.
- name str
- The app's name.
- notes str
- Notes about the app.
- oidc_
apps_ strid - App's unique ID in OneLogin.
- parameters
Sequence[Oidc
Apps Parameter Args] - a list of custom parameters for this app.
- policy_
id float ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning Mapping[str, bool]
- Settings regarding the app's provisioning ability.
- role_
ids Sequence[float] IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- visible bool
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- connector
Id Number - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- allow
Assumed BooleanSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - brand
Id Number ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration Map<String>
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- description String
- App description.
- name String
- The app's name.
- notes String
- Notes about the app.
- oidc
Apps StringId - App's unique ID in OneLogin.
- parameters List<Property Map>
- a list of custom parameters for this app.
- policy
Id Number ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning Map<Boolean>
- Settings regarding the app's provisioning ability.
- role
Ids List<Number> IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- visible Boolean
- Determine if app should be visible in OneLogin portal. Defaults to
true.
Outputs
All input properties are implicitly available as output properties. Additionally, the OidcApps resource produces the following output properties:
- Auth
Method double - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- Created
At string - Timestamp for app's creation.
- Icon
Url string - The url for the app's icon.
- Id string
- The provider-assigned unique ID for this managed resource.
- Sso Dictionary<string, string>
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - Tab
Id double - The tab in which to display in OneLogin portal.
- Updated
At string - Timestamp for app's last update.
- Auth
Method float64 - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- Created
At string - Timestamp for app's creation.
- Icon
Url string - The url for the app's icon.
- Id string
- The provider-assigned unique ID for this managed resource.
- Sso map[string]string
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - Tab
Id float64 - The tab in which to display in OneLogin portal.
- Updated
At string - Timestamp for app's last update.
- auth_
method number - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- created_
at string - Timestamp for app's creation.
- icon_
url string - The url for the app's icon.
- id string
- The provider-assigned unique ID for this managed resource.
- sso map(string)
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab_
id number - The tab in which to display in OneLogin portal.
- updated_
at string - Timestamp for app's last update.
- auth
Method Double - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- created
At String - Timestamp for app's creation.
- icon
Url String - The url for the app's icon.
- id String
- The provider-assigned unique ID for this managed resource.
- sso Map<String,String>
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab
Id Double - The tab in which to display in OneLogin portal.
- updated
At String - Timestamp for app's last update.
- auth
Method number - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- created
At string - Timestamp for app's creation.
- icon
Url string - The url for the app's icon.
- id string
- The provider-assigned unique ID for this managed resource.
- sso {[key: string]: string}
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab
Id number - The tab in which to display in OneLogin portal.
- updated
At string - Timestamp for app's last update.
- auth_
method float - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- created_
at str - Timestamp for app's creation.
- icon_
url str - The url for the app's icon.
- id str
- The provider-assigned unique ID for this managed resource.
- sso Mapping[str, str]
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab_
id float - The tab in which to display in OneLogin portal.
- updated_
at str - Timestamp for app's last update.
- auth
Method Number - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- created
At String - Timestamp for app's creation.
- icon
Url String - The url for the app's icon.
- id String
- The provider-assigned unique ID for this managed resource.
- sso Map<String>
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab
Id Number - The tab in which to display in OneLogin portal.
- updated
At String - Timestamp for app's last update.
