You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@monde When there are changes made to okta_idp_oidc resource, and there is a corresponding attribute set to OVERRIDE from this IDP, the OVERRIDE status is lost on the attribute and switches to Inherit from Profile Source.
Root Cause
The Terraform provider is making updates to the IDP without the status parameter on the body and hence, it deactivates the existing IDP. It then makes a subsequent API call to activate the IDP. During the deactivation, the attribute set to be OVERRIDDEN is switched to Inherit from Profile Source automatically as the IDP no longer exists
Logs
During updates, it sends a PUT without status as "ACTIVE" and hence it deactivates the IDP in Okta
I believe that the Go SDK supports passing the status on the body of the request but the Terraform provider is not leveraging that and instead making a separate call to activate/deactivate after the initial update. Please fix this as this is critical for a customer Go-Live and any changes to the IDP through Terraform breaks the attribute sourced by it.
The text was updated successfully, but these errors were encountered:
@monde When there are changes made to
okta_idp_oidc
resource, and there is a corresponding attribute set to OVERRIDE from this IDP, the OVERRIDE status is lost on the attribute and switches to Inherit from Profile Source.Root Cause
The Terraform provider is making updates to the IDP without the status parameter on the body and hence, it deactivates the existing IDP. It then makes a subsequent API call to activate the IDP. During the deactivation, the attribute set to be OVERRIDDEN is switched to Inherit from Profile Source automatically as the IDP no longer exists
Logs
During updates, it sends a PUT without status as "ACTIVE" and hence it deactivates the IDP in Okta
It then makes a call to activate the IDP
I believe that the Go SDK supports passing the status on the body of the request but the Terraform provider is not leveraging that and instead making a separate call to activate/deactivate after the initial update. Please fix this as this is critical for a customer Go-Live and any changes to the IDP through Terraform breaks the attribute sourced by it.
The text was updated successfully, but these errors were encountered: