1. Packages
  2. Panos Provider
  3. API Docs
  4. AuthenticationProfile
panos 2.0.7 published on Thursday, Nov 27, 2025 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

panos.AuthenticationProfile

panos logo
panos 2.0.7 published on Thursday, Nov 27, 2025 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as panos from "@pulumi/panos";

const example = new panos.Template("example", {
    location: {
        panorama: {},
    },
    name: "example-tmpl",
});
const exampleLdapProfile = new panos.LdapProfile("example", {
    location: {
        template: {
            name: example.name,
        },
    },
    name: "example-ldap-profile",
});
// Authentication Profile with LDAP method
const exampleAuthenticationProfile = new panos.AuthenticationProfile("example", {
    location: {
        template: {
            name: example.name,
        },
    },
    name: "example-auth-profile",
    allowLists: ["all"],
    lockout: {
        failedAttempts: 5,
        lockoutTime: 30,
    },
    method: {
        ldap: {
            loginAttribute: "sAMAccountName",
            passwdExpDays: 14,
            serverProfile: exampleLdapProfile.name,
        },
    },
});

    import pulumi
import pulumi_panos as panos

example = panos.Template("example",
    location={
        "panorama": {},
    },
    name="example-tmpl")
example_ldap_profile = panos.LdapProfile("example",
    location={
        "template": {
            "name": example.name,
        },
    },
    name="example-ldap-profile")
# Authentication Profile with LDAP method
example_authentication_profile = panos.AuthenticationProfile("example",
    location={
        "template": {
            "name": example.name,
        },
    },
    name="example-auth-profile",
    allow_lists=["all"],
    lockout={
        "failed_attempts": 5,
        "lockout_time": 30,
    },
    method={
        "ldap": {
            "login_attribute": "sAMAccountName",
            "passwd_exp_days": 14,
            "server_profile": example_ldap_profile.name,
        },
    })

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/panos/v2/panos"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := panos.NewTemplate(ctx, "example", &panos.TemplateArgs{
			Location: &panos.TemplateLocationArgs{
				Panorama: &panos.TemplateLocationPanoramaArgs{},
			},
			Name: pulumi.String("example-tmpl"),
		})
		if err != nil {
			return err
		}
		exampleLdapProfile, err := panos.NewLdapProfile(ctx, "example", &panos.LdapProfileArgs{
			Location: &panos.LdapProfileLocationArgs{
				Template: &panos.LdapProfileLocationTemplateArgs{
					Name: example.Name,
				},
			},
			Name: pulumi.String("example-ldap-profile"),
		})
		if err != nil {
			return err
		}
		// Authentication Profile with LDAP method
		_, err = panos.NewAuthenticationProfile(ctx, "example", &panos.AuthenticationProfileArgs{
			Location: &panos.AuthenticationProfileLocationArgs{
				Template: &panos.AuthenticationProfileLocationTemplateArgs{
					Name: example.Name,
				},
			},
			Name: pulumi.String("example-auth-profile"),
			AllowLists: pulumi.StringArray{
				pulumi.String("all"),
			},
			Lockout: &panos.AuthenticationProfileLockoutArgs{
				FailedAttempts: pulumi.Float64(5),
				LockoutTime:    pulumi.Float64(30),
			},
			Method: &panos.AuthenticationProfileMethodArgs{
				Ldap: &panos.AuthenticationProfileMethodLdapArgs{
					LoginAttribute: pulumi.String("sAMAccountName"),
					PasswdExpDays:  pulumi.Float64(14),
					ServerProfile:  exampleLdapProfile.Name,
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Panos = Pulumi.Panos;

return await Deployment.RunAsync(() => 
{
    var example = new Panos.Template("example", new()
    {
        Location = new Panos.Inputs.TemplateLocationArgs
        {
            Panorama = null,
        },
        Name = "example-tmpl",
    });

    var exampleLdapProfile = new Panos.LdapProfile("example", new()
    {
        Location = new Panos.Inputs.LdapProfileLocationArgs
        {
            Template = new Panos.Inputs.LdapProfileLocationTemplateArgs
            {
                Name = example.Name,
            },
        },
        Name = "example-ldap-profile",
    });

    // Authentication Profile with LDAP method
    var exampleAuthenticationProfile = new Panos.AuthenticationProfile("example", new()
    {
        Location = new Panos.Inputs.AuthenticationProfileLocationArgs
        {
            Template = new Panos.Inputs.AuthenticationProfileLocationTemplateArgs
            {
                Name = example.Name,
            },
        },
        Name = "example-auth-profile",
        AllowLists = new[]
        {
            "all",
        },
        Lockout = new Panos.Inputs.AuthenticationProfileLockoutArgs
        {
            FailedAttempts = 5,
            LockoutTime = 30,
        },
        Method = new Panos.Inputs.AuthenticationProfileMethodArgs
        {
            Ldap = new Panos.Inputs.AuthenticationProfileMethodLdapArgs
            {
                LoginAttribute = "sAMAccountName",
                PasswdExpDays = 14,
                ServerProfile = exampleLdapProfile.Name,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.panos.Template;
import com.pulumi.panos.TemplateArgs;
import com.pulumi.panos.inputs.TemplateLocationArgs;
import com.pulumi.panos.inputs.TemplateLocationPanoramaArgs;
import com.pulumi.panos.LdapProfile;
import com.pulumi.panos.LdapProfileArgs;
import com.pulumi.panos.inputs.LdapProfileLocationArgs;
import com.pulumi.panos.inputs.LdapProfileLocationTemplateArgs;
import com.pulumi.panos.AuthenticationProfile;
import com.pulumi.panos.AuthenticationProfileArgs;
import com.pulumi.panos.inputs.AuthenticationProfileLocationArgs;
import com.pulumi.panos.inputs.AuthenticationProfileLocationTemplateArgs;
import com.pulumi.panos.inputs.AuthenticationProfileLockoutArgs;
import com.pulumi.panos.inputs.AuthenticationProfileMethodArgs;
import com.pulumi.panos.inputs.AuthenticationProfileMethodLdapArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Template("example", TemplateArgs.builder()
            .location(TemplateLocationArgs.builder()
                .panorama(TemplateLocationPanoramaArgs.builder()
                    .build())
                .build())
            .name("example-tmpl")
            .build());

        var exampleLdapProfile = new LdapProfile("exampleLdapProfile", LdapProfileArgs.builder()
            .location(LdapProfileLocationArgs.builder()
                .template(LdapProfileLocationTemplateArgs.builder()
                    .name(example.name())
                    .build())
                .build())
            .name("example-ldap-profile")
            .build());

        // Authentication Profile with LDAP method
        var exampleAuthenticationProfile = new AuthenticationProfile("exampleAuthenticationProfile", AuthenticationProfileArgs.builder()
            .location(AuthenticationProfileLocationArgs.builder()
                .template(AuthenticationProfileLocationTemplateArgs.builder()
                    .name(example.name())
                    .build())
                .build())
            .name("example-auth-profile")
            .allowLists("all")
            .lockout(AuthenticationProfileLockoutArgs.builder()
                .failedAttempts(5.0)
                .lockoutTime(30.0)
                .build())
            .method(AuthenticationProfileMethodArgs.builder()
                .ldap(AuthenticationProfileMethodLdapArgs.builder()
                    .loginAttribute("sAMAccountName")
                    .passwdExpDays(14.0)
                    .serverProfile(exampleLdapProfile.name())
                    .build())
                .build())
            .build());

    }
}

    resources:
  example:
    type: panos:Template
    properties:
      location:
        panorama: {}
      name: example-tmpl
  exampleLdapProfile:
    type: panos:LdapProfile
    name: example
    properties:
      location:
        template:
          name: ${example.name}
      name: example-ldap-profile
  # Authentication Profile with LDAP method
  exampleAuthenticationProfile:
    type: panos:AuthenticationProfile
    name: example
    properties:
      location:
        template:
          name: ${example.name}
      name: example-auth-profile
      allowLists:
        - all
      lockout:
        failedAttempts: 5
        lockoutTime: 30
      method:
        ldap:
          loginAttribute: sAMAccountName
          passwdExpDays: 14
          serverProfile: ${exampleLdapProfile.name}

    Create AuthenticationProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AuthenticationProfile(name: string, args: AuthenticationProfileArgs, opts?: CustomResourceOptions);
    @overload
def AuthenticationProfile(resource_name: str,
                          args: AuthenticationProfileArgs,
                          opts: Optional[ResourceOptions] = None)

@overload
def AuthenticationProfile(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          location: Optional[AuthenticationProfileLocationArgs] = None,
                          allow_lists: Optional[Sequence[str]] = None,
                          lockout: Optional[AuthenticationProfileLockoutArgs] = None,
                          method: Optional[AuthenticationProfileMethodArgs] = None,
                          multi_factor_auth: Optional[AuthenticationProfileMultiFactorAuthArgs] = None,
                          name: Optional[str] = None,
                          single_sign_on: Optional[AuthenticationProfileSingleSignOnArgs] = None,
                          user_domain: Optional[str] = None,
                          username_modifier: Optional[str] = None)
    func NewAuthenticationProfile(ctx *Context, name string, args AuthenticationProfileArgs, opts ...ResourceOption) (*AuthenticationProfile, error)
    public AuthenticationProfile(string name, AuthenticationProfileArgs args, CustomResourceOptions? opts = null)
    public AuthenticationProfile(String name, AuthenticationProfileArgs args)
public AuthenticationProfile(String name, AuthenticationProfileArgs args, CustomResourceOptions options)

    type: panos:AuthenticationProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AuthenticationProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AuthenticationProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AuthenticationProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AuthenticationProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AuthenticationProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var authenticationProfileResource = new Panos.AuthenticationProfile("authenticationProfileResource", new()
{
    Location = new Panos.Inputs.AuthenticationProfileLocationArgs
    {
        Panorama = null,
        Template = new Panos.Inputs.AuthenticationProfileLocationTemplateArgs
        {
            Name = "string",
            PanoramaDevice = "string",
        },
        TemplateStack = new Panos.Inputs.AuthenticationProfileLocationTemplateStackArgs
        {
            Name = "string",
            PanoramaDevice = "string",
        },
        TemplateStackVsys = new Panos.Inputs.AuthenticationProfileLocationTemplateStackVsysArgs
        {
            NgfwDevice = "string",
            PanoramaDevice = "string",
            TemplateStack = "string",
            Vsys = "string",
        },
        TemplateVsys = new Panos.Inputs.AuthenticationProfileLocationTemplateVsysArgs
        {
            NgfwDevice = "string",
            PanoramaDevice = "string",
            Template = "string",
            Vsys = "string",
        },
        Vsys = new Panos.Inputs.AuthenticationProfileLocationVsysArgs
        {
            Name = "string",
            NgfwDevice = "string",
        },
    },
    AllowLists = new[]
    {
        "string",
    },
    Lockout = new Panos.Inputs.AuthenticationProfileLockoutArgs
    {
        FailedAttempts = 0,
        LockoutTime = 0,
    },
    Method = new Panos.Inputs.AuthenticationProfileMethodArgs
    {
        Cloud = new Panos.Inputs.AuthenticationProfileMethodCloudArgs
        {
            ClockSkew = 0,
            Region = new Panos.Inputs.AuthenticationProfileMethodCloudRegionArgs
            {
                RegionId = "string",
                Tenant = new Panos.Inputs.AuthenticationProfileMethodCloudRegionTenantArgs
                {
                    Profile = new Panos.Inputs.AuthenticationProfileMethodCloudRegionTenantProfileArgs
                    {
                        Mfa = new Panos.Inputs.AuthenticationProfileMethodCloudRegionTenantProfileMfaArgs
                        {
                            ForceMfa = "string",
                        },
                        ProfileId = "string",
                    },
                    TenantId = "string",
                },
            },
        },
        Kerberos = new Panos.Inputs.AuthenticationProfileMethodKerberosArgs
        {
            Realm = "string",
            ServerProfile = "string",
        },
        Ldap = new Panos.Inputs.AuthenticationProfileMethodLdapArgs
        {
            LoginAttribute = "string",
            PasswdExpDays = 0,
            ServerProfile = "string",
        },
        LocalDatabase = null,
        None = null,
        Radius = new Panos.Inputs.AuthenticationProfileMethodRadiusArgs
        {
            Checkgroup = false,
            ServerProfile = "string",
        },
        SamlIdp = new Panos.Inputs.AuthenticationProfileMethodSamlIdpArgs
        {
            AttributeNameAccessDomain = "string",
            AttributeNameAdminRole = "string",
            AttributeNameUsergroup = "string",
            AttributeNameUsername = "string",
            CertificateProfile = "string",
            EnableSingleLogout = false,
            RequestSigningCertificate = "string",
            ServerProfile = "string",
        },
        Tacplus = new Panos.Inputs.AuthenticationProfileMethodTacplusArgs
        {
            Checkgroup = false,
            ServerProfile = "string",
        },
    },
    MultiFactorAuth = new Panos.Inputs.AuthenticationProfileMultiFactorAuthArgs
    {
        Factors = new[]
        {
            "string",
        },
        MfaEnable = false,
    },
    Name = "string",
    SingleSignOn = new Panos.Inputs.AuthenticationProfileSingleSignOnArgs
    {
        KerberosKeytab = "string",
        Realm = "string",
        ServicePrincipal = "string",
    },
    UserDomain = "string",
    UsernameModifier = "string",
});

    example, err := panos.NewAuthenticationProfile(ctx, "authenticationProfileResource", &panos.AuthenticationProfileArgs{
	Location: &panos.AuthenticationProfileLocationArgs{
		Panorama: &panos.AuthenticationProfileLocationPanoramaArgs{},
		Template: &panos.AuthenticationProfileLocationTemplateArgs{
			Name:           pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
		},
		TemplateStack: &panos.AuthenticationProfileLocationTemplateStackArgs{
			Name:           pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
		},
		TemplateStackVsys: &panos.AuthenticationProfileLocationTemplateStackVsysArgs{
			NgfwDevice:     pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
			TemplateStack:  pulumi.String("string"),
			Vsys:           pulumi.String("string"),
		},
		TemplateVsys: &panos.AuthenticationProfileLocationTemplateVsysArgs{
			NgfwDevice:     pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
			Template:       pulumi.String("string"),
			Vsys:           pulumi.String("string"),
		},
		Vsys: &panos.AuthenticationProfileLocationVsysArgs{
			Name:       pulumi.String("string"),
			NgfwDevice: pulumi.String("string"),
		},
	},
	AllowLists: pulumi.StringArray{
		pulumi.String("string"),
	},
	Lockout: &panos.AuthenticationProfileLockoutArgs{
		FailedAttempts: pulumi.Float64(0),
		LockoutTime:    pulumi.Float64(0),
	},
	Method: &panos.AuthenticationProfileMethodArgs{
		Cloud: &panos.AuthenticationProfileMethodCloudArgs{
			ClockSkew: pulumi.Float64(0),
			Region: &panos.AuthenticationProfileMethodCloudRegionArgs{
				RegionId: pulumi.String("string"),
				Tenant: &panos.AuthenticationProfileMethodCloudRegionTenantArgs{
					Profile: &panos.AuthenticationProfileMethodCloudRegionTenantProfileArgs{
						Mfa: &panos.AuthenticationProfileMethodCloudRegionTenantProfileMfaArgs{
							ForceMfa: pulumi.String("string"),
						},
						ProfileId: pulumi.String("string"),
					},
					TenantId: pulumi.String("string"),
				},
			},
		},
		Kerberos: &panos.AuthenticationProfileMethodKerberosArgs{
			Realm:         pulumi.String("string"),
			ServerProfile: pulumi.String("string"),
		},
		Ldap: &panos.AuthenticationProfileMethodLdapArgs{
			LoginAttribute: pulumi.String("string"),
			PasswdExpDays:  pulumi.Float64(0),
			ServerProfile:  pulumi.String("string"),
		},
		LocalDatabase: &panos.AuthenticationProfileMethodLocalDatabaseArgs{},
		None:          &panos.AuthenticationProfileMethodNoneArgs{},
		Radius: &panos.AuthenticationProfileMethodRadiusArgs{
			Checkgroup:    pulumi.Bool(false),
			ServerProfile: pulumi.String("string"),
		},
		SamlIdp: &panos.AuthenticationProfileMethodSamlIdpArgs{
			AttributeNameAccessDomain: pulumi.String("string"),
			AttributeNameAdminRole:    pulumi.String("string"),
			AttributeNameUsergroup:    pulumi.String("string"),
			AttributeNameUsername:     pulumi.String("string"),
			CertificateProfile:        pulumi.String("string"),
			EnableSingleLogout:        pulumi.Bool(false),
			RequestSigningCertificate: pulumi.String("string"),
			ServerProfile:             pulumi.String("string"),
		},
		Tacplus: &panos.AuthenticationProfileMethodTacplusArgs{
			Checkgroup:    pulumi.Bool(false),
			ServerProfile: pulumi.String("string"),
		},
	},
	MultiFactorAuth: &panos.AuthenticationProfileMultiFactorAuthArgs{
		Factors: pulumi.StringArray{
			pulumi.String("string"),
		},
		MfaEnable: pulumi.Bool(false),
	},
	Name: pulumi.String("string"),
	SingleSignOn: &panos.AuthenticationProfileSingleSignOnArgs{
		KerberosKeytab:   pulumi.String("string"),
		Realm:            pulumi.String("string"),
		ServicePrincipal: pulumi.String("string"),
	},
	UserDomain:       pulumi.String("string"),
	UsernameModifier: pulumi.String("string"),
})

