diff --git a/packages/@okta/vuepress-site/docs/guides/index.md b/packages/@okta/vuepress-site/docs/guides/index.md index 9e83f0a5160..ac85c080309 100644 --- a/packages/@okta/vuepress-site/docs/guides/index.md +++ b/packages/@okta/vuepress-site/docs/guides/index.md @@ -61,6 +61,7 @@ guides: - keep-me-signed-in - key-management - manage-orgs-okta-aerial + - terraform-oig-resources - mfa - migrate-to-okta-prerequisites - migrate-to-okta-bulk diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/index.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/index.md new file mode 100644 index 00000000000..6c9eeac9838 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/index.md @@ -0,0 +1,9 @@ +--- +title: Manage Terraform Okta Identity Governance resources +meta: + - name: description + content: Use this guide to manage Okta Identity Governance resources using Terraform. +layout: Guides +sections: + - main +--- \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/arguments.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/arguments.md new file mode 100644 index 00000000000..d6043f0136a --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/arguments.md @@ -0,0 +1,2 @@ +See configurable schema for the [Campaigns resource](https://registry.terraform.io/providers/okta/okta/latest/docs/resources/campaign#schema). You can use this schema to create and update campaigns using the Terraform `okta_campaign` resource. + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/create.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/create.md new file mode 100644 index 00000000000..627bd81ead6 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/create.md @@ -0,0 +1,10 @@ + +```shell + +resource "okta_campaign" "example" +{ + name = "example" +} + +``` + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/import.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/import.md new file mode 100644 index 00000000000..c41bd6ca55d --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/import.md @@ -0,0 +1,8 @@ + +**Note**: Ensure that you have the campaign ID to import an existing campaign object into Terraform. You can retrieve this ID in either the Admin Console or using the [Campaigns API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Campaigns/). + +```shell + +terraform import okta_campaign.example + +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/overview.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/overview.md new file mode 100644 index 00000000000..2c63bc189eb --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/overview.md @@ -0,0 +1 @@ +Okta Access Certification Campaigns is a core Okta Identity Governance feature that allows stakeholders to conduct scheduled reviews of user access to apps and resources. Based on the reviews, Okta can then modify resource access so that the users are provided with only have the access they need. See [Campaigns](https://help.okta.com/okta_help.htm?type=oie&id=campaigns.htm) and [Campaigns API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Campaigns/). diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/resource-name.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/resource-name.md new file mode 100644 index 00000000000..b2fab9f026e --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/resource-name.md @@ -0,0 +1 @@ +Campaigns \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/retrieve.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/retrieve.md new file mode 100644 index 00000000000..8e0ef16e6f3 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/retrieve.md @@ -0,0 +1,8 @@ + +```bash + +data "okta_campaign" "test" +{ + id = "" +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/scope.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/scope.md new file mode 100644 index 00000000000..69851b55601 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/campaigns/scope.md @@ -0,0 +1,3 @@ +- okta.governance.accessCertifications.manage +- okta.governance.accessCertifications.read + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/arguments.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/arguments.md new file mode 100644 index 00000000000..4362f8b8f51 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/arguments.md @@ -0,0 +1,2 @@ +See configurable schema for the [Entitlement bundles resource](https://registry.terraform.io/providers/okta/okta/latest/docs/resources/entitlement_bundle#schema). You can use this schema to create and update campaigns using the Terraform `okta_entitlement_bundle` resource. + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/create.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/create.md new file mode 100644 index 00000000000..c302e761e56 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/create.md @@ -0,0 +1,9 @@ + + +```shell +resource "okta_entitlement_bundle" "example" +{ + name = "example" +} + +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/import.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/import.md new file mode 100644 index 00000000000..c42f7a3c15e --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/import.md @@ -0,0 +1,10 @@ + + + +**Note**: Ensure that you have the entitlement bundle ID to import an existing entitlement bundle object into Terraform. You can retrieve this ID in either the Admin Console or using the [Entitlement Bundles API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Entitlement-Bundles/). + + +```shell +terraform import okta_entitlement_bundle.example +``` + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/overview.