akeyless.AuthMethodKerberos

akeyless 2.0.1, Apr 27 26

Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community

akeyless-community/terraform-provider-akeyless

Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community

akeyless-community/terraform-provider-akeyless

Create AuthMethodKerberos Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AuthMethodKerberos(name: string, args?: AuthMethodKerberosArgs, opts?: CustomResourceOptions);

@overload
def AuthMethodKerberos(resource_name: str,
                       args: Optional[AuthMethodKerberosArgs] = None,
                       opts: Optional[ResourceOptions] = None)

@overload
def AuthMethodKerberos(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       access_expires: Optional[float] = None,
                       allowed_client_types: Optional[Sequence[str]] = None,
                       audit_logs_claims: Optional[Sequence[str]] = None,
                       auth_method_kerberos_id: Optional[str] = None,
                       bind_dn: Optional[str] = None,
                       bind_dn_password: Optional[str] = None,
                       bound_ips: Optional[Sequence[str]] = None,
                       delete_protection: Optional[str] = None,
                       description: Optional[str] = None,
                       expiration_event_ins: Optional[Sequence[str]] = None,
                       force_sub_claims: Optional[bool] = None,
                       group_attr: Optional[str] = None,
                       group_dn: Optional[str] = None,
                       group_filter: Optional[str] = None,
                       gw_bound_ips: Optional[Sequence[str]] = None,
                       jwt_ttl: Optional[float] = None,
                       keytab_file_data: Optional[str] = None,
                       krb5_conf_data: Optional[str] = None,
                       ldap_anonymous_search: Optional[bool] = None,
                       ldap_ca_cert: Optional[str] = None,
                       ldap_url: Optional[str] = None,
                       name: Optional[str] = None,
                       product_types: Optional[Sequence[str]] = None,
                       subclaims_delimiters: Optional[Sequence[str]] = None,
                       unique_identifier: Optional[str] = None,
                       user_attribute: Optional[str] = None,
                       user_dn: Optional[str] = None)

func NewAuthMethodKerberos(ctx *Context, name string, args *AuthMethodKerberosArgs, opts ...ResourceOption) (*AuthMethodKerberos, error)

public AuthMethodKerberos(string name, AuthMethodKerberosArgs? args = null, CustomResourceOptions? opts = null)

public AuthMethodKerberos(String name, AuthMethodKerberosArgs args)
public AuthMethodKerberos(String name, AuthMethodKerberosArgs args, CustomResourceOptions options)

type: akeyless:AuthMethodKerberos
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args AuthMethodKerberosArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args AuthMethodKerberosArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args AuthMethodKerberosArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args AuthMethodKerberosArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args AuthMethodKerberosArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var authMethodKerberosResource = new Akeyless.AuthMethodKerberos("authMethodKerberosResource", new()
{
    AccessExpires = 0,
    AllowedClientTypes = new[]
    {
        "string",
    },
    AuditLogsClaims = new[]
    {
        "string",
    },
    AuthMethodKerberosId = "string",
    BindDn = "string",
    BindDnPassword = "string",
    BoundIps = new[]
    {
        "string",
    },
    DeleteProtection = "string",
    Description = "string",
    ExpirationEventIns = new[]
    {
        "string",
    },
    ForceSubClaims = false,
    GroupAttr = "string",
    GroupDn = "string",
    GroupFilter = "string",
    GwBoundIps = new[]
    {
        "string",
    },
    JwtTtl = 0,
    KeytabFileData = "string",
    Krb5ConfData = "string",
    LdapAnonymousSearch = false,
    LdapCaCert = "string",
    LdapUrl = "string",
    Name = "string",
    ProductTypes = new[]
    {
        "string",
    },
    SubclaimsDelimiters = new[]
    {
        "string",
    },
    UniqueIdentifier = "string",
    UserAttribute = "string",
    UserDn = "string",
});

