https://github.com/schumann-it/terraform-azuread-b2c-app-registration

https://github.com/schumann-it/terraform-azuread-b2c-app-registration

Last synced: 5 days ago
JSON representation

• Host: GitHub
• URL: https://github.com/schumann-it/terraform-azuread-b2c-app-registration
• Owner: Schumann-IT
• License: mit
• Created: 2024-05-03T18:43:04.000Z (9 months ago)
• Default Branch: main
• Last Pushed: 2024-07-29T18:47:28.000Z (6 months ago)
• Last Synced: 2024-11-15T02:33:50.359Z (2 months ago)
• Language: HCL
• Size: 32.2 KB
• Stars: 0
• Watchers: 0
• Forks: 0
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# terraform-azuread-b2c-app-registration

This module manages the configuration of an app-registration for Azure AD B2C directory.

## Requirements

| Name | Version |

|------|---------|

|  [terraform](#requirement\_terraform) | >= 1.4.0, < 2.0.0 |

|  [azuread](#requirement\_azuread) | >= 2.38.0 |

|  [random](#requirement\_random) | >= 3.0.0, < 4.0.0 |

## Providers

| Name | Version |

|------|---------|

|  [azuread](#provider\_azuread) | >= 2.38.0 |

|  [random](#provider\_random) | >= 3.0.0, < 4.0.0 |

## Modules

No modules.

## Resources

| Name | Type |

|------|------|

| [azuread_application.this](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/application) | resource |

| [azuread_application_identifier_uri.this](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/application_identifier_uri) | resource |

| [azuread_application_permission_scope.this](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/application_permission_scope) | resource |

| [random_uuid.permission_scopes](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/uuid) | resource |

| [azuread_application.this](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/data-sources/application) | data source |

## Inputs

| Name | Description | Type | Default | Required |

|------|-------------|------|---------|:--------:|

|  [config](#input\_config) | The application config. | 
object({
    display_name                   = optional(string, null)
    fallback_public_client_enabled = optional(bool, false)
    sign_in_audience               = optional(string, "AzureADMyOrg")
    api = object({
      known_client_applications      = optional(list(string), [])
      mapped_claims_enabled          = optional(bool, false)
      requested_access_token_version = number
    })
    web = optional(object({
      enabled                       = optional(bool, false)
      redirect_uris                 = optional(list(string), [])
      logout_url                    = optional(string, null)
      access_token_issuance_enabled = optional(bool, false)
      id_token_issuance_enabled     = optional(bool, false)
    }), { enabled = false })
    public_client = optional(object({
      enabled       = optional(bool, false)
      redirect_uris = optional(list(string), [])
    }), { enabled = false })
    required_graph_api_permissions = optional(list(string), [])
    identifier_uri                 = optional(string, "")
    domain_name                    = optional(string, "")
    permission_scopes = optional(list(object({
      name                       = string
      consent_type               = optional(string, "Admin")
      admin_consent_description  = string
      admin_consent_display_name = string
    })), [])
    required_resource_access = optional(map(list(string)), {})
  })
 | n/a | yes |

|  [create](#input\_create) | Whether to create the application. If set to false, the application must exist and specified with var.object\_id. | `bool` | `false` | no |

|  [object\_id](#input\_object\_id) | The object id of the application. If create is set to false, this must be specified. | `string` | `null` | no |


## Outputs

| Name | Description |

|------|-------------|

|  [admin\_consent\_required](#output\_admin\_consent\_required) | Whether admin consent is required. |

|  [application\_id](#output\_application\_id) | The application (client) ID of the application. |

|  [display\_name](#output\_display\_name) | The display name of the application. |

|  [exposed\_api\_permissions](#output\_exposed\_api\_permissions) | The exposed API permissions of the application. |

|  [object\_id](#output\_object\_id) | The object ID of the application. |