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/overview.md new file mode 100644 index 00000000000..365b5a4c8ec --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/overview.md @@ -0,0 +1,2 @@ +Entitlement bundles allow you to grant multiple entitlements simultaneously to your users. Use Access Requests to allow your users to request entitlement bundles in a self-service manner. +For more information, see [Entitlement bundles](https://help.okta.com/oie/en-us/content/topics/identity-governance/em/entitlement-bundles.htm) and [Entitlement Bundles API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Entitlement-Bundles/). \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/resource-name.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/resource-name.md new file mode 100644 index 00000000000..668241dee28 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/resource-name.md @@ -0,0 +1 @@ +Entitlement Bundles \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/retrieve.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/retrieve.md new file mode 100644 index 00000000000..3fb9d723cc9 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/retrieve.md @@ -0,0 +1,11 @@ + +```bash + +data "okta_entitlement" test { + id="enb11ndt4yZ27Rp4z1d7" +} +output "test" { + value = data.okta_entitlement.test + +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/scope.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/scope.md new file mode 100644 index 00000000000..bb8aa76c7c9 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlement-bundles/scope.md @@ -0,0 +1,2 @@ +- okta.governance.entitlements.manage +- okta.governance.entitlements.read diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/arguments.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/arguments.md new file mode 100644 index 00000000000..5ece6f2bbbc --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/arguments.md @@ -0,0 +1 @@ +See configurable schema for the [Entitlement resource](https://registry.terraform.io/providers/okta/okta/latest/docs/resources/entitlement#schema). You can use this schema to create and update campaigns using the Terraform `okta_entitlement` resource. diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/create.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/create.md new file mode 100644 index 00000000000..08d3475ab80 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/create.md @@ -0,0 +1,8 @@ + + +```shell +resource "okta_entitlement" "example" +{ + name = "example" +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/import.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/import.md new file mode 100644 index 00000000000..94244e0b9ab --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/import.md @@ -0,0 +1,10 @@ + + + +**Note**: Ensure that you have the entitlement ID to import an existing entitlement object into Terraform. You can retrieve this ID in either the Admin Console or using the [Entitlement API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Entitlements/). + + +```shell +terraform import okta_entitlement.example +``` + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/overview.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/overview.md new file mode 100644 index 00000000000..9b629609e19 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/overview.md @@ -0,0 +1,2 @@ +Entitlement Management lets you ensure that users in your org have the right permissions for each resource. An entitlement is a permission, privilege, or access level that allows users to take specific actions within a third-party app. +For more information, see [Entitlement](https://help.okta.com/oie/en-us/content/topics/identity-governance/em/entitlements.htm) and [Entitlement API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Entitlements/). \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/resource-name.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/resource-name.md new file mode 100644 index 00000000000..f48142e2141 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/resource-name.md @@ -0,0 +1 @@ +Entitlements \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/retrieve.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/retrieve.md new file mode 100644 index 00000000000..485f9928bff --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/retrieve.md @@ -0,0 +1,8 @@ + +```bash + +data "okta_entitlement" "test" +{ + id = "" +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/scope.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/scope.md new file mode 100644 index 00000000000..b55b812845c --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/entitlements/scope.md @@ -0,0 +1,3 @@ +- okta.governance.entitlements.manage +- okta.governance.entitlements.read + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/index.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/index.md new file mode 100644 index 00000000000..8224d0282cf --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/index.md @@ -0,0 +1,126 @@ +--- +title: Manage Okta Identity Governance resources using Terraform +meta: + - name: description + content: Learn how to create, import, and modify Okta Identity Governance resources using Terraform automation. +layout: Guides +--- +Learn how to create, import, and modify Okta Identity Governance resources using Terraform automation. + +#### Learning outcomes + +- Define and create an resource using Terraform. +- Modify an existing resource managed by Terraform. +- Import resource from Okta into your Terraform state. + +#### What you need +- Familiarity with the Terraform terms, such as configuration, resources, state, and commands. +- An Okta org with the OIG SKU enabled. +- A Terraform configuration that can access your Okta org. See [Okta provider configuration](#okta-provider-configuration). +- An Okta user account with the super administrator role. +- Terraform 1.8.5 or later. +- Okta Terraform provider 6.0.0 or later. + +> **Note:** The instructions on this page are for the **** protocol.
+> If you want to change the protocol instructions on this page, select the protocol you want from the **Instructions for** dropdown list on the right. + +### Overview + + + +### Set up your Terraform files + +For guidance on organizing your files, see [setting up a typical Okta Terraform configuration](/docs/guides/terraform-organize-configuration/main/#configure-a-basic-okta-terraform-configuration). Consider organizing your Terraform code in a way that groups related resources together. For example, you could create a Terraform file called `brands.tf` that contains custom domains, brands, and themes. + +#### Add or confirm the API scopes + +Your Terraform integration requires the appropriate scopes that depend on what you're managing: + +
+ +To grant scopes in the Admin Console and to include them in your Terraform code, see the guides on [enabling your API service app for Terraform access](/docs/guides/terraform-enable-org-access/) and [setting up a typical Okta Terraform configuration](/docs/guides/terraform-organize-configuration/). + +### Okta provider configuration + +Configure the Okta Terraform provider in your Terraform configuration files. This configuration involves setting up credentials (for example, API token) with relevant permissions to manage entitlements within your Okta org. + +```bash + + terraform { + required_providers { + okta = { + source = "okta/okta" + version = ">= 6.0.0" + } + } + provider "okta" { + org_name = var.okta_org_name + api_token = var.okta_api_token + } + variable "okta_org_name" { + description = "Your Okta org name (e.g., 'trial-12345678.okta.com')." + type = string + sensitive = true + } + variable "okta_api_token" { + description = "Your Okta API token with relevant permissions." + type = string + sensitive = true + } +``` + +#### Configure Identity Governance on your Okta org +Before creating an entitlement, you must enable Identity Governance on the app in your Okta org. +1. In the Admin Console, go to your OIDC web app. +1. In the **General** tab, locate Identity Governance and select **Edit**. +1. Select **Enable** from the **Governance Engine** dropdown menu. +1. Select **Save**. + +> **Note:** The instructions on this page are for the **** protocol.
+> If you want to change the protocol instructions on this page, select the protocol you want from the **Instructions for** dropdown list on the right. + +### Resource arguments + + + +### Create a resource + +1. Create a resource block in your Terraform configuration file. For example, this sample defines an access review for a specific app. + + + +2. Run the ` terraform plan` command. The output of the command provides a preview of the changes Terraform makes to your infrastructure. + +3. Run the `terraform apply` command. This command provisions the entitlement resource. + +> **Note**: To apply only a new resource, run a targeted apply command. For example, `terraform apply -target ` + +4. Type `yes` when prompted to complete the resource creation. + + +#### Import existing objects to Terraform + +You can import existing objects to Terraform using the import function. For more information on importing objects into Terraform, see [Import existing Okta objects into Terraform](docs/guides/terraform-import-existing-resources/main/). + +**Note**: Ensure that you have the ID that you want to import. + + +1. Create a resource block to host the object you’re importing. The configuration must match the object in Okta. + +2. Run the following command to import your existing object into your Terraform state. + + + +3. Save the file, run `terraform plan`, and then run `terraform apply`. +4. Verify that the `terraform.tfstate` file is created on your Terraform working directory. This ensures that the Terraform resource creation was completed successfully. This file records the mapping between the resources defined in your configuration files and the objects in your Okta org. + +#### Retrieve existing + +To view a that is already managed by Terraform, or any in your org, you can use a data source. + + + +#### Modify existing + +To modify a that is already managed by Terraform, update the code in your configuration file. Terraform detects the change and applies it on the next run. +Save the file, run `terraform plan`, and then run `terraform apply` to apply the change to your in Okta. diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/arguments.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/arguments.md new file mode 100644 index 00000000000..25986424954 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/arguments.md @@ -0,0 +1 @@ +See configurable schema for the [Request Conditions resource](https://registry.terraform.io/providers/okta/okta/latest/docs/resources/request_condition#schema). You can use this schema to create and update campaigns using the Terraform `okta_request_condition` resource. diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/create.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/create.md new file mode 100644 index 00000000000..fa8414e5b9d --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/create.md @@ -0,0 +1,13 @@ +``` bash +resource "okta_request_condition" "example" { + resource_id="" + approval_sequence_id="" + name="" + access_scope_settings{ + type="RESOURCE_DEFAULT" + } + requester_settings{ + type="EVERYONE" + } +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/import.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/import.md new file mode 100644 index 00000000000..7eb60832490 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/import.md @@ -0,0 +1,6 @@ + +**Note**: Ensure that you have the resource ID and request condition ID to import an existing request condition object into Terraform. You can retrieve this ID in either the Admin Console or using the [Request Conditions API](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Conditions/#tag/Request-Conditions/operation/getResourceRequestConditionV2). + +``` bash +terraform import okta_request_condition.example / +``` \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/overview.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/overview.md new file mode 100644 index 00000000000..edbea4fdd5a --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/overview.md @@ -0,0 +1 @@ +Request conditions define what resources and access levels requesters can request from their resource catalog. See [Request Conditions](https://help.okta.com/oie/en-us/content/topics/identity-governance/access-requests/rcar-conditions.htm) and [Request Conditions API](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Conditions/#tag/Request-Conditions/operation/getResourceRequestConditionV2). \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/resource-name.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/resource-name.md new file mode 100644 index 00000000000..1f950b60903 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/resource-name.md @@ -0,0 +1 @@ +Request Conditions \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/retrieve.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/retrieve.md new file mode 100644 index 00000000000..b8c3fe07238 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/retrieve.md @@ -0,0 +1,7 @@ +``` bash +data "okta_request_condition" "test" +{ + id ="" + resource_id="" +} +``` \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/scope.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/scope.md new file mode 100644 index 00000000000..aba08463bfd --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-conditions/scope.md @@ -0,0 +1,2 @@ +* okta.accessRequests.condition.read +* okta.accessRequests.condition.manage diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/arguments.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/arguments.md new file mode 100644 index 00000000000..b24b8e4401b --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/arguments.md @@ -0,0 +1 @@ +See configurable schema for the [Request Sequences resource](https://registry.terraform.io/providers/okta/okta/latest/docs/resources/request_sequence#schema). You can use this schema to create and update campaigns using the Terraform `okta_request_sequence` resource. diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/create.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/create.md new file mode 100644 index 00000000000..14cea31ccda --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/create.md @@ -0,0 +1,7 @@ +``` bash +resource "okta_request_sequence" "test" +{ + id= "" + resource_id= "" +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/import.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/import.md new file mode 100644 index 00000000000..483b8f50e3d --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/import.md @@ -0,0 +1,7 @@ + +**Note**: Ensure that you have the resource ID and request sequence ID to import an existing request sequence object into Terraform. You can retrieve this ID in either the Admin Console or using the [Request Sequences API](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Sequences/). + +``` bash +terraform import okta_request_condition.example / +``` + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/overview.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/overview.md new file mode 100644 index 00000000000..601c9597faa --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/overview.md @@ -0,0 +1,2 @@ +Request sequences define a series of steps (questions, approval tasks, and custom tasks) that must be completed for a requester to gain access. +Request sequences can be re-used across many request conditions. See [Request Sequences](https://help.okta.com/oie/en-us/content/topics/identity-governance/access-requests/rcar-approval-seq-edit.htm) and [Request Sequences API](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Sequences/). \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/resource-name.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/resource-name.md new file mode 100644 index 00000000000..e9c8f6b8d28 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/resource-name.md @@ -0,0 +1 @@ +Request Sequences \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/retrieve.