pulumi-cloudflare-kotlin/com.pulumi.cloudflare.kotlin.inputs/AccessIdentityProviderScimConfigArgs

AccessIdentityProviderScimConfigArgs

data class AccessIdentityProviderScimConfigArgs(val enabled: Output<Boolean>? = null, val identityUpdateBehavior: Output<String>? = null, val scimBaseUrl: Output<String>? = null, val seatDeprovision: Output<Boolean>? = null, val secret: Output<String>? = null, val userDeprovision: Output<Boolean>? = null) : ConvertibleToJava<AccessIdentityProviderScimConfigArgs>

Constructors

constructor(enabled: Output<Boolean>? = null, identityUpdateBehavior: Output<String>? = null, scimBaseUrl: Output<String>? = null, seatDeprovision: Output<Boolean>? = null, secret: Output<String>? = null, userDeprovision: Output<Boolean>? = null)

Properties

enabled

val enabled: Output<Boolean>? = null

A flag to enable or disable SCIM for the identity provider.

identityUpdateBehavior

val identityUpdateBehavior: Output<String>? = null

Indicates how a SCIM event updates a user identity used for policy evaluation. Use "automatic" to automatically update a user's identity and augment it with fields from the SCIM user resource. Use "reauth" to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With "reauth" identities will not contain fields from the SCIM user resource. With "noaction" identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate. Available values: "automatic", "reauth", "noaction".

scimBaseUrl

val scimBaseUrl: Output<String>? = null

The base URL of Cloudflare's SCIM V2.0 API endpoint.

seatDeprovision

val seatDeprovision: Output<Boolean>? = null

A flag to remove a user's seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user_deprovision is also enabled.

secret

val secret: Output<String>? = null

A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identityproviders/:idpID/refreshscim_secret.

userDeprovision

val userDeprovision: Output<Boolean>? = null

A flag to enable revoking a user's session in Access and Gateway when they have been deprovisioned in the Identity Provider.

Functions

toJava

open override fun toJava(): AccessIdentityProviderScimConfigArgs