FEATURES:
- Updated provider to support Terraform v0.12.0
FEATURES:
- New Resource:
okta_inline_hook
ENHANCEMENTS:
- Add missing okta_idp_saml settings
ENHANCEMENTS:
- Use backoff/retries functionality for XML API calls
FEATURES:
- New Data Source: okta_idp_saml
ENHANCEMENTS:
- Support import user by email
FEATURES:
- New Data Source: Add okta_app_saml data source
- New Data Source: Add okta_app_metadata_saml data source
- New Data Source: Add okta_idp_metadata_saml data source
ENHANCEMENTS:
- Change type of custom_profile_attributes from map to JSON string to support all types
BUG FIXES:
- Fix group filter bug, filter_type and filter_value were not being sync'd
BUG FIXES:
- Fix bug introduced in v3.0.4. User data source was not updated to the new caustom_profile_attribute type
- Added test to cover this scenario, tests were passiing
ENHANCEMENTS:
- Allow client_id to be set on OIDC application, while also maintaining the computed version. With some auth methods, such as basic auth, this is possible.
ENHANCEMENTS:
- Add group_assignments for SAML and social IdPs
ENHANCEMENTS:
- Add issuer_mode to social IdP. Our test org does not have a custom domain setup, thus it was working there but not in other orgs. Hard to test both scenarios in one org.
FEATURES:
- New Resource:
okta_template_email
- New Resource:
okta_group_roles
FEATURES:
- New Resource:
okta_network_zone
BUG FIXES:
- Fix occasional panic when creating a user schema see https://github.com/articulate/terraform-provider-okta/issues/144
- Users in LOCKED_OUT state are unlocked when config is ACTIVE https://github.com/articulate/terraform-provider-okta/issues/225
BUG FIXES:
- Ensure schema does not panic after retry
FEATURES:
- New Resource:
okta_user_base_schema
ENHANCEMENTS:
- Add missing attribute, match_type and match_attribute, on social idp resource
BUG FIXES:
- Fix logic around including/excluding networks on policy rules
ENHANCEMENTS:
- Update Okta SDK
- Filter out GROUP based admin roles when processing user
admin_roles
attribute
- Fix issues around
okta_policy_rule_idp_discovery
app_include
andapp_exlcude
were missing required propertiesuser_identifier_type
was being added even when not defined, causing API errors
- Fix integer array type
FEATURES:
- New Resource:
okta_app_user_schema
- New Resource:
okta_app_user_base_schema
- New Resource:
okta_app_user
resource - New Resource:
okta_app_group
resource
ENHANCEMENTS:
- Add
required
field to base schema
ENHANCEMENTS:
- Support SHA-1 signing algorithm on IdPs
BUG FIXES:
- Fix bug where audience is reset on IdP update because it is omitted from the payload
BUG FIXES:
- Fix diff issues around
okta_policy_rule_idp_discovery
- Allow
provisioning_action
for IdPs to be set toDISABLED
BUG FIXES:
- Fix
okta_auth_server_claim
,group_filter_type
could not be set toSTARTS_WITH
due to a typo
ENHANCEMENTS:
- Expose scope property on
okta_user_schema
- Allow setting of OAuth application visibility settings
BUG FIXES:
- Send
profileMaster
along with IdP, so the config is recognized by Okta API - Fix bug in SDK related to retries and the request body being empty on subsequent requests.
ENHANCEMENTS:
- Add
external_name
property to theokta_app_user_schema
andokta_user_schema
ENHANCEMENTS:
- Support
profile
onokta_oauth_app
resource
ENHANCEMENTS:
- Support setting an auth server scope as the default
- Support
profile
andpriority
onokta_app_group_assignment
- Support
profile
onokta_app_user
BUG FIXES:
- Fix bug with supporting
profile
onokta_oauth_app
resource
ENHANCEMENTS:
- Support array enums in
okta_user_schema
andokta_app_user_schema
asarray_enum
andarray_one_of
ENHANCEMENTS:
- Update refresh token window validation to account for new upper limit of 5 years
BUG FIXES:
- Remove resource from state on 404. [GH-269]
BUG FIXES:
- Ensure we safely sync auth server properties. [GH-299]
- MANUAL rotation mode can only be set on an auth server on update. Ensure we run update after create for that scenario. [GH-287]
ENHANCEMENT:
- Update to new separate Terraform SDK [GH-307]
BUG FIXES:
- Ensure
okta_app_group_assignment
resource syncs using the right read function. [GH-307]
BUG FIXES:
- Ensure
okta_app_group_assignment
andokta_app_user
resources properly take multiple ids on the import functions. [GH-307] - Ensure
okta_user
does not error on 404 [GH-313]
FEATURES:
- New Resource:
okta_profile_mapping
[GH-246] - New Resource:
okta_app_basic_auth
[GH-329]
BUG FIXES:
- Policy values could not be set to 0. Doing so resulted in the SDK omitting them, resulting in Okta resetting the values to default.
ENHANCEMENT:
- Require target_id on
okta_profile_mapping
to avoid ambiguity
FEATURES:
- New Data Source:
okta_user_profile_mapping_source
[GH-340]
BUG FIXES
- Schema merging helper function was mutating input schema causing side effects when used in a particular way. Used shallow copying to avoid this side effect. [GH-338]
- Ensure response is not nil when checking status code [GH-307]
BUG FIXES
- Ensure
index
is sync'd on import to avoid recreation.
ENHANCEMENT:
- Support
password
,recovery_answer
, andrecovery_question
as attributes on theokta_user
resource.