example, err := akeyless.NewAuthMethodKerberos(ctx, "authMethodKerberosResource", &akeyless.AuthMethodKerberosArgs{
	AccessExpires: pulumi.Float64(0),
	AllowedClientTypes: pulumi.StringArray{
		pulumi.String("string"),
	},
	AuditLogsClaims: pulumi.StringArray{
		pulumi.String("string"),
	},
	AuthMethodKerberosId: pulumi.String("string"),
	BindDn:               pulumi.String("string"),
	BindDnPassword:       pulumi.String("string"),
	BoundIps: pulumi.StringArray{
		pulumi.String("string"),
	},
	DeleteProtection: pulumi.String("string"),
	Description:      pulumi.String("string"),
	ExpirationEventIns: pulumi.StringArray{
		pulumi.String("string"),
	},
	ForceSubClaims: pulumi.Bool(false),
	GroupAttr:      pulumi.String("string"),
	GroupDn:        pulumi.String("string"),
	GroupFilter:    pulumi.String("string"),
	GwBoundIps: pulumi.StringArray{
		pulumi.String("string"),
	},
	JwtTtl:              pulumi.Float64(0),
	KeytabFileData:      pulumi.String("string"),
	Krb5ConfData:        pulumi.String("string"),
	LdapAnonymousSearch: pulumi.Bool(false),
	LdapCaCert:          pulumi.String("string"),
	LdapUrl:             pulumi.String("string"),
	Name:                pulumi.String("string"),
	ProductTypes: pulumi.StringArray{
		pulumi.String("string"),
	},
	SubclaimsDelimiters: pulumi.StringArray{
		pulumi.String("string"),
	},
	UniqueIdentifier: pulumi.String("string"),
	UserAttribute:    pulumi.String("string"),
	UserDn:           pulumi.String("string"),
})

var authMethodKerberosResource = new AuthMethodKerberos("authMethodKerberosResource", AuthMethodKerberosArgs.builder()
    .accessExpires(0.0)
    .allowedClientTypes("string")
    .auditLogsClaims("string")
    .authMethodKerberosId("string")
    .bindDn("string")
    .bindDnPassword("string")
    .boundIps("string")
    .deleteProtection("string")
    .description("string")
    .expirationEventIns("string")
    .forceSubClaims(false)
    .groupAttr("string")
    .groupDn("string")
    .groupFilter("string")
    .gwBoundIps("string")
    .jwtTtl(0.0)
    .keytabFileData("string")
    .krb5ConfData("string")
    .ldapAnonymousSearch(false)
    .ldapCaCert("string")
    .ldapUrl("string")
    .name("string")
    .productTypes("string")
    .subclaimsDelimiters("string")
    .uniqueIdentifier("string")
    .userAttribute("string")
    .userDn("string")
    .build());

auth_method_kerberos_resource = akeyless.AuthMethodKerberos("authMethodKerberosResource",
    access_expires=float(0),
    allowed_client_types=["string"],
    audit_logs_claims=["string"],
    auth_method_kerberos_id="string",
    bind_dn="string",
    bind_dn_password="string",
    bound_ips=["string"],
    delete_protection="string",
    description="string",
    expiration_event_ins=["string"],
    force_sub_claims=False,
    group_attr="string",
    group_dn="string",
    group_filter="string",
    gw_bound_ips=["string"],
    jwt_ttl=float(0),
    keytab_file_data="string",
    krb5_conf_data="string",
    ldap_anonymous_search=False,
    ldap_ca_cert="string",
    ldap_url="string",
    name="string",
    product_types=["string"],
    subclaims_delimiters=["string"],
    unique_identifier="string",
    user_attribute="string",
    user_dn="string")

const authMethodKerberosResource = new akeyless.AuthMethodKerberos("authMethodKerberosResource", {
    accessExpires: 0,
    allowedClientTypes: ["string"],
    auditLogsClaims: ["string"],
    authMethodKerberosId: "string",
    bindDn: "string",
    bindDnPassword: "string",
    boundIps: ["string"],
    deleteProtection: "string",
    description: "string",
    expirationEventIns: ["string"],
    forceSubClaims: false,
    groupAttr: "string",
    groupDn: "string",
    groupFilter: "string",
    gwBoundIps: ["string"],
    jwtTtl: 0,
    keytabFileData: "string",
    krb5ConfData: "string",
    ldapAnonymousSearch: false,
    ldapCaCert: "string",
    ldapUrl: "string",
    name: "string",
    productTypes: ["string"],
    subclaimsDelimiters: ["string"],
    uniqueIdentifier: "string",
    userAttribute: "string",
    userDn: "string",
});