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/retrieve.md new file mode 100644 index 00000000000..bda2530e503 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/retrieve.md @@ -0,0 +1,7 @@ +``` bash +data "okta_request_sequence" "test" +{ + id="" + resource_id="" +} +``` \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/scope.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/scope.md new file mode 100644 index 00000000000..aba08463bfd --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-sequences/scope.md @@ -0,0 +1,2 @@ +* okta.accessRequests.condition.read +* okta.accessRequests.condition.manage diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/arguments.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/arguments.md new file mode 100644 index 00000000000..26f1f62fa87 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/arguments.md @@ -0,0 +1 @@ +See configurable schema for the [Request Settings resource](https://registry.terraform.io/providers/okta/okta/latest/docs/resources/request_setting_resource#schema). You can use this schema to create and update campaigns using the Terraform `okta_request_setting` resource. diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/create.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/create.md new file mode 100644 index 00000000000..7167017d05b --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/create.md @@ -0,0 +1,18 @@ +``` bash +resource "okta_request_setting_resource" "test" +{ + resource_id="" + risk_settings + { + default_setting + { + request_submission_type= "ALLOWED_WITH_OVERRIDES" + approval_sequence_id="" + } + } + request_on_behalf_of_settings + { + allowed = true + } +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/import.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/import.md new file mode 100644 index 00000000000..7a3265028ad --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/import.md @@ -0,0 +1,6 @@ + +**Note**: Ensure that you have the resource ID to import an existing request setting object into Terraform. You can retrieve this ID in either the Admin Console or using the [Request Settings API](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Settings/). + +``` bash +terraform import okta_request_setting_resource.example "" +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/overview.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/overview.md new file mode 100644 index 00000000000..dc2773eac03 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/overview.md @@ -0,0 +1 @@ +Request settings are useful for managing your org's access requests. Request settings can be read and updated at the org and resource level. For more infomration see [Access requests - Get started](https://help.okta.com/oie/en-us/content/topics/identity-governance/access-requests/ar-get-started.htm) and [Request Settings API](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Request-Settings/). \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/resource-name.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/resource-name.md new file mode 100644 index 00000000000..813458e5c0f --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/resource-name.md @@ -0,0 +1 @@ +Request Settings \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/retrieve.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/retrieve.md new file mode 100644 index 00000000000..0bc70f164ca --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/retrieve.md @@ -0,0 +1,6 @@ +``` bash +data "okta_request_setting_resource" "test" +{ + resource_id="" +} +``` \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/scope.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/scope.md new file mode 100644 index 00000000000..aba08463bfd --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/request-settings/scope.md @@ -0,0 +1,2 @@ +* okta.accessRequests.condition.read +* okta.accessRequests.condition.manage diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/arguments.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/arguments.md new file mode 100644 index 00000000000..3b48712b80b --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/arguments.md @@ -0,0 +1 @@ +See configurable schema for the [Request resource](https://registry.terraform.io/providers/okta/okta/latest/docs/resources/request_v2#schema). You can use this schema to create and update campaigns using the Terraform `okta_request` resource. diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/create.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/create.md new file mode 100644 index 00000000000..cfd93003806 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/create.md @@ -0,0 +1,15 @@ +``` bash +resource "okta_request_v2" "test" +{ + requested + { + type = "CATALOG_ENTRY" + entry_id = "" + } + requested_for + { + type = "OKTA_USER" + external_id = "" + } +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/import.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/import.md new file mode 100644 index 00000000000..2f43d68c554 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/import.md @@ -0,0 +1,6 @@ + +**Note**: Ensure that you have the request ID to import an existing request object into Terraform. You can retrieve this ID in either the Admin Console or using the [Requests API](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Requests/#tag/Requests). +``` bash +terraform import okta_request_v2.example +``` + diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/overview.