Snowflake v0.59.0, Sep 20 24

Snowflake v0.59.0 published on Friday, Sep 20, 2024 by Pulumi

snowflake.Saml2Integration

Explore with Pulumi AI

Snowflake v0.59.0 published on Friday, Sep 20, 2024 by Pulumi

Import

$ pulumi import snowflake:index/saml2Integration:Saml2Integration example "name"

Create Saml2Integration Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Saml2Integration(name: string, args: Saml2IntegrationArgs, opts?: CustomResourceOptions);

@overload
def Saml2Integration(resource_name: str,
                     args: Saml2IntegrationArgs,
                     opts: Optional[ResourceOptions] = None)

@overload
def Saml2Integration(resource_name: str,
                     opts: Optional[ResourceOptions] = None,
                     saml2_issuer: Optional[str] = None,
                     saml2_x509_cert: Optional[str] = None,
                     saml2_sso_url: Optional[str] = None,
                     saml2_provider: Optional[str] = None,
                     saml2_post_logout_redirect_url: Optional[str] = None,
                     saml2_enable_sp_initiated: Optional[str] = None,
                     saml2_force_authn: Optional[str] = None,
                     name: Optional[str] = None,
                     allowed_email_patterns: Optional[Sequence[str]] = None,
                     enabled: Optional[str] = None,
                     saml2_requested_nameid_format: Optional[str] = None,
                     saml2_sign_request: Optional[str] = None,
                     saml2_snowflake_acs_url: Optional[str] = None,
                     saml2_snowflake_issuer_url: Optional[str] = None,
                     saml2_sp_initiated_login_page_label: Optional[str] = None,
                     comment: Optional[str] = None,
                     allowed_user_domains: Optional[Sequence[str]] = None)

func NewSaml2Integration(ctx *Context, name string, args Saml2IntegrationArgs, opts ...ResourceOption) (*Saml2Integration, error)

public Saml2Integration(string name, Saml2IntegrationArgs args, CustomResourceOptions? opts = null)

public Saml2Integration(String name, Saml2IntegrationArgs args)
public Saml2Integration(String name, Saml2IntegrationArgs args, CustomResourceOptions options)

type: snowflake:Saml2Integration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args Saml2IntegrationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args Saml2IntegrationArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args Saml2IntegrationArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args Saml2IntegrationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args Saml2IntegrationArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var saml2IntegrationResource = new Snowflake.Saml2Integration("saml2IntegrationResource", new()
{
    Saml2Issuer = "string",
    Saml2X509Cert = "string",
    Saml2SsoUrl = "string",
    Saml2Provider = "string",
    Saml2PostLogoutRedirectUrl = "string",
    Saml2EnableSpInitiated = "string",
    Saml2ForceAuthn = "string",
    Name = "string",
    AllowedEmailPatterns = new[]
    {
        "string",
    },
    Enabled = "string",
    Saml2RequestedNameidFormat = "string",
    Saml2SignRequest = "string",
    Saml2SnowflakeAcsUrl = "string",
    Saml2SnowflakeIssuerUrl = "string",
    Saml2SpInitiatedLoginPageLabel = "string",
    Comment = "string",
    AllowedUserDomains = new[]
    {
        "string",
    },
});

example, err := snowflake.NewSaml2Integration(ctx, "saml2IntegrationResource", &snowflake.Saml2IntegrationArgs{
	Saml2Issuer:                pulumi.String("string"),
	Saml2X509Cert:              pulumi.String("string"),
	Saml2SsoUrl:                pulumi.String("string"),
	Saml2Provider:              pulumi.String("string"),
	Saml2PostLogoutRedirectUrl: pulumi.String("string"),
	Saml2EnableSpInitiated:     pulumi.String("string"),
	Saml2ForceAuthn:            pulumi.String("string"),
	Name:                       pulumi.String("string"),
	AllowedEmailPatterns: pulumi.StringArray{
		pulumi.String("string"),
	},
	Enabled:                        pulumi.String("string"),
	Saml2RequestedNameidFormat:     pulumi.String("string"),
	Saml2SignRequest:               pulumi.String("string"),
	Saml2SnowflakeAcsUrl:           pulumi.String("string"),
	Saml2SnowflakeIssuerUrl:        pulumi.String("string"),
	Saml2SpInitiatedLoginPageLabel: pulumi.String("string"),
	Comment:                        pulumi.String("string"),
	AllowedUserDomains: pulumi.StringArray{
		pulumi.String("string"),
	},
})

