v1beta2

type AnonymousInitParameters struct {

	// Whether phone number auth is enabled for the project or not.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`
}

type AnonymousObservation struct {

	// Whether phone number auth is enabled for the project or not.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`
}

type AnonymousParameters struct {

	// Whether phone number auth is enabled for the project or not.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled" tf:"enabled,omitempty"`
}

type EmailInitParameters struct {

	// Whether phone number auth is enabled for the project or not.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Whether a password is required for email auth or not. If true, both an email and
	// password must be provided to sign in. If false, a user may sign in via either
	// email/password or email link.
	PasswordRequired *bool `json:"passwordRequired,omitempty" tf:"password_required,omitempty"`
}

type EmailObservation struct {

	// Whether phone number auth is enabled for the project or not.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Whether a password is required for email auth or not. If true, both an email and
	// password must be provided to sign in. If false, a user may sign in via either
	// email/password or email link.
	PasswordRequired *bool `json:"passwordRequired,omitempty" tf:"password_required,omitempty"`
}

type EmailParameters struct {

	// Whether phone number auth is enabled for the project or not.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Whether a password is required for email auth or not. If true, both an email and
	// password must be provided to sign in. If false, a user may sign in via either
	// email/password or email link.
	// +kubebuilder:validation:Optional
	PasswordRequired *bool `json:"passwordRequired,omitempty" tf:"password_required,omitempty"`
}

type HashConfigInitParameters struct {
}

type HashConfigObservation struct {

	// (Output)
	// Different password hash algorithms used in Identity Toolkit.
	Algorithm *string `json:"algorithm,omitempty" tf:"algorithm,omitempty"`

	// (Output)
	// Memory cost for hash calculation. Used by scrypt and other similar password derivation algorithms. See https://tools.ietf.org/html/rfc7914 for explanation of field.
	MemoryCost *float64 `json:"memoryCost,omitempty" tf:"memory_cost,omitempty"`

	// (Output)
	// How many rounds for hash calculation. Used by scrypt and other similar password derivation algorithms.
	Rounds *float64 `json:"rounds,omitempty" tf:"rounds,omitempty"`

	// (Output)
	// Non-printable character to be inserted between the salt and plain text password in base64.
	SaltSeparator *string `json:"saltSeparator,omitempty" tf:"salt_separator,omitempty"`

	// (Output)
	// Signer key in base64.
	SignerKey *string `json:"signerKey,omitempty" tf:"signer_key,omitempty"`
}

type HashConfigParameters struct {
}

type IdPCertificatesInitParameters struct {

	// (Output)
	// The x509 certificate
	X509CertificateSecretRef *v1.SecretKeySelector `json:"x509CertificateSecretRef,omitempty" tf:"-"`
}

type IdPCertificatesObservation struct {
}

type IdPCertificatesParameters struct {

	// (Output)
	// The x509 certificate
	// +kubebuilder:validation:Optional
	X509CertificateSecretRef *v1.SecretKeySelector `json:"x509CertificateSecretRef,omitempty" tf:"-"`
}

type IdPConfigIdPCertificatesInitParameters struct {

	// (Output)
	// The x509 certificate
	X509CertificateSecretRef *v1.SecretKeySelector `json:"x509CertificateSecretRef,omitempty" tf:"-"`
}

type IdPConfigIdPCertificatesObservation struct {
}

type IdPConfigIdPCertificatesParameters struct {

	// (Output)
	// The x509 certificate
	// +kubebuilder:validation:Optional
	X509CertificateSecretRef *v1.SecretKeySelector `json:"x509CertificateSecretRef,omitempty" tf:"-"`
}

type IdPConfigInitParameters struct {

	// The IdP's certificate data to verify the signature in the SAMLResponse issued by the IDP.
	// Structure is documented below.
	IdPCertificates []IdPCertificatesInitParameters `json:"idpCertificates,omitempty" tf:"idp_certificates,omitempty"`

	// Unique identifier for all SAML entities
	IdPEntityID *string `json:"idpEntityId,omitempty" tf:"idp_entity_id,omitempty"`

	// Indicates if outbounding SAMLRequest should be signed.
	SignRequest *bool `json:"signRequest,omitempty" tf:"sign_request,omitempty"`