Look up Existing OidcApps Resource
Get an existing OidcApps resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: OidcAppsState, opts?: CustomResourceOptions): OidcApps@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
allow_assumed_signin: Optional[bool] = None,
auth_method: Optional[float] = None,
brand_id: Optional[float] = None,
configuration: Optional[Mapping[str, str]] = None,
connector_id: Optional[float] = None,
created_at: Optional[str] = None,
description: Optional[str] = None,
icon_url: Optional[str] = None,
name: Optional[str] = None,
notes: Optional[str] = None,
oidc_apps_id: Optional[str] = None,
parameters: Optional[Sequence[OidcAppsParameterArgs]] = None,
policy_id: Optional[float] = None,
provisioning: Optional[Mapping[str, bool]] = None,
role_ids: Optional[Sequence[float]] = None,
sso: Optional[Mapping[str, str]] = None,
tab_id: Optional[float] = None,
updated_at: Optional[str] = None,
visible: Optional[bool] = None) -> OidcAppsfunc GetOidcApps(ctx *Context, name string, id IDInput, state *OidcAppsState, opts ...ResourceOption) (*OidcApps, error)public static OidcApps Get(string name, Input<string> id, OidcAppsState? state, CustomResourceOptions? opts = null)public static OidcApps get(String name, Output<String> id, OidcAppsState state, CustomResourceOptions options)resources: _: type: onelogin:OidcApps get: id: ${id}import {
to = onelogin_oidc_apps.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Allow
Assumed boolSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - Auth
Method double - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- Brand
Id double ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- Configuration Dictionary<string, string>
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- Connector
Id double - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- Created
At string - Timestamp for app's creation.
- Description string
- App description.
- Icon
Url string - The url for the app's icon.
- Name string
- The app's name.
- Notes string
- Notes about the app.
- Oidc
Apps stringId - App's unique ID in OneLogin.
- Parameters
List<Oidc
Apps Parameter> - a list of custom parameters for this app.
- Policy
Id double ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- Provisioning Dictionary<string, bool>
- Settings regarding the app's provisioning ability.
- Role
Ids List<double> IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- Sso Dictionary<string, string>
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - Tab
Id double - The tab in which to display in OneLogin portal.
- Updated
At string - Timestamp for app's last update.
- Visible bool
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- Allow
Assumed boolSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - Auth
Method float64 - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- Brand
Id float64 ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- Configuration map[string]string
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- Connector
Id float64 - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- Created
At string - Timestamp for app's creation.
- Description string
- App description.
- Icon
Url string - The url for the app's icon.
- Name string
- The app's name.
- Notes string
- Notes about the app.
- Oidc
Apps stringId - App's unique ID in OneLogin.
- Parameters
[]Oidc
Apps Parameter Args - a list of custom parameters for this app.
- Policy
Id float64 ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- Provisioning map[string]bool
- Settings regarding the app's provisioning ability.
- Role
Ids []float64 IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- Sso map[string]string
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - Tab
Id float64 - The tab in which to display in OneLogin portal.
- Updated
At string - Timestamp for app's last update.
- Visible bool
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- allow_
assumed_ boolsignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - auth_
method number - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- brand_
id number ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration map(string)
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- connector_
id number - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- created_
at string - Timestamp for app's creation.
- description string
- App description.
- icon_
url string - The url for the app's icon.
- name string
- The app's name.
- notes string
- Notes about the app.
- oidc_
apps_ stringid - App's unique ID in OneLogin.
- parameters list(object)
- a list of custom parameters for this app.
- policy_
id number ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning map(bool)
- Settings regarding the app's provisioning ability.
- role_
ids list(number) IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- sso map(string)
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab_
id number - The tab in which to display in OneLogin portal.
- updated_
at string - Timestamp for app's last update.
- visible bool
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- allow
Assumed BooleanSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - auth
Method Double - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- brand
Id Double ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration Map<String,String>
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- connector
Id Double - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- created
At String - Timestamp for app's creation.
- description String
- App description.
- icon
Url String - The url for the app's icon.
- name String
- The app's name.
- notes String
- Notes about the app.
- oidc
Apps StringId - App's unique ID in OneLogin.
- parameters
List<Oidc
Apps Parameter> - a list of custom parameters for this app.
- policy
Id Double ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning Map<String,Boolean>
- Settings regarding the app's provisioning ability.
- role
Ids List<Double> IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- sso Map<String,String>
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab
Id Double - The tab in which to display in OneLogin portal.
- updated
At String - Timestamp for app's last update.
- visible Boolean
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- allow
Assumed booleanSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - auth
Method number - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- brand
Id number ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration {[key: string]: string}
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- connector
Id number - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- created
At string - Timestamp for app's creation.
- description string
- App description.
- icon
Url string - The url for the app's icon.
