import * as pulumi from "@pulumi/pulumi";
import * as outputs from "../../types/output";
/**
 * Gets an InboundSsoAssignment.
 */
export declare function getInboundSsoAssignment(args: GetInboundSsoAssignmentArgs, opts?: pulumi.InvokeOptions): Promise<GetInboundSsoAssignmentResult>;
export interface GetInboundSsoAssignmentArgs {
    inboundSsoAssignmentId: string;
}
export interface GetInboundSsoAssignmentResult {
    /**
     * Immutable. The customer. For example: `customers/C0123abc`.
     */
    readonly customer: string;
    /**
     * [Resource name](https://cloud.google.com/apis/design/resource_names) of the Inbound SSO Assignment.
     */
    readonly name: string;
    /**
     * Must be zero (which is the default value so it can be omitted) for assignments with `target_org_unit` set and must be greater-than-or-equal-to one for assignments with `target_group` set.
     */
    readonly rank: number;
    /**
     * SAML SSO details. Must be set if and only if `sso_mode` is set to `SAML_SSO`.
     */
    readonly samlSsoInfo: outputs.cloudidentity.v1.SamlSsoInfoResponse;
    /**
     * Assertions about users assigned to an IdP will always be accepted from that IdP. This controls whether/when Google should redirect a user to the IdP. Unset (defaults) is the recommended configuration.
     */
    readonly signInBehavior: outputs.cloudidentity.v1.SignInBehaviorResponse;
    /**
     * Inbound SSO behavior.
     */
    readonly ssoMode: string;
    /**
     * Immutable. Must be of the form `groups/{group}`.
     */
    readonly targetGroup: string;
    /**
     * Immutable. Must be of the form `orgUnits/{org_unit}`.
     */
    readonly targetOrgUnit: string;
}
/**
 * Gets an InboundSsoAssignment.
 */
export declare function getInboundSsoAssignmentOutput(args: GetInboundSsoAssignmentOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetInboundSsoAssignmentResult>;
export interface GetInboundSsoAssignmentOutputArgs {
    inboundSsoAssignmentId: pulumi.Input<string>;
}