okta / terraform-provider-okta

A Terraform provider to manage Okta resources, enabling infrastructure-as-code provisioning and management of users, groups, applications, and other Okta objects.
https://registry.terraform.io/providers/okta/okta
Mozilla Public License 2.0
248 stars 201 forks source link

Missing `smart_card_idp` in the Policy Factor Config object for the `okta_policy_mfa` resource #1951

Open theDabca opened 3 months ago

theDabca commented 3 months ago

Community Note

Description

Currently finding a large gap in the okta_policy_mfa resource when it comes to enrollment policies which need to include Smart Card IdPs. As smart_card_idp does not exist in the Policy Factor Config object, any new policy created leaves the Smart Card IdP as disabled.

A GET to an enrollment policy which contains the smart_card_idp will contain the status of that factor in the response, however this does not seem configurable via the public API. It would be useful to add this to the API and then to the okta_policy_mfa.

"key": "smart_card_idp",
"enroll": {
    "self": "NOT_ALLOWED"
}

New or Affected Resource(s)

Potential Terraform Configuration

adding in smart_card_idp to the okta_policy_mfa resource

smart_card_idp = {
    enroll = "REQUIRED"
}

References

duytiennguyen-okta commented 2 months ago

OKTA internal reference https://oktainc.atlassian.net/browse/OKTA-717449