	// URL to send Authentication request to.
	SsoURL *string `json:"ssoUrl,omitempty" tf:"sso_url,omitempty"`
}

type IdPConfigObservation struct {

	// The IdP's certificate data to verify the signature in the SAMLResponse issued by the IDP.
	// Structure is documented below.
	IdPCertificates []IdPCertificatesParameters `json:"idpCertificates,omitempty" tf:"idp_certificates,omitempty"`

	// Unique identifier for all SAML entities
	IdPEntityID *string `json:"idpEntityId,omitempty" tf:"idp_entity_id,omitempty"`

	// Indicates if outbounding SAMLRequest should be signed.
	SignRequest *bool `json:"signRequest,omitempty" tf:"sign_request,omitempty"`

	// URL to send Authentication request to.
	SsoURL *string `json:"ssoUrl,omitempty" tf:"sso_url,omitempty"`
}

type IdPConfigParameters struct {

	// The IdP's certificate data to verify the signature in the SAMLResponse issued by the IDP.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	IdPCertificates []IdPCertificatesParameters `json:"idpCertificates" tf:"idp_certificates,omitempty"`

	// Unique identifier for all SAML entities
	// +kubebuilder:validation:Optional
	IdPEntityID *string `json:"idpEntityId" tf:"idp_entity_id,omitempty"`

	// Indicates if outbounding SAMLRequest should be signed.
	// +kubebuilder:validation:Optional
	SignRequest *bool `json:"signRequest,omitempty" tf:"sign_request,omitempty"`

	// URL to send Authentication request to.
	// +kubebuilder:validation:Optional
	SsoURL *string `json:"ssoUrl" tf:"sso_url,omitempty"`
}

type InboundSAMLConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.displayName) || (has(self.initProvider) && has(self.initProvider.displayName))",message="spec.forProvider.displayName is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.idpConfig) || (has(self.initProvider) && has(self.initProvider.idpConfig))",message="spec.forProvider.idpConfig is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.name) || (has(self.initProvider) && has(self.initProvider.name))",message="spec.forProvider.name is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.spConfig) || (has(self.initProvider) && has(self.initProvider.spConfig))",message="spec.forProvider.spConfig is a required parameter"
	Spec   InboundSAMLConfigSpec   `json:"spec"`
	Status InboundSAMLConfigStatus `json:"status,omitempty"`
}

type InboundSAMLConfigInitParameters struct {

	// Human friendly display name.
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// If this config allows users to sign in with the provider.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// SAML IdP configuration when the project acts as the relying party
	// Structure is documented below.
	IdPConfig *IdPConfigInitParameters `json:"idpConfig,omitempty" tf:"idp_config,omitempty"`

	// The name of the InboundSamlConfig resource. Must start with 'saml.' and can only have alphanumeric characters,
	// hyphens, underscores or periods. The part after 'saml.' must also start with a lowercase letter, end with an
	// alphanumeric character, and have at least 2 characters.
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// SAML SP (Service Provider) configuration when the project acts as the relying party to receive
	// and accept an authentication assertion issued by a SAML identity provider.
	// Structure is documented below.
	SpConfig *SpConfigInitParameters `json:"spConfig,omitempty" tf:"sp_config,omitempty"`
}

type InboundSAMLConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []InboundSAMLConfig `json:"items"`
}

type InboundSAMLConfigObservation struct {

	// Human friendly display name.
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// If this config allows users to sign in with the provider.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// an identifier for the resource with format projects/{{project}}/inboundSamlConfigs/{{name}}
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// SAML IdP configuration when the project acts as the relying party
	// Structure is documented below.
	IdPConfig *IdPConfigObservation `json:"idpConfig,omitempty" tf:"idp_config,omitempty"`

	// The name of the InboundSamlConfig resource. Must start with 'saml.' and can only have alphanumeric characters,
	// hyphens, underscores or periods. The part after 'saml.' must also start with a lowercase letter, end with an
	// alphanumeric character, and have at least 2 characters.
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// SAML SP (Service Provider) configuration when the project acts as the relying party to receive
	// and accept an authentication assertion issued by a SAML identity provider.
	// Structure is documented below.
	SpConfig *SpConfigObservation `json:"spConfig,omitempty" tf:"sp_config,omitempty"`
}

type InboundSAMLConfigParameters struct {

	// Human friendly display name.
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// If this config allows users to sign in with the provider.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// SAML IdP configuration when the project acts as the relying party
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	IdPConfig *IdPConfigParameters `json:"idpConfig,omitempty" tf:"idp_config,omitempty"`