- name string
- The app's name.
- notes string
- Notes about the app.
- oidc
Apps stringId - App's unique ID in OneLogin.
- parameters
Oidc
Apps Parameter[] - a list of custom parameters for this app.
- policy
Id number ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning {[key: string]: boolean}
- Settings regarding the app's provisioning ability.
- role
Ids number[] IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- sso {[key: string]: string}
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab
Id number - The tab in which to display in OneLogin portal.
- updated
At string - Timestamp for app's last update.
- visible boolean
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- allow_
assumed_ boolsignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - auth_
method float - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- brand_
id float ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration Mapping[str, str]
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- connector_
id float - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- created_
at str - Timestamp for app's creation.
- description str
- App description.
- icon_
url str - The url for the app's icon.
- name str
- The app's name.
- notes str
- Notes about the app.
- oidc_
apps_ strid - App's unique ID in OneLogin.
- parameters
Sequence[Oidc
Apps Parameter Args] - a list of custom parameters for this app.
- policy_
id float ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning Mapping[str, bool]
- Settings regarding the app's provisioning ability.
- role_
ids Sequence[float] IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- sso Mapping[str, str]
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab_
id float - The tab in which to display in OneLogin portal.
- updated_
at str - Timestamp for app's last update.
- visible bool
- Determine if app should be visible in OneLogin portal. Defaults to
true.
- allow
Assumed BooleanSignin - Enable sign in when user has been assumed by the account owner. Defaults to
false. - auth
Method Number - The apps auth method. Refer to the OneLogin Apps Documentation for a comprehensive list of available auth methods.
- brand
Id Number ID of the brand whose login page this app uses. Omit to fall back to the account default brand.
Like
policy_id, the attribute is computed as well as optional, so a brand assigned in the OneLogin admin UI is left alone by a configuration that does not mentionbrand_id, and removing the argument does not unassign it. Writebrand_id = 0to unassign; OneLogin refuses a literal0and wantsnull, which the provider sends on your behalf.- configuration Map<String>
- OIDC settings that control the authentication flow e.g. redirect urls and token settings.
- connector
Id Number - The ID for the app connector, dictates the type of app (e.g. AWS Multi-Role App).
- created
At String - Timestamp for app's creation.
- description String
- App description.
- icon
Url String - The url for the app's icon.
- name String
- The app's name.
- notes String
- Notes about the app.
- oidc
Apps StringId - App's unique ID in OneLogin.
- parameters List<Property Map>
- a list of custom parameters for this app.
- policy
Id Number ID of the app policy enforced when users sign in to this app. Create one with
onelogin.Policies.Only app policies can be assigned. A user policy is refused with
The associated Policy with ID <id> could not be found, the same message the API gives for an ID that does not exist.The attribute is computed as well as optional, so a policy assigned in the OneLogin admin UI is left alone by a configuration that does not mention
policy_id. The cost of that is that removing the argument does not unassign the policy — it leaves the last value in place. Writepolicy_id = 0to unassign. OneLogin refuses a literal0and wantsnullfor this, so the provider sends thenullon your behalf.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const financeApp = new onelogin.Policies("finance_app", { name: "Finance app step-up", kind: "app", forceAuthn: true, appForceAuthnOffset: 60, }); const finance = new onelogin.OidcApps("finance", { name: "Finance", connectorId: 108419, policyId: financeApp.policiesId, });