var saml2IntegrationResource = new Saml2Integration("saml2IntegrationResource", Saml2IntegrationArgs.builder()
    .saml2Issuer("string")
    .saml2X509Cert("string")
    .saml2SsoUrl("string")
    .saml2Provider("string")
    .saml2PostLogoutRedirectUrl("string")
    .saml2EnableSpInitiated("string")
    .saml2ForceAuthn("string")
    .name("string")
    .allowedEmailPatterns("string")
    .enabled("string")
    .saml2RequestedNameidFormat("string")
    .saml2SignRequest("string")
    .saml2SnowflakeAcsUrl("string")
    .saml2SnowflakeIssuerUrl("string")
    .saml2SpInitiatedLoginPageLabel("string")
    .comment("string")
    .allowedUserDomains("string")
    .build());

saml2_integration_resource = snowflake.Saml2Integration("saml2IntegrationResource",
    saml2_issuer="string",
    saml2_x509_cert="string",
    saml2_sso_url="string",
    saml2_provider="string",
    saml2_post_logout_redirect_url="string",
    saml2_enable_sp_initiated="string",
    saml2_force_authn="string",
    name="string",
    allowed_email_patterns=["string"],
    enabled="string",
    saml2_requested_nameid_format="string",
    saml2_sign_request="string",
    saml2_snowflake_acs_url="string",
    saml2_snowflake_issuer_url="string",
    saml2_sp_initiated_login_page_label="string",
    comment="string",
    allowed_user_domains=["string"])

const saml2IntegrationResource = new snowflake.Saml2Integration("saml2IntegrationResource", {
    saml2Issuer: "string",
    saml2X509Cert: "string",
    saml2SsoUrl: "string",
    saml2Provider: "string",
    saml2PostLogoutRedirectUrl: "string",
    saml2EnableSpInitiated: "string",
    saml2ForceAuthn: "string",
    name: "string",
    allowedEmailPatterns: ["string"],
    enabled: "string",
    saml2RequestedNameidFormat: "string",
    saml2SignRequest: "string",
    saml2SnowflakeAcsUrl: "string",
    saml2SnowflakeIssuerUrl: "string",
    saml2SpInitiatedLoginPageLabel: "string",
    comment: "string",
    allowedUserDomains: ["string"],
});

type: snowflake:Saml2Integration
properties:
    allowedEmailPatterns:
        - string
    allowedUserDomains:
        - string
    comment: string
    enabled: string
    name: string
    saml2EnableSpInitiated: string
    saml2ForceAuthn: string
    saml2Issuer: string
    saml2PostLogoutRedirectUrl: string
    saml2Provider: string
    saml2RequestedNameidFormat: string
    saml2SignRequest: string
    saml2SnowflakeAcsUrl: string
    saml2SnowflakeIssuerUrl: string
    saml2SpInitiatedLoginPageLabel: string
    saml2SsoUrl: string
    saml2X509Cert: string

Saml2Integration Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Saml2Integration resource accepts the following input properties:

Saml2Issuer string: The string containing the IdP EntityID / Issuer.
Saml2Provider string: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
Saml2SsoUrl string: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
Saml2X509Cert string: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
AllowedEmailPatterns List<string>: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
AllowedUserDomains List<string>: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
Comment string: Specifies a comment for the integration.
Enabled string: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Name string: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
Saml2EnableSpInitiated string: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2ForceAuthn string: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2PostLogoutRedirectUrl string: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
Saml2RequestedNameidFormat string: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
Saml2SignRequest string: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2SnowflakeAcsUrl string: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
Saml2SnowflakeIssuerUrl string: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
Saml2SpInitiatedLoginPageLabel string: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.

