pulumi-cloudflare-kotlin/com.pulumi.cloudflare.kotlin.outputs/GetZeroTrustAccessIdentityProvidersResultConfig

GetZeroTrustAccessIdentityProvidersResultConfig

data class GetZeroTrustAccessIdentityProvidersResultConfig(val appsDomain: String, val attributes: List<String>, val authUrl: String, val authorizationServerId: String, val centrifyAccount: String, val centrifyAppId: String, val certsUrl: String, val claims: List<String>, val clientId: String, val clientSecret: String, val conditionalAccessEnabled: Boolean, val directoryId: String, val emailAttributeName: String, val emailClaimName: String, val headerAttributes: List<GetZeroTrustAccessIdentityProvidersResultConfigHeaderAttribute>, val idpPublicCerts: List<String>, val issuerUrl: String, val oktaAccount: String, val oneloginAccount: String, val pingEnvId: String, val pkceEnabled: Boolean, val prompt: String, val scopes: List<String>, val signRequest: Boolean, val ssoTargetUrl: String, val supportGroups: Boolean, val tokenUrl: String)

Constructors

constructor(appsDomain: String, attributes: List<String>, authUrl: String, authorizationServerId: String, centrifyAccount: String, centrifyAppId: String, certsUrl: String, claims: List<String>, clientId: String, clientSecret: String, conditionalAccessEnabled: Boolean, directoryId: String, emailAttributeName: String, emailClaimName: String, headerAttributes: List<GetZeroTrustAccessIdentityProvidersResultConfigHeaderAttribute>, idpPublicCerts: List<String>, issuerUrl: String, oktaAccount: String, oneloginAccount: String, pingEnvId: String, pkceEnabled: Boolean, prompt: String, scopes: List<String>, signRequest: Boolean, ssoTargetUrl: String, supportGroups: Boolean, tokenUrl: String)

Types

Companion

object Companion

Properties

appsDomain

val appsDomain: String

Your companies TLD

attributes

val attributes: List<String>

A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules.

authorizationServerId

val authorizationServerId: String

Your okta authorization server id

authUrl

val authUrl: String

The authorization_endpoint URL of your IdP

centrifyAccount

val centrifyAccount: String

Your centrify account url

centrifyAppId

val centrifyAppId: String

Your centrify app id

certsUrl

val certsUrl: String

The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens

claims

val claims: List<String>

Custom claims

clientId

val clientId: String

Your OAuth Client ID

clientSecret

val clientSecret: String

Your OAuth Client Secret

conditionalAccessEnabled

val conditionalAccessEnabled: Boolean

Should Cloudflare try to load authentication contexts from your account

directoryId

val directoryId: String

Your Azure directory uuid

emailAttributeName

val emailAttributeName: String

The attribute name for email in the SAML response.

emailClaimName

val emailClaimName: String

The claim name for email in the id_token response.

headerAttributes

val headerAttributes: List<GetZeroTrustAccessIdentityProvidersResultConfigHeaderAttribute>

Add a list of attribute names that will be returned in the response header from the Access callback.

idpPublicCerts

val idpPublicCerts: List<String>

X509 certificate to verify the signature in the SAML authentication response

issuerUrl

val issuerUrl: String

IdP Entity ID or Issuer URL

oktaAccount

val oktaAccount: String

Your okta account url

oneloginAccount

val oneloginAccount: String

Your OneLogin account url

pingEnvId

val pingEnvId: String

Your PingOne environment identifier

pkceEnabled

val pkceEnabled: Boolean

Enable Proof Key for Code Exchange (PKCE)

prompt

val prompt: String

Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interactionrequired error. prompt=selectaccount interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether. Available values: "login", "select_account", "none".

scopes

val scopes: List<String>

OAuth scopes

signRequest

val signRequest: Boolean

Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints.

ssoTargetUrl

val ssoTargetUrl: String

URL to send the SAML authentication requests to

supportGroups

val supportGroups: Boolean

Should Cloudflare try to load groups from your account

tokenUrl

val tokenUrl: String

The token_endpoint URL of your IdP