import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../../types/input";
import * as outputs from "../../types/output";
import * as enums from "../../types/enums";
/**
 * Creates an InboundSsoAssignment for users and devices in a `Customer` under a given `Group` or `OrgUnit`.
 * Auto-naming is currently not supported for this resource.
 */
export declare class InboundSsoAssignment extends pulumi.CustomResource {
    /**
     * Get an existing InboundSsoAssignment resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): InboundSsoAssignment;
    /**
     * Returns true if the given object is an instance of InboundSsoAssignment.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is InboundSsoAssignment;
    /**
     * Immutable. The customer. For example: `customers/C0123abc`.
     */
    readonly customer: pulumi.Output<string>;
    /**
     * [Resource name](https://cloud.google.com/apis/design/resource_names) of the Inbound SSO Assignment.
     */
    readonly name: pulumi.Output<string>;
    /**
     * Must be zero (which is the default value so it can be omitted) for assignments with `target_org_unit` set and must be greater-than-or-equal-to one for assignments with `target_group` set.
     */
    readonly rank: pulumi.Output<number>;
    /**
     * SAML SSO details. Must be set if and only if `sso_mode` is set to `SAML_SSO`.
     */
    readonly samlSsoInfo: pulumi.Output<outputs.cloudidentity.v1.SamlSsoInfoResponse>;
    /**
     * Assertions about users assigned to an IdP will always be accepted from that IdP. This controls whether/when Google should redirect a user to the IdP. Unset (defaults) is the recommended configuration.
     */
    readonly signInBehavior: pulumi.Output<outputs.cloudidentity.v1.SignInBehaviorResponse>;
    /**
     * Inbound SSO behavior.
     */
    readonly ssoMode: pulumi.Output<string>;
    /**
     * Immutable. Must be of the form `groups/{group}`.
     */
    readonly targetGroup: pulumi.Output<string>;
    /**
     * Immutable. Must be of the form `orgUnits/{org_unit}`.
     */
    readonly targetOrgUnit: pulumi.Output<string>;
    /**
     * Create a InboundSsoAssignment resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args?: InboundSsoAssignmentArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * The set of arguments for constructing a InboundSsoAssignment resource.
 */
export interface InboundSsoAssignmentArgs {
    /**
     * Immutable. The customer. For example: `customers/C0123abc`.
     */
    customer?: pulumi.Input<string>;
    /**
     * Must be zero (which is the default value so it can be omitted) for assignments with `target_org_unit` set and must be greater-than-or-equal-to one for assignments with `target_group` set.
     */
    rank?: pulumi.Input<number>;
    /**
     * SAML SSO details. Must be set if and only if `sso_mode` is set to `SAML_SSO`.
     */
    samlSsoInfo?: pulumi.Input<inputs.cloudidentity.v1.SamlSsoInfoArgs>;
    /**
     * Assertions about users assigned to an IdP will always be accepted from that IdP. This controls whether/when Google should redirect a user to the IdP. Unset (defaults) is the recommended configuration.
     */
    signInBehavior?: pulumi.Input<inputs.cloudidentity.v1.SignInBehaviorArgs>;
    /**
     * Inbound SSO behavior.
     */
    ssoMode?: pulumi.Input<enums.cloudidentity.v1.InboundSsoAssignmentSsoMode>;
    /**
     * Immutable. Must be of the form `groups/{group}`.
     */
    targetGroup?: pulumi.Input<string>;
    /**
     * Immutable. Must be of the form `orgUnits/{org_unit}`.
     */
    targetOrgUnit?: pulumi.Input<string>;
}