import pulumi import pulumi_onelogin as onelogin finance_app = onelogin.Policies("finance_app", name="Finance app step-up", kind="app", force_authn=True, app_force_authn_offset=60) finance = onelogin.OidcApps("finance", name="Finance", connector_id=108419, policy_id=finance_app.policies_id)using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var financeApp = new Onelogin.Policies("finance_app", new() { Name = "Finance app step-up", Kind = "app", ForceAuthn = true, AppForceAuthnOffset = 60, }); var finance = new Onelogin.OidcApps("finance", new() { Name = "Finance", ConnectorId = 108419, PolicyId = financeApp.PoliciesId, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { financeApp, err := onelogin.NewPolicies(ctx, "finance_app", &onelogin.PoliciesArgs{ Name: pulumi.String("Finance app step-up"), Kind: pulumi.String("app"), ForceAuthn: pulumi.Bool(true), AppForceAuthnOffset: pulumi.Float64(60), }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "finance", &onelogin.OidcAppsArgs{ Name: pulumi.String("Finance"), ConnectorId: pulumi.Float64(108419), PolicyId: financeApp.PoliciesId, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Policies; import com.pulumi.onelogin.PoliciesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var financeApp = new Policies("financeApp", PoliciesArgs.builder() .name("Finance app step-up") .kind("app") .forceAuthn(true) .appForceAuthnOffset(60.0) .build()); var finance = new OidcApps("finance", OidcAppsArgs.builder() .name("Finance") .connectorId(108419.0) .policyId(financeApp.policiesId()) .build()); } }resources: financeApp: type: onelogin:Policies name: finance_app properties: name: Finance app step-up kind: app forceAuthn: true appForceAuthnOffset: 60 finance: type: onelogin:OidcApps properties: name: Finance connectorId: 108419 policyId: ${financeApp.policiesId}- provisioning Map<Boolean>
- Settings regarding the app's provisioning ability.
- role
Ids List<Number> IDs of the roles whose users get this app. When set, the app's roles are exactly this set, written in a single create or update. Use it instead of one
onelogin.AppRoleAttachmentsper role when assigning several roles to the same app.The attribute is computed as well as optional, so roles assigned some other way are left alone by a configuration that does not mention
role_ids, and removing the argument leaves the current roles in place. Writerole_ids = []to remove every role.Once
role_idsis set, it is authoritative: a role given the app anywhere else (the OneLogin admin UI,onelogin.AppRoleAttachments, or theappsargument ofonelogin.Roles) is drift, and the next apply takes it off. Do not combinerole_idswith those on the same app.A role managed by
onelogin.Roleswithout anappsargument leaves this app alone. Addskip_membership_refresh = ["apps"]to that role to skip reading its apps as well.import * as pulumi from "@pulumi/pulumi"; import * as onelogin from "@pulumi/onelogin";const engineering = new onelogin.Roles("engineering", { name: "Engineering", skipMembershipRefreshes: ["apps"], }); const support = new onelogin.Roles("support", { name: "Support", skipMembershipRefreshes: ["apps"], }); const example = new onelogin.OidcApps("example", { name: "Example", connectorId: 108419, roleIds: [ engineering.rolesId, support.rolesId, ], });
import pulumi import pulumi_onelogin as onelogin engineering = onelogin.Roles("engineering", name="Engineering", skip_membership_refreshes=["apps"]) support = onelogin.Roles("support", name="Support", skip_membership_refreshes=["apps"]) example = onelogin.OidcApps("example", name="Example", connector_id=108419, role_ids=[ engineering.roles_id, support.roles_id, ])using System.Collections.Generic; using System.Linq; using Pulumi; using Onelogin = Pulumi.Onelogin; return await Deployment.RunAsync(() => { var engineering = new Onelogin.Roles("engineering", new() { Name = "Engineering", SkipMembershipRefreshes = new[] { "apps", }, }); var support = new Onelogin.Roles("support", new() { Name = "Support", SkipMembershipRefreshes = new[] { "apps", }, }); var example = new Onelogin.OidcApps("example", new() { Name = "Example", ConnectorId = 108419, RoleIds = new[] { engineering.RolesId, support.RolesId, }, }); });package main import ( "github.com/pulumi/pulumi-terraform-provider/sdks/go/onelogin/onelogin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { engineering, err := onelogin.NewRoles(ctx, "engineering", &onelogin.RolesArgs{ Name: pulumi.String("Engineering"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } support, err := onelogin.NewRoles(ctx, "support", &onelogin.RolesArgs{ Name: pulumi.String("Support"), SkipMembershipRefreshes: pulumi.StringArray{ pulumi.String("apps"), }, }) if err != nil { return err } _, err = onelogin.NewOidcApps(ctx, "example", &onelogin.OidcAppsArgs{ Name: pulumi.String("Example"), ConnectorId: pulumi.Float64(108419), RoleIds: pulumi.Float64Array{ engineering.RolesId, support.RolesId, }, }) if err != nil { return err } return nil }) }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.onelogin.Roles; import com.pulumi.onelogin.RolesArgs; import com.pulumi.onelogin.OidcApps; import