type: akeyless:AuthMethodKerberos
properties:
    accessExpires: 0
    allowedClientTypes:
        - string
    auditLogsClaims:
        - string
    authMethodKerberosId: string
    bindDn: string
    bindDnPassword: string
    boundIps:
        - string
    deleteProtection: string
    description: string
    expirationEventIns:
        - string
    forceSubClaims: false
    groupAttr: string
    groupDn: string
    groupFilter: string
    gwBoundIps:
        - string
    jwtTtl: 0
    keytabFileData: string
    krb5ConfData: string
    ldapAnonymousSearch: false
    ldapCaCert: string
    ldapUrl: string
    name: string
    productTypes:
        - string
    subclaimsDelimiters:
        - string
    uniqueIdentifier: string
    userAttribute: string
    userDn: string

AuthMethodKerberos Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AuthMethodKerberos resource accepts the following input properties:

AccessExpires double: Access expiration date in Unix timestamp (select 0 for access without expiry date)
AllowedClientTypes List<string>: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
AuditLogsClaims List<string>: Subclaims to include in audit logs
AuthMethodKerberosId string: The ID of this resource.
BindDn string: Bind DN
BindDnPassword string: Bind DN password
BoundIps List<string>: A comma-separated CIDR block list to allow client access
DeleteProtection string: Protection from accidental deletion of this object, [true/false]
Description string: Auth Method description
ExpirationEventIns List<string>: How many days before the expiration of the auth method would you like to be notified
ForceSubClaims bool: enforce role-association must include sub claims
GroupAttr string: Group attribute
GroupDn string: Group DN
GroupFilter string: Group filter
GwBoundIps List<string>: A comma-separated CIDR block list as a trusted Gateway entity
JwtTtl double: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
KeytabFileData string: Keytab file data (base64 encoded)
Krb5ConfData string: Kerberos configuration file data (base64 encoded)
LdapAnonymousSearch bool: Enable LDAP anonymous search
LdapCaCert string: LDAP CA certificate
LdapUrl string: LDAP URL
Name string: Auth Method name
ProductTypes List<string>: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
SubclaimsDelimiters List<string>: A list of additional sub claims delimiters
UniqueIdentifier string: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
UserAttribute string: User attribute
UserDn string: User DN

AccessExpires float64: Access expiration date in Unix timestamp (select 0 for access without expiry date)
AllowedClientTypes []string: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
AuditLogsClaims []string: Subclaims to include in audit logs
AuthMethodKerberosId string: The ID of this resource.
BindDn string: Bind DN
BindDnPassword string: Bind DN password
BoundIps []string: A comma-separated CIDR block list to allow client access
DeleteProtection string: Protection from accidental deletion of this object, [true/false]
Description string: Auth Method description
ExpirationEventIns []string: How many days before the expiration of the auth method would you like to be notified
ForceSubClaims bool: enforce role-association must include sub claims
GroupAttr string: Group attribute
GroupDn string: Group DN
GroupFilter string: Group filter
GwBoundIps []string: A comma-separated CIDR block list as a trusted Gateway entity
JwtTtl float64: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
KeytabFileData string: Keytab file data (base64 encoded)
Krb5ConfData string: Kerberos configuration file data (base64 encoded)
LdapAnonymousSearch bool: Enable LDAP anonymous search
LdapCaCert string: LDAP CA certificate
LdapUrl string: LDAP URL
Name string: Auth Method name
ProductTypes []string: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
SubclaimsDelimiters []string: A list of additional sub claims delimiters
UniqueIdentifier string: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
UserAttribute string: User attribute
UserDn string: User DN