Saml2Issuer string: The string containing the IdP EntityID / Issuer.
Saml2Provider string: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
Saml2SsoUrl string: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
Saml2X509Cert string: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
AllowedEmailPatterns []string: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
AllowedUserDomains []string: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
Comment string: Specifies a comment for the integration.
Enabled string: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Name string: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
Saml2EnableSpInitiated string: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2ForceAuthn string: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2PostLogoutRedirectUrl string: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
Saml2RequestedNameidFormat string: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
Saml2SignRequest string: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2SnowflakeAcsUrl string: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
Saml2SnowflakeIssuerUrl string: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
Saml2SpInitiatedLoginPageLabel string: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.

saml2Issuer String: The string containing the IdP EntityID / Issuer.
saml2Provider String: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
saml2SsoUrl String: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
saml2X509Cert String: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
allowedEmailPatterns List<String>: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
allowedUserDomains List<String>: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
comment String: Specifies a comment for the integration.
enabled String: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
name String: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
saml2EnableSpInitiated String: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2ForceAuthn String: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2PostLogoutRedirectUrl String: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
saml2RequestedNameidFormat String: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
saml2SignRequest String: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2SnowflakeAcsUrl String: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SnowflakeIssuerUrl String: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SpInitiatedLoginPageLabel String: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.

saml2Issuer string: The string containing the IdP EntityID / Issuer.
saml2Provider string: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
saml2SsoUrl string: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
saml2X509Cert string: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
allowedEmailPatterns string[]: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
allowedUserDomains string[]: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
comment string: Specifies a comment for the integration.
enabled string: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
name string: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
saml2EnableSpInitiated string: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2ForceAuthn string: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2PostLogoutRedirectUrl string: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
saml2RequestedNameidFormat string: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
saml2SignRequest string: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2SnowflakeAcsUrl string: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SnowflakeIssuerUrl string: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SpInitiatedLoginPageLabel string: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.

saml2_issuer str: The string containing the IdP EntityID / Issuer.
saml2_provider str: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
saml2_sso_url str: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
saml2_x509_cert str: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
allowed_email_patterns Sequence[str]: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
allowed_user_domains Sequence[str]: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
comment str: Specifies a comment for the integration.
enabled str: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
name str: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
saml2_enable_sp_initiated str: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2_force_authn str: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2_post_logout_redirect_url str: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
saml2_requested_nameid_format str: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
saml2_sign_request str: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2_snowflake_acs_url str: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2_snowflake_issuer_url str: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2_sp_initiated_login_page_label str: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.

saml2Issuer String: The string containing the IdP EntityID / Issuer.
saml2Provider String: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
saml2SsoUrl String: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
saml2X509Cert String: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
allowedEmailPatterns List<String>: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
allowedUserDomains List<String>: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
comment String: Specifies a comment for the integration.
enabled String: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
name String: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
saml2EnableSpInitiated String: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2ForceAuthn String: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2PostLogoutRedirectUrl String: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
saml2RequestedNameidFormat String: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
saml2SignRequest String: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2SnowflakeAcsUrl String: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SnowflakeIssuerUrl String: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SpInitiatedLoginPageLabel String: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.

Outputs

All input properties are implicitly available as output properties. Additionally, the Saml2Integration resource produces the following output properties:

DescribeOutputs List<Saml2IntegrationDescribeOutput>: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
FullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
Id string: The provider-assigned unique ID for this managed resource.
ShowOutputs List<Saml2IntegrationShowOutput>: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

DescribeOutputs []Saml2IntegrationDescribeOutput: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
FullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
Id string: The provider-assigned unique ID for this managed resource.
ShowOutputs []Saml2IntegrationShowOutput: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

describeOutputs List<Saml2IntegrationDescribeOutput>: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
fullyQualifiedName String: Fully qualified name of the resource. For more information, see object name resolution.
id String: The provider-assigned unique ID for this managed resource.
showOutputs List<Saml2IntegrationShowOutput>: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

describeOutputs Saml2IntegrationDescribeOutput[]: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
fullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
id string: The provider-assigned unique ID for this managed resource.
showOutputs Saml2IntegrationShowOutput[]: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

describe_outputs Sequence[Saml2IntegrationDescribeOutput]: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
fully_qualified_name str: Fully qualified name of the resource. For more information, see object name resolution.
id str: The provider-assigned unique ID for this managed resource.
show_outputs Sequence[Saml2IntegrationShowOutput]: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

describeOutputs List<Property Map>: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
fullyQualifiedName String: Fully qualified name of the resource. For more information, see object name resolution.
id String: The provider-assigned unique ID for this managed resource.
showOutputs List<Property Map>: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

