1. Packages
  2. Strata Cloud Manager Provider
  3. API Docs
  4. AuthenticationSetting
Strata Cloud Manager v1.0.3 published on Thursday, Jan 22, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-scm

scm.AuthenticationSetting

scm logo
Strata Cloud Manager v1.0.3 published on Thursday, Jan 22, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-scm

    AuthenticationSetting resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as scm from "@pulumi/scm";

const globalRadiusAccess = new scm.AuthenticationProfile("global_radius_access", {
    name: "test_auth_profile_radius_1",
    folder: "Prisma Access",
    userDomain: "default",
    usernameModifier: "%USERINPUT%",
    allowLists: ["all"],
    lockout: {
        failedAttempts: 1,
        lockoutTime: 3,
    },
    method: {
        radius: {
            checkgroup: true,
            serverProfile: "CHAP_only_rsp_11",
        },
    },
    singleSignOn: {
        realm: "EXAMPLE.COM",
    },
});
const authSettings = new scm.AuthenticationSetting("auth_settings", {
    folder: "Prisma Access",
    authentication: {
        authenticationProfile: globalRadiusAccess.name,
        certificateProfile: "EDL-Hosting-Service-Profile",
    },
});

    import pulumi
import pulumi_scm as scm

global_radius_access = scm.AuthenticationProfile("global_radius_access",
    name="test_auth_profile_radius_1",
    folder="Prisma Access",
    user_domain="default",
    username_modifier="%USERINPUT%",
    allow_lists=["all"],
    lockout={
        "failed_attempts": 1,
        "lockout_time": 3,
    },
    method={
        "radius": {
            "checkgroup": True,
            "server_profile": "CHAP_only_rsp_11",
        },
    },
    single_sign_on={
        "realm": "EXAMPLE.COM",
    })
auth_settings = scm.AuthenticationSetting("auth_settings",
    folder="Prisma Access",
    authentication={
        "authentication_profile": global_radius_access.name,
        "certificate_profile": "EDL-Hosting-Service-Profile",
    })

    package main

import (
	"github.com/pulumi/pulumi-scm/sdk/go/scm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		globalRadiusAccess, err := scm.NewAuthenticationProfile(ctx, "global_radius_access", &scm.AuthenticationProfileArgs{
			Name:             pulumi.String("test_auth_profile_radius_1"),
			Folder:           pulumi.String("Prisma Access"),
			UserDomain:       pulumi.String("default"),
			UsernameModifier: pulumi.String("%USERINPUT%"),
			AllowLists: pulumi.StringArray{
				pulumi.String("all"),
			},
			Lockout: &scm.AuthenticationProfileLockoutArgs{
				FailedAttempts: pulumi.Int(1),
				LockoutTime:    pulumi.Int(3),
			},
			Method: &scm.AuthenticationProfileMethodArgs{
				Radius: &scm.AuthenticationProfileMethodRadiusArgs{
					Checkgroup:    pulumi.Bool(true),
					ServerProfile: pulumi.String("CHAP_only_rsp_11"),
				},
			},
			SingleSignOn: &scm.AuthenticationProfileSingleSignOnArgs{
				Realm: pulumi.String("EXAMPLE.COM"),
			},
		})
		if err != nil {
			return err
		}
		_, err = scm.NewAuthenticationSetting(ctx, "auth_settings", &scm.AuthenticationSettingArgs{
			Folder: pulumi.String("Prisma Access"),
			Authentication: &scm.AuthenticationSettingAuthenticationArgs{
				AuthenticationProfile: globalRadiusAccess.Name,
				CertificateProfile:    pulumi.String("EDL-Hosting-Service-Profile"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scm = Pulumi.Scm;

return await Deployment.RunAsync(() => 
{
    var globalRadiusAccess = new Scm.AuthenticationProfile("global_radius_access", new()
    {
        Name = "test_auth_profile_radius_1",
        Folder = "Prisma Access",
        UserDomain = "default",
        UsernameModifier = "%USERINPUT%",
        AllowLists = new[]
        {
            "all",
        },
        Lockout = new Scm.Inputs.AuthenticationProfileLockoutArgs
        {
            FailedAttempts = 1,
            LockoutTime = 3,
        },
        Method = new Scm.Inputs.AuthenticationProfileMethodArgs
        {
            Radius = new Scm.Inputs.AuthenticationProfileMethodRadiusArgs
            {
                Checkgroup = true,
                ServerProfile = "CHAP_only_rsp_11",
            },
        },
        SingleSignOn = new Scm.Inputs.AuthenticationProfileSingleSignOnArgs
        {
            Realm = "EXAMPLE.COM",
        },
    });

    var authSettings = new Scm.AuthenticationSetting("auth_settings", new()
    {
        Folder = "Prisma Access",
        Authentication = new Scm.Inputs.AuthenticationSettingAuthenticationArgs
        {
            AuthenticationProfile = globalRadiusAccess.Name,
            CertificateProfile = "EDL-Hosting-Service-Profile",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scm.AuthenticationProfile;
import com.pulumi.scm.AuthenticationProfileArgs;
import com.pulumi.scm.inputs.AuthenticationProfileLockoutArgs;
import com.pulumi.scm.inputs.AuthenticationProfileMethodArgs;
import com.pulumi.scm.inputs.AuthenticationProfileMethodRadiusArgs;
import com.pulumi.scm.inputs.AuthenticationProfileSingleSignOnArgs;
import com.pulumi.scm.AuthenticationSetting;
import com.pulumi.scm.AuthenticationSettingArgs;
import com.pulumi.scm.inputs.AuthenticationSettingAuthenticationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var globalRadiusAccess = new AuthenticationProfile("globalRadiusAccess", AuthenticationProfileArgs.builder()
            .name("test_auth_profile_radius_1")
            .folder("Prisma Access")
            .userDomain("default")
            .usernameModifier("%USERINPUT%")
            .allowLists("all")
            .lockout(AuthenticationProfileLockoutArgs.builder()
                .failedAttempts(1)
                .lockoutTime(3)
                .build())
            .method(AuthenticationProfileMethodArgs.builder()
                .radius(AuthenticationProfileMethodRadiusArgs.builder()
                    .checkgroup(true)
                    .serverProfile("CHAP_only_rsp_11")
                    .build())
                .build())
            .singleSignOn(AuthenticationProfileSingleSignOnArgs.builder()
                .realm("EXAMPLE.COM")
                .build())
            .build());

        var authSettings = new AuthenticationSetting("authSettings", AuthenticationSettingArgs.builder()
            .folder("Prisma Access")
            .authentication(AuthenticationSettingAuthenticationArgs.builder()
                .authenticationProfile(globalRadiusAccess.name())
                .certificateProfile("EDL-Hosting-Service-Profile")
                .build())
            .build());

    }
}

    resources:
  globalRadiusAccess:
    type: scm:AuthenticationProfile
    name: global_radius_access
    properties:
      name: test_auth_profile_radius_1
      folder: Prisma Access
      userDomain: default
      usernameModifier: '%USERINPUT%'
      allowLists:
        - all
      lockout:
        failedAttempts: 1
        lockoutTime: 3
      method:
        radius:
          checkgroup: true
          serverProfile: CHAP_only_rsp_11
      singleSignOn:
        realm: EXAMPLE.COM
  authSettings:
    type: scm:AuthenticationSetting
    name: auth_settings
    properties:
      folder: Prisma Access
      authentication:
        authenticationProfile: ${globalRadiusAccess.name}
        certificateProfile: EDL-Hosting-Service-Profile

    Create AuthenticationSetting Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AuthenticationSetting(name: string, args?: AuthenticationSettingArgs, opts?: CustomResourceOptions);
    @overload
def AuthenticationSetting(resource_name: str,
                          args: Optional[AuthenticationSettingArgs] = None,
                          opts: Optional[ResourceOptions] = None)

@overload
def AuthenticationSetting(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          authentication: Optional[AuthenticationSettingAuthenticationArgs] = None,
                          device: Optional[str] = None,
                          folder: Optional[str] = None,
                          snippet: Optional[str] = None)
    func NewAuthenticationSetting(ctx *Context, name string, args *AuthenticationSettingArgs, opts ...ResourceOption) (*AuthenticationSetting, error)
    public AuthenticationSetting(string name, AuthenticationSettingArgs? args = null, CustomResourceOptions? opts = null)
    public AuthenticationSetting(String name, AuthenticationSettingArgs args)
public AuthenticationSetting(String name, AuthenticationSettingArgs args, CustomResourceOptions options)

    type: scm:AuthenticationSetting
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AuthenticationSettingArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AuthenticationSettingArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AuthenticationSettingArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AuthenticationSettingArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AuthenticationSettingArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var authenticationSettingResource = new Scm.AuthenticationSetting("authenticationSettingResource", new()
{
    Authentication = new Scm.Inputs.AuthenticationSettingAuthenticationArgs
    {
        AccountingServerProfile = "string",
        AuthenticationProfile = "string",
        CertificateProfile = "string",
    },
    Device = "string",
    Folder = "string",
    Snippet = "string",
});

    example, err := scm.NewAuthenticationSetting(ctx, "authenticationSettingResource", &scm.AuthenticationSettingArgs{
	Authentication: &scm.AuthenticationSettingAuthenticationArgs{
		AccountingServerProfile: pulumi.String("string"),
		AuthenticationProfile:   pulumi.String("string"),
		CertificateProfile:      pulumi.String("string"),
	},
	Device:  pulumi.String("string"),
	Folder:  pulumi.String("string"),
	Snippet: pulumi.String("string"),
})

    var authenticationSettingResource = new AuthenticationSetting("authenticationSettingResource", AuthenticationSettingArgs.builder()
    .authentication(AuthenticationSettingAuthenticationArgs.builder()
        .accountingServerProfile("string")
        .authenticationProfile("string")
        .certificateProfile("string")
        .build())
    .device("string")
    .folder("string")
    .snippet("string")
    .build());

    authentication_setting_resource = scm.AuthenticationSetting("authenticationSettingResource",
    authentication={
        "accounting_server_profile": "string",
        "authentication_profile": "string",
        "certificate_profile": "string",
    },
    device="string",
    folder="string",
    snippet="string")

    const authenticationSettingResource = new scm.AuthenticationSetting("authenticationSettingResource", {
    authentication: {
        accountingServerProfile: "string",
        authenticationProfile: "string",
        certificateProfile: "string",
    },
    device: "string",
    folder: "string",
    snippet: "string",
});

    type: scm:AuthenticationSetting
properties:
    authentication:
        accountingServerProfile: string
        authenticationProfile: string
        certificateProfile: string
    device: string
    folder: string
    snippet: string

    AuthenticationSetting Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AuthenticationSetting resource accepts the following input properties:

    Authentication AuthenticationSettingAuthentication
    Authentication
    Device string
    The device in which the resource is defined
    Folder string

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    Snippet string

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    Authentication AuthenticationSettingAuthenticationArgs
    Authentication
    Device string
    The device in which the resource is defined
    Folder string

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    Snippet string

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    authentication AuthenticationSettingAuthentication
    Authentication
    device String
    The device in which the resource is defined
    folder String

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    snippet String

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    authentication AuthenticationSettingAuthentication
    Authentication
    device string
    The device in which the resource is defined
    folder string

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    snippet string

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    authentication AuthenticationSettingAuthenticationArgs
    Authentication
    device str
    The device in which the resource is defined
    folder str

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    snippet str

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    authentication Property Map
    Authentication
    device String
    The device in which the resource is defined
    folder String