	// The name of the InboundSamlConfig resource. Must start with 'saml.' and can only have alphanumeric characters,
	// hyphens, underscores or periods. The part after 'saml.' must also start with a lowercase letter, end with an
	// alphanumeric character, and have at least 2 characters.
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	// +kubebuilder:validation:Optional
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// SAML SP (Service Provider) configuration when the project acts as the relying party to receive
	// and accept an authentication assertion issued by a SAML identity provider.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	SpConfig *SpConfigParameters `json:"spConfig,omitempty" tf:"sp_config,omitempty"`
}

type InboundSAMLConfigSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     InboundSAMLConfigParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider InboundSAMLConfigInitParameters `json:"initProvider,omitempty"`
}

type InboundSAMLConfigStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        InboundSAMLConfigObservation `json:"atProvider,omitempty"`
}

type PhoneNumberInitParameters struct {

	// Whether phone number auth is enabled for the project or not.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// A map of <test phone number, fake code> that can be used for phone auth testing.
	// +mapType=granular
	TestPhoneNumbers map[string]*string `json:"testPhoneNumbers,omitempty" tf:"test_phone_numbers,omitempty"`
}

type PhoneNumberObservation struct {

	// Whether phone number auth is enabled for the project or not.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// A map of <test phone number, fake code> that can be used for phone auth testing.
	// +mapType=granular
	TestPhoneNumbers map[string]*string `json:"testPhoneNumbers,omitempty" tf:"test_phone_numbers,omitempty"`
}

type PhoneNumberParameters struct {

	// Whether phone number auth is enabled for the project or not.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// A map of <test phone number, fake code> that can be used for phone auth testing.
	// +kubebuilder:validation:Optional
	// +mapType=granular
	TestPhoneNumbers map[string]*string `json:"testPhoneNumbers,omitempty" tf:"test_phone_numbers,omitempty"`
}

type ProjectDefaultConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              ProjectDefaultConfigSpec   `json:"spec"`
	Status            ProjectDefaultConfigStatus `json:"status,omitempty"`
}

type ProjectDefaultConfigInitParameters struct {

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// Configuration related to local sign in methods.
	// Structure is documented below.
	SignIn *SignInInitParameters `json:"signIn,omitempty" tf:"sign_in,omitempty"`
}

type ProjectDefaultConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ProjectDefaultConfig `json:"items"`
}

type ProjectDefaultConfigObservation struct {

	// an identifier for the resource with format {{project}}
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// The name of the Config resource. Example: "projects/my-awesome-project/config"
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// Configuration related to local sign in methods.
	// Structure is documented below.
	SignIn *SignInObservation `json:"signIn,omitempty" tf:"sign_in,omitempty"`
}

type ProjectDefaultConfigParameters struct {

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	// +kubebuilder:validation:Optional
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// Configuration related to local sign in methods.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	SignIn *SignInParameters `json:"signIn,omitempty" tf:"sign_in,omitempty"`
}

type ProjectDefaultConfigSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     ProjectDefaultConfigParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider ProjectDefaultConfigInitParameters `json:"initProvider,omitempty"`
}

type ProjectDefaultConfigStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        ProjectDefaultConfigObservation `json:"atProvider,omitempty"`
}

type SignInInitParameters struct {

	// Whether to allow more than one account to have the same email.
	AllowDuplicateEmails *bool `json:"allowDuplicateEmails,omitempty" tf:"allow_duplicate_emails,omitempty"`

	// Configuration options related to authenticating an anonymous user.
	// Structure is documented below.
	Anonymous *AnonymousInitParameters `json:"anonymous,omitempty" tf:"anonymous,omitempty"`

	// Configuration options related to authenticating a user by their email address.
	// Structure is documented below.
	Email *EmailInitParameters `json:"email,omitempty" tf:"email,omitempty"`

	// Configuration options related to authenticated a user by their phone number.
	// Structure is documented below.
	PhoneNumber *PhoneNumberInitParameters `json:"phoneNumber,omitempty" tf:"phone_number,omitempty"`
}

type SignInObservation struct {

	// Whether to allow more than one account to have the same email.
	AllowDuplicateEmails *bool `json:"allowDuplicateEmails,omitempty" tf:"allow_duplicate_emails,omitempty"`