    var authenticationProfileResource = new AuthenticationProfile("authenticationProfileResource", AuthenticationProfileArgs.builder()
    .location(AuthenticationProfileLocationArgs.builder()
        .panorama(AuthenticationProfileLocationPanoramaArgs.builder()
            .build())
        .template(AuthenticationProfileLocationTemplateArgs.builder()
            .name("string")
            .panoramaDevice("string")
            .build())
        .templateStack(AuthenticationProfileLocationTemplateStackArgs.builder()
            .name("string")
            .panoramaDevice("string")
            .build())
        .templateStackVsys(AuthenticationProfileLocationTemplateStackVsysArgs.builder()
            .ngfwDevice("string")
            .panoramaDevice("string")
            .templateStack("string")
            .vsys("string")
            .build())
        .templateVsys(AuthenticationProfileLocationTemplateVsysArgs.builder()
            .ngfwDevice("string")
            .panoramaDevice("string")
            .template("string")
            .vsys("string")
            .build())
        .vsys(AuthenticationProfileLocationVsysArgs.builder()
            .name("string")
            .ngfwDevice("string")
            .build())
        .build())
    .allowLists("string")
    .lockout(AuthenticationProfileLockoutArgs.builder()
        .failedAttempts(0.0)
        .lockoutTime(0.0)
        .build())
    .method(AuthenticationProfileMethodArgs.builder()
        .cloud(AuthenticationProfileMethodCloudArgs.builder()
            .clockSkew(0.0)
            .region(AuthenticationProfileMethodCloudRegionArgs.builder()
                .regionId("string")
                .tenant(AuthenticationProfileMethodCloudRegionTenantArgs.builder()
                    .profile(AuthenticationProfileMethodCloudRegionTenantProfileArgs.builder()
                        .mfa(AuthenticationProfileMethodCloudRegionTenantProfileMfaArgs.builder()
                            .forceMfa("string")
                            .build())
                        .profileId("string")
                        .build())
                    .tenantId("string")
                    .build())
                .build())
            .build())
        .kerberos(AuthenticationProfileMethodKerberosArgs.builder()
            .realm("string")
            .serverProfile("string")
            .build())
        .ldap(AuthenticationProfileMethodLdapArgs.builder()
            .loginAttribute("string")
            .passwdExpDays(0.0)
            .serverProfile("string")
            .build())
        .localDatabase(AuthenticationProfileMethodLocalDatabaseArgs.builder()
            .build())
        .none(AuthenticationProfileMethodNoneArgs.builder()
            .build())
        .radius(AuthenticationProfileMethodRadiusArgs.builder()
            .checkgroup(false)
            .serverProfile("string")
            .build())
        .samlIdp(AuthenticationProfileMethodSamlIdpArgs.builder()
            .attributeNameAccessDomain("string")
            .attributeNameAdminRole("string")
            .attributeNameUsergroup("string")
            .attributeNameUsername("string")
            .certificateProfile("string")
            .enableSingleLogout(false)
            .requestSigningCertificate("string")
            .serverProfile("string")
            .build())
        .tacplus(AuthenticationProfileMethodTacplusArgs.builder()
            .checkgroup(false)
            .serverProfile("string")
            .build())
        .build())
    .multiFactorAuth(AuthenticationProfileMultiFactorAuthArgs.builder()
        .factors("string")
        .mfaEnable(false)
        .build())
    .name("string")
    .singleSignOn(AuthenticationProfileSingleSignOnArgs.builder()
        .kerberosKeytab("string")
        .realm("string")
        .servicePrincipal("string")
        .build())
    .userDomain("string")
    .usernameModifier("string")
    .build());

    authentication_profile_resource = panos.AuthenticationProfile("authenticationProfileResource",
    location={
        "panorama": {},
        "template": {
            "name": "string",
            "panorama_device": "string",
        },
        "template_stack": {
            "name": "string",
            "panorama_device": "string",
        },
        "template_stack_vsys": {
            "ngfw_device": "string",
            "panorama_device": "string",
            "template_stack": "string",
            "vsys": "string",
        },
        "template_vsys": {
            "ngfw_device": "string",
            "panorama_device": "string",
            "template": "string",
            "vsys": "string",
        },
        "vsys": {
            "name": "string",
            "ngfw_device": "string",
        },
    },
    allow_lists=["string"],
    lockout={
        "failed_attempts": 0,
        "lockout_time": 0,
    },
    method={
        "cloud": {
            "clock_skew": 0,
            "region": {
                "region_id": "string",
                "tenant": {
                    "profile": {
                        "mfa": {
                            "force_mfa": "string",
                        },
                        "profile_id": "string",
                    },
                    "tenant_id": "string",
                },
            },
        },
        "kerberos": {
            "realm": "string",
            "server_profile": "string",
        },
        "ldap": {
            "login_attribute": "string",
            "passwd_exp_days": 0,
            "server_profile": "string",
        },
        "local_database": {},
        "none": {},
        "radius": {
            "checkgroup": False,
            "server_profile": "string",
        },
        "saml_idp": {
            "attribute_name_access_domain": "string",
            "attribute_name_admin_role": "string",
            "attribute_name_usergroup": "string",
            "attribute_name_username": "string",
            "certificate_profile": "string",
            "enable_single_logout": False,
            "request_signing_certificate": "string",
            "server_profile": "string",
        },
        "tacplus": {
            "checkgroup": False,
            "server_profile": "string",
        },
    },
    multi_factor_auth={
        "factors": ["string"],
        "mfa_enable": False,
    },
    name="string",
    single_sign_on={
        "kerberos_keytab": "string",
        "realm": "string",
        "service_principal": "string",
    },
    user_domain="string",
    username_modifier="string")

    const authenticationProfileResource = new panos.AuthenticationProfile("authenticationProfileResource", {
    location: {
        panorama: {},
        template: {
            name: "string",
            panoramaDevice: "string",
        },
        templateStack: {
            name: "string",
            panoramaDevice: "string",
        },
        templateStackVsys: {
            ngfwDevice: "string",
            panoramaDevice: "string",
            templateStack: "string",
            vsys: "string",
        },
        templateVsys: {
            ngfwDevice: "string",
            panoramaDevice: "string",
            template: "string",
            vsys: "string",
        },
        vsys: {
            name: "string",
            ngfwDevice: "string",
        },
    },
    allowLists: ["string"],
    lockout: {
        failedAttempts: 0,
        lockoutTime: 0,
    },
    method: {
        cloud: {
            clockSkew: 0,
            region: {
                regionId: "string",
                tenant: {
                    profile: {
                        mfa: {
                            forceMfa: "string",
                        },
                        profileId: "string",
                    },
                    tenantId: "string",
                },
            },
        },
        kerberos: {
            realm: "string",
            serverProfile: "string",
        },
        ldap: {
            loginAttribute: "string",
            passwdExpDays: 0,
            serverProfile: "string",
        },
        localDatabase: {},
        none: {},
        radius: {
            checkgroup: false,
            serverProfile: "string",
        },
        samlIdp: {
            attributeNameAccessDomain: "string",
            attributeNameAdminRole: "string",
            attributeNameUsergroup: "string",
            attributeNameUsername: "string",
            certificateProfile: "string",
            enableSingleLogout: false,
            requestSigningCertificate: "string",
            serverProfile: "string",
        },
        tacplus: {
            checkgroup: false,
            serverProfile: "string",
        },
    },
    multiFactorAuth: {
        factors: ["string"],
        mfaEnable: false,
    },
    name: "string",
    singleSignOn: {
        kerberosKeytab: "string",
        realm: "string",
        servicePrincipal: "string",
    },
    userDomain: "string",
    usernameModifier: "string",
});