accessExpires Double: Access expiration date in Unix timestamp (select 0 for access without expiry date)
allowedClientTypes List<String>: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
auditLogsClaims List<String>: Subclaims to include in audit logs
authMethodKerberosId String: The ID of this resource.
bindDn String: Bind DN
bindDnPassword String: Bind DN password
boundIps List<String>: A comma-separated CIDR block list to allow client access
deleteProtection String: Protection from accidental deletion of this object, [true/false]
description String: Auth Method description
expirationEventIns List<String>: How many days before the expiration of the auth method would you like to be notified
forceSubClaims Boolean: enforce role-association must include sub claims
groupAttr String: Group attribute
groupDn String: Group DN
groupFilter String: Group filter
gwBoundIps List<String>: A comma-separated CIDR block list as a trusted Gateway entity
jwtTtl Double: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
keytabFileData String: Keytab file data (base64 encoded)
krb5ConfData String: Kerberos configuration file data (base64 encoded)
ldapAnonymousSearch Boolean: Enable LDAP anonymous search
ldapCaCert String: LDAP CA certificate
ldapUrl String: LDAP URL
name String: Auth Method name
productTypes List<String>: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
subclaimsDelimiters List<String>: A list of additional sub claims delimiters
uniqueIdentifier String: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
userAttribute String: User attribute
userDn String: User DN

accessExpires number: Access expiration date in Unix timestamp (select 0 for access without expiry date)
allowedClientTypes string[]: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
auditLogsClaims string[]: Subclaims to include in audit logs
authMethodKerberosId string: The ID of this resource.
bindDn string: Bind DN
bindDnPassword string: Bind DN password
boundIps string[]: A comma-separated CIDR block list to allow client access
deleteProtection string: Protection from accidental deletion of this object, [true/false]
description string: Auth Method description
expirationEventIns string[]: How many days before the expiration of the auth method would you like to be notified
forceSubClaims boolean: enforce role-association must include sub claims
groupAttr string: Group attribute
groupDn string: Group DN
groupFilter string: Group filter
gwBoundIps string[]: A comma-separated CIDR block list as a trusted Gateway entity
jwtTtl number: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
keytabFileData string: Keytab file data (base64 encoded)
krb5ConfData string: Kerberos configuration file data (base64 encoded)
ldapAnonymousSearch boolean: Enable LDAP anonymous search
ldapCaCert string: LDAP CA certificate
ldapUrl string: LDAP URL
name string: Auth Method name
productTypes string[]: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
subclaimsDelimiters string[]: A list of additional sub claims delimiters
uniqueIdentifier string: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
userAttribute string: User attribute
userDn string: User DN

access_expires float: Access expiration date in Unix timestamp (select 0 for access without expiry date)
allowed_client_types Sequence[str]: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
audit_logs_claims Sequence[str]: Subclaims to include in audit logs
auth_method_kerberos_id str: The ID of this resource.
bind_dn str: Bind DN
bind_dn_password str: Bind DN password
bound_ips Sequence[str]: A comma-separated CIDR block list to allow client access
delete_protection str: Protection from accidental deletion of this object, [true/false]
description str: Auth Method description
expiration_event_ins Sequence[str]: How many days before the expiration of the auth method would you like to be notified
force_sub_claims bool: enforce role-association must include sub claims
group_attr str: Group attribute
group_dn str: Group DN
group_filter str: Group filter
gw_bound_ips Sequence[str]: A comma-separated CIDR block list as a trusted Gateway entity
jwt_ttl float: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
keytab_file_data str: Keytab file data (base64 encoded)
krb5_conf_data str: Kerberos configuration file data (base64 encoded)
ldap_anonymous_search bool: Enable LDAP anonymous search
ldap_ca_cert str: LDAP CA certificate
ldap_url str: LDAP URL
name str: Auth Method name
product_types Sequence[str]: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
subclaims_delimiters Sequence[str]: A list of additional sub claims delimiters
unique_identifier str: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
user_attribute str: User attribute
user_dn str: User DN