	// Configuration options related to authenticating an anonymous user.
	// Structure is documented below.
	Anonymous *AnonymousObservation `json:"anonymous,omitempty" tf:"anonymous,omitempty"`

	// Configuration options related to authenticating a user by their email address.
	// Structure is documented below.
	Email *EmailObservation `json:"email,omitempty" tf:"email,omitempty"`

	// (Output)
	// Output only. Hash config information.
	// Structure is documented below.
	HashConfig []HashConfigObservation `json:"hashConfig,omitempty" tf:"hash_config,omitempty"`

	// Configuration options related to authenticated a user by their phone number.
	// Structure is documented below.
	PhoneNumber *PhoneNumberObservation `json:"phoneNumber,omitempty" tf:"phone_number,omitempty"`
}

type SignInParameters struct {

	// Whether to allow more than one account to have the same email.
	// +kubebuilder:validation:Optional
	AllowDuplicateEmails *bool `json:"allowDuplicateEmails,omitempty" tf:"allow_duplicate_emails,omitempty"`

	// Configuration options related to authenticating an anonymous user.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Anonymous *AnonymousParameters `json:"anonymous,omitempty" tf:"anonymous,omitempty"`

	// Configuration options related to authenticating a user by their email address.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Email *EmailParameters `json:"email,omitempty" tf:"email,omitempty"`

	// Configuration options related to authenticated a user by their phone number.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	PhoneNumber *PhoneNumberParameters `json:"phoneNumber,omitempty" tf:"phone_number,omitempty"`
}

type SpCertificatesInitParameters struct {
}

type SpCertificatesObservation struct {

	// (Output)
	// The x509 certificate
	X509Certificate *string `json:"x509Certificate,omitempty" tf:"x509_certificate,omitempty"`
}

type SpCertificatesParameters struct {
}

type SpConfigInitParameters struct {

	// Callback URI where responses from IDP are handled. Must start with https://.
	CallbackURI *string `json:"callbackUri,omitempty" tf:"callback_uri,omitempty"`

	// Unique identifier for all SAML entities.
	SpEntityID *string `json:"spEntityId,omitempty" tf:"sp_entity_id,omitempty"`
}

type SpConfigObservation struct {

	// Callback URI where responses from IDP are handled. Must start with https://.
	CallbackURI *string `json:"callbackUri,omitempty" tf:"callback_uri,omitempty"`

	// (Output)
	// The IDP's certificate data to verify the signature in the SAMLResponse issued by the IDP.
	// Structure is documented below.
	SpCertificates []SpCertificatesObservation `json:"spCertificates,omitempty" tf:"sp_certificates,omitempty"`

	// Unique identifier for all SAML entities.
	SpEntityID *string `json:"spEntityId,omitempty" tf:"sp_entity_id,omitempty"`
}

type SpConfigParameters struct {

	// Callback URI where responses from IDP are handled. Must start with https://.
	// +kubebuilder:validation:Optional
	CallbackURI *string `json:"callbackUri,omitempty" tf:"callback_uri,omitempty"`

	// Unique identifier for all SAML entities.
	// +kubebuilder:validation:Optional
	SpEntityID *string `json:"spEntityId,omitempty" tf:"sp_entity_id,omitempty"`
}

type SpConfigSpCertificatesInitParameters struct {
}

type SpConfigSpCertificatesObservation struct {

	// (Output)
	// The x509 certificate
	X509Certificate *string `json:"x509Certificate,omitempty" tf:"x509_certificate,omitempty"`
}

type SpConfigSpCertificatesParameters struct {
}

type TenantInboundSAMLConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.displayName) || (has(self.initProvider) && has(self.initProvider.displayName))",message="spec.forProvider.displayName is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.idpConfig) || (has(self.initProvider) && has(self.initProvider.idpConfig))",message="spec.forProvider.idpConfig is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.name) || (has(self.initProvider) && has(self.initProvider.name))",message="spec.forProvider.name is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.spConfig) || (has(self.initProvider) && has(self.initProvider.spConfig))",message="spec.forProvider.spConfig is a required parameter"
	Spec   TenantInboundSAMLConfigSpec   `json:"spec"`
	Status TenantInboundSAMLConfigStatus `json:"status,omitempty"`
}

type TenantInboundSAMLConfigIdPConfigInitParameters struct {

	// The IDP's certificate data to verify the signature in the SAMLResponse issued by the IDP.
	// Structure is documented below.
	IdPCertificates []IdPConfigIdPCertificatesInitParameters `json:"idpCertificates,omitempty" tf:"idp_certificates,omitempty"`