    type: panos:AuthenticationProfile
properties:
    allowLists:
        - string
    location:
        panorama: {}
        template:
            name: string
            panoramaDevice: string
        templateStack:
            name: string
            panoramaDevice: string
        templateStackVsys:
            ngfwDevice: string
            panoramaDevice: string
            templateStack: string
            vsys: string
        templateVsys:
            ngfwDevice: string
            panoramaDevice: string
            template: string
            vsys: string
        vsys:
            name: string
            ngfwDevice: string
    lockout:
        failedAttempts: 0
        lockoutTime: 0
    method:
        cloud:
            clockSkew: 0
            region:
                regionId: string
                tenant:
                    profile:
                        mfa:
                            forceMfa: string
                        profileId: string
                    tenantId: string
        kerberos:
            realm: string
            serverProfile: string
        ldap:
            loginAttribute: string
            passwdExpDays: 0
            serverProfile: string
        localDatabase: {}
        none: {}
        radius:
            checkgroup: false
            serverProfile: string
        samlIdp:
            attributeNameAccessDomain: string
            attributeNameAdminRole: string
            attributeNameUsergroup: string
            attributeNameUsername: string
            certificateProfile: string
            enableSingleLogout: false
            requestSigningCertificate: string
            serverProfile: string
        tacplus:
            checkgroup: false
            serverProfile: string
    multiFactorAuth:
        factors:
            - string
        mfaEnable: false
    name: string
    singleSignOn:
        kerberosKeytab: string
        realm: string
        servicePrincipal: string
    userDomain: string
    usernameModifier: string

    AuthenticationProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AuthenticationProfile resource accepts the following input properties:

    Location AuthenticationProfileLocation
    The location of this object.
    AllowLists List<string>
    Lockout AuthenticationProfileLockout
    Method AuthenticationProfileMethod
    MultiFactorAuth AuthenticationProfileMultiFactorAuth
    Name string
    SingleSignOn AuthenticationProfileSingleSignOn
    UserDomain string
    Domain name(Not for SAML) to be used for authentication
    UsernameModifier string
    Username modifier(Not for SAML) to handle user domain
    location AuthenticationProfileLocation
    The location of this object.
    allowLists List<String>
    lockout AuthenticationProfileLockout
    method AuthenticationProfileMethod
    multiFactorAuth AuthenticationProfileMultiFactorAuth
    name String
    singleSignOn AuthenticationProfileSingleSignOn
    userDomain String
    Domain name(Not for SAML) to be used for authentication
    usernameModifier String
    Username modifier(Not for SAML) to handle user domain
    location AuthenticationProfileLocation
    The location of this object.
    allowLists string[]
    lockout AuthenticationProfileLockout
    method AuthenticationProfileMethod
    multiFactorAuth AuthenticationProfileMultiFactorAuth
    name string
    singleSignOn AuthenticationProfileSingleSignOn
    userDomain string
    Domain name(Not for SAML) to be used for authentication
    usernameModifier string
    Username modifier(Not for SAML) to handle user domain
    location Property Map
    The location of this object.
    allowLists List<String>
    lockout Property Map
    method Property Map
    multiFactorAuth Property Map
    name String
    singleSignOn Property Map
    userDomain String
    Domain name(Not for SAML) to be used for authentication
    usernameModifier String
    Username modifier(Not for SAML) to handle user domain

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AuthenticationProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AuthenticationProfile Resource

    Get an existing AuthenticationProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AuthenticationProfileState, opts?: CustomResourceOptions): AuthenticationProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_lists: Optional[Sequence[str]] = None,
        location: Optional[AuthenticationProfileLocationArgs] = None,
        lockout: Optional[AuthenticationProfileLockoutArgs] = None,
        method: Optional[AuthenticationProfileMethodArgs] = None,
        multi_factor_auth: Optional[AuthenticationProfileMultiFactorAuthArgs] = None,
        name: Optional[str] = None,
        single_sign_on: Optional[AuthenticationProfileSingleSignOnArgs] = None,
        user_domain: Optional[str] = None,
        username_modifier: Optional[str] = None) -> AuthenticationProfile
    func GetAuthenticationProfile(ctx *Context, name string, id IDInput, state *AuthenticationProfileState, opts ...ResourceOption) (*AuthenticationProfile, error)
    public static AuthenticationProfile Get(string name, Input<string> id, AuthenticationProfileState? state, CustomResourceOptions? opts = null)
    public static AuthenticationProfile get(String name, Output<String> id, AuthenticationProfileState state, CustomResourceOptions options)
    resources:  _:    type: panos:AuthenticationProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowLists List<string>
    Location AuthenticationProfileLocation
    The location of this object.
    Lockout AuthenticationProfileLockout
    Method AuthenticationProfileMethod
    MultiFactorAuth AuthenticationProfileMultiFactorAuth
    Name string
    SingleSignOn AuthenticationProfileSingleSignOn
    UserDomain string
    Domain name(Not for SAML) to be used for authentication
    UsernameModifier string
    Username modifier(Not for SAML) to handle user domain
    allowLists List<String>
    location AuthenticationProfileLocation
    The location of this object.
    lockout AuthenticationProfileLockout
    method AuthenticationProfileMethod
    multiFactorAuth AuthenticationProfileMultiFactorAuth
    name String
    singleSignOn AuthenticationProfileSingleSignOn
    userDomain String
    Domain name(Not for SAML) to be used for authentication
    usernameModifier String
    Username modifier(Not for SAML) to handle user domain
    allowLists string[]
    location AuthenticationProfileLocation
    The location of this object.
    lockout AuthenticationProfileLockout
    method AuthenticationProfileMethod
    multiFactorAuth AuthenticationProfileMultiFactorAuth
    name string
    singleSignOn AuthenticationProfileSingleSignOn
    userDomain string
    Domain name(Not for SAML) to be used for authentication
    usernameModifier string
    Username modifier(Not for SAML) to handle user domain
    allowLists List<String>
    location Property Map
    The location of this object.
    lockout Property Map
    method Property Map
    multiFactorAuth Property Map
    name String
    singleSignOn Property Map
    userDomain String
    Domain name(Not for SAML) to be used for authentication
    usernameModifier String
    Username modifier(Not for SAML) to handle user domain

    Supporting Types

    AuthenticationProfileLocation, AuthenticationProfileLocationArgs

    Panorama AuthenticationProfileLocationPanorama
    Located in a panorama.
    Template AuthenticationProfileLocationTemplate
    Located in a specific template
    TemplateStack AuthenticationProfileLocationTemplateStack
    Located in a specific template
    TemplateStackVsys AuthenticationProfileLocationTemplateStackVsys
    Located in a specific template, device and vsys.
    TemplateVsys AuthenticationProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    Vsys AuthenticationProfileLocationVsys
    Located in a specific Virtual System
    Panorama AuthenticationProfileLocationPanorama
    Located in a panorama.
    Template AuthenticationProfileLocationTemplate
    Located in a specific template
    TemplateStack AuthenticationProfileLocationTemplateStack
    Located in a specific template
    TemplateStackVsys AuthenticationProfileLocationTemplateStackVsys
    Located in a specific template, device and vsys.
    TemplateVsys AuthenticationProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    Vsys AuthenticationProfileLocationVsys
    Located in a specific Virtual System
    panorama AuthenticationProfileLocationPanorama
    Located in a panorama.
    template AuthenticationProfileLocationTemplate
    Located in a specific template
    templateStack AuthenticationProfileLocationTemplateStack
    Located in a specific template
    templateStackVsys AuthenticationProfileLocationTemplateStackVsys
    Located in a specific template, device and vsys.
    templateVsys AuthenticationProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    vsys AuthenticationProfileLocationVsys
    Located in a specific Virtual System
    panorama AuthenticationProfileLocationPanorama
    Located in a panorama.
    template AuthenticationProfileLocationTemplate
    Located in a specific template
    templateStack AuthenticationProfileLocationTemplateStack
    Located in a specific template
    templateStackVsys AuthenticationProfileLocationTemplateStackVsys
    Located in a specific template, device and vsys.
    templateVsys AuthenticationProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    vsys AuthenticationProfileLocationVsys
    Located in a specific Virtual System
    panorama AuthenticationProfileLocationPanorama
    Located in a panorama.
    template AuthenticationProfileLocationTemplate
    Located in a specific template
    template_stack AuthenticationProfileLocationTemplateStack
    Located in a specific template
    template_stack_vsys AuthenticationProfileLocationTemplateStackVsys
    Located in a specific template, device and vsys.
    template_vsys AuthenticationProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    vsys AuthenticationProfileLocationVsys
    Located in a specific Virtual System
    panorama Property Map
    Located in a panorama.
    template Property Map
    Located in a specific template
    templateStack Property Map
    Located in a specific template
    templateStackVsys Property Map
    Located in a specific template, device and vsys.
    templateVsys Property Map
    Located in a specific template, device and vsys.
    vsys Property Map
    Located in a specific Virtual System

    AuthenticationProfileLocationTemplate, AuthenticationProfileLocationTemplateArgs

    Name string
    Specific Panorama template
    PanoramaDevice string
    Specific Panorama device
    Name string
    Specific Panorama template
    PanoramaDevice string
    Specific Panorama device
    name String
    Specific Panorama template
    panoramaDevice String
    Specific Panorama device
    name string
    Specific Panorama template
    panoramaDevice string
    Specific Panorama device
    name str
    Specific Panorama template
    panorama_device str
    Specific Panorama device
    name String
    Specific Panorama template
    panoramaDevice String
    Specific Panorama device

    AuthenticationProfileLocationTemplateStack, AuthenticationProfileLocationTemplateStackArgs

    Name string
    The template stack
    PanoramaDevice string
    Specific Panorama device
    Name string
    The template stack
    PanoramaDevice string
    Specific Panorama device
    name String
    The template stack
    panoramaDevice String
    Specific Panorama device
    name string
    The template stack
    panoramaDevice string
    Specific Panorama device
    name str
    The template stack
    panorama_device str
    Specific Panorama device
    name String
    The template stack
    panoramaDevice String
    Specific Panorama device

    AuthenticationProfileLocationTemplateStackVsys, AuthenticationProfileLocationTemplateStackVsysArgs

    NgfwDevice string
    The NGFW device
    PanoramaDevice string
    Specific Panorama device
    TemplateStack string
    The template stack
    Vsys string
    The vsys.
    NgfwDevice string
    The NGFW device
    PanoramaDevice string
    Specific Panorama device
    TemplateStack string
    The template stack
    Vsys string
    The vsys.
    ngfwDevice String
    The NGFW device
    panoramaDevice String
    Specific Panorama device
    templateStack String
    The template stack
    vsys String
    The vsys.
    ngfwDevice string
    The NGFW device
    panoramaDevice string
    Specific Panorama device
    templateStack string
    The template stack
    vsys string
    The vsys.
    ngfw_device str
    The NGFW device
    panorama_device str
    Specific Panorama device
    template_stack str
    The template stack
    vsys str
    The vsys.
    ngfwDevice String
    The NGFW device
    panoramaDevice String
    Specific Panorama device
    templateStack String
    The template stack
    vsys String
    The vsys.

