pulumi-cloudflare-kotlin/com.pulumi.cloudflare.kotlin.inputs/AccessIdentityProviderScimConfigArgs

AccessIdentityProviderScimConfigArgs

data class AccessIdentityProviderScimConfigArgs(val enabled: Output<Boolean>? = null, val groupMemberDeprovision: Output<Boolean>? = null, val identityUpdateBehavior: Output<String>? = null, val seatDeprovision: Output<Boolean>? = null, val secret: Output<String>? = null, val userDeprovision: Output<Boolean>? = null) : ConvertibleToJava<AccessIdentityProviderScimConfigArgs>

Constructors

constructor(enabled: Output<Boolean>? = null, groupMemberDeprovision: Output<Boolean>? = null, identityUpdateBehavior: Output<String>? = null, seatDeprovision: Output<Boolean>? = null, secret: Output<String>? = null, userDeprovision: Output<Boolean>? = null)

Properties

enabled

val enabled: Output<Boolean>? = null

A flag to enable or disable SCIM for the identity provider.

groupMemberDeprovision

val groupMemberDeprovision: Output<Boolean>? = null

Deprecated. Use identity_update_behavior.

identityUpdateBehavior

val identityUpdateBehavior: Output<String>? = null

Indicates how a SCIM event updates a user identity used for policy evaluation. Use "automatic" to automatically update a user's identity and augment it with fields from the SCIM user resource. Use "reauth" to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With "reauth" identities will not contain fields from the SCIM user resource. With "no_action" identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate.

seatDeprovision

val seatDeprovision: Output<Boolean>? = null

A flag to remove a user's seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user_deprovision is also enabled.

secret

val secret: Output<String>? = null

A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it token at /access/identityproviders/:idpID/refreshscim_secret.

userDeprovision

val userDeprovision: Output<Boolean>? = null

A flag to enable revoking a user's session in Access and Gateway when they have been deprovisioned in the Identity Provider.

Functions

toJava

open override fun toJava(): AccessIdentityProviderScimConfigArgs