com.pulumi.onelogin.OidcAppsArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var engineering = new Roles("engineering", RolesArgs.builder() .name("Engineering") .skipMembershipRefreshes("apps") .build()); var support = new Roles("support", RolesArgs.builder() .name("Support") .skipMembershipRefreshes("apps") .build()); var example = new OidcApps("example", OidcAppsArgs.builder() .name("Example") .connectorId(108419.0) .roleIds( engineering.rolesId(), support.rolesId()) .build()); } }resources: engineering: type: onelogin:Roles properties: name: Engineering skipMembershipRefreshes: - apps support: type: onelogin:Roles properties: name: Support skipMembershipRefreshes: - apps example: type: onelogin:OidcApps properties: name: Example connectorId: 108419 roleIds: - ${engineering.rolesId} - ${support.rolesId}- sso Map<String>
- The OIDC client credentials OneLogin generated for the app.
ssois read only and cannot be set in configuration; OneLogin supplies every value. - tab
Id Number - The tab in which to display in OneLogin portal.
- updated
At String - Timestamp for app's last update.
- visible Boolean
- Determine if app should be visible in OneLogin portal. Defaults to
true.
Supporting Types
OidcAppsParameter, OidcAppsParameterArgs
- Param
Key stringName - Name to represent the parameter in OneLogin.
- Attributes
Transformations string - Describes how the app's attributes should be transformed.
- Default
Values List<string> - A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- Include
In boolSaml Assertion - When true, this parameter will be included in a SAML assertion payload.
- Label string
- The can only be set when creating a new parameter. It can not be updated.
- Param
Id double - The parameter ID.
- Provisioned
Entitlements bool - Provisioned access entitlements for the app. Defaults to
false. - Safe
Entitlements boolEnabled - Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to
false. - Skip
If boolBlank - Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to
false. - User
Attribute stringMacros - When
user_attribute_mappingsis set to_macro_this macro will be used to assign the parameter value. - User
Attribute stringMappings - A user attribute to map values from. For custom attributes prefix the name of the attribute with
custom_attribute_. - Values List<string>
- A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- Param
Key stringName - Name to represent the parameter in OneLogin.
- Attributes
Transformations string - Describes how the app's attributes should be transformed.
- Default
Values []string - A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- Include
In boolSaml Assertion - When true, this parameter will be included in a SAML assertion payload.
- Label string
- The can only be set when creating a new parameter. It can not be updated.
- Param
Id float64 - The parameter ID.
- Provisioned
Entitlements bool - Provisioned access entitlements for the app. Defaults to
false. - Safe
Entitlements boolEnabled - Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to
false. - Skip
If boolBlank - Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to
false. - User
Attribute stringMacros - When
user_attribute_mappingsis set to_macro_this macro will be used to assign the parameter value. - User
Attribute stringMappings - A user attribute to map values from. For custom attributes prefix the name of the attribute with
custom_attribute_. - Values []string
- A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- param_
key_ stringname - Name to represent the parameter in OneLogin.
- attributes_
transformations string - Describes how the app's attributes should be transformed.
- default_
values list(string) - A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- include_
in_ boolsaml_ assertion - When true, this parameter will be included in a SAML assertion payload.
- label string
- The can only be set when creating a new parameter. It can not be updated.
- param_
id number - The parameter ID.
- provisioned_
entitlements bool - Provisioned access entitlements for the app. Defaults to
false. - safe_
entitlements_ boolenabled - Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to
false. - skip_
if_ boolblank - Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to
false. - user_
attribute_ stringmacros - When
user_attribute_mappingsis set to_macro_this macro will be used to assign the parameter value. - user_
attribute_ stringmappings - A user attribute to map values from. For custom attributes prefix the name of the attribute with
custom_attribute_. - values list(string)
- A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- param
Key StringName - Name to represent the parameter in OneLogin.