    AuthenticationProfileLocationTemplateVsys, AuthenticationProfileLocationTemplateVsysArgs

    NgfwDevice string
    The NGFW device
    PanoramaDevice string
    Specific Panorama device
    Template string
    Specific Panorama template
    Vsys string
    The vsys.
    NgfwDevice string
    The NGFW device
    PanoramaDevice string
    Specific Panorama device
    Template string
    Specific Panorama template
    Vsys string
    The vsys.
    ngfwDevice String
    The NGFW device
    panoramaDevice String
    Specific Panorama device
    template String
    Specific Panorama template
    vsys String
    The vsys.
    ngfwDevice string
    The NGFW device
    panoramaDevice string
    Specific Panorama device
    template string
    Specific Panorama template
    vsys string
    The vsys.
    ngfw_device str
    The NGFW device
    panorama_device str
    Specific Panorama device
    template str
    Specific Panorama template
    vsys str
    The vsys.
    ngfwDevice String
    The NGFW device
    panoramaDevice String
    Specific Panorama device
    template String
    Specific Panorama template
    vsys String
    The vsys.

    AuthenticationProfileLocationVsys, AuthenticationProfileLocationVsysArgs

    Name string
    The Virtual System name
    NgfwDevice string
    The NGFW device name
    Name string
    The Virtual System name
    NgfwDevice string
    The NGFW device name
    name String
    The Virtual System name
    ngfwDevice String
    The NGFW device name
    name string
    The Virtual System name
    ngfwDevice string
    The NGFW device name
    name str
    The Virtual System name
    ngfw_device str
    The NGFW device name
    name String
    The Virtual System name
    ngfwDevice String
    The NGFW device name

    AuthenticationProfileLockout, AuthenticationProfileLockoutArgs

    FailedAttempts double
    Number of failed login attempts to trigger lock-out
    LockoutTime double
    Number of minutes to lock-out
    FailedAttempts float64
    Number of failed login attempts to trigger lock-out
    LockoutTime float64
    Number of minutes to lock-out
    failedAttempts Double
    Number of failed login attempts to trigger lock-out
    lockoutTime Double
    Number of minutes to lock-out
    failedAttempts number
    Number of failed login attempts to trigger lock-out
    lockoutTime number
    Number of minutes to lock-out
    failed_attempts float
    Number of failed login attempts to trigger lock-out
    lockout_time float
    Number of minutes to lock-out
    failedAttempts Number
    Number of failed login attempts to trigger lock-out
    lockoutTime Number
    Number of minutes to lock-out

    AuthenticationProfileMethod, AuthenticationProfileMethodArgs

    AuthenticationProfileMethodCloud, AuthenticationProfileMethodCloudArgs

    ClockSkew double
    clock skew between CAS service and device
    Region AuthenticationProfileMethodCloudRegion
    ClockSkew float64
    clock skew between CAS service and device
    Region AuthenticationProfileMethodCloudRegion
    clockSkew Double
    clock skew between CAS service and device
    region AuthenticationProfileMethodCloudRegion
    clockSkew number
    clock skew between CAS service and device
    region AuthenticationProfileMethodCloudRegion
    clock_skew float
    clock skew between CAS service and device
    region AuthenticationProfileMethodCloudRegion
    clockSkew Number
    clock skew between CAS service and device
    region Property Map

    AuthenticationProfileMethodCloudRegion, AuthenticationProfileMethodCloudRegionArgs

    AuthenticationProfileMethodCloudRegionTenant, AuthenticationProfileMethodCloudRegionTenantArgs

    AuthenticationProfileMethodCloudRegionTenantProfile, AuthenticationProfileMethodCloudRegionTenantProfileArgs

    mfa Property Map
    profileId String
    CAS Profile id

    AuthenticationProfileMethodCloudRegionTenantProfileMfa, AuthenticationProfileMethodCloudRegionTenantProfileMfaArgs

    ForceMfa string
    force multi-factor authentication in cloud
    ForceMfa string
    force multi-factor authentication in cloud
    forceMfa String
    force multi-factor authentication in cloud
    forceMfa string
    force multi-factor authentication in cloud
    force_mfa str
    force multi-factor authentication in cloud
    forceMfa String
    force multi-factor authentication in cloud

    AuthenticationProfileMethodKerberos, AuthenticationProfileMethodKerberosArgs

    Realm string
    Realm name to be used for authentication
    ServerProfile string
    Kerberos server profile object
    Realm string
    Realm name to be used for authentication
    ServerProfile string
    Kerberos server profile object
    realm String
    Realm name to be used for authentication
    serverProfile String
    Kerberos server profile object
    realm string
    Realm name to be used for authentication
    serverProfile string
    Kerberos server profile object
    realm str
    Realm name to be used for authentication
    server_profile str
    Kerberos server profile object
    realm String
    Realm name to be used for authentication
    serverProfile String
    Kerberos server profile object

    AuthenticationProfileMethodLdap, AuthenticationProfileMethodLdapArgs

    LoginAttribute string
    Default is samAccountName for Active Directory, uid for other directory servers
    PasswdExpDays double
    Avail for Active Directory, eDir
    ServerProfile string
    LDAP server profile object
    LoginAttribute string
    Default is samAccountName for Active Directory, uid for other directory servers
    PasswdExpDays float64
    Avail for Active Directory, eDir
    ServerProfile string
    LDAP server profile object
    loginAttribute String
    Default is samAccountName for Active Directory, uid for other directory servers
    passwdExpDays Double
    Avail for Active Directory, eDir
    serverProfile String
    LDAP server profile object
    loginAttribute string
    Default is samAccountName for Active Directory, uid for other directory servers
    passwdExpDays number
    Avail for Active Directory, eDir
    serverProfile string
    LDAP server profile object
    login_attribute str
    Default is samAccountName for Active Directory, uid for other directory servers
    passwd_exp_days float
    Avail for Active Directory, eDir
    server_profile str
    LDAP server profile object
    loginAttribute String
    Default is samAccountName for Active Directory, uid for other directory servers
    passwdExpDays Number
    Avail for Active Directory, eDir
    serverProfile String
    LDAP server profile object