	// Unique identifier for all SAML entities
	IdPEntityID *string `json:"idpEntityId,omitempty" tf:"idp_entity_id,omitempty"`

	// Indicates if outbounding SAMLRequest should be signed.
	SignRequest *bool `json:"signRequest,omitempty" tf:"sign_request,omitempty"`

	// URL to send Authentication request to.
	SsoURL *string `json:"ssoUrl,omitempty" tf:"sso_url,omitempty"`
}

type TenantInboundSAMLConfigIdPConfigObservation struct {

	// The IDP's certificate data to verify the signature in the SAMLResponse issued by the IDP.
	// Structure is documented below.
	IdPCertificates []IdPConfigIdPCertificatesParameters `json:"idpCertificates,omitempty" tf:"idp_certificates,omitempty"`

	// Unique identifier for all SAML entities
	IdPEntityID *string `json:"idpEntityId,omitempty" tf:"idp_entity_id,omitempty"`

	// Indicates if outbounding SAMLRequest should be signed.
	SignRequest *bool `json:"signRequest,omitempty" tf:"sign_request,omitempty"`

	// URL to send Authentication request to.
	SsoURL *string `json:"ssoUrl,omitempty" tf:"sso_url,omitempty"`
}

type TenantInboundSAMLConfigIdPConfigParameters struct {

	// The IDP's certificate data to verify the signature in the SAMLResponse issued by the IDP.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	IdPCertificates []IdPConfigIdPCertificatesParameters `json:"idpCertificates" tf:"idp_certificates,omitempty"`

	// Unique identifier for all SAML entities
	// +kubebuilder:validation:Optional
	IdPEntityID *string `json:"idpEntityId" tf:"idp_entity_id,omitempty"`

	// Indicates if outbounding SAMLRequest should be signed.
	// +kubebuilder:validation:Optional
	SignRequest *bool `json:"signRequest,omitempty" tf:"sign_request,omitempty"`

	// URL to send Authentication request to.
	// +kubebuilder:validation:Optional
	SsoURL *string `json:"ssoUrl" tf:"sso_url,omitempty"`
}

type TenantInboundSAMLConfigInitParameters struct {

	// Human friendly display name.
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// If this config allows users to sign in with the provider.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// SAML IdP configuration when the project acts as the relying party
	// Structure is documented below.
	IdPConfig *TenantInboundSAMLConfigIdPConfigInitParameters `json:"idpConfig,omitempty" tf:"idp_config,omitempty"`

	// The name of the InboundSamlConfig resource. Must start with 'saml.' and can only have alphanumeric characters,
	// hyphens, underscores or periods. The part after 'saml.' must also start with a lowercase letter, end with an
	// alphanumeric character, and have at least 2 characters.
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// SAML SP (Service Provider) configuration when the project acts as the relying party to receive
	// and accept an authentication assertion issued by a SAML identity provider.
	// Structure is documented below.
	SpConfig *TenantInboundSAMLConfigSpConfigInitParameters `json:"spConfig,omitempty" tf:"sp_config,omitempty"`

	// The name of the tenant where this inbound SAML config resource exists
	// +crossplane:generate:reference:type=github.com/tampakrap/provider-upjet-gcp-beta/apis/identityplatform/v1beta1.Tenant
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractParamPath("name",true)
	Tenant *string `json:"tenant,omitempty" tf:"tenant,omitempty"`

	// Reference to a Tenant in identityplatform to populate tenant.
	// +kubebuilder:validation:Optional
	TenantRef *v1.Reference `json:"tenantRef,omitempty" tf:"-"`

	// Selector for a Tenant in identityplatform to populate tenant.
	// +kubebuilder:validation:Optional
	TenantSelector *v1.Selector `json:"tenantSelector,omitempty" tf:"-"`
}

type TenantInboundSAMLConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TenantInboundSAMLConfig `json:"items"`
}

type TenantInboundSAMLConfigObservation struct {

	// Human friendly display name.
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// If this config allows users to sign in with the provider.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// an identifier for the resource with format projects/{{project}}/tenants/{{tenant}}/inboundSamlConfigs/{{name}}
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// SAML IdP configuration when the project acts as the relying party
	// Structure is documented below.
	IdPConfig *TenantInboundSAMLConfigIdPConfigObservation `json:"idpConfig,omitempty" tf:"idp_config,omitempty"`