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/overview.md new file mode 100644 index 00000000000..1948cb3e014 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/overview.md @@ -0,0 +1,3 @@ +Okta Access Requests automate the process of requesting access to resources managed by access request conditions. + +Access request conditions define the resource to access, who can request access, length of access, and the approval sequence. For more information see [Access Requests ](https://help.okta.com/oie/en-us/content/topics/identity-governance/access-requests/ar-overview.htm) and [Requests API](https://developer.okta.com/docs/api/iga/openapi/governance.requests.admin.v2/tag/Requests/#tag/Requests). \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/resource-name.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/resource-name.md new file mode 100644 index 00000000000..0e9dd3f756f --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/resource-name.md @@ -0,0 +1 @@ +Requests \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/retrieve.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/retrieve.md new file mode 100644 index 00000000000..4f9b71f1724 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/retrieve.md @@ -0,0 +1,6 @@ +``` bash +data "okta_request_v2" "test" +{ + id = "" +} +``` \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/scope.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/scope.md new file mode 100644 index 00000000000..3f888d8c96c --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/requests/scope.md @@ -0,0 +1,2 @@ +* okta.accessRequests.request.read +* okta.accessRequests.request.manage diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/arguments.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/arguments.md new file mode 100644 index 00000000000..c8d5be5006b --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/arguments.md @@ -0,0 +1 @@ +See configurable schema for the [Review resource](https://registry.terraform.io/providers/okta/okta/latest/docs/resources/review#schema). You can use this schema to create and update campaigns using the Terraform `okta_review` resource. diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/create.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/create.md new file mode 100644 index 00000000000..4896a3277a3 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/create.md @@ -0,0 +1,12 @@ +``` bash +resource "okta_review" "test" +{ + campaign_id = "icizigd86iM9sOcbN1d6" + reviewer_id = "00unli90kor62oF5Z1d7" + review_ids = [ + "icrztblxbBFiVKepb1d6" + ] + reviewer_level="FIRST" + note = "John Smith is on leave for this month. His manager Tim will be the reviewer instead." +} +``` diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/import.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/import.md new file mode 100644 index 00000000000..e9edfff1caa --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/import.md @@ -0,0 +1,3 @@ +``` bash +terraform import okta_review.example +``` \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/overview.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/overview.md new file mode 100644 index 00000000000..bb4444a7a4e --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/overview.md @@ -0,0 +1 @@ +Okta access certification reviews evaluate and make decisions about a user’s current resource access. Each review is associated with one campaign, whereas a campaign can contain many reviews. For more information on the review process, see [Review an access certification campaign](https://help.okta.com/okta_help.htm?type=oie&id=iga-ac-about-reviewing-campaigns.htm) and [Reviews API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Reviews/). diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/resource-name.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/resource-name.md new file mode 100644 index 00000000000..eb347bd70ce --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/resource-name.md @@ -0,0 +1 @@ +Reviews \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/retrieve.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/retrieve.md new file mode 100644 index 00000000000..6c9a941aae2 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/retrieve.md @@ -0,0 +1,5 @@ +``` bash +data "okta_review" "test" { + id = "icrztblxbBFiVKepb1d6" +} +``` \ No newline at end of file diff --git a/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/scope.md b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/scope.md new file mode 100644 index 00000000000..c06fe299054 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/guides/terraform-oig-resources/main/reviews/scope.md @@ -0,0 +1,3 @@ +* okta.governance.accessCertifications.manage +* okta.governance.accessCertifications.read + diff --git a/packages/@okta/vuepress-theme-prose/const/navbar.const.js b/packages/@okta/vuepress-theme-prose/const/navbar.const.js index ae1f059ee6d..e3ef6e99770 100644 --- a/packages/@okta/vuepress-theme-prose/const/navbar.const.js +++ b/packages/@okta/vuepress-theme-prose/const/navbar.const.js @@ -937,6 +937,10 @@ export const guides = [ title: "Import existing resources", guideName: "terraform-import-existing-resources" }, + { + title: "Manage OIG resources", + guideName: "terraform-oig-resources", + }, ], }, {