import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * This resource provides the App resource in Oracle Cloud Infrastructure Identity Domains service. * Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/identity-domains/latest/App * * Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/identity_domains * * Create an App * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as oci from "@pulumi/oci"; * * const testApp = new oci.identity.DomainsApp("test_app", { * basedOnTemplate: { * value: appBasedOnTemplateValue, * wellKnownId: "CustomWebAppTemplateId", * }, * displayName: appDisplayName, * idcsEndpoint: testDomain.url, * schemas: ["urn:ietf:params:scim:schemas:oracle:idcs:App"], * accessTokenExpiry: Number(appAccessTokenExpiry), * active: appActive === "true", * aliasApps: [{ * value: appAliasAppsValue, * }], * allUrlSchemesAllowed: appAllUrlSchemesAllowed === "true", * allowAccessControl: appAllowAccessControl === "true", * allowOffline: appAllowOffline === "true", * allowedGrants: appAllowedGrants, * allowedOperations: appAllowedOperations, * allowedScopes: [{ * fqs: appAllowedScopesFqs, * }], * allowedTags: [{ * key: appAllowedTagsKey, * value: appAllowedTagsValue, * }], * appIcon: appAppIcon, * appSignonPolicy: { * value: appAppSignonPolicyValue, * }, * appThumbnail: appAppThumbnail, * appsNetworkPerimeters: [{ * value: appAppsNetworkPerimetersValue, * }], * asOpcService: { * value: appAsOpcServiceValue, * }, * attrRenderingMetadatas: [{ * name: appAttrRenderingMetadataName, * datatype: appAttrRenderingMetadataDatatype, * helptext: appAttrRenderingMetadataHelptext, * label: appAttrRenderingMetadataLabel, * maxLength: Number(appAttrRenderingMetadataMaxLength), * maxSize: Number(appAttrRenderingMetadataMaxSize), * minLength: Number(appAttrRenderingMetadataMinLength), * minSize: Number(appAttrRenderingMetadataMinSize), * order: Number(appAttrRenderingMetadataOrder), * readOnly: appAttrRenderingMetadataReadOnly === "true", * regexp: appAttrRenderingMetadataRegexp, * required: appAttrRenderingMetadataRequired === "true", * section: appAttrRenderingMetadataSection, * visible: appAttrRenderingMetadataVisible === "true", * widget: appAttrRenderingMetadataWidget, * }], * attributeSets: ["all"], * attributes: "", * audience: appAudience, * authorization: appAuthorization, * bypassConsent: appBypassConsent === "true", * certificates: [{ * certAlias: appCertificatesCertAlias, * }], * clientIpChecking: appClientIpChecking, * clientType: appClientType, * contactEmailAddress: appContactEmailAddress, * delegatedServiceNames: appDelegatedServiceNames, * description: appDescription, * disableKmsiTokenAuthentication: appDisableKmsiTokenAuthentication === "true", * errorPageUrl: appErrorPageUrl, * forceDelete: appForceDelete === "true", * homePageUrl: appHomePageUrl, * icon: appIcon, * id: appId, * idTokenEncAlgo: appIdTokenEncAlgo, * identityProviders: [{ * value: appIdentityProvidersValue, * }], * idpPolicy: { * value: appIdpPolicyValue, * }, * isAliasApp: appIsAliasApp === "true", * isEnterpriseApp: appIsEnterpriseApp === "true", * isFormFill: appIsFormFill === "true", * isKerberosRealm: appIsKerberosRealm === "true", * isLoginTarget: appIsLoginTarget === "true", * isMobileTarget: appIsMobileTarget === "true", * isMulticloudServiceApp: appIsMulticloudServiceApp === "true", * isOauthClient: appIsOauthClient === "true", * isOauthResource: appIsOauthResource === "true", * isObligationCapable: appIsObligationCapable === "true", * isRadiusApp: appIsRadiusApp === "true", * isSamlServiceProvider: appIsSamlServiceProvider === "true", * isUnmanagedApp: appIsUnmanagedApp === "true", * isWebTierPolicy: appIsWebTierPolicy === "true", * landingPageUrl: appLandingPageUrl, * linkingCallbackUrl: appLinkingCallbackUrl, * loginMechanism: appLoginMechanism, * loginPageUrl: appLoginPageUrl, * logoutPageUrl: appLogoutPageUrl, * logoutUri: appLogoutUri, * name: appName, * ocid: appOcid, * postLogoutRedirectUris: appPostLogoutRedirectUris, * privacyPolicyUrl: appPrivacyPolicyUrl, * productLogoUrl: appProductLogoUrl, * productName: appProductName, * protectableSecondaryAudiences: [{ * value: appProtectableSecondaryAudiencesValue, * }], * radiusPolicy: { * value: appRadiusPolicyValue, * }, * redirectUris: appRedirectUris, * refreshTokenExpiry: Number(appRefreshTokenExpiry), * resourceTypeSchemaVersion: appResourceTypeSchemaVersion, * samlServiceProvider: { * value: appSamlServiceProviderValue, * }, * scopes: [{ * value: appScopesValue, * description: appScopesDescription, * displayName: appScopesDisplayName, * requiresConsent: appScopesRequiresConsent === "true", * }], * secondaryAudiences: ["secondaryAudiences"], * serviceParams: [{ * name: appServiceParamsName, * value: appServiceParamsValue, * }], * serviceTypeUrn: appServiceTypeUrn, * serviceTypeVersion: appServiceTypeVersion, * showInMyApps: appShowInMyApps === "true", * signonPolicy: { * value: appSignonPolicyValue, * }, * tags: [{ * key: appTagsKey, * value: appTagsValue, * }], * termsOfServiceUrl: appTermsOfServiceUrl, * termsOfUse: { * value: appTermsOfUseValue, * }, * trustPolicies: [{ * value: appTrustPoliciesValue, * }], * trustScope: appTrustScope, * urnietfparamsscimschemasoracleidcsextensionOciTags: { * definedTags: [{ * key: appUrnietfparamsscimschemasoracleidcsextensionOciTagsDefinedTagsKey, * namespace: appUrnietfparamsscimschemasoracleidcsextensionOciTagsDefinedTagsNamespace, * value: appUrnietfparamsscimschemasoracleidcsextensionOciTagsDefinedTagsValue, * }], * freeformTags: [{ * key: appUrnietfparamsscimschemasoracleidcsextensionOciTagsFreeformTagsKey, * value: appUrnietfparamsscimschemasoracleidcsextensionOciTagsFreeformTagsValue, * }], * }, * urnietfparamsscimschemasoracleidcsextensiondbcsApp: { * domainApp: { * value: appUrnietfparamsscimschemasoracleidcsextensiondbcsAppDomainAppValue, * }, * domainName: "domainName", * }, * urnietfparamsscimschemasoracleidcsextensionenterpriseAppApp: { * allowAuthzDecisionTtl: Number(appUrnietfparamsscimschemasoracleidcsextensionenterpriseAppAppAllowAuthzDecisionTtl), * allowAuthzPolicy: { * value: appUrnietfparamsscimschemasoracleidcsextensionenterpriseAppAppAllowAuthzPolicyValue, * }, * appResources: [{ * value: appUrnietfparamsscimschemasoracleidcsextensionenterpriseAppAppAppResourcesValue, * }], * denyAuthzDecisionTtl: Number(appUrnietfparamsscimschemasoracleidcsextensionenterpriseAppAppDenyAuthzDecisionTtl), * denyAuthzPolicy: { * value: appUrnietfparamsscimschemasoracleidcsextensionenterpriseAppAppDenyAuthzPolicyValue, * }, * }, * urnietfparamsscimschemasoracleidcsextensionformFillAppApp: { * configuration: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppConfiguration, * formCredMethod: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppFormCredMethod, * formCredentialSharingGroupId: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppFormCredentialSharingGroupId, * formFillUrlMatches: [{ * formUrl: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppFormFillUrlMatchFormUrl, * formUrlMatchType: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppFormFillUrlMatchFormUrlMatchType, * }], * formType: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppFormType, * revealPasswordOnForm: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppRevealPasswordOnForm === "true", * userNameFormExpression: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppUserNameFormExpression, * userNameFormTemplate: appUrnietfparamsscimschemasoracleidcsextensionformFillAppAppUserNameFormTemplate, * }, * urnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplate: { * configuration: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateConfiguration, * formCredMethod: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateFormCredMethod, * formCredentialSharingGroupId: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateFormCredentialSharingGroupId, * formFillUrlMatches: [{ * formUrl: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateFormFillUrlMatchFormUrl, * formUrlMatchType: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateFormFillUrlMatchFormUrlMatchType, * }], * formType: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateFormType, * revealPasswordOnForm: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateRevealPasswordOnForm === "true", * syncFromTemplate: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateSyncFromTemplate === "true", * userNameFormExpression: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateUserNameFormExpression, * userNameFormTemplate: appUrnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplateUserNameFormTemplate, * }, * urnietfparamsscimschemasoracleidcsextensionkerberosRealmApp: { * defaultEncryptionSaltType: appUrnietfparamsscimschemasoracleidcsextensionkerberosRealmAppDefaultEncryptionSaltType, * masterKey: appUrnietfparamsscimschemasoracleidcsextensionkerberosRealmAppMasterKey, * maxRenewableAge: Number(appUrnietfparamsscimschemasoracleidcsextensionkerberosRealmAppMaxRenewableAge), * maxTicketLife: Number(appUrnietfparamsscimschemasoracleidcsextensionkerberosRealmAppMaxTicketLife), * realmName: appUrnietfparamsscimschemasoracleidcsextensionkerberosRealmAppRealmName, * supportedEncryptionSaltTypes: appUrnietfparamsscimschemasoracleidcsextensionkerberosRealmAppSupportedEncryptionSaltTypes, * ticketFlags: Number(appUrnietfparamsscimschemasoracleidcsextensionkerberosRealmAppTicketFlags), * }, * urnietfparamsscimschemasoracleidcsextensionmanagedappApp: { * adminConsentGranted: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppAdminConsentGranted === "true", * bundleConfigurationProperties: [{ * icfType: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundleConfigurationPropertiesIcfType, * name: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundleConfigurationPropertiesName, * required: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundleConfigurationPropertiesRequired === "true", * confidential: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundleConfigurationPropertiesConfidential === "true", * displayName: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundleConfigurationPropertiesDisplayName, * helpMessage: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundleConfigurationPropertiesHelpMessage, * order: Number(appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundleConfigurationPropertiesOrder), * values: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundleConfigurationPropertiesValue, * }], * bundlePoolConfiguration: { * maxIdle: Number(appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundlePoolConfigurationMaxIdle), * maxObjects: Number(appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundlePoolConfigurationMaxObjects), * maxWait: Number(appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundlePoolConfigurationMaxWait), * minEvictableIdleTimeMillis: Number(appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundlePoolConfigurationMinEvictableIdleTimeMillis), * minIdle: Number(appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppBundlePoolConfigurationMinIdle), * }, * connected: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppConnected === "true", * enableAuthSyncNewUserNotification: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppEnableAuthSyncNewUserNotification === "true", * enableSync: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppEnableSync === "true", * enableSyncSummaryReportNotification: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppEnableSyncSummaryReportNotification === "true", * flatFileBundleConfigurationProperties: [{ * icfType: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileBundleConfigurationPropertiesIcfType, * name: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileBundleConfigurationPropertiesName, * required: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileBundleConfigurationPropertiesRequired === "true", * confidential: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileBundleConfigurationPropertiesConfidential === "true", * displayName: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileBundleConfigurationPropertiesDisplayName, * helpMessage: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileBundleConfigurationPropertiesHelpMessage, * order: Number(appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileBundleConfigurationPropertiesOrder), * values: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileBundleConfigurationPropertiesValue, * }], * flatFileConnectorBundle: { * value: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileConnectorBundleValue, * display: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppFlatFileConnectorBundleDisplay, * wellKnownId: testWellKnown.id, * }, * isAuthoritative: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppIsAuthoritative === "true", * threeLeggedOauthCredential: { * accessToken: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppThreeLeggedOauthCredentialAccessToken, * accessTokenExpiry: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppThreeLeggedOauthCredentialAccessTokenExpiry, * refreshToken: appUrnietfparamsscimschemasoracleidcsextensionmanagedappAppThreeLeggedOauthCredentialRefreshToken, * }, * }, * urnietfparamsscimschemasoracleidcsextensionmulticloudServiceAppApp: { * multicloudServiceType: appUrnietfparamsscimschemasoracleidcsextensionmulticloudServiceAppAppMulticloudServiceType, * multicloudPlatformUrl: appUrnietfparamsscimschemasoracleidcsextensionmulticloudServiceAppAppMulticloudPlatformUrl, * }, * urnietfparamsscimschemasoracleidcsextensionopcServiceApp: { * serviceInstanceIdentifier: appUrnietfparamsscimschemasoracleidcsextensionopcServiceAppServiceInstanceIdentifier, * }, * urnietfparamsscimschemasoracleidcsextensionradiusAppApp: { * clientIp: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppClientIp, * includeGroupInResponse: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppIncludeGroupInResponse === "true", * port: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppPort, * secretKey: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppSecretKey, * captureClientIp: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppCaptureClientIp === "true", * countryCodeResponseAttributeId: "1", * endUserIpAttribute: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppEndUserIpAttribute, * groupMembershipRadiusAttribute: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppGroupMembershipRadiusAttribute, * groupMembershipToReturns: [{ * value: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppGroupMembershipToReturnValue, * }], * groupNameFormat: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppGroupNameFormat, * passwordAndOtpTogether: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppPasswordAndOtpTogether === "true", * radiusVendorSpecificId: "radiusVendorSpecificId", * responseFormat: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppResponseFormat, * responseFormatDelimiter: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppResponseFormatDelimiter, * typeOfRadiusApp: appUrnietfparamsscimschemasoracleidcsextensionradiusAppAppTypeOfRadiusApp, * }, * urnietfparamsscimschemasoracleidcsextensionrequestableApp: { * requestable: appUrnietfparamsscimschemasoracleidcsextensionrequestableAppRequestable === "true", * }, * urnietfparamsscimschemasoracleidcsextensionsamlServiceProviderApp: { * assertionConsumerUrl: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppAssertionConsumerUrl, * encryptAssertion: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppEncryptAssertion === "true", * encryptionAlgorithm: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppEncryptionAlgorithm, * encryptionCertificate: "encryptionCertificate", * federationProtocol: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppFederationProtocol, * groupAssertionAttributes: [{ * name: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppGroupAssertionAttributesName, * condition: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppGroupAssertionAttributesCondition, * format: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppGroupAssertionAttributesFormat, * groupName: "groupName", * }], * hokAcsUrl: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppHokAcsUrl, * hokRequired: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppHokRequired === "true", * includeSigningCertInSignature: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppIncludeSigningCertInSignature === "true", * keyEncryptionAlgorithm: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppKeyEncryptionAlgorithm, * logoutBinding: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppLogoutBinding, * logoutEnabled: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppLogoutEnabled === "true", * logoutRequestUrl: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppLogoutRequestUrl, * logoutResponseUrl: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppLogoutResponseUrl, * metadata: "metadata", * nameIdFormat: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppNameIdFormat, * nameIdUserstoreAttribute: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppNameIdUserstoreAttribute, * partnerProviderId: "partnerProviderId", * partnerProviderPattern: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppPartnerProviderPattern, * signResponseOrAssertion: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppSignResponseOrAssertion, * signatureHashAlgorithm: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppSignatureHashAlgorithm, * signingCertificate: "signingCertificate", * succinctId: "succinctId", * userAssertionAttributes: [{ * name: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppUserAssertionAttributesName, * userStoreAttributeName: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppUserAssertionAttributesUserStoreAttributeName, * format: appUrnietfparamsscimschemasoracleidcsextensionsamlServiceProviderAppUserAssertionAttributesFormat, * }], * }, * urnietfparamsscimschemasoracleidcsextensionwebTierPolicyApp: { * resourceRef: appUrnietfparamsscimschemasoracleidcsextensionwebTierPolicyAppResourceRef === "true", * webTierPolicyAzControl: appUrnietfparamsscimschemasoracleidcsextensionwebTierPolicyAppWebTierPolicyAzControl, * webTierPolicyJson: appUrnietfparamsscimschemasoracleidcsextensionwebTierPolicyAppWebTierPolicyJson, * }, * }); * ``` * * ## Import * * Apps can be imported using the `id`, e.g. * * ```sh * $ pulumi import oci:Identity/domainsApp:DomainsApp test_app "idcsEndpoint/{idcsEndpoint}/apps/{appId}" * ``` */ export declare class DomainsApp extends pulumi.CustomResource { /** * Get an existing DomainsApp resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: DomainsAppState, opts?: pulumi.CustomResourceOptions): DomainsApp; /** * Returns true if the given object is an instance of DomainsApp. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is DomainsApp; /** * (Updatable) Expiry-time in seconds for an Access Token. Any token that allows access to this App will expire after the specified duration. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: integer * * uniqueness: none */ readonly accessTokenExpiry: pulumi.Output; /** * (Updatable) Accounts of App * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex * * uniqueness: none */ readonly accounts: pulumi.Output; /** * (Updatable) If true, this App is able to participate in runtime services, such as automatic-login, OAuth, and SAML. If false, all runtime services are disabled for this App, and only administrative operations can be performed. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly active: pulumi.Output; /** * (Updatable) A list of AppRoles defined by this UnmanagedApp. Membership in each of these AppRoles confers administrative privilege within this App. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex */ readonly adminRoles: pulumi.Output; /** * (Updatable) Each value of this internal attribute refers to an Oracle Public Cloud infrastructure App on which this App depends. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly aliasApps: pulumi.Output; /** * (Updatable) If true, indicates that the system should allow all URL-schemes within each value of the 'redirectUris' attribute. Also indicates that the system should not attempt to confirm that each value of the 'redirectUris' attribute is a valid URI. In particular, the system should not confirm that the domain component of the URI is a top-level domain and the system should not confirm that the hostname portion is a valid system that is reachable over the network. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly allUrlSchemesAllowed: pulumi.Output; /** * (Updatable) If true, any managed App that is based on this template is checked for access control that is, access to this app is subject to successful authorization at SSO service, viz. app grants to start with. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly allowAccessControl: pulumi.Output; /** * (Updatable) If true, indicates that the Refresh Token is allowed when this App acts as an OAuth Resource. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly allowOffline: pulumi.Output; /** * (Updatable) List of grant-types that this App is allowed to use when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly allowedGrants: pulumi.Output; /** * (Updatable) OPTIONAL. Required only when this App acts as an OAuthClient. Supported values are 'introspect' and 'onBehalfOfUser'. The value 'introspect' allows the client to look inside the access-token. The value 'onBehalfOfUser' overrides how the client's privileges are combined with the privileges of the Subject User. Ordinarily, authorization calculates the set of effective privileges as the intersection of the client's privileges and the user's privileges. The value 'onBehalfOf' indicates that authorization should ignore the privileges of the client and use only the user's privileges to calculate the effective privileges. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly allowedOperations: pulumi.Output; /** * (Updatable) A list of scopes (exposed by this App or by other Apps) that this App is allowed to access when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [fqs] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly allowedScopes: pulumi.Output; /** * (Updatable) A list of tags, acting as an OAuthClient, this App is allowed to access. * * **Added In:** 17.4.6 * * **SCIM++ Properties:** * * idcsCompositeKey: [key, value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly allowedTags: pulumi.Output; /** * (Updatable) Application icon. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: request * * type: string * * uniqueness: none */ readonly appIcon: pulumi.Output; /** * (Updatable) App Sign-on Policy. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ readonly appSignonPolicy: pulumi.Output; /** * (Updatable) Application thumbnail. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: request * * type: string * * uniqueness: none */ readonly appThumbnail: pulumi.Output; /** * (Updatable) Network Perimeter * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex */ readonly appsNetworkPerimeters: pulumi.Output; /** * (Updatable) OPCService facet of the application. * * **Deprecated Since: 17.3.4** * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ readonly asOpcService: pulumi.Output; /** * (Updatable) Label for the attribute to be shown in the UI. * * **SCIM++ Properties:** * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: immutable * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly attrRenderingMetadatas: pulumi.Output; /** * (Updatable) A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive. */ readonly attributeSets: pulumi.Output; /** * (Updatable) A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always. */ readonly attributes: pulumi.Output; /** * (Updatable) The base URI for all of the scopes defined in this App. The value of 'audience' is combined with the 'value' of each scope to form an 'fqs' or fully qualified scope. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly audience: pulumi.Output; /** * (Updatable) The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested. */ readonly authorization: pulumi.Output; /** * (Updatable) Application template on which the application is based. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: true * * returned: default * * type: complex */ readonly basedOnTemplate: pulumi.Output; /** * (Updatable) If true, indicates that consent should be skipped for all scopes * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly bypassConsent: pulumi.Output; /** * (Updatable) Callback Service URL * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly callbackServiceUrl: pulumi.Output; /** * (Updatable) Each value of this attribute represent a certificate that this App uses when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsCompositeKey: [certAlias] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly certificates: pulumi.Output; /** * (Updatable) Network Perimeters checking mode * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly clientIpChecking: pulumi.Output; /** * (Updatable) This value is the credential of this App, which this App supplies as a password when this App authenticates to the Oracle Public Cloud infrastructure. This value is also the client secret of this App when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * idcsSensitive: none * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly clientSecret: pulumi.Output; /** * (Updatable) Specifies the type of access that this App has when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly clientType: pulumi.Output; /** * (Updatable) A collection of arbitrary properties that scope the privileges of a cloud-control App. * * **Added In:** 18.4.2 * * **SCIM++ Properties:** * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex * * uniqueness: none */ readonly cloudControlProperties: pulumi.Output; /** * (Updatable) Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly compartmentOcid: pulumi.Output; /** * (Updatable) Contact Email Address * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly contactEmailAddress: pulumi.Output; /** * (Updatable) Service Names allow to use Oracle Cloud Infrastructure signature for client authentication instead of client credentials * * **Added In:** 2207040824 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly delegatedServiceNames: pulumi.Output; /** * (Updatable) A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly deleteInProgress: pulumi.Output; /** * (Updatable) Description of the application. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly description: pulumi.Output; /** * (Updatable) Indicates whether the application is allowed to be access using kmsi token. * * **Added In:** 2111190457 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: always * * type: boolean * * uniqueness: none */ readonly disableKmsiTokenAuthentication: pulumi.Output; /** * (Updatable) Display name of the application. Display name is intended to be user-friendly, and an administrator can change the value at any time. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: true * * returned: always * * type: string * * uniqueness: server */ readonly displayName: pulumi.Output; /** * (Updatable) Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly domainOcid: pulumi.Output; /** * (Updatable) App attributes editable by subject * * **Added In:** 18.2.6 * * **SCIM++ Properties:** * * caseExact: false * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex * * uniqueness: none */ readonly editableAttributes: pulumi.Output; /** * (Updatable) This attribute specifies the URL of the page to which an application will redirect an end-user in case of error. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly errorPageUrl: pulumi.Output; /** * (Updatable) To force delete the resource and all its references (if any). Need to `pulumi up` first before `terraform destroy`. */ readonly forceDelete: pulumi.Output; /** * (Updatable) A list of AppRoles that are granted to this App (and that are defined by other Apps). Within the Oracle Public Cloud infrastructure, this allows AppID-based association. Such an association allows this App to act as a consumer and thus to access resources of another App that acts as a producer. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readOnly * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly grantedAppRoles: pulumi.Output; /** * (Updatable) Grants assigned to the app * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex * * uniqueness: none */ readonly grants: pulumi.Output; /** * (Updatable) Hashed Client Secret. This hash-value is used to verify the 'clientSecret' credential of this App * * **Added In:** 2106240046 * * **SCIM++ Properties:** * * idcsSearchable: false * * idcsSensitive: hashSc * * multiValued: false * * mutability: readOnly * * required: false * * returned: request * * type: string * * uniqueness: none */ readonly hashedClientSecret: pulumi.Output; /** * (Updatable) Home Page URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly homePageUrl: pulumi.Output; /** * (Updatable) URL of application icon. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: reference * * uniqueness: none */ readonly icon: pulumi.Output; /** * (Updatable) Encryption Alogrithm to use for encrypting ID token. * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly idTokenEncAlgo: pulumi.Output; /** * (Updatable) The User or App who created the Resource * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: true * * returned: default * * type: complex */ readonly idcsCreatedBies: pulumi.Output; /** * The basic endpoint for the identity domain */ readonly idcsEndpoint: pulumi.Output; /** * (Updatable) The User or App who modified the Resource * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: complex */ readonly idcsLastModifiedBies: pulumi.Output; /** * (Updatable) The release number when the resource was upgraded. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: request * * type: string * * uniqueness: none */ readonly idcsLastUpgradedInRelease: pulumi.Output; /** * (Updatable) Each value of this attribute specifies an operation that only an internal client may perform on this particular resource. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: string * * uniqueness: none */ readonly idcsPreventedOperations: pulumi.Output; /** * (Updatable) A list of IdentityProvider assigned to app. A user trying to access this app will be automatically redirected to configured IdP during the authentication phase, before being able to access App. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: request * * type: complex */ readonly identityProviders: pulumi.Output; /** * (Updatable) IDP Policy. * * **Added In:** 18.1.2 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ readonly idpPolicy: pulumi.Output; /** * (Updatable) If true, this App is an internal infrastructure App. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly infrastructure: pulumi.Output; /** * If true, this App is an AliasApp and it cannot be granted to an end-user directly. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: always * * type: boolean * * uniqueness: none */ readonly isAliasApp: pulumi.Output; /** * (Updatable) If true, this application acts as database service Application * * **Added In:** 18.2.2 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * type: boolean */ readonly isDatabaseService: pulumi.Output; /** * (Updatable) If true, this app acts as Enterprise app with Authentication and URL Authz policy. * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isEnterpriseApp: pulumi.Output; /** * (Updatable) If true, this application acts as FormFill Application * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isFormFill: pulumi.Output; /** * (Updatable) If true, indicates that this App supports Kerberos Authentication * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isKerberosRealm: pulumi.Output; /** * (Updatable) If true, this App allows runtime services to log end users into this App automatically. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isLoginTarget: pulumi.Output; /** * (Updatable) If true, indicates that access to this App requires an account. That is, in order to log in to the App, a User must use an application-specific identity that is maintained in the remote identity-repository of that App. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isManagedApp: pulumi.Output; /** * (Updatable) If true, indicates that the App should be visible in each end-user's mobile application. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isMobileTarget: pulumi.Output; /** * (Updatable) If true, indicates the app is used for multicloud service integration. * * **Added In:** 2301202328 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isMulticloudServiceApp: pulumi.Output; /** * (Updatable) If true, this application acts as an OAuth Client * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isOauthClient: pulumi.Output; /** * (Updatable) If true, indicates that this application acts as an OAuth Resource. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isOauthResource: pulumi.Output; /** * (Updatable) This flag indicates if the App is capable of validating obligations with the token for allowing access to the App. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isObligationCapable: pulumi.Output; /** * (Updatable) If true, this application is an Oracle Public Cloud service-instance. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isOpcService: pulumi.Output; /** * (Updatable) If true, this application acts as an Radius App * * **Added In:** 20.1.3 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isRadiusApp: pulumi.Output; /** * (Updatable) If true, then this App acts as a SAML Service Provider. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isSamlServiceProvider: pulumi.Output; /** * If true, indicates that this application accepts an Oracle Cloud Identity Service User as a login-identity (does not require an account) and relies for authorization on the User's memberships in AppRoles. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isUnmanagedApp: pulumi.Output; /** * (Updatable) If true, the webtier policy is active * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly isWebTierPolicy: pulumi.Output; /** * (Updatable) The URL of the landing page for this App, which is the first page that an end user should see if runtime services log that end user in to this App automatically. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly landingPageUrl: pulumi.Output; /** * (Updatable) This attribute specifies the callback URL for the social linking operation. * * **Added In:** 18.2.4 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly linkingCallbackUrl: pulumi.Output; /** * (Updatable) The protocol that runtime services will use to log end users in to this App automatically. If 'OIDC', then runtime services use the OpenID Connect protocol. If 'SAML', then runtime services use Security Assertion Markup Language protocol. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly loginMechanism: pulumi.Output; /** * (Updatable) This attribute specifies the URL of the page that the App uses when an end-user signs in to that App. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly loginPageUrl: pulumi.Output; /** * (Updatable) This attribute specifies the URL of the page that the App uses when an end-user signs out. * * **Added In:** 17.4.2 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly logoutPageUrl: pulumi.Output; /** * (Updatable) OAuth will use this URI to logout if this App wants to participate in SSO, and if this App's session gets cleared as part of global logout. Note: This attribute is used only if this App acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly logoutUri: pulumi.Output; /** * (Updatable) A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * idcsCsvAttributeNameMappings: [[columnHeaderName:Created Date, mapsTo:meta.created]] * * type: complex */ readonly metas: pulumi.Output; /** * (Updatable) Indicates whether the application is billed as an OPCService. If true, customer is not billed for runtime operations of the app. * * **Added In:** 18.4.2 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: always * * type: boolean * * uniqueness: none */ readonly meterAsOpcService: pulumi.Output; /** * (Updatable) If true, this App was migrated from an earlier version of Oracle Public Cloud infrastructure (and may therefore require special handling from runtime services such as OAuth or SAML). If false, this App requires no special handling from runtime services. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly migrated: pulumi.Output; /** * Name of the application. Also serves as username if the application authenticates to Oracle Public Cloud infrastructure. This name may not be user-friendly and cannot be changed once an App is created. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: string * * uniqueness: server */ readonly name: pulumi.Output; /** * (Updatable) Unique Oracle Cloud Infrastructure identifier for the SCIM Resource. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: string * * uniqueness: global */ readonly ocid: pulumi.Output; /** * (Updatable) Each value of this attribute is the URI of a landing page within this App. It is used only when this App, acting as an OAuthClient, initiates the logout flow and wants to be redirected back to one of its landing pages. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly postLogoutRedirectUris: pulumi.Output; /** * (Updatable) Privacy Policy URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly privacyPolicyUrl: pulumi.Output; /** * (Updatable) Application Logo URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly productLogoUrl: pulumi.Output; /** * (Updatable) Product Name * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly productName: pulumi.Output; /** * (Updatable) A list of secondary audiences--additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps. * * **Added In:** 18.2.2 * * **SCIM++ Properties:** * * caseExact: false * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly protectableSecondaryAudiences: pulumi.Output; /** * (Updatable) RADIUS Policy assigned to this application. * * **Added In:** 2209070044 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ readonly radiusPolicy: pulumi.Output; /** * (Updatable) If true, this App requires an upgrade and mandates attention from application administrator. The flag is used by UI to indicate this app is ready to upgrade. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly readyToUpgrade: pulumi.Output; /** * (Updatable) OPTIONAL. Each value is a URI within this App. This attribute is required when this App acts as an OAuthClient and is involved in three-legged flows (authorization-code flows). * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly redirectUris: pulumi.Output; /** * (Updatable) Expiry-time in seconds for a Refresh Token. Any token that allows access to this App, once refreshed, will expire after the specified duration. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: integer * * uniqueness: none */ readonly refreshTokenExpiry: pulumi.Output; /** * (Updatable) An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned. */ readonly resourceTypeSchemaVersion: pulumi.Output; /** * (Updatable) An attribute that refers to the SAML Service Provider that runtime services will use to log an end user in to this App automatically. Note that this will be used only if the loginMechanism is 'SAML'. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly samlServiceProvider: pulumi.Output; /** * (Updatable) REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard \"enterprise\" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: true * * returned: default * * type: string * * uniqueness: none */ readonly schemas: pulumi.Output; /** * (Updatable) Scopes defined by this App. Used when this App acts as an OAuth Resource. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ readonly scopes: pulumi.Output; /** * (Updatable) A list of secondary audiences--additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps. * * **Deprecated Since: 18.2.6** * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly secondaryAudiences: pulumi.Output; /** * (Updatable) Custom attribute that is required to compute other attribute values during app creation. * * **SCIM++ Properties:** * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: always * * type: complex * * uniqueness: none */ readonly serviceParams: pulumi.Output; /** * (Updatable) This Uniform Resource Name (URN) value identifies the type of Oracle Public Cloud service of which this app is an instance. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly serviceTypeUrn: pulumi.Output; /** * (Updatable) This value specifies the version of the Oracle Public Cloud service of which this App is an instance * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly serviceTypeVersion: pulumi.Output; /** * (Updatable) If true, this app will be displayed in the MyApps page of each end-user who has access to the App. * * **Added In:** 18.1.2 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readonly showInMyApps: pulumi.Output; /** * (Updatable) Sign-on Policy. * * **Deprecated Since: 17.3.4** * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ readonly signonPolicy: pulumi.Output; /** * (Updatable) A list of tags on this resource. * * **SCIM++ Properties:** * * idcsCompositeKey: [key, value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: request * * type: complex * * uniqueness: none */ readonly tags: pulumi.Output; /** * (Updatable) Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly tenancyOcid: pulumi.Output; /** * (Updatable) Terms of Service URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly termsOfServiceUrl: pulumi.Output; /** * (Updatable) Terms Of Use. * * **Added In:** 18.2.6 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ readonly termsOfUse: pulumi.Output; /** * (Updatable) Trust Policies. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex */ readonly trustPolicies: pulumi.Output; /** * (Updatable) Indicates the scope of trust for this App when acting as an OAuthClient. A value of 'Explicit' indicates that the App is allowed to access only the scopes of OAuthResources that are explicitly specified as 'allowedScopes'. A value of 'Account' indicates that the App is allowed implicitly to access any scope of any OAuthResource within the same Oracle Cloud Account. A value of 'Tags' indicates that the App is allowed to access any scope of any OAuthResource with a matching tag within the same Oracle Cloud Account. A value of 'Default' indicates that the Tenant default trust scope configured in the Tenant Settings is used. * * **Added In:** 17.4.2 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ readonly trustScope: pulumi.Output; /** * (Updatable) Oracle Cloud Infrastructure Tags. */ readonly urnietfparamsscimschemasoracleidcsextensionOciTags: pulumi.Output; /** * (Updatable) This extension provides attributes for database service facet of an App */ readonly urnietfparamsscimschemasoracleidcsextensiondbcsApp: pulumi.Output; /** * (Updatable) This extension defines the Enterprise App related attributes. */ readonly urnietfparamsscimschemasoracleidcsextensionenterpriseAppApp: pulumi.Output; /** * (Updatable) This extension provides attributes for Form-Fill facet of App */ readonly urnietfparamsscimschemasoracleidcsextensionformFillAppApp: pulumi.Output; /** * (Updatable) This extension provides attributes for Form-Fill facet of AppTemplate */ readonly urnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplate: pulumi.Output; /** * (Updatable) Kerberos Realm */ readonly urnietfparamsscimschemasoracleidcsextensionkerberosRealmApp: pulumi.Output; /** * (Updatable) Managed App */ readonly urnietfparamsscimschemasoracleidcsextensionmanagedappApp: pulumi.Output; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of Multicloud Service App */ readonly urnietfparamsscimschemasoracleidcsextensionmulticloudServiceAppApp: pulumi.Output; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of an Oracle Public Cloud (OPC) service. */ readonly urnietfparamsscimschemasoracleidcsextensionopcServiceApp: pulumi.Output; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of Radius App. */ readonly urnietfparamsscimschemasoracleidcsextensionradiusAppApp: pulumi.Output; /** * (Updatable) Requestable App */ readonly urnietfparamsscimschemasoracleidcsextensionrequestableApp: pulumi.Output; /** * (Updatable) This extension defines attributes related to the Service Providers configuration. */ readonly urnietfparamsscimschemasoracleidcsextensionsamlServiceProviderApp: pulumi.Output; /** * (Updatable) WebTier Policy */ readonly urnietfparamsscimschemasoracleidcsextensionwebTierPolicyApp: pulumi.Output; /** * (Updatable) A list of AppRoles defined by this UnmanagedApp. Membership in each of these AppRoles confers end-user privilege within this App. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex */ readonly userRoles: pulumi.Output; /** * Create a DomainsApp resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: DomainsAppArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering DomainsApp resources. */ export interface DomainsAppState { /** * (Updatable) Expiry-time in seconds for an Access Token. Any token that allows access to this App will expire after the specified duration. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: integer * * uniqueness: none */ accessTokenExpiry?: pulumi.Input; /** * (Updatable) Accounts of App * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex * * uniqueness: none */ accounts?: pulumi.Input[] | undefined>; /** * (Updatable) If true, this App is able to participate in runtime services, such as automatic-login, OAuth, and SAML. If false, all runtime services are disabled for this App, and only administrative operations can be performed. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ active?: pulumi.Input; /** * (Updatable) A list of AppRoles defined by this UnmanagedApp. Membership in each of these AppRoles confers administrative privilege within this App. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex */ adminRoles?: pulumi.Input[] | undefined>; /** * (Updatable) Each value of this internal attribute refers to an Oracle Public Cloud infrastructure App on which this App depends. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ aliasApps?: pulumi.Input[] | undefined>; /** * (Updatable) If true, indicates that the system should allow all URL-schemes within each value of the 'redirectUris' attribute. Also indicates that the system should not attempt to confirm that each value of the 'redirectUris' attribute is a valid URI. In particular, the system should not confirm that the domain component of the URI is a top-level domain and the system should not confirm that the hostname portion is a valid system that is reachable over the network. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ allUrlSchemesAllowed?: pulumi.Input; /** * (Updatable) If true, any managed App that is based on this template is checked for access control that is, access to this app is subject to successful authorization at SSO service, viz. app grants to start with. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ allowAccessControl?: pulumi.Input; /** * (Updatable) If true, indicates that the Refresh Token is allowed when this App acts as an OAuth Resource. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ allowOffline?: pulumi.Input; /** * (Updatable) List of grant-types that this App is allowed to use when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ allowedGrants?: pulumi.Input[] | undefined>; /** * (Updatable) OPTIONAL. Required only when this App acts as an OAuthClient. Supported values are 'introspect' and 'onBehalfOfUser'. The value 'introspect' allows the client to look inside the access-token. The value 'onBehalfOfUser' overrides how the client's privileges are combined with the privileges of the Subject User. Ordinarily, authorization calculates the set of effective privileges as the intersection of the client's privileges and the user's privileges. The value 'onBehalfOf' indicates that authorization should ignore the privileges of the client and use only the user's privileges to calculate the effective privileges. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ allowedOperations?: pulumi.Input[] | undefined>; /** * (Updatable) A list of scopes (exposed by this App or by other Apps) that this App is allowed to access when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [fqs] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ allowedScopes?: pulumi.Input[] | undefined>; /** * (Updatable) A list of tags, acting as an OAuthClient, this App is allowed to access. * * **Added In:** 17.4.6 * * **SCIM++ Properties:** * * idcsCompositeKey: [key, value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ allowedTags?: pulumi.Input[] | undefined>; /** * (Updatable) Application icon. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: request * * type: string * * uniqueness: none */ appIcon?: pulumi.Input; /** * (Updatable) App Sign-on Policy. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ appSignonPolicy?: pulumi.Input; /** * (Updatable) Application thumbnail. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: request * * type: string * * uniqueness: none */ appThumbnail?: pulumi.Input; /** * (Updatable) Network Perimeter * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex */ appsNetworkPerimeters?: pulumi.Input[] | undefined>; /** * (Updatable) OPCService facet of the application. * * **Deprecated Since: 17.3.4** * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ asOpcService?: pulumi.Input; /** * (Updatable) Label for the attribute to be shown in the UI. * * **SCIM++ Properties:** * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: immutable * * required: false * * returned: default * * type: complex * * uniqueness: none */ attrRenderingMetadatas?: pulumi.Input[] | undefined>; /** * (Updatable) A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive. */ attributeSets?: pulumi.Input[] | undefined>; /** * (Updatable) A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always. */ attributes?: pulumi.Input; /** * (Updatable) The base URI for all of the scopes defined in this App. The value of 'audience' is combined with the 'value' of each scope to form an 'fqs' or fully qualified scope. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ audience?: pulumi.Input; /** * (Updatable) The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested. */ authorization?: pulumi.Input; /** * (Updatable) Application template on which the application is based. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: true * * returned: default * * type: complex */ basedOnTemplate?: pulumi.Input; /** * (Updatable) If true, indicates that consent should be skipped for all scopes * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ bypassConsent?: pulumi.Input; /** * (Updatable) Callback Service URL * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ callbackServiceUrl?: pulumi.Input; /** * (Updatable) Each value of this attribute represent a certificate that this App uses when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsCompositeKey: [certAlias] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ certificates?: pulumi.Input[] | undefined>; /** * (Updatable) Network Perimeters checking mode * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ clientIpChecking?: pulumi.Input; /** * (Updatable) This value is the credential of this App, which this App supplies as a password when this App authenticates to the Oracle Public Cloud infrastructure. This value is also the client secret of this App when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * idcsSensitive: none * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ clientSecret?: pulumi.Input; /** * (Updatable) Specifies the type of access that this App has when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ clientType?: pulumi.Input; /** * (Updatable) A collection of arbitrary properties that scope the privileges of a cloud-control App. * * **Added In:** 18.4.2 * * **SCIM++ Properties:** * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex * * uniqueness: none */ cloudControlProperties?: pulumi.Input[] | undefined>; /** * (Updatable) Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ compartmentOcid?: pulumi.Input; /** * (Updatable) Contact Email Address * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ contactEmailAddress?: pulumi.Input; /** * (Updatable) Service Names allow to use Oracle Cloud Infrastructure signature for client authentication instead of client credentials * * **Added In:** 2207040824 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ delegatedServiceNames?: pulumi.Input[] | undefined>; /** * (Updatable) A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ deleteInProgress?: pulumi.Input; /** * (Updatable) Description of the application. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ description?: pulumi.Input; /** * (Updatable) Indicates whether the application is allowed to be access using kmsi token. * * **Added In:** 2111190457 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: always * * type: boolean * * uniqueness: none */ disableKmsiTokenAuthentication?: pulumi.Input; /** * (Updatable) Display name of the application. Display name is intended to be user-friendly, and an administrator can change the value at any time. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: true * * returned: always * * type: string * * uniqueness: server */ displayName?: pulumi.Input; /** * (Updatable) Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ domainOcid?: pulumi.Input; /** * (Updatable) App attributes editable by subject * * **Added In:** 18.2.6 * * **SCIM++ Properties:** * * caseExact: false * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex * * uniqueness: none */ editableAttributes?: pulumi.Input[] | undefined>; /** * (Updatable) This attribute specifies the URL of the page to which an application will redirect an end-user in case of error. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ errorPageUrl?: pulumi.Input; /** * (Updatable) To force delete the resource and all its references (if any). Need to `pulumi up` first before `terraform destroy`. */ forceDelete?: pulumi.Input; /** * (Updatable) A list of AppRoles that are granted to this App (and that are defined by other Apps). Within the Oracle Public Cloud infrastructure, this allows AppID-based association. Such an association allows this App to act as a consumer and thus to access resources of another App that acts as a producer. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readOnly * * required: false * * returned: default * * type: complex * * uniqueness: none */ grantedAppRoles?: pulumi.Input[] | undefined>; /** * (Updatable) Grants assigned to the app * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex * * uniqueness: none */ grants?: pulumi.Input[] | undefined>; /** * (Updatable) Hashed Client Secret. This hash-value is used to verify the 'clientSecret' credential of this App * * **Added In:** 2106240046 * * **SCIM++ Properties:** * * idcsSearchable: false * * idcsSensitive: hashSc * * multiValued: false * * mutability: readOnly * * required: false * * returned: request * * type: string * * uniqueness: none */ hashedClientSecret?: pulumi.Input; /** * (Updatable) Home Page URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ homePageUrl?: pulumi.Input; /** * (Updatable) URL of application icon. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: reference * * uniqueness: none */ icon?: pulumi.Input; /** * (Updatable) Encryption Alogrithm to use for encrypting ID token. * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ idTokenEncAlgo?: pulumi.Input; /** * (Updatable) The User or App who created the Resource * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: true * * returned: default * * type: complex */ idcsCreatedBies?: pulumi.Input[] | undefined>; /** * The basic endpoint for the identity domain */ idcsEndpoint?: pulumi.Input; /** * (Updatable) The User or App who modified the Resource * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: complex */ idcsLastModifiedBies?: pulumi.Input[] | undefined>; /** * (Updatable) The release number when the resource was upgraded. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: request * * type: string * * uniqueness: none */ idcsLastUpgradedInRelease?: pulumi.Input; /** * (Updatable) Each value of this attribute specifies an operation that only an internal client may perform on this particular resource. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: string * * uniqueness: none */ idcsPreventedOperations?: pulumi.Input[] | undefined>; /** * (Updatable) A list of IdentityProvider assigned to app. A user trying to access this app will be automatically redirected to configured IdP during the authentication phase, before being able to access App. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: request * * type: complex */ identityProviders?: pulumi.Input[] | undefined>; /** * (Updatable) IDP Policy. * * **Added In:** 18.1.2 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ idpPolicy?: pulumi.Input; /** * (Updatable) If true, this App is an internal infrastructure App. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ infrastructure?: pulumi.Input; /** * If true, this App is an AliasApp and it cannot be granted to an end-user directly. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: always * * type: boolean * * uniqueness: none */ isAliasApp?: pulumi.Input; /** * (Updatable) If true, this application acts as database service Application * * **Added In:** 18.2.2 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * type: boolean */ isDatabaseService?: pulumi.Input; /** * (Updatable) If true, this app acts as Enterprise app with Authentication and URL Authz policy. * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isEnterpriseApp?: pulumi.Input; /** * (Updatable) If true, this application acts as FormFill Application * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isFormFill?: pulumi.Input; /** * (Updatable) If true, indicates that this App supports Kerberos Authentication * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isKerberosRealm?: pulumi.Input; /** * (Updatable) If true, this App allows runtime services to log end users into this App automatically. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isLoginTarget?: pulumi.Input; /** * (Updatable) If true, indicates that access to this App requires an account. That is, in order to log in to the App, a User must use an application-specific identity that is maintained in the remote identity-repository of that App. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isManagedApp?: pulumi.Input; /** * (Updatable) If true, indicates that the App should be visible in each end-user's mobile application. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isMobileTarget?: pulumi.Input; /** * (Updatable) If true, indicates the app is used for multicloud service integration. * * **Added In:** 2301202328 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isMulticloudServiceApp?: pulumi.Input; /** * (Updatable) If true, this application acts as an OAuth Client * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isOauthClient?: pulumi.Input; /** * (Updatable) If true, indicates that this application acts as an OAuth Resource. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isOauthResource?: pulumi.Input; /** * (Updatable) This flag indicates if the App is capable of validating obligations with the token for allowing access to the App. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isObligationCapable?: pulumi.Input; /** * (Updatable) If true, this application is an Oracle Public Cloud service-instance. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isOpcService?: pulumi.Input; /** * (Updatable) If true, this application acts as an Radius App * * **Added In:** 20.1.3 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isRadiusApp?: pulumi.Input; /** * (Updatable) If true, then this App acts as a SAML Service Provider. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isSamlServiceProvider?: pulumi.Input; /** * If true, indicates that this application accepts an Oracle Cloud Identity Service User as a login-identity (does not require an account) and relies for authorization on the User's memberships in AppRoles. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isUnmanagedApp?: pulumi.Input; /** * (Updatable) If true, the webtier policy is active * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isWebTierPolicy?: pulumi.Input; /** * (Updatable) The URL of the landing page for this App, which is the first page that an end user should see if runtime services log that end user in to this App automatically. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ landingPageUrl?: pulumi.Input; /** * (Updatable) This attribute specifies the callback URL for the social linking operation. * * **Added In:** 18.2.4 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ linkingCallbackUrl?: pulumi.Input; /** * (Updatable) The protocol that runtime services will use to log end users in to this App automatically. If 'OIDC', then runtime services use the OpenID Connect protocol. If 'SAML', then runtime services use Security Assertion Markup Language protocol. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ loginMechanism?: pulumi.Input; /** * (Updatable) This attribute specifies the URL of the page that the App uses when an end-user signs in to that App. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ loginPageUrl?: pulumi.Input; /** * (Updatable) This attribute specifies the URL of the page that the App uses when an end-user signs out. * * **Added In:** 17.4.2 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ logoutPageUrl?: pulumi.Input; /** * (Updatable) OAuth will use this URI to logout if this App wants to participate in SSO, and if this App's session gets cleared as part of global logout. Note: This attribute is used only if this App acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ logoutUri?: pulumi.Input; /** * (Updatable) A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * idcsCsvAttributeNameMappings: [[columnHeaderName:Created Date, mapsTo:meta.created]] * * type: complex */ metas?: pulumi.Input[] | undefined>; /** * (Updatable) Indicates whether the application is billed as an OPCService. If true, customer is not billed for runtime operations of the app. * * **Added In:** 18.4.2 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: always * * type: boolean * * uniqueness: none */ meterAsOpcService?: pulumi.Input; /** * (Updatable) If true, this App was migrated from an earlier version of Oracle Public Cloud infrastructure (and may therefore require special handling from runtime services such as OAuth or SAML). If false, this App requires no special handling from runtime services. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ migrated?: pulumi.Input; /** * Name of the application. Also serves as username if the application authenticates to Oracle Public Cloud infrastructure. This name may not be user-friendly and cannot be changed once an App is created. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: string * * uniqueness: server */ name?: pulumi.Input; /** * (Updatable) Unique Oracle Cloud Infrastructure identifier for the SCIM Resource. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: string * * uniqueness: global */ ocid?: pulumi.Input; /** * (Updatable) Each value of this attribute is the URI of a landing page within this App. It is used only when this App, acting as an OAuthClient, initiates the logout flow and wants to be redirected back to one of its landing pages. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ postLogoutRedirectUris?: pulumi.Input[] | undefined>; /** * (Updatable) Privacy Policy URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ privacyPolicyUrl?: pulumi.Input; /** * (Updatable) Application Logo URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ productLogoUrl?: pulumi.Input; /** * (Updatable) Product Name * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ productName?: pulumi.Input; /** * (Updatable) A list of secondary audiences--additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps. * * **Added In:** 18.2.2 * * **SCIM++ Properties:** * * caseExact: false * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ protectableSecondaryAudiences?: pulumi.Input[] | undefined>; /** * (Updatable) RADIUS Policy assigned to this application. * * **Added In:** 2209070044 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ radiusPolicy?: pulumi.Input; /** * (Updatable) If true, this App requires an upgrade and mandates attention from application administrator. The flag is used by UI to indicate this app is ready to upgrade. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: boolean * * uniqueness: none */ readyToUpgrade?: pulumi.Input; /** * (Updatable) OPTIONAL. Each value is a URI within this App. This attribute is required when this App acts as an OAuthClient and is involved in three-legged flows (authorization-code flows). * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ redirectUris?: pulumi.Input[] | undefined>; /** * (Updatable) Expiry-time in seconds for a Refresh Token. Any token that allows access to this App, once refreshed, will expire after the specified duration. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: integer * * uniqueness: none */ refreshTokenExpiry?: pulumi.Input; /** * (Updatable) An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned. */ resourceTypeSchemaVersion?: pulumi.Input; /** * (Updatable) An attribute that refers to the SAML Service Provider that runtime services will use to log an end user in to this App automatically. Note that this will be used only if the loginMechanism is 'SAML'. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ samlServiceProvider?: pulumi.Input; /** * (Updatable) REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard \"enterprise\" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: true * * returned: default * * type: string * * uniqueness: none */ schemas?: pulumi.Input[] | undefined>; /** * (Updatable) Scopes defined by this App. Used when this App acts as an OAuth Resource. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ scopes?: pulumi.Input[] | undefined>; /** * (Updatable) A list of secondary audiences--additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps. * * **Deprecated Since: 18.2.6** * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ secondaryAudiences?: pulumi.Input[] | undefined>; /** * (Updatable) Custom attribute that is required to compute other attribute values during app creation. * * **SCIM++ Properties:** * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: always * * type: complex * * uniqueness: none */ serviceParams?: pulumi.Input[] | undefined>; /** * (Updatable) This Uniform Resource Name (URN) value identifies the type of Oracle Public Cloud service of which this app is an instance. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ serviceTypeUrn?: pulumi.Input; /** * (Updatable) This value specifies the version of the Oracle Public Cloud service of which this App is an instance * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ serviceTypeVersion?: pulumi.Input; /** * (Updatable) If true, this app will be displayed in the MyApps page of each end-user who has access to the App. * * **Added In:** 18.1.2 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ showInMyApps?: pulumi.Input; /** * (Updatable) Sign-on Policy. * * **Deprecated Since: 17.3.4** * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ signonPolicy?: pulumi.Input; /** * (Updatable) A list of tags on this resource. * * **SCIM++ Properties:** * * idcsCompositeKey: [key, value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: request * * type: complex * * uniqueness: none */ tags?: pulumi.Input[] | undefined>; /** * (Updatable) Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readOnly * * required: false * * returned: default * * type: string * * uniqueness: none */ tenancyOcid?: pulumi.Input; /** * (Updatable) Terms of Service URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ termsOfServiceUrl?: pulumi.Input; /** * (Updatable) Terms Of Use. * * **Added In:** 18.2.6 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ termsOfUse?: pulumi.Input; /** * (Updatable) Trust Policies. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex */ trustPolicies?: pulumi.Input[] | undefined>; /** * (Updatable) Indicates the scope of trust for this App when acting as an OAuthClient. A value of 'Explicit' indicates that the App is allowed to access only the scopes of OAuthResources that are explicitly specified as 'allowedScopes'. A value of 'Account' indicates that the App is allowed implicitly to access any scope of any OAuthResource within the same Oracle Cloud Account. A value of 'Tags' indicates that the App is allowed to access any scope of any OAuthResource with a matching tag within the same Oracle Cloud Account. A value of 'Default' indicates that the Tenant default trust scope configured in the Tenant Settings is used. * * **Added In:** 17.4.2 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ trustScope?: pulumi.Input; /** * (Updatable) Oracle Cloud Infrastructure Tags. */ urnietfparamsscimschemasoracleidcsextensionOciTags?: pulumi.Input; /** * (Updatable) This extension provides attributes for database service facet of an App */ urnietfparamsscimschemasoracleidcsextensiondbcsApp?: pulumi.Input; /** * (Updatable) This extension defines the Enterprise App related attributes. */ urnietfparamsscimschemasoracleidcsextensionenterpriseAppApp?: pulumi.Input; /** * (Updatable) This extension provides attributes for Form-Fill facet of App */ urnietfparamsscimschemasoracleidcsextensionformFillAppApp?: pulumi.Input; /** * (Updatable) This extension provides attributes for Form-Fill facet of AppTemplate */ urnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplate?: pulumi.Input; /** * (Updatable) Kerberos Realm */ urnietfparamsscimschemasoracleidcsextensionkerberosRealmApp?: pulumi.Input; /** * (Updatable) Managed App */ urnietfparamsscimschemasoracleidcsextensionmanagedappApp?: pulumi.Input; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of Multicloud Service App */ urnietfparamsscimschemasoracleidcsextensionmulticloudServiceAppApp?: pulumi.Input; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of an Oracle Public Cloud (OPC) service. */ urnietfparamsscimschemasoracleidcsextensionopcServiceApp?: pulumi.Input; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of Radius App. */ urnietfparamsscimschemasoracleidcsextensionradiusAppApp?: pulumi.Input; /** * (Updatable) Requestable App */ urnietfparamsscimschemasoracleidcsextensionrequestableApp?: pulumi.Input; /** * (Updatable) This extension defines attributes related to the Service Providers configuration. */ urnietfparamsscimschemasoracleidcsextensionsamlServiceProviderApp?: pulumi.Input; /** * (Updatable) WebTier Policy */ urnietfparamsscimschemasoracleidcsextensionwebTierPolicyApp?: pulumi.Input; /** * (Updatable) A list of AppRoles defined by this UnmanagedApp. Membership in each of these AppRoles confers end-user privilege within this App. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readOnly * * required: false * * returned: request * * type: complex */ userRoles?: pulumi.Input[] | undefined>; } /** * The set of arguments for constructing a DomainsApp resource. */ export interface DomainsAppArgs { /** * (Updatable) Expiry-time in seconds for an Access Token. Any token that allows access to this App will expire after the specified duration. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: integer * * uniqueness: none */ accessTokenExpiry?: pulumi.Input; /** * (Updatable) If true, this App is able to participate in runtime services, such as automatic-login, OAuth, and SAML. If false, all runtime services are disabled for this App, and only administrative operations can be performed. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ active?: pulumi.Input; /** * (Updatable) Each value of this internal attribute refers to an Oracle Public Cloud infrastructure App on which this App depends. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ aliasApps?: pulumi.Input[] | undefined>; /** * (Updatable) If true, indicates that the system should allow all URL-schemes within each value of the 'redirectUris' attribute. Also indicates that the system should not attempt to confirm that each value of the 'redirectUris' attribute is a valid URI. In particular, the system should not confirm that the domain component of the URI is a top-level domain and the system should not confirm that the hostname portion is a valid system that is reachable over the network. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ allUrlSchemesAllowed?: pulumi.Input; /** * (Updatable) If true, any managed App that is based on this template is checked for access control that is, access to this app is subject to successful authorization at SSO service, viz. app grants to start with. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ allowAccessControl?: pulumi.Input; /** * (Updatable) If true, indicates that the Refresh Token is allowed when this App acts as an OAuth Resource. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ allowOffline?: pulumi.Input; /** * (Updatable) List of grant-types that this App is allowed to use when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ allowedGrants?: pulumi.Input[] | undefined>; /** * (Updatable) OPTIONAL. Required only when this App acts as an OAuthClient. Supported values are 'introspect' and 'onBehalfOfUser'. The value 'introspect' allows the client to look inside the access-token. The value 'onBehalfOfUser' overrides how the client's privileges are combined with the privileges of the Subject User. Ordinarily, authorization calculates the set of effective privileges as the intersection of the client's privileges and the user's privileges. The value 'onBehalfOf' indicates that authorization should ignore the privileges of the client and use only the user's privileges to calculate the effective privileges. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ allowedOperations?: pulumi.Input[] | undefined>; /** * (Updatable) A list of scopes (exposed by this App or by other Apps) that this App is allowed to access when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [fqs] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ allowedScopes?: pulumi.Input[] | undefined>; /** * (Updatable) A list of tags, acting as an OAuthClient, this App is allowed to access. * * **Added In:** 17.4.6 * * **SCIM++ Properties:** * * idcsCompositeKey: [key, value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ allowedTags?: pulumi.Input[] | undefined>; /** * (Updatable) Application icon. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: request * * type: string * * uniqueness: none */ appIcon?: pulumi.Input; /** * (Updatable) App Sign-on Policy. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ appSignonPolicy?: pulumi.Input; /** * (Updatable) Application thumbnail. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: request * * type: string * * uniqueness: none */ appThumbnail?: pulumi.Input; /** * (Updatable) Network Perimeter * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex */ appsNetworkPerimeters?: pulumi.Input[] | undefined>; /** * (Updatable) OPCService facet of the application. * * **Deprecated Since: 17.3.4** * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ asOpcService?: pulumi.Input; /** * (Updatable) Label for the attribute to be shown in the UI. * * **SCIM++ Properties:** * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: immutable * * required: false * * returned: default * * type: complex * * uniqueness: none */ attrRenderingMetadatas?: pulumi.Input[] | undefined>; /** * (Updatable) A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive. */ attributeSets?: pulumi.Input[] | undefined>; /** * (Updatable) A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always. */ attributes?: pulumi.Input; /** * (Updatable) The base URI for all of the scopes defined in this App. The value of 'audience' is combined with the 'value' of each scope to form an 'fqs' or fully qualified scope. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ audience?: pulumi.Input; /** * (Updatable) The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested. */ authorization?: pulumi.Input; /** * (Updatable) Application template on which the application is based. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: true * * returned: default * * type: complex */ basedOnTemplate: pulumi.Input; /** * (Updatable) If true, indicates that consent should be skipped for all scopes * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ bypassConsent?: pulumi.Input; /** * (Updatable) Each value of this attribute represent a certificate that this App uses when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsCompositeKey: [certAlias] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ certificates?: pulumi.Input[] | undefined>; /** * (Updatable) Network Perimeters checking mode * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ clientIpChecking?: pulumi.Input; /** * (Updatable) Specifies the type of access that this App has when it acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ clientType?: pulumi.Input; /** * (Updatable) Contact Email Address * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ contactEmailAddress?: pulumi.Input; /** * (Updatable) Service Names allow to use Oracle Cloud Infrastructure signature for client authentication instead of client credentials * * **Added In:** 2207040824 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ delegatedServiceNames?: pulumi.Input[] | undefined>; /** * (Updatable) Description of the application. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ description?: pulumi.Input; /** * (Updatable) Indicates whether the application is allowed to be access using kmsi token. * * **Added In:** 2111190457 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: always * * type: boolean * * uniqueness: none */ disableKmsiTokenAuthentication?: pulumi.Input; /** * (Updatable) Display name of the application. Display name is intended to be user-friendly, and an administrator can change the value at any time. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: true * * returned: always * * type: string * * uniqueness: server */ displayName: pulumi.Input; /** * (Updatable) This attribute specifies the URL of the page to which an application will redirect an end-user in case of error. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ errorPageUrl?: pulumi.Input; /** * (Updatable) To force delete the resource and all its references (if any). Need to `pulumi up` first before `terraform destroy`. */ forceDelete?: pulumi.Input; /** * (Updatable) Home Page URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ homePageUrl?: pulumi.Input; /** * (Updatable) URL of application icon. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: reference * * uniqueness: none */ icon?: pulumi.Input; /** * (Updatable) Encryption Alogrithm to use for encrypting ID token. * * **Added In:** 2010242156 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ idTokenEncAlgo?: pulumi.Input; /** * The basic endpoint for the identity domain */ idcsEndpoint: pulumi.Input; /** * (Updatable) A list of IdentityProvider assigned to app. A user trying to access this app will be automatically redirected to configured IdP during the authentication phase, before being able to access App. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: request * * type: complex */ identityProviders?: pulumi.Input[] | undefined>; /** * (Updatable) IDP Policy. * * **Added In:** 18.1.2 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ idpPolicy?: pulumi.Input; /** * If true, this App is an AliasApp and it cannot be granted to an end-user directly. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: always * * type: boolean * * uniqueness: none */ isAliasApp?: pulumi.Input; /** * (Updatable) If true, this app acts as Enterprise app with Authentication and URL Authz policy. * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isEnterpriseApp?: pulumi.Input; /** * (Updatable) If true, this application acts as FormFill Application * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isFormFill?: pulumi.Input; /** * (Updatable) If true, indicates that this App supports Kerberos Authentication * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isKerberosRealm?: pulumi.Input; /** * (Updatable) If true, this App allows runtime services to log end users into this App automatically. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isLoginTarget?: pulumi.Input; /** * (Updatable) If true, indicates that the App should be visible in each end-user's mobile application. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isMobileTarget?: pulumi.Input; /** * (Updatable) If true, indicates the app is used for multicloud service integration. * * **Added In:** 2301202328 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isMulticloudServiceApp?: pulumi.Input; /** * (Updatable) If true, this application acts as an OAuth Client * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isOauthClient?: pulumi.Input; /** * (Updatable) If true, indicates that this application acts as an OAuth Resource. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isOauthResource?: pulumi.Input; /** * (Updatable) This flag indicates if the App is capable of validating obligations with the token for allowing access to the App. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isObligationCapable?: pulumi.Input; /** * (Updatable) If true, this application acts as an Radius App * * **Added In:** 20.1.3 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isRadiusApp?: pulumi.Input; /** * (Updatable) If true, then this App acts as a SAML Service Provider. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isSamlServiceProvider?: pulumi.Input; /** * If true, indicates that this application accepts an Oracle Cloud Identity Service User as a login-identity (does not require an account) and relies for authorization on the User's memberships in AppRoles. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isUnmanagedApp?: pulumi.Input; /** * (Updatable) If true, the webtier policy is active * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ isWebTierPolicy?: pulumi.Input; /** * (Updatable) The URL of the landing page for this App, which is the first page that an end user should see if runtime services log that end user in to this App automatically. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ landingPageUrl?: pulumi.Input; /** * (Updatable) This attribute specifies the callback URL for the social linking operation. * * **Added In:** 18.2.4 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ linkingCallbackUrl?: pulumi.Input; /** * (Updatable) The protocol that runtime services will use to log end users in to this App automatically. If 'OIDC', then runtime services use the OpenID Connect protocol. If 'SAML', then runtime services use Security Assertion Markup Language protocol. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ loginMechanism?: pulumi.Input; /** * (Updatable) This attribute specifies the URL of the page that the App uses when an end-user signs in to that App. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ loginPageUrl?: pulumi.Input; /** * (Updatable) This attribute specifies the URL of the page that the App uses when an end-user signs out. * * **Added In:** 17.4.2 * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ logoutPageUrl?: pulumi.Input; /** * (Updatable) OAuth will use this URI to logout if this App wants to participate in SSO, and if this App's session gets cleared as part of global logout. Note: This attribute is used only if this App acts as an OAuthClient. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ logoutUri?: pulumi.Input; /** * Name of the application. Also serves as username if the application authenticates to Oracle Public Cloud infrastructure. This name may not be user-friendly and cannot be changed once an App is created. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: string * * uniqueness: server */ name?: pulumi.Input; /** * (Updatable) Unique Oracle Cloud Infrastructure identifier for the SCIM Resource. * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: true * * multiValued: false * * mutability: immutable * * required: false * * returned: default * * type: string * * uniqueness: global */ ocid?: pulumi.Input; /** * (Updatable) Each value of this attribute is the URI of a landing page within this App. It is used only when this App, acting as an OAuthClient, initiates the logout flow and wants to be redirected back to one of its landing pages. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ postLogoutRedirectUris?: pulumi.Input[] | undefined>; /** * (Updatable) Privacy Policy URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ privacyPolicyUrl?: pulumi.Input; /** * (Updatable) Application Logo URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ productLogoUrl?: pulumi.Input; /** * (Updatable) Product Name * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ productName?: pulumi.Input; /** * (Updatable) A list of secondary audiences--additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps. * * **Added In:** 18.2.2 * * **SCIM++ Properties:** * * caseExact: false * * idcsCompositeKey: [value] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ protectableSecondaryAudiences?: pulumi.Input[] | undefined>; /** * (Updatable) RADIUS Policy assigned to this application. * * **Added In:** 2209070044 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ radiusPolicy?: pulumi.Input; /** * (Updatable) OPTIONAL. Each value is a URI within this App. This attribute is required when this App acts as an OAuthClient and is involved in three-legged flows (authorization-code flows). * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ redirectUris?: pulumi.Input[] | undefined>; /** * (Updatable) Expiry-time in seconds for a Refresh Token. Any token that allows access to this App, once refreshed, will expire after the specified duration. * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: integer * * uniqueness: none */ refreshTokenExpiry?: pulumi.Input; /** * (Updatable) An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned. */ resourceTypeSchemaVersion?: pulumi.Input; /** * (Updatable) An attribute that refers to the SAML Service Provider that runtime services will use to log an end user in to this App automatically. Note that this will be used only if the loginMechanism is 'SAML'. * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ samlServiceProvider?: pulumi.Input; /** * (Updatable) REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard \"enterprise\" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: true * * returned: default * * type: string * * uniqueness: none */ schemas: pulumi.Input[]>; /** * (Updatable) Scopes defined by this App. Used when this App acts as an OAuth Resource. * * **SCIM++ Properties:** * * caseExact: true * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex * * uniqueness: none */ scopes?: pulumi.Input[] | undefined>; /** * (Updatable) A list of secondary audiences--additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps. * * **Deprecated Since: 18.2.6** * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ secondaryAudiences?: pulumi.Input[] | undefined>; /** * (Updatable) Custom attribute that is required to compute other attribute values during app creation. * * **SCIM++ Properties:** * * idcsCompositeKey: [name] * * idcsSearchable: false * * multiValued: true * * mutability: readWrite * * required: false * * returned: always * * type: complex * * uniqueness: none */ serviceParams?: pulumi.Input[] | undefined>; /** * (Updatable) This Uniform Resource Name (URN) value identifies the type of Oracle Public Cloud service of which this app is an instance. * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ serviceTypeUrn?: pulumi.Input; /** * (Updatable) This value specifies the version of the Oracle Public Cloud service of which this App is an instance * * **SCIM++ Properties:** * * caseExact: false * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ serviceTypeVersion?: pulumi.Input; /** * (Updatable) If true, this app will be displayed in the MyApps page of each end-user who has access to the App. * * **Added In:** 18.1.2 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: boolean * * uniqueness: none */ showInMyApps?: pulumi.Input; /** * (Updatable) Sign-on Policy. * * **Deprecated Since: 17.3.4** * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ signonPolicy?: pulumi.Input; /** * (Updatable) A list of tags on this resource. * * **SCIM++ Properties:** * * idcsCompositeKey: [key, value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: request * * type: complex * * uniqueness: none */ tags?: pulumi.Input[] | undefined>; /** * (Updatable) Terms of Service URL * * **Added In:** 19.2.1 * * **SCIM++ Properties:** * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ termsOfServiceUrl?: pulumi.Input; /** * (Updatable) Terms Of Use. * * **Added In:** 18.2.6 * * **SCIM++ Properties:** * * idcsSearchable: true * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: complex */ termsOfUse?: pulumi.Input; /** * (Updatable) Trust Policies. * * **SCIM++ Properties:** * * idcsCompositeKey: [value] * * idcsSearchable: true * * multiValued: true * * mutability: readWrite * * required: false * * returned: default * * type: complex */ trustPolicies?: pulumi.Input[] | undefined>; /** * (Updatable) Indicates the scope of trust for this App when acting as an OAuthClient. A value of 'Explicit' indicates that the App is allowed to access only the scopes of OAuthResources that are explicitly specified as 'allowedScopes'. A value of 'Account' indicates that the App is allowed implicitly to access any scope of any OAuthResource within the same Oracle Cloud Account. A value of 'Tags' indicates that the App is allowed to access any scope of any OAuthResource with a matching tag within the same Oracle Cloud Account. A value of 'Default' indicates that the Tenant default trust scope configured in the Tenant Settings is used. * * **Added In:** 17.4.2 * * **SCIM++ Properties:** * * caseExact: true * * idcsSearchable: false * * multiValued: false * * mutability: readWrite * * required: false * * returned: default * * type: string * * uniqueness: none */ trustScope?: pulumi.Input; /** * (Updatable) Oracle Cloud Infrastructure Tags. */ urnietfparamsscimschemasoracleidcsextensionOciTags?: pulumi.Input; /** * (Updatable) This extension provides attributes for database service facet of an App */ urnietfparamsscimschemasoracleidcsextensiondbcsApp?: pulumi.Input; /** * (Updatable) This extension defines the Enterprise App related attributes. */ urnietfparamsscimschemasoracleidcsextensionenterpriseAppApp?: pulumi.Input; /** * (Updatable) This extension provides attributes for Form-Fill facet of App */ urnietfparamsscimschemasoracleidcsextensionformFillAppApp?: pulumi.Input; /** * (Updatable) This extension provides attributes for Form-Fill facet of AppTemplate */ urnietfparamsscimschemasoracleidcsextensionformFillAppTemplateAppTemplate?: pulumi.Input; /** * (Updatable) Kerberos Realm */ urnietfparamsscimschemasoracleidcsextensionkerberosRealmApp?: pulumi.Input; /** * (Updatable) Managed App */ urnietfparamsscimschemasoracleidcsextensionmanagedappApp?: pulumi.Input; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of Multicloud Service App */ urnietfparamsscimschemasoracleidcsextensionmulticloudServiceAppApp?: pulumi.Input; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of an Oracle Public Cloud (OPC) service. */ urnietfparamsscimschemasoracleidcsextensionopcServiceApp?: pulumi.Input; /** * (Updatable) This extension defines attributes specific to Apps that represent instances of Radius App. */ urnietfparamsscimschemasoracleidcsextensionradiusAppApp?: pulumi.Input; /** * (Updatable) Requestable App */ urnietfparamsscimschemasoracleidcsextensionrequestableApp?: pulumi.Input; /** * (Updatable) This extension defines attributes related to the Service Providers configuration. */ urnietfparamsscimschemasoracleidcsextensionsamlServiceProviderApp?: pulumi.Input; /** * (Updatable) WebTier Policy */ urnietfparamsscimschemasoracleidcsextensionwebTierPolicyApp?: pulumi.Input; } //# sourceMappingURL=domainsApp.d.ts.map