	// The name of the InboundSamlConfig resource. Must start with 'saml.' and can only have alphanumeric characters,
	// hyphens, underscores or periods. The part after 'saml.' must also start with a lowercase letter, end with an
	// alphanumeric character, and have at least 2 characters.
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// SAML SP (Service Provider) configuration when the project acts as the relying party to receive
	// and accept an authentication assertion issued by a SAML identity provider.
	// Structure is documented below.
	SpConfig *TenantInboundSAMLConfigSpConfigObservation `json:"spConfig,omitempty" tf:"sp_config,omitempty"`

	// The name of the tenant where this inbound SAML config resource exists
	Tenant *string `json:"tenant,omitempty" tf:"tenant,omitempty"`
}

type TenantInboundSAMLConfigParameters struct {

	// Human friendly display name.
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// If this config allows users to sign in with the provider.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// SAML IdP configuration when the project acts as the relying party
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	IdPConfig *TenantInboundSAMLConfigIdPConfigParameters `json:"idpConfig,omitempty" tf:"idp_config,omitempty"`

	// The name of the InboundSamlConfig resource. Must start with 'saml.' and can only have alphanumeric characters,
	// hyphens, underscores or periods. The part after 'saml.' must also start with a lowercase letter, end with an
	// alphanumeric character, and have at least 2 characters.
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	// +kubebuilder:validation:Optional
	Project *string `json:"project,omitempty" tf:"project,omitempty"`

	// SAML SP (Service Provider) configuration when the project acts as the relying party to receive
	// and accept an authentication assertion issued by a SAML identity provider.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	SpConfig *TenantInboundSAMLConfigSpConfigParameters `json:"spConfig,omitempty" tf:"sp_config,omitempty"`

	// The name of the tenant where this inbound SAML config resource exists
	// +crossplane:generate:reference:type=github.com/tampakrap/provider-upjet-gcp-beta/apis/identityplatform/v1beta1.Tenant
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractParamPath("name",true)
	// +kubebuilder:validation:Optional
	Tenant *string `json:"tenant,omitempty" tf:"tenant,omitempty"`

	// Reference to a Tenant in identityplatform to populate tenant.
	// +kubebuilder:validation:Optional
	TenantRef *v1.Reference `json:"tenantRef,omitempty" tf:"-"`

	// Selector for a Tenant in identityplatform to populate tenant.
	// +kubebuilder:validation:Optional
	TenantSelector *v1.Selector `json:"tenantSelector,omitempty" tf:"-"`
}

type TenantInboundSAMLConfigSpConfigInitParameters struct {

	// Callback URI where responses from IDP are handled. Must start with https://.
	CallbackURI *string `json:"callbackUri,omitempty" tf:"callback_uri,omitempty"`

	// Unique identifier for all SAML entities.
	SpEntityID *string `json:"spEntityId,omitempty" tf:"sp_entity_id,omitempty"`
}

type TenantInboundSAMLConfigSpConfigObservation struct {

	// Callback URI where responses from IDP are handled. Must start with https://.
	CallbackURI *string `json:"callbackUri,omitempty" tf:"callback_uri,omitempty"`

	// (Output)
	// The IDP's certificate data to verify the signature in the SAMLResponse issued by the IDP.
	// Structure is documented below.
	SpCertificates []SpConfigSpCertificatesObservation `json:"spCertificates,omitempty" tf:"sp_certificates,omitempty"`

	// Unique identifier for all SAML entities.
	SpEntityID *string `json:"spEntityId,omitempty" tf:"sp_entity_id,omitempty"`
}

type TenantInboundSAMLConfigSpConfigParameters struct {

	// Callback URI where responses from IDP are handled. Must start with https://.
	// +kubebuilder:validation:Optional
	CallbackURI *string `json:"callbackUri" tf:"callback_uri,omitempty"`

	// Unique identifier for all SAML entities.
	// +kubebuilder:validation:Optional
	SpEntityID *string `json:"spEntityId" tf:"sp_entity_id,omitempty"`
}

type TenantInboundSAMLConfigSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     TenantInboundSAMLConfigParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider TenantInboundSAMLConfigInitParameters `json:"initProvider,omitempty"`
}

type TenantInboundSAMLConfigStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        TenantInboundSAMLConfigObservation `json:"atProvider,omitempty"`
}