adding app registration module

This commit is contained in:
2025-11-28 11:13:25 -06:00
parent fdc3d7d90b
commit cc12a3603a
2 changed files with 16 additions and 11 deletions

View File

@@ -2,7 +2,7 @@ terraform {
required_providers { required_providers {
azuread = { azuread = {
source = "hashicorp/azuread" source = "hashicorp/azuread"
configuration_aliases = [ entra ] configuration_aliases = [ azuread.entra ]
} }
} }
} }

View File

@@ -9,21 +9,23 @@ variable "id_token_issuance_enabled" {
} }
variable "additional_resource_access" { variable "additional_resource_access" {
type = optional(list(object({ default = null
type = list(object({
id = string id = string
type = string type = string
}))) }))
} }
variable "app_roles" { variable "app_roles" {
type = optional(list(object({ default = null
type = list(object({
allowed_member_types = list(string) allowed_member_types = list(string)
description = string description = string
display_name = string display_name = string
enabled = bool enabled = bool
id = string id = string
value = string value = string
}))) }))
} }
variable "app_reg_name" { variable "app_reg_name" {
@@ -50,13 +52,14 @@ variable "destination" {
} }
variable "federated_identity_credential" { variable "federated_identity_credential" {
type = optional(object({ default = null
type = object({
display_name = string display_name = string
description = string description = string
audiences = list(string) audiences = list(string)
issuer = string issuer = string
subject = string subject = string
})) })
} }
variable "enable_identifier_uri" { variable "enable_identifier_uri" {
@@ -65,7 +68,8 @@ variable "enable_identifier_uri" {
} }
variable "oauth2_permission_scopes" { variable "oauth2_permission_scopes" {
type = optional(list(object({ default = null
type = list(object({
admin_consent_description = string admin_consent_description = string
admin_consent_display_name = string admin_consent_display_name = string
enabled = bool enabled = bool
@@ -74,14 +78,15 @@ variable "oauth2_permission_scopes" {
user_consent_description = string user_consent_description = string
user_consent_display_name = string user_consent_display_name = string
value = string value = string
}))) }))
} }
variable "secret" { variable "secret" {
type = optional(object({ default = null
type = object({
display_name = string display_name = string
end_date = optional(string) end_date = optional(string)
})) })
} }
variable "redirect_uris" { variable "redirect_uris" {