- attributes
Transformations String - Describes how the app's attributes should be transformed.
- default
Values List<String> - A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- include
In BooleanSaml Assertion - When true, this parameter will be included in a SAML assertion payload.
- label String
- The can only be set when creating a new parameter. It can not be updated.
- param
Id Double - The parameter ID.
- provisioned
Entitlements Boolean - Provisioned access entitlements for the app. Defaults to
false. - safe
Entitlements BooleanEnabled - Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to
false. - skip
If BooleanBlank - Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to
false. - user
Attribute StringMacros - When
user_attribute_mappingsis set to_macro_this macro will be used to assign the parameter value. - user
Attribute StringMappings - A user attribute to map values from. For custom attributes prefix the name of the attribute with
custom_attribute_. - values List<String>
- A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- param
Key stringName - Name to represent the parameter in OneLogin.
- attributes
Transformations string - Describes how the app's attributes should be transformed.
- default
Values string[] - A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- include
In booleanSaml Assertion - When true, this parameter will be included in a SAML assertion payload.
- label string
- The can only be set when creating a new parameter. It can not be updated.
- param
Id number - The parameter ID.
- provisioned
Entitlements boolean - Provisioned access entitlements for the app. Defaults to
false. - safe
Entitlements booleanEnabled - Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to
false. - skip
If booleanBlank - Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to
false. - user
Attribute stringMacros - When
user_attribute_mappingsis set to_macro_this macro will be used to assign the parameter value. - user
Attribute stringMappings - A user attribute to map values from. For custom attributes prefix the name of the attribute with
custom_attribute_. - values string[]
- A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- param_
key_ strname - Name to represent the parameter in OneLogin.
- attributes_
transformations str - Describes how the app's attributes should be transformed.
- default_
values Sequence[str] - A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- include_
in_ boolsaml_ assertion - When true, this parameter will be included in a SAML assertion payload.
- label str
- The can only be set when creating a new parameter. It can not be updated.
- param_
id float - The parameter ID.
- provisioned_
entitlements bool - Provisioned access entitlements for the app. Defaults to
false. - safe_
entitlements_ boolenabled - Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to
false. - skip_
if_ boolblank - Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to
false. - user_
attribute_ strmacros - When
user_attribute_mappingsis set to_macro_this macro will be used to assign the parameter value. - user_
attribute_ strmappings - A user attribute to map values from. For custom attributes prefix the name of the attribute with
custom_attribute_. - values Sequence[str]
- A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- param
Key StringName - Name to represent the parameter in OneLogin.
- attributes
Transformations String - Describes how the app's attributes should be transformed.
- default
Values List<String> - A list of default parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
- include
In BooleanSaml Assertion - When true, this parameter will be included in a SAML assertion payload.
- label String
- The can only be set when creating a new parameter. It can not be updated.
- param
Id Number - The parameter ID.
- provisioned
Entitlements Boolean - Provisioned access entitlements for the app. Defaults to
false. - safe
Entitlements BooleanEnabled - Indicates that the parameter is used to support creating entitlements using OneLogin Mappings. Defaults to
false. - skip
If BooleanBlank - Flag to let the SCIM provisioner know not include this value if it's blank. Defaults to
false. - user
Attribute StringMacros - When
user_attribute_mappingsis set to_macro_this macro will be used to assign the parameter value. - user
Attribute StringMappings - A user attribute to map values from. For custom attributes prefix the name of the attribute with
custom_attribute_. - values List<String>
- A list of parameter values. A single value is sent to OneLogin as a plain string and several as an array, matching how the API stores them.
Import
A OIDC App can be imported via the OneLogin App ID.
$ pulumi import onelogin:index/oidcApps:OidcApps my_oidc_app <app id>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- onelogin onelogin/terraform-provider-onelogin
- License
- Notes
- This Pulumi package is based on the
oneloginTerraform Provider.
published on Friday, Oct 23, 2026 by onelogin