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    snippet String

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AuthenticationSetting resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Tfid string
    Id string
    The provider-assigned unique ID for this managed resource.
    Tfid string
    id String
    The provider-assigned unique ID for this managed resource.
    tfid String
    id string
    The provider-assigned unique ID for this managed resource.
    tfid string
    id str
    The provider-assigned unique ID for this managed resource.
    tfid str
    id String
    The provider-assigned unique ID for this managed resource.
    tfid String

    Look up Existing AuthenticationSetting Resource

    Get an existing AuthenticationSetting resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AuthenticationSettingState, opts?: CustomResourceOptions): AuthenticationSetting
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        authentication: Optional[AuthenticationSettingAuthenticationArgs] = None,
        device: Optional[str] = None,
        folder: Optional[str] = None,
        snippet: Optional[str] = None,
        tfid: Optional[str] = None) -> AuthenticationSetting
    func GetAuthenticationSetting(ctx *Context, name string, id IDInput, state *AuthenticationSettingState, opts ...ResourceOption) (*AuthenticationSetting, error)
    public static AuthenticationSetting Get(string name, Input<string> id, AuthenticationSettingState? state, CustomResourceOptions? opts = null)
    public static AuthenticationSetting get(String name, Output<String> id, AuthenticationSettingState state, CustomResourceOptions options)
    resources:  _:    type: scm:AuthenticationSetting    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Authentication AuthenticationSettingAuthentication
    Authentication
    Device string
    The device in which the resource is defined
    Folder string

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    Snippet string

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    Tfid string
    Authentication AuthenticationSettingAuthenticationArgs
    Authentication
    Device string
    The device in which the resource is defined
    Folder string

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    Snippet string

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    Tfid string
    authentication AuthenticationSettingAuthentication
    Authentication
    device String
    The device in which the resource is defined
    folder String

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    snippet String

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    tfid String
    authentication AuthenticationSettingAuthentication
    Authentication
    device string
    The device in which the resource is defined
    folder string

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    snippet string

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    tfid string
    authentication AuthenticationSettingAuthenticationArgs
    Authentication
    device str
    The device in which the resource is defined
    folder str

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    snippet str

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    tfid str
    authentication Property Map
    Authentication
    device String
    The device in which the resource is defined
    folder String

    The folder in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    snippet String

    The snippet in which the resource is defined

    ℹ️ Note: You must specify exactly one of device, folder, and snippet.

    tfid String

    Supporting Types

    AuthenticationSettingAuthentication, AuthenticationSettingAuthenticationArgs

    AccountingServerProfile string
    Accounting server profile
    AuthenticationProfile string
    Authentication profile
    CertificateProfile string
    Certificate profile
    AccountingServerProfile string
    Accounting server profile
    AuthenticationProfile string
    Authentication profile
    CertificateProfile string
    Certificate profile
    accountingServerProfile String
    Accounting server profile
    authenticationProfile String
    Authentication profile
    certificateProfile String
    Certificate profile
    accountingServerProfile string
    Accounting server profile
    authenticationProfile string
    Authentication profile
    certificateProfile string
    Certificate profile
    accounting_server_profile str
    Accounting server profile
    authentication_profile str
    Authentication profile
    certificate_profile str
    Certificate profile
    accountingServerProfile String
    Accounting server profile
    authenticationProfile String
    Authentication profile
    certificateProfile String
    Certificate profile

    Import

    The following command can be used to import a resource not managed by Terraform:

    bash

    $ pulumi import scm:index/authenticationSetting:AuthenticationSetting example folder:::id

    or

    bash

    $ pulumi import scm:index/authenticationSetting:AuthenticationSetting example :snippet::id

    or

    bash

    $ pulumi import scm:index/authenticationSetting:AuthenticationSetting example ::device:id

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    scm pulumi/pulumi-scm
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the scm Terraform Provider.
    scm logo
    Strata Cloud Manager v1.0.3 published on Thursday, Jan 22, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-scm
      Meet Neo: Your AI Platform Teammate