authentication selector resource (#199)

pingidentity · Feb 28, 2024 · f6bb0ac · f6bb0ac
1 parent cd9c466
commit f6bb0ac
Show file tree

Hide file tree

Showing 8 changed files with 818 additions and 2 deletions.
diff --git a/.vscode/launch.json b/.vscode/launch.json
@@ -11,7 +11,10 @@
             "env": {},
             "args": [
                 "-debug",
+            ],
+            "dlvFlags": [
+                "--check-go-version=false"
             ]
         }
     ]
-}
+}
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,9 +3,10 @@
 * `location` property in `resourceLink` object types for all Resources and DataSources. This property will be removed in a future release. ([#195](https://github.com/pingidentity/terraform-provider-pingfederate/pull/195))
 
 ### Resources
+* **New Resource:** `pingfederate_authentication_selector ` ([#199](https://github.com/pingidentity/terraform-provider-pingfederate/pull/199))
+* **New Resource:** `pingfederate_incoming_proxy_settings` ([#190](https://github.com/pingidentity/terraform-provider-pingfederate/pull/190))
 * **New Resource:** `pingfederate_notification_publishers_settings` ([#187](https://github.com/pingidentity/terraform-provider-pingfederate/pull/187))
 * **New Resource:** `pingfederate_oauth_access_token_mapping` ([#195](https://github.com/pingidentity/terraform-provider-pingfederate/pull/195))
-* **New Resource:** `pingfederate_incoming_proxy_settings` ([#190](https://github.com/pingidentity/terraform-provider-pingfederate/pull/190))
 * **New Resource:** `pingfederate_open_id_connect_settings` ([#196](https://github.com/pingidentity/terraform-provider-pingfederate/pull/196))
 
