Support Grace Periods for Device Assurance Policies

[lucascantor]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Feature request to support the new Grace Period feature for Device Assurance

Here are example Device Assurance policy settings NOT configurable via Terraform:

• Grant users time to remediate issues:
  • Yes, by a due date
  • Yes, after a number of days

New or Affected Resource(s)

• okta_device_assurance_policy_android
• okta_policy_device_assurance_chromeos
• okta_device_assurance_policy_ios
• okta_device_assurance_policy_macos
• okta_device_assurance_policy_windows

Potential Terraform Configuration

resource "okta_device_assurance_policy_macos" "example" {
  name                  = "Example"
  grace_period_due_date = "2024_12_31"
}

resource "okta_device_assurance_policy_macos" "example" {
  name                        = "Example"
  grace_period_number_of_days = 14
}

References

• See the Configure Remediation section of the Device Assurance docs: https://help.okta.com/oie/en-us/content/topics/identity-engine/devices/device-assurance-add.htm?cshid=csh-device-assurance-add#Configur

[lucascantor]

Relates to https://github.com/okta/terraform-provider-okta/issues/1917

[arvindkrishnakumar-okta]

Internal JIRA for reference: https://oktainc.atlassian.net/browse/OKTA-813679