Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Authentik Provider
  3. API Docs
  4. Application
authentik 2025.2.0 published on Monday, Mar 24, 2025 by goauthentik
goauthentik/terraform-provider-authentik

authentik.Application

Explore with Pulumi AI

authentik 2025.2.0 published on Monday, Mar 24, 2025 by goauthentik
goauthentik/terraform-provider-authentik

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as authentik from "@pulumi/authentik";

const default_authorization_flow = authentik.getFlow({
    slug: "default-provider-authorization-implicit-consent",
});
const nameProviderOauth2 = new authentik.ProviderOauth2("nameProviderOauth2", {
    clientId: "example-app",
    clientSecret: "test",
    authorizationFlow: default_authorization_flow.then(default_authorization_flow => default_authorization_flow.id),
});
const policy = new authentik.PolicyExpression("policy", {expression: "return True"});
const nameApplication = new authentik.Application("nameApplication", {
    slug: "example-app",
    protocolProvider: nameProviderOauth2.providerOauth2Id,
});
const app_access = new authentik.PolicyBinding("app-access", {
    target: nameApplication.uuid,
    policy: policy.policyExpressionId,
    order: 0,
});
Copy
import pulumi
import pulumi_authentik as authentik

default_authorization_flow = authentik.get_flow(slug="default-provider-authorization-implicit-consent")
name_provider_oauth2 = authentik.ProviderOauth2("nameProviderOauth2",
    client_id="example-app",
    client_secret="test",
    authorization_flow=default_authorization_flow.id)
policy = authentik.PolicyExpression("policy", expression="return True")
name_application = authentik.Application("nameApplication",
    slug="example-app",
    protocol_provider=name_provider_oauth2.provider_oauth2_id)
app_access = authentik.PolicyBinding("app-access",
    target=name_application.uuid,
    policy=policy.policy_expression_id,
    order=0)
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/authentik/v2025/authentik"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		default_authorization_flow, err := authentik.LookupFlow(ctx, &authentik.LookupFlowArgs{
			Slug: pulumi.StringRef("default-provider-authorization-implicit-consent"),
		}, nil)
		if err != nil {
			return err
		}
		nameProviderOauth2, err := authentik.NewProviderOauth2(ctx, "nameProviderOauth2", &authentik.ProviderOauth2Args{
			ClientId:          pulumi.String("example-app"),
			ClientSecret:      pulumi.String("test"),
			AuthorizationFlow: pulumi.String(default_authorization_flow.Id),
		})
		if err != nil {
			return err
		}
		policy, err := authentik.NewPolicyExpression(ctx, "policy", &authentik.PolicyExpressionArgs{
			Expression: pulumi.String("return True"),
		})
		if err != nil {
			return err
		}
		nameApplication, err := authentik.NewApplication(ctx, "nameApplication", &authentik.ApplicationArgs{
			Slug:             pulumi.String("example-app"),
			ProtocolProvider: nameProviderOauth2.ProviderOauth2Id,
		})
		if err != nil {
			return err
		}
		_, err = authentik.NewPolicyBinding(ctx, "app-access", &authentik.PolicyBindingArgs{
			Target: nameApplication.Uuid,
			Policy: policy.PolicyExpressionId,
			Order:  pulumi.Float64(0),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Authentik = Pulumi.Authentik;

return await Deployment.RunAsync(() => 
{
    var default_authorization_flow = Authentik.GetFlow.Invoke(new()
    {
        Slug = "default-provider-authorization-implicit-consent",
    });

    var nameProviderOauth2 = new Authentik.ProviderOauth2("nameProviderOauth2", new()
    {
        ClientId = "example-app",
        ClientSecret = "test",
        AuthorizationFlow = default_authorization_flow.Apply(default_authorization_flow => default_authorization_flow.Apply(getFlowResult => getFlowResult.Id)),
    });

    var policy = new Authentik.PolicyExpression("policy", new()
    {
        Expression = "return True",
    });

    var nameApplication = new Authentik.Application("nameApplication", new()
    {
        Slug = "example-app",
        ProtocolProvider = nameProviderOauth2.ProviderOauth2Id,
    });