    AuthenticationProfileMethodRadius, AuthenticationProfileMethodRadiusArgs

    Checkgroup bool
    Retrieve user group from RADIUS
    ServerProfile string
    RADIUS server profile object
    Checkgroup bool
    Retrieve user group from RADIUS
    ServerProfile string
    RADIUS server profile object
    checkgroup Boolean
    Retrieve user group from RADIUS
    serverProfile String
    RADIUS server profile object
    checkgroup boolean
    Retrieve user group from RADIUS
    serverProfile string
    RADIUS server profile object
    checkgroup bool
    Retrieve user group from RADIUS
    server_profile str
    RADIUS server profile object
    checkgroup Boolean
    Retrieve user group from RADIUS
    serverProfile String
    RADIUS server profile object

    AuthenticationProfileMethodSamlIdp, AuthenticationProfileMethodSamlIdpArgs

    AttributeNameAccessDomain string
    access-domain
    AttributeNameAdminRole string
    admin-role
    AttributeNameUsergroup string
    usergroup
    AttributeNameUsername string
    Attribute name for username to be extracted from SAML response
    CertificateProfile string
    Certificate profile for IDP and SP
    EnableSingleLogout bool
    Enable single logout
    RequestSigningCertificate string
    Signing certificate for SAML requests
    ServerProfile string
    IdP server profile object
    AttributeNameAccessDomain string
    access-domain
    AttributeNameAdminRole string
    admin-role
    AttributeNameUsergroup string
    usergroup
    AttributeNameUsername string
    Attribute name for username to be extracted from SAML response
    CertificateProfile string
    Certificate profile for IDP and SP
    EnableSingleLogout bool
    Enable single logout
    RequestSigningCertificate string
    Signing certificate for SAML requests
    ServerProfile string
    IdP server profile object
    attributeNameAccessDomain String
    access-domain
    attributeNameAdminRole String
    admin-role
    attributeNameUsergroup String
    usergroup
    attributeNameUsername String
    Attribute name for username to be extracted from SAML response
    certificateProfile String
    Certificate profile for IDP and SP
    enableSingleLogout Boolean
    Enable single logout
    requestSigningCertificate String
    Signing certificate for SAML requests
    serverProfile String
    IdP server profile object
    attributeNameAccessDomain string
    access-domain
    attributeNameAdminRole string
    admin-role
    attributeNameUsergroup string
    usergroup
    attributeNameUsername string
    Attribute name for username to be extracted from SAML response
    certificateProfile string
    Certificate profile for IDP and SP
    enableSingleLogout boolean
    Enable single logout
    requestSigningCertificate string
    Signing certificate for SAML requests
    serverProfile string
    IdP server profile object
    attribute_name_access_domain str
    access-domain
    attribute_name_admin_role str
    admin-role
    attribute_name_usergroup str
    usergroup
    attribute_name_username str
    Attribute name for username to be extracted from SAML response
    certificate_profile str
    Certificate profile for IDP and SP
    enable_single_logout bool
    Enable single logout
    request_signing_certificate str
    Signing certificate for SAML requests
    server_profile str
    IdP server profile object
    attributeNameAccessDomain String
    access-domain
    attributeNameAdminRole String
    admin-role
    attributeNameUsergroup String
    usergroup
    attributeNameUsername String
    Attribute name for username to be extracted from SAML response
    certificateProfile String
    Certificate profile for IDP and SP
    enableSingleLogout Boolean
    Enable single logout
    requestSigningCertificate String
    Signing certificate for SAML requests
    serverProfile String
    IdP server profile object

    AuthenticationProfileMethodTacplus, AuthenticationProfileMethodTacplusArgs

    Checkgroup bool
    Retrieve user group from TACACS+
    ServerProfile string
    TACACS+ server profile object
    Checkgroup bool
    Retrieve user group from TACACS+
    ServerProfile string
    TACACS+ server profile object
    checkgroup Boolean
    Retrieve user group from TACACS+
    serverProfile String
    TACACS+ server profile object
    checkgroup boolean
    Retrieve user group from TACACS+
    serverProfile string
    TACACS+ server profile object
    checkgroup bool
    Retrieve user group from TACACS+
    server_profile str
    TACACS+ server profile object
    checkgroup Boolean
    Retrieve user group from TACACS+
    serverProfile String
    TACACS+ server profile object

    AuthenticationProfileMultiFactorAuth, AuthenticationProfileMultiFactorAuthArgs

    Factors List<string>
    MfaEnable bool
    Enable Additional Authentication Factors
    Factors []string
    MfaEnable bool
    Enable Additional Authentication Factors
    factors List<String>
    mfaEnable Boolean
    Enable Additional Authentication Factors
    factors string[]
    mfaEnable boolean
    Enable Additional Authentication Factors
    factors Sequence[str]
    mfa_enable bool
    Enable Additional Authentication Factors
    factors List<String>
    mfaEnable Boolean
    Enable Additional Authentication Factors

    AuthenticationProfileSingleSignOn, AuthenticationProfileSingleSignOnArgs

    KerberosKeytab string
    Kerberos keytab
    Realm string
    Kerberos realm to be used for authentication
    ServicePrincipal string
    Kerberos service principal
    KerberosKeytab string
    Kerberos keytab
    Realm string
    Kerberos realm to be used for authentication
    ServicePrincipal string
    Kerberos service principal
    kerberosKeytab String
    Kerberos keytab
    realm String
    Kerberos realm to be used for authentication
    servicePrincipal String
    Kerberos service principal
    kerberosKeytab string
    Kerberos keytab
    realm string
    Kerberos realm to be used for authentication
    servicePrincipal string
    Kerberos service principal
    kerberos_keytab str
    Kerberos keytab
    realm str
    Kerberos realm to be used for authentication
    service_principal str
    Kerberos service principal
    kerberosKeytab String
    Kerberos keytab
    realm String
    Kerberos realm to be used for authentication
    servicePrincipal String
    Kerberos service principal

    Package Details

    Repository
    panos paloaltonetworks/terraform-provider-panos
    License
    Notes
    This Pulumi package is based on the panos Terraform Provider.
    panos logo
    panos 2.0.7 published on Thursday, Nov 27, 2025 by paloaltonetworks
    Schema (JSON)
    paloaltonetworks/terraform-provider-panos
      Meet Neo: Your AI Platform Teammate