accessExpires Number: Access expiration date in Unix timestamp (select 0 for access without expiry date)
allowedClientTypes List<String>: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
auditLogsClaims List<String>: Subclaims to include in audit logs
authMethodKerberosId String: The ID of this resource.
bindDn String: Bind DN
bindDnPassword String: Bind DN password
boundIps List<String>: A comma-separated CIDR block list to allow client access
deleteProtection String: Protection from accidental deletion of this object, [true/false]
description String: Auth Method description
expirationEventIns List<String>: How many days before the expiration of the auth method would you like to be notified
forceSubClaims Boolean: enforce role-association must include sub claims
groupAttr String: Group attribute
groupDn String: Group DN
groupFilter String: Group filter
gwBoundIps List<String>: A comma-separated CIDR block list as a trusted Gateway entity
jwtTtl Number: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
keytabFileData String: Keytab file data (base64 encoded)
krb5ConfData String: Kerberos configuration file data (base64 encoded)
ldapAnonymousSearch Boolean: Enable LDAP anonymous search
ldapCaCert String: LDAP CA certificate
ldapUrl String: LDAP URL
name String: Auth Method name
productTypes List<String>: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
subclaimsDelimiters List<String>: A list of additional sub claims delimiters
uniqueIdentifier String: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
userAttribute String: User attribute
userDn String: User DN

Outputs

All input properties are implicitly available as output properties. Additionally, the AuthMethodKerberos resource produces the following output properties:

AccessId string: Auth Method access ID
Id string: The provider-assigned unique ID for this managed resource.

AccessId string: Auth Method access ID
Id string: The provider-assigned unique ID for this managed resource.

accessId String: Auth Method access ID
id String: The provider-assigned unique ID for this managed resource.

accessId string: Auth Method access ID
id string: The provider-assigned unique ID for this managed resource.

access_id str: Auth Method access ID
id str: The provider-assigned unique ID for this managed resource.

accessId String: Auth Method access ID
id String: The provider-assigned unique ID for this managed resource.

Look up Existing AuthMethodKerberos Resource

Get an existing AuthMethodKerberos resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AuthMethodKerberosState, opts?: CustomResourceOptions): AuthMethodKerberos

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_expires: Optional[float] = None,
        access_id: Optional[str] = None,
        allowed_client_types: Optional[Sequence[str]] = None,
        audit_logs_claims: Optional[Sequence[str]] = None,
        auth_method_kerberos_id: Optional[str] = None,
        bind_dn: Optional[str] = None,
        bind_dn_password: Optional[str] = None,
        bound_ips: Optional[Sequence[str]] = None,
        delete_protection: Optional[str] = None,
        description: Optional[str] = None,
        expiration_event_ins: Optional[Sequence[str]] = None,
        force_sub_claims: Optional[bool] = None,
        group_attr: Optional[str] = None,
        group_dn: Optional[str] = None,
        group_filter: Optional[str] = None,
        gw_bound_ips: Optional[Sequence[str]] = None,
        jwt_ttl: Optional[float] = None,
        keytab_file_data: Optional[str] = None,
        krb5_conf_data: Optional[str] = None,
        ldap_anonymous_search: Optional[bool] = None,
        ldap_ca_cert: Optional[str] = None,
        ldap_url: Optional[str] = None,
        name: Optional[str] = None,
        product_types: Optional[Sequence[str]] = None,
        subclaims_delimiters: Optional[Sequence[str]] = None,
        unique_identifier: Optional[str] = None,
        user_attribute: Optional[str] = None,
        user_dn: Optional[str] = None) -> AuthMethodKerberos

func GetAuthMethodKerberos(ctx *Context, name string, id IDInput, state *AuthMethodKerberosState, opts ...ResourceOption) (*AuthMethodKerberos, error)

public static AuthMethodKerberos Get(string name, Input<string> id, AuthMethodKerberosState? state, CustomResourceOptions? opts = null)

public static AuthMethodKerberos get(String name, Output<String> id, AuthMethodKerberosState state, CustomResourceOptions options)