    var app_access = new Authentik.PolicyBinding("app-access", new()
    {
        Target = nameApplication.Uuid,
        Policy = policy.PolicyExpressionId,
        Order = 0,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.authentik.AuthentikFunctions;
import com.pulumi.authentik.inputs.GetFlowArgs;
import com.pulumi.authentik.ProviderOauth2;
import com.pulumi.authentik.ProviderOauth2Args;
import com.pulumi.authentik.PolicyExpression;
import com.pulumi.authentik.PolicyExpressionArgs;
import com.pulumi.authentik.Application;
import com.pulumi.authentik.ApplicationArgs;
import com.pulumi.authentik.PolicyBinding;
import com.pulumi.authentik.PolicyBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var default-authorization-flow = AuthentikFunctions.getFlow(GetFlowArgs.builder()
            .slug("default-provider-authorization-implicit-consent")
            .build());

        var nameProviderOauth2 = new ProviderOauth2("nameProviderOauth2", ProviderOauth2Args.builder()
            .clientId("example-app")
            .clientSecret("test")
            .authorizationFlow(default_authorization_flow.id())
            .build());

        var policy = new PolicyExpression("policy", PolicyExpressionArgs.builder()
            .expression("return True")
            .build());

        var nameApplication = new Application("nameApplication", ApplicationArgs.builder()
            .slug("example-app")
            .protocolProvider(nameProviderOauth2.providerOauth2Id())
            .build());

        var app_access = new PolicyBinding("app-access", PolicyBindingArgs.builder()
            .target(nameApplication.uuid())
            .policy(policy.policyExpressionId())
            .order(0)
            .build());

    }
}
Copy
resources:
  nameProviderOauth2:
    type: authentik:ProviderOauth2
    properties:
      clientId: example-app
      clientSecret: test
      authorizationFlow: ${["default-authorization-flow"].id}
  policy:
    type: authentik:PolicyExpression
    properties:
      expression: return True
  app-access:
    type: authentik:PolicyBinding
    properties:
      target: ${nameApplication.uuid}
      policy: ${policy.policyExpressionId}
      order: 0
  nameApplication:
    type: authentik:Application
    properties:
      slug: example-app
      protocolProvider: ${nameProviderOauth2.providerOauth2Id}
variables:
  default-authorization-flow:
    fn::invoke:
      function: authentik:getFlow
      arguments:
        slug: default-provider-authorization-implicit-consent
Copy

Create Application Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Application(name: string, args: ApplicationArgs, opts?: CustomResourceOptions);
@overload
def Application(resource_name: str,
                args: ApplicationArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def Application(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                slug: Optional[str] = None,
                meta_publisher: Optional[str] = None,
                group: Optional[str] = None,
                meta_description: Optional[str] = None,
                meta_icon: Optional[str] = None,
                meta_launch_url: Optional[str] = None,
                application_id: Optional[str] = None,
                name: Optional[str] = None,
                open_in_new_tab: Optional[bool] = None,
                policy_engine_mode: Optional[str] = None,
                protocol_provider: Optional[float] = None,
                backchannel_providers: Optional[Sequence[float]] = None,
                uuid: Optional[str] = None)
func NewApplication(ctx *Context, name string, args ApplicationArgs, opts ...ResourceOption) (*Application, error)
public Application(string name, ApplicationArgs args, CustomResourceOptions? opts = null)
public Application(String name, ApplicationArgs args)
public Application(String name, ApplicationArgs args, CustomResourceOptions options)

type: authentik:Application
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var applicationResource = new Authentik.Application("applicationResource", new()
{
    Slug = "string",
    MetaPublisher = "string",
    Group = "string",
    MetaDescription = "string",
    MetaIcon = "string",
    MetaLaunchUrl = "string",
    ApplicationId = "string",
    Name = "string",
    OpenInNewTab = false,
    PolicyEngineMode = "string",
    ProtocolProvider = 0,
    BackchannelProviders = new[]
    {
        0,
    },
    