|
| 1 | +data "mongodbatlas_federated_settings" "federated_settings" { |
| 2 | + org_id = var.org_id |
| 3 | +} |
| 4 | +data "mongodbatlas_federated_settings_identity_providers" "identity_provider" { |
| 5 | + federation_settings_id = data.mongodbatlas_federated_settings.federated_settings.id |
| 6 | +} |
| 7 | + |
| 8 | +data "mongodbatlas_federated_settings_org_configs" "org_configs_ds" { |
| 9 | + federation_settings_id = data.mongodbatlas_federated_settings.federated_settings.id |
| 10 | +} |
| 11 | + |
| 12 | +data "mongodbatlas_federated_settings_org_role_mappings" "org_role_mapping" { |
| 13 | + federation_settings_id = data.mongodbatlas_federated_settings.federated_settings.id |
| 14 | + org_id = var.org_id |
| 15 | +} |
| 16 | +resource "mongodbatlas_federated_settings_org_role_mapping" "org_role_mapping" { |
| 17 | + federation_settings_id = data.mongodbatlas_federated_settings.federated_settings.id |
| 18 | + org_id = var.org_id |
| 19 | + external_group_name = "newgroup" |
| 20 | + |
| 21 | + role_assignments { |
| 22 | + group_id = var.group_id |
| 23 | + roles = ["GROUP_OWNER", "GROUP_DATA_ACCESS_ADMIN", "GROUP_SEARCH_INDEX_EDITOR", "GROUP_DATA_ACCESS_READ_ONLY"] |
| 24 | + } |
| 25 | + |
| 26 | + role_assignments { |
| 27 | + org_id = var.org_id |
| 28 | + roles = ["ORG_OWNER", "ORG_MEMBER"] |
| 29 | + } |
| 30 | + |
| 31 | +} |
| 32 | +resource "mongodbatlas_federated_settings_org_config" "org_connections_import" { |
| 33 | + federation_settings_id = data.mongodbatlas_federated_settings.federated_settings.id |
| 34 | + org_id = var.org_id |
| 35 | + identity_provider_id = var.identity_provider_id |
| 36 | + domain_restriction_enabled = false |
| 37 | + domain_allow_list = ["yourdomain.com"] |
| 38 | +} |
| 39 | + |
| 40 | +resource "mongodbatlas_federated_settings_identity_provider" "identity_provider" { |
| 41 | + federation_settings_id = data.mongodbatlas_federated_settings.federated_settings.id |
| 42 | + name = var.name |
| 43 | + associated_domains = ["yourdomain.com"] |
| 44 | + sso_debug_enabled = true |
| 45 | + status = "ACTIVE" |
| 46 | + sso_url = "https://mysso.oktapreview.com/app/mysso_terrafssotesdev_1/exk1f7f7f7fk5wp50h8/sso/saml" |
| 47 | + issuer_uri = "http://www.okta.com/exk1f716hf7f750h8" |
| 48 | + request_binding = "HTTP-POST" |
| 49 | + response_signature_algorithm = "SHA-256" |
| 50 | +} |
0 commit comments