resources:  _:    type: akeyless:AuthMethodKerberos    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AccessExpires double: Access expiration date in Unix timestamp (select 0 for access without expiry date)
AccessId string: Auth Method access ID
AllowedClientTypes List<string>: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
AuditLogsClaims List<string>: Subclaims to include in audit logs
AuthMethodKerberosId string: The ID of this resource.
BindDn string: Bind DN
BindDnPassword string: Bind DN password
BoundIps List<string>: A comma-separated CIDR block list to allow client access
DeleteProtection string: Protection from accidental deletion of this object, [true/false]
Description string: Auth Method description
ExpirationEventIns List<string>: How many days before the expiration of the auth method would you like to be notified
ForceSubClaims bool: enforce role-association must include sub claims
GroupAttr string: Group attribute
GroupDn string: Group DN
GroupFilter string: Group filter
GwBoundIps List<string>: A comma-separated CIDR block list as a trusted Gateway entity
JwtTtl double: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
KeytabFileData string: Keytab file data (base64 encoded)
Krb5ConfData string: Kerberos configuration file data (base64 encoded)
LdapAnonymousSearch bool: Enable LDAP anonymous search
LdapCaCert string: LDAP CA certificate
LdapUrl string: LDAP URL
Name string: Auth Method name
ProductTypes List<string>: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
SubclaimsDelimiters List<string>: A list of additional sub claims delimiters
UniqueIdentifier string: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
UserAttribute string: User attribute
UserDn string: User DN

AccessExpires float64: Access expiration date in Unix timestamp (select 0 for access without expiry date)
AccessId string: Auth Method access ID
AllowedClientTypes []string: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
AuditLogsClaims []string: Subclaims to include in audit logs
AuthMethodKerberosId string: The ID of this resource.
BindDn string: Bind DN
BindDnPassword string: Bind DN password
BoundIps []string: A comma-separated CIDR block list to allow client access
DeleteProtection string: Protection from accidental deletion of this object, [true/false]
Description string: Auth Method description
ExpirationEventIns []string: How many days before the expiration of the auth method would you like to be notified
ForceSubClaims bool: enforce role-association must include sub claims
GroupAttr string: Group attribute
GroupDn string: Group DN
GroupFilter string: Group filter
GwBoundIps []string: A comma-separated CIDR block list as a trusted Gateway entity
JwtTtl float64: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
KeytabFileData string: Keytab file data (base64 encoded)
Krb5ConfData string: Kerberos configuration file data (base64 encoded)
LdapAnonymousSearch bool: Enable LDAP anonymous search
LdapCaCert string: LDAP CA certificate
LdapUrl string: LDAP URL
Name string: Auth Method name
ProductTypes []string: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
SubclaimsDelimiters []string: A list of additional sub claims delimiters
UniqueIdentifier string: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
UserAttribute string: User attribute
UserDn string: User DN

accessExpires Double: Access expiration date in Unix timestamp (select 0 for access without expiry date)
accessId String: Auth Method access ID
allowedClientTypes List<String>: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
auditLogsClaims List<String>: Subclaims to include in audit logs
authMethodKerberosId String: The ID of this resource.
bindDn String: Bind DN
bindDnPassword String: Bind DN password
boundIps List<String>: A comma-separated CIDR block list to allow client access
deleteProtection String: Protection from accidental deletion of this object, [true/false]
description String: Auth Method description
expirationEventIns List<String>: How many days before the expiration of the auth method would you like to be notified
forceSubClaims Boolean: enforce role-association must include sub claims
groupAttr String: Group attribute
groupDn String: Group DN
groupFilter String: Group filter
gwBoundIps List<String>: A comma-separated CIDR block list as a trusted Gateway entity
jwtTtl Double: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
keytabFileData String: Keytab file data (base64 encoded)
krb5ConfData String: Kerberos configuration file data (base64 encoded)
ldapAnonymousSearch Boolean: Enable LDAP anonymous search
ldapCaCert String: LDAP CA certificate
ldapUrl String: LDAP URL
name String: Auth Method name
productTypes List<String>: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
subclaimsDelimiters List<String>: A list of additional sub claims delimiters
uniqueIdentifier String: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
userAttribute String: User attribute
userDn String: User DN