Look up Existing Saml2Integration Resource

Get an existing Saml2Integration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: Saml2IntegrationState, opts?: CustomResourceOptions): Saml2Integration

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allowed_email_patterns: Optional[Sequence[str]] = None,
        allowed_user_domains: Optional[Sequence[str]] = None,
        comment: Optional[str] = None,
        describe_outputs: Optional[Sequence[Saml2IntegrationDescribeOutputArgs]] = None,
        enabled: Optional[str] = None,
        fully_qualified_name: Optional[str] = None,
        name: Optional[str] = None,
        saml2_enable_sp_initiated: Optional[str] = None,
        saml2_force_authn: Optional[str] = None,
        saml2_issuer: Optional[str] = None,
        saml2_post_logout_redirect_url: Optional[str] = None,
        saml2_provider: Optional[str] = None,
        saml2_requested_nameid_format: Optional[str] = None,
        saml2_sign_request: Optional[str] = None,
        saml2_snowflake_acs_url: Optional[str] = None,
        saml2_snowflake_issuer_url: Optional[str] = None,
        saml2_sp_initiated_login_page_label: Optional[str] = None,
        saml2_sso_url: Optional[str] = None,
        saml2_x509_cert: Optional[str] = None,
        show_outputs: Optional[Sequence[Saml2IntegrationShowOutputArgs]] = None) -> Saml2Integration

func GetSaml2Integration(ctx *Context, name string, id IDInput, state *Saml2IntegrationState, opts ...ResourceOption) (*Saml2Integration, error)

public static Saml2Integration Get(string name, Input<string> id, Saml2IntegrationState? state, CustomResourceOptions? opts = null)

public static Saml2Integration get(String name, Output<String> id, Saml2IntegrationState state, CustomResourceOptions options)

Resource lookup is not supported in YAML

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AllowedEmailPatterns List<string>: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
AllowedUserDomains List<string>: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
Comment string: Specifies a comment for the integration.
DescribeOutputs List<Saml2IntegrationDescribeOutput>: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
Enabled string: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
FullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
Name string: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
Saml2EnableSpInitiated string: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2ForceAuthn string: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2Issuer string: The string containing the IdP EntityID / Issuer.
Saml2PostLogoutRedirectUrl string: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
Saml2Provider string: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
Saml2RequestedNameidFormat string: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
Saml2SignRequest string: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2SnowflakeAcsUrl string: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
Saml2SnowflakeIssuerUrl string: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
Saml2SpInitiatedLoginPageLabel string: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
Saml2SsoUrl string: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
Saml2X509Cert string: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
ShowOutputs List<Saml2IntegrationShowOutput>: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

AllowedEmailPatterns []string: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
AllowedUserDomains []string: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
Comment string: Specifies a comment for the integration.
DescribeOutputs []Saml2IntegrationDescribeOutputArgs: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
Enabled string: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
FullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
Name string: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
Saml2EnableSpInitiated string: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2ForceAuthn string: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2Issuer string: The string containing the IdP EntityID / Issuer.
Saml2PostLogoutRedirectUrl string: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
Saml2Provider string: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
Saml2RequestedNameidFormat string: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
Saml2SignRequest string: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
Saml2SnowflakeAcsUrl string: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
Saml2SnowflakeIssuerUrl string: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
Saml2SpInitiatedLoginPageLabel string: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
Saml2SsoUrl string: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
Saml2X509Cert string: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
ShowOutputs []Saml2IntegrationShowOutputArgs: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

allowedEmailPatterns List<String>: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
allowedUserDomains List<String>: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
comment String: Specifies a comment for the integration.
describeOutputs List<Saml2IntegrationDescribeOutput>: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
enabled String: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
fullyQualifiedName String: Fully qualified name of the resource. For more information, see object name resolution.
name String: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
saml2EnableSpInitiated String: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2ForceAuthn String: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2Issuer String: The string containing the IdP EntityID / Issuer.
saml2PostLogoutRedirectUrl String: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
saml2Provider String: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
saml2RequestedNameidFormat String: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
saml2SignRequest String: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2SnowflakeAcsUrl String: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SnowflakeIssuerUrl String: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SpInitiatedLoginPageLabel String: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
saml2SsoUrl String: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
saml2X509Cert String: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
showOutputs List<Saml2IntegrationShowOutput>: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