 # v0.6.0 February 9th, 2024

diff --git a/docs/resources/authentication_selector.md b/docs/resources/authentication_selector.md
@@ -0,0 +1,210 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "pingfederate_authentication_selector Resource - terraform-provider-pingfederate"
+subcategory: ""
+description: |-
+  Manages Authentication Selectors
+---
+
+# pingfederate_authentication_selector (Resource)
+
+Manages Authentication Selectors
+
+## Example Usage
+
+```terraform
+resource "pingfederate_authentication_selector" "samlAuthnContextExample" {
+  selector_id = "samlAuthnContextExample"
+  name        = "samlAuthnContextExample"
+  plugin_descriptor_ref = {
+    id = "com.pingidentity.pf.selectors.saml.SamlAuthnContextAdapterSelector"
+  }
+  configuration = {
+    tables = []
+    fields = [
+      {
+        name  = "Add or Update AuthN Context Attribute"
+        value = "true"
+      },
+      {
+        name  = "Override AuthN Context for Flow"
+        value = "true"
+      },
+      {
+        name  = "Enable 'No Match' Result Value"
+        value = "false"
+      },
+      {
+        name  = "Enable 'Not in Request' Result Value"
+        value = "false"
+      }
+    ]
+  }
+  attribute_contract = {
+    extended_attributes = [
+      {
+        name = "result_value2"
+      }
+    ]
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `configuration` (Attributes) Plugin instance configuration. (see [below for nested schema](#nestedatt--configuration))
+- `name` (String) The plugin instance name. The name can be modified once the instance is created.
+- `plugin_descriptor_ref` (Attributes) Reference to the plugin descriptor for this instance. The plugin descriptor cannot be modified once the instance is created. (see [below for nested schema](#nestedatt--plugin_descriptor_ref))
+- `selector_id` (String) The ID of the plugin instance. The ID cannot be modified once the instance is created.
+
+### Optional
+
+- `attribute_contract` (Attributes) The list of attributes that the Authentication Selector provides. (see [below for nested schema](#nestedatt--attribute_contract))
+
+### Read-Only
+
+- `id` (String) The ID of this resource.
+
+<a id="nestedatt--configuration"></a>
+### Nested Schema for `configuration`
+
+Optional:
+
+- `fields` (Attributes List) List of configuration fields. (see [below for nested schema](#nestedatt--configuration--fields))
+- `tables` (Attributes List) List of configuration tables. (see [below for nested schema](#nestedatt--configuration--tables))
+
+Read-Only:
+
+- `fields_all` (Attributes List) List of configuration fields. This attribute will include any values set by default by PingFederate. (see [below for nested schema](#nestedatt--configuration--fields_all))
+- `tables_all` (Attributes List) List of configuration tables. This attribute will include any values set by default by PingFederate. (see [below for nested schema](#nestedatt--configuration--tables_all))
+
+<a id="nestedatt--configuration--fields"></a>
+### Nested Schema for `configuration.fields`
+
+Required:
+
+- `name` (String) The name of the configuration field.
+- `value` (String) The value for the configuration field. For encrypted or hashed fields, GETs will not return this attribute. To update an encrypted or hashed field, specify the new value in this attribute.
+
+Optional:
+
+- `inherited` (Boolean, Deprecated) Whether this field is inherited from its parent instance. If true, the value/encrypted value properties become read-only. The default value is false.
+
+
+<a id="nestedatt--configuration--tables"></a>
+### Nested Schema for `configuration.tables`
+
+Required:
+
+- `name` (String) The name of the table.
+
+Optional:
+
+- `inherited` (Boolean, Deprecated) Whether this table is inherited from its parent instance. If true, the rows become read-only. The default value is false.
+- `rows` (Attributes List) List of table rows. (see [below for nested schema](#nestedatt--configuration--tables--rows))
+
+<a id="nestedatt--configuration--tables--rows"></a>
+### Nested Schema for `configuration.tables.rows`
+
+Optional:
+
+- `default_row` (Boolean) Whether this row is the default.
+- `fields` (Attributes List) The configuration fields in the row. (see [below for nested schema](#nestedatt--configuration--tables--rows--fields))
+
+<a id="nestedatt--configuration--tables--rows--fields"></a>
+### Nested Schema for `configuration.tables.rows.fields`
+
+Required:
+
+- `name` (String) The name of the configuration field.
+- `value` (String) The value for the configuration field. For encrypted or hashed fields, GETs will not return this attribute. To update an encrypted or hashed field, specify the new value in this attribute.
+
+Optional:
+
+- `inherited` (Boolean, Deprecated) Whether this field is inherited from its parent instance. If true, the value/encrypted value properties become read-only. The default value is false.
+
+
+
+
+<a id="nestedatt--configuration--fields_all"></a>
+### Nested Schema for `configuration.fields_all`
+
+Required:
+
+- `name` (String) The name of the configuration field.
+- `value` (String) The value for the configuration field. For encrypted or hashed fields, GETs will not return this attribute. To update an encrypted or hashed field, specify the new value in this attribute.
+
+Optional:
+
+- `inherited` (Boolean, Deprecated) Whether this field is inherited from its parent instance. If true, the value/encrypted value properties become read-only. The default value is false.
+
+
+<a id="nestedatt--configuration--tables_all"></a>
+### Nested Schema for `configuration.tables_all`
+
+Required:
+
+- `name` (String) The name of the table.
+
+Optional:
+
+- `inherited` (Boolean, Deprecated) Whether this table is inherited from its parent instance. If true, the rows become read-only. The default value is false.
+- `rows` (Attributes List) List of table rows. (see [below for nested schema](#nestedatt--configuration--tables_all--rows))
+
+<a id="nestedatt--configuration--tables_all--rows"></a>
+### Nested Schema for `configuration.tables_all.rows`
+
+Optional:
+
+- `default_row` (Boolean) Whether this row is the default.
+- `fields` (Attributes List) The configuration fields in the row. (see [below for nested schema](#nestedatt--configuration--tables_all--rows--fields))
+
+<a id="nestedatt--configuration--tables_all--rows--fields"></a>
+### Nested Schema for `configuration.tables_all.rows.fields`
+
+Required:
+
+- `name` (String) The name of the configuration field.
+- `value` (String) The value for the configuration field. For encrypted or hashed fields, GETs will not return this attribute. To update an encrypted or hashed field, specify the new value in this attribute.
+
+Optional:
+
+- `inherited` (Boolean, Deprecated) Whether this field is inherited from its parent instance. If true, the value/encrypted value properties become read-only. The default value is false.
+
+
+
+
+
+<a id="nestedatt--plugin_descriptor_ref"></a>
+### Nested Schema for `plugin_descriptor_ref`
+
+Required:
+
+- `id` (String) The ID of the resource.
+
+
+<a id="nestedatt--attribute_contract"></a>
+### Nested Schema for `attribute_contract`
+
+Optional:
+
+- `extended_attributes` (Attributes List) A list of additional attributes that can be returned by the Authentication Selector. The extended attributes are only used if the Authentication Selector supports them. (see [below for nested schema](#nestedatt--attribute_contract--extended_attributes))
+
+<a id="nestedatt--attribute_contract--extended_attributes"></a>
+### Nested Schema for `attribute_contract.extended_attributes`
+
+Required:
+
+- `name` (String) An attribute for the Authentication Selector attribute contract.
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# "authenticationSelectorId" should be the id of the Authentication Selector to be imported
+terraform import pingfederate_authentication_selector.authenticationSelector authenticationSelectorId
+```
diff --git a/examples/resources/pingfederate_authentication_selector/import.sh b/examples/resources/pingfederate_authentication_selector/import.sh
@@ -0,0 +1,2 @@
+# "authenticationSelectorId" should be the id of the Authentication Selector to be imported
+terraform import pingfederate_authentication_selector.authenticationSelector authenticationSelectorId
diff --git a/examples/resources/pingfederate_authentication_selector/resource.tf b/examples/resources/pingfederate_authentication_selector/resource.tf
@@ -0,0 +1,36 @@
+resource "pingfederate_authentication_selector" "samlAuthnContextExample" {
+  selector_id = "samlAuthnContextExample"
+  name        = "samlAuthnContextExample"
+  plugin_descriptor_ref = {
+    id = "com.pingidentity.pf.selectors.saml.SamlAuthnContextAdapterSelector"
+  }
+  configuration = {
+    tables = []
+    fields = [
+      {
+        name  = "Add or Update AuthN Context Attribute"
+        value = "true"
+      },
+      {
+        name  = "Override AuthN Context for Flow"
+        value = "true"
+      },
+      {
+        name  = "Enable 'No Match' Result Value"
+        value = "false"
+      },
+      {
+        name  = "Enable 'Not in Request' Result Value"
+        value = "false"
+      }
+    ]
+  }
+  attribute_contract = {
+    extended_attributes = [
+      {
+        name = "result_value2"
+      }
+    ]
+  }
+}
+