accessExpires number: Access expiration date in Unix timestamp (select 0 for access without expiry date)
accessId string: Auth Method access ID
allowedClientTypes string[]: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
auditLogsClaims string[]: Subclaims to include in audit logs
authMethodKerberosId string: The ID of this resource.
bindDn string: Bind DN
bindDnPassword string: Bind DN password
boundIps string[]: A comma-separated CIDR block list to allow client access
deleteProtection string: Protection from accidental deletion of this object, [true/false]
description string: Auth Method description
expirationEventIns string[]: How many days before the expiration of the auth method would you like to be notified
forceSubClaims boolean: enforce role-association must include sub claims
groupAttr string: Group attribute
groupDn string: Group DN
groupFilter string: Group filter
gwBoundIps string[]: A comma-separated CIDR block list as a trusted Gateway entity
jwtTtl number: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
keytabFileData string: Keytab file data (base64 encoded)
krb5ConfData string: Kerberos configuration file data (base64 encoded)
ldapAnonymousSearch boolean: Enable LDAP anonymous search
ldapCaCert string: LDAP CA certificate
ldapUrl string: LDAP URL
name string: Auth Method name
productTypes string[]: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
subclaimsDelimiters string[]: A list of additional sub claims delimiters
uniqueIdentifier string: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
userAttribute string: User attribute
userDn string: User DN

access_expires float: Access expiration date in Unix timestamp (select 0 for access without expiry date)
access_id str: Auth Method access ID
allowed_client_types Sequence[str]: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
audit_logs_claims Sequence[str]: Subclaims to include in audit logs
auth_method_kerberos_id str: The ID of this resource.
bind_dn str: Bind DN
bind_dn_password str: Bind DN password
bound_ips Sequence[str]: A comma-separated CIDR block list to allow client access
delete_protection str: Protection from accidental deletion of this object, [true/false]
description str: Auth Method description
expiration_event_ins Sequence[str]: How many days before the expiration of the auth method would you like to be notified
force_sub_claims bool: enforce role-association must include sub claims
group_attr str: Group attribute
group_dn str: Group DN
group_filter str: Group filter
gw_bound_ips Sequence[str]: A comma-separated CIDR block list as a trusted Gateway entity
jwt_ttl float: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
keytab_file_data str: Keytab file data (base64 encoded)
krb5_conf_data str: Kerberos configuration file data (base64 encoded)
ldap_anonymous_search bool: Enable LDAP anonymous search
ldap_ca_cert str: LDAP CA certificate
ldap_url str: LDAP URL
name str: Auth Method name
product_types Sequence[str]: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
subclaims_delimiters Sequence[str]: A list of additional sub claims delimiters
unique_identifier str: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
user_attribute str: User attribute
user_dn str: User DN

accessExpires Number: Access expiration date in Unix timestamp (select 0 for access without expiry date)
accessId String: Auth Method access ID
allowedClientTypes List<String>: Limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
auditLogsClaims List<String>: Subclaims to include in audit logs
authMethodKerberosId String: The ID of this resource.
bindDn String: Bind DN
bindDnPassword String: Bind DN password
boundIps List<String>: A comma-separated CIDR block list to allow client access
deleteProtection String: Protection from accidental deletion of this object, [true/false]
description String: Auth Method description
expirationEventIns List<String>: How many days before the expiration of the auth method would you like to be notified
forceSubClaims Boolean: enforce role-association must include sub claims
groupAttr String: Group attribute
groupDn String: Group DN
groupFilter String: Group filter
gwBoundIps List<String>: A comma-separated CIDR block list as a trusted Gateway entity
jwtTtl Number: creds expiration time in minutes. If not set, use default according to account settings (see get-account-settings)
keytabFileData String: Keytab file data (base64 encoded)
krb5ConfData String: Kerberos configuration file data (base64 encoded)
ldapAnonymousSearch Boolean: Enable LDAP anonymous search
ldapCaCert String: LDAP CA certificate
ldapUrl String: LDAP URL
name String: Auth Method name
productTypes List<String>: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
subclaimsDelimiters List<String>: A list of additional sub claims delimiters
uniqueIdentifier String: A unique identifier (ID) value should be configured. Whenever a user logs in with a token, these authentication types issue a sub claim that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
userAttribute String: User attribute
userDn String: User DN