allowedEmailPatterns string[]: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
allowedUserDomains string[]: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
comment string: Specifies a comment for the integration.
describeOutputs Saml2IntegrationDescribeOutput[]: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
enabled string: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
fullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
name string: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
saml2EnableSpInitiated string: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2ForceAuthn string: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2Issuer string: The string containing the IdP EntityID / Issuer.
saml2PostLogoutRedirectUrl string: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
saml2Provider string: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
saml2RequestedNameidFormat string: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
saml2SignRequest string: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2SnowflakeAcsUrl string: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SnowflakeIssuerUrl string: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SpInitiatedLoginPageLabel string: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
saml2SsoUrl string: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
saml2X509Cert string: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
showOutputs Saml2IntegrationShowOutput[]: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

allowed_email_patterns Sequence[str]: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
allowed_user_domains Sequence[str]: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
comment str: Specifies a comment for the integration.
describe_outputs Sequence[Saml2IntegrationDescribeOutputArgs]: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
enabled str: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
fully_qualified_name str: Fully qualified name of the resource. For more information, see object name resolution.
name str: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
saml2_enable_sp_initiated str: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2_force_authn str: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2_issuer str: The string containing the IdP EntityID / Issuer.
saml2_post_logout_redirect_url str: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
saml2_provider str: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
saml2_requested_nameid_format str: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
saml2_sign_request str: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2_snowflake_acs_url str: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2_snowflake_issuer_url str: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2_sp_initiated_login_page_label str: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
saml2_sso_url str: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
saml2_x509_cert str: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
show_outputs Sequence[Saml2IntegrationShowOutputArgs]: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

allowedEmailPatterns List<String>: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
allowedUserDomains List<String>: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
comment String: Specifies a comment for the integration.
describeOutputs List<Property Map>: Outputs the result of DESCRIBE SECURITY INTEGRATION for the given integration.
enabled String: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
fullyQualifiedName String: Fully qualified name of the resource. For more information, see object name resolution.
name String: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., (, ), "
saml2EnableSpInitiated String: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2ForceAuthn String: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2Issuer String: The string containing the IdP EntityID / Issuer.
saml2PostLogoutRedirectUrl String: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
saml2Provider String: The string describing the IdP. Valid options are: OKTA | ADFS | CUSTOM.
saml2RequestedNameidFormat String: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress | urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName | urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName | urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos | urn:oasis:names:tc:SAML:2.0:nameid-format:persistent | urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
saml2SignRequest String: The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
saml2SnowflakeAcsUrl String: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SnowflakeIssuerUrl String: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See docs.
saml2SpInitiatedLoginPageLabel String: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
saml2SsoUrl String: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
saml2X509Cert String: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
showOutputs List<Property Map>: Outputs the result of SHOW SECURITY INTEGRATION for the given integration.

Supporting Types

Saml2IntegrationDescribeOutput, Saml2IntegrationDescribeOutputArgs

AllowedEmailPatterns List<Saml2IntegrationDescribeOutputAllowedEmailPattern>
AllowedUserDomains List<Saml2IntegrationDescribeOutputAllowedUserDomain>
Comments List<Saml2IntegrationDescribeOutputComment>
Saml2DigestMethodsUseds List<Saml2IntegrationDescribeOutputSaml2DigestMethodsUsed>
Saml2EnableSpInitiateds List<Saml2IntegrationDescribeOutputSaml2EnableSpInitiated>
Saml2ForceAuthns List<Saml2IntegrationDescribeOutputSaml2ForceAuthn>
Saml2Issuers List<Saml2IntegrationDescribeOutputSaml2Issuer>
Saml2PostLogoutRedirectUrls List<Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrl>
Saml2Providers List<Saml2IntegrationDescribeOutputSaml2Provider>
Saml2RequestedNameidFormats List<Saml2IntegrationDescribeOutputSaml2RequestedNameidFormat>
Saml2SignRequests List<Saml2IntegrationDescribeOutputSaml2SignRequest>
Saml2SignatureMethodsUseds List<Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsed>
Saml2SnowflakeAcsUrls List<Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrl>
Saml2SnowflakeIssuerUrls List<Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrl>
Saml2SnowflakeMetadatas List<Saml2IntegrationDescribeOutputSaml2SnowflakeMetadata>
Saml2SnowflakeX509Certs List<Saml2IntegrationDescribeOutputSaml2SnowflakeX509Cert>
Saml2SpInitiatedLoginPageLabels List<Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabel>
Saml2SsoUrls List<Saml2IntegrationDescribeOutputSaml2SsoUrl>
Saml2X509Certs List<Saml2IntegrationDescribeOutputSaml2X509Cert>

AllowedEmailPatterns []Saml2IntegrationDescribeOutputAllowedEmailPattern
AllowedUserDomains []Saml2IntegrationDescribeOutputAllowedUserDomain
Comments []Saml2IntegrationDescribeOutputComment
Saml2DigestMethodsUseds []Saml2IntegrationDescribeOutputSaml2DigestMethodsUsed
Saml2EnableSpInitiateds []Saml2IntegrationDescribeOutputSaml2EnableSpInitiated
Saml2ForceAuthns []Saml2IntegrationDescribeOutputSaml2ForceAuthn
Saml2Issuers []Saml2IntegrationDescribeOutputSaml2Issuer
Saml2PostLogoutRedirectUrls []Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrl
Saml2Providers []Saml2IntegrationDescribeOutputSaml2Provider
Saml2RequestedNameidFormats []Saml2IntegrationDescribeOutputSaml2RequestedNameidFormat
Saml2SignRequests []Saml2IntegrationDescribeOutputSaml2SignRequest
Saml2SignatureMethodsUseds []Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsed
Saml2SnowflakeAcsUrls []Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrl
Saml2SnowflakeIssuerUrls []Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrl
Saml2SnowflakeMetadatas []Saml2IntegrationDescribeOutputSaml2SnowflakeMetadata
Saml2SnowflakeX509Certs []Saml2IntegrationDescribeOutputSaml2SnowflakeX509Cert
Saml2SpInitiatedLoginPageLabels []Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabel
Saml2SsoUrls []Saml2IntegrationDescribeOutputSaml2SsoUrl
Saml2X509Certs []Saml2IntegrationDescribeOutputSaml2X509Cert

allowedEmailPatterns List<Saml2IntegrationDescribeOutputAllowedEmailPattern>
allowedUserDomains List<Saml2IntegrationDescribeOutputAllowedUserDomain>
comments List<Saml2IntegrationDescribeOutputComment>
saml2DigestMethodsUseds List<Saml2IntegrationDescribeOutputSaml2DigestMethodsUsed>
saml2EnableSpInitiateds List<Saml2IntegrationDescribeOutputSaml2EnableSpInitiated>
saml2ForceAuthns List<Saml2IntegrationDescribeOutputSaml2ForceAuthn>
saml2Issuers List<Saml2IntegrationDescribeOutputSaml2Issuer>
saml2PostLogoutRedirectUrls List<Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrl>
saml2Providers List<Saml2IntegrationDescribeOutputSaml2Provider>
saml2RequestedNameidFormats List<Saml2IntegrationDescribeOutputSaml2RequestedNameidFormat>
saml2SignRequests List<Saml2IntegrationDescribeOutputSaml2SignRequest>
saml2SignatureMethodsUseds List<Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsed>
saml2SnowflakeAcsUrls List<Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrl>
saml2SnowflakeIssuerUrls List<Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrl>
saml2SnowflakeMetadatas List<Saml2IntegrationDescribeOutputSaml2SnowflakeMetadata>
saml2SnowflakeX509Certs List<Saml2IntegrationDescribeOutputSaml2SnowflakeX509Cert>
saml2SpInitiatedLoginPageLabels List<Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabel>
saml2SsoUrls List<Saml2IntegrationDescribeOutputSaml2SsoUrl>
saml2X509Certs List<Saml2IntegrationDescribeOutputSaml2X509Cert>

allowedEmailPatterns Saml2IntegrationDescribeOutputAllowedEmailPattern[]
allowedUserDomains Saml2IntegrationDescribeOutputAllowedUserDomain[]
comments Saml2IntegrationDescribeOutputComment[]
saml2DigestMethodsUseds Saml2IntegrationDescribeOutputSaml2DigestMethodsUsed[]
saml2EnableSpInitiateds Saml2IntegrationDescribeOutputSaml2EnableSpInitiated[]
saml2ForceAuthns Saml2IntegrationDescribeOutputSaml2ForceAuthn[]
saml2Issuers Saml2IntegrationDescribeOutputSaml2Issuer[]
saml2PostLogoutRedirectUrls Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrl[]
saml2Providers Saml2IntegrationDescribeOutputSaml2Provider[]
saml2RequestedNameidFormats Saml2IntegrationDescribeOutputSaml2RequestedNameidFormat[]
saml2SignRequests Saml2IntegrationDescribeOutputSaml2SignRequest[]
saml2SignatureMethodsUseds Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsed[]
saml2SnowflakeAcsUrls Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrl[]
saml2SnowflakeIssuerUrls Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrl[]
saml2SnowflakeMetadatas Saml2IntegrationDescribeOutputSaml2SnowflakeMetadata[]
saml2SnowflakeX509Certs Saml2IntegrationDescribeOutputSaml2SnowflakeX509Cert[]
saml2SpInitiatedLoginPageLabels Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabel[]
saml2SsoUrls Saml2IntegrationDescribeOutputSaml2SsoUrl[]
saml2X509Certs Saml2IntegrationDescribeOutputSaml2X509Cert[]

allowed_email_patterns Sequence[Saml2IntegrationDescribeOutputAllowedEmailPattern]
allowed_user_domains Sequence[Saml2IntegrationDescribeOutputAllowedUserDomain]
comments Sequence[Saml2IntegrationDescribeOutputComment]
saml2_digest_methods_useds Sequence[Saml2IntegrationDescribeOutputSaml2DigestMethodsUsed]
saml2_enable_sp_initiateds Sequence[Saml2IntegrationDescribeOutputSaml2EnableSpInitiated]
saml2_force_authns Sequence[Saml2IntegrationDescribeOutputSaml2ForceAuthn]
saml2_issuers Sequence[Saml2IntegrationDescribeOutputSaml2Issuer]
saml2_post_logout_redirect_urls Sequence[Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrl]
saml2_providers Sequence[Saml2IntegrationDescribeOutputSaml2Provider]
saml2_requested_nameid_formats Sequence[Saml2IntegrationDescribeOutputSaml2RequestedNameidFormat]
saml2_sign_requests Sequence[Saml2IntegrationDescribeOutputSaml2SignRequest]
saml2_signature_methods_useds Sequence[Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsed]
saml2_snowflake_acs_urls Sequence[Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrl]
saml2_snowflake_issuer_urls Sequence[Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrl]
saml2_snowflake_metadatas Sequence[Saml2IntegrationDescribeOutputSaml2SnowflakeMetadata]
saml2_snowflake_x509_certs Sequence[Saml2IntegrationDescribeOutputSaml2SnowflakeX509Cert]
saml2_sp_initiated_login_page_labels Sequence[Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabel]
saml2_sso_urls Sequence[Saml2IntegrationDescribeOutputSaml2SsoUrl]
saml2_x509_certs Sequence[Saml2IntegrationDescribeOutputSaml2X509Cert]

Saml2IntegrationDescribeOutputAllowedEmailPattern, Saml2IntegrationDescribeOutputAllowedEmailPatternArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputAllowedUserDomain, Saml2IntegrationDescribeOutputAllowedUserDomainArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputComment, Saml2IntegrationDescribeOutputCommentArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2DigestMethodsUsed, Saml2IntegrationDescribeOutputSaml2DigestMethodsUsedArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2EnableSpInitiated, Saml2IntegrationDescribeOutputSaml2EnableSpInitiatedArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2ForceAuthn, Saml2IntegrationDescribeOutputSaml2ForceAuthnArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2Issuer, Saml2IntegrationDescribeOutputSaml2IssuerArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrl, Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrlArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2Provider, Saml2IntegrationDescribeOutputSaml2ProviderArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2RequestedNameidFormat, Saml2IntegrationDescribeOutputSaml2RequestedNameidFormatArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2SignRequest, Saml2IntegrationDescribeOutputSaml2SignRequestArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsed, Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsedArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrl, Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrlArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrl, Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrlArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2SnowflakeMetadata, Saml2IntegrationDescribeOutputSaml2SnowflakeMetadataArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2SnowflakeX509Cert, Saml2IntegrationDescribeOutputSaml2SnowflakeX509CertArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabel, Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabelArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2SsoUrl, Saml2IntegrationDescribeOutputSaml2SsoUrlArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationDescribeOutputSaml2X509Cert, Saml2IntegrationDescribeOutputSaml2X509CertArgs

Default string
Name string
Type string
Value string

Default string
Name string
Type string
Value string

default_ String
name String
type String
value String

default string
name string
type string
value string

default str
name str
type str
value str

default String
name String
type String
value String

Saml2IntegrationShowOutput, Saml2IntegrationShowOutputArgs

Category string
Comment string
CreatedOn string
Enabled bool
IntegrationType string
Name string

Category string
Comment string
CreatedOn string
Enabled bool
IntegrationType string
Name string

category String
comment String
createdOn String
enabled Boolean
integrationType String
name String

category string
comment string
createdOn string
enabled boolean
integrationType string
name string

category str
comment str
created_on str
enabled bool
integration_type str
name str

category String
comment String
createdOn String
enabled Boolean
integrationType String
name String

Package Details

Repository: Snowflake pulumi/pulumi-snowflake
License: Apache-2.0
Notes: This Pulumi package is based on the snowflake Terraform Provider.

Snowflake v0.59.0 published on Friday, Sep 20, 2024 by Pulumi

pulumi/pulumi-snowflake

snowflake.Saml2Integration

On this page

On this page

Import

Create Saml2Integration Resource

Constructor syntax

Parameters

Constructor example

Saml2Integration Resource Properties

Inputs

Outputs

Look up Existing Saml2Integration Resource

Supporting Types

Saml2IntegrationDescribeOutput, Saml2IntegrationDescribeOutputArgs

Saml2IntegrationDescribeOutputAllowedEmailPattern, Saml2IntegrationDescribeOutputAllowedEmailPatternArgs

Saml2IntegrationDescribeOutputAllowedUserDomain, Saml2IntegrationDescribeOutputAllowedUserDomainArgs

Saml2IntegrationDescribeOutputComment, Saml2IntegrationDescribeOutputCommentArgs

Saml2IntegrationDescribeOutputSaml2DigestMethodsUsed, Saml2IntegrationDescribeOutputSaml2DigestMethodsUsedArgs

Saml2IntegrationDescribeOutputSaml2EnableSpInitiated, Saml2IntegrationDescribeOutputSaml2EnableSpInitiatedArgs

Saml2IntegrationDescribeOutputSaml2ForceAuthn, Saml2IntegrationDescribeOutputSaml2ForceAuthnArgs

Saml2IntegrationDescribeOutputSaml2Issuer, Saml2IntegrationDescribeOutputSaml2IssuerArgs

Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrl, Saml2IntegrationDescribeOutputSaml2PostLogoutRedirectUrlArgs

Saml2IntegrationDescribeOutputSaml2Provider, Saml2IntegrationDescribeOutputSaml2ProviderArgs

Saml2IntegrationDescribeOutputSaml2RequestedNameidFormat, Saml2IntegrationDescribeOutputSaml2RequestedNameidFormatArgs

Saml2IntegrationDescribeOutputSaml2SignRequest, Saml2IntegrationDescribeOutputSaml2SignRequestArgs

Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsed, Saml2IntegrationDescribeOutputSaml2SignatureMethodsUsedArgs

Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrl, Saml2IntegrationDescribeOutputSaml2SnowflakeAcsUrlArgs

Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrl, Saml2IntegrationDescribeOutputSaml2SnowflakeIssuerUrlArgs

Saml2IntegrationDescribeOutputSaml2SnowflakeMetadata, Saml2IntegrationDescribeOutputSaml2SnowflakeMetadataArgs

Saml2IntegrationDescribeOutputSaml2SnowflakeX509Cert, Saml2IntegrationDescribeOutputSaml2SnowflakeX509CertArgs

Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabel, Saml2IntegrationDescribeOutputSaml2SpInitiatedLoginPageLabelArgs

Saml2IntegrationDescribeOutputSaml2SsoUrl, Saml2IntegrationDescribeOutputSaml2SsoUrlArgs

Saml2IntegrationDescribeOutputSaml2X509Cert, Saml2IntegrationDescribeOutputSaml2X509CertArgs

Saml2IntegrationShowOutput, Saml2IntegrationShowOutputArgs

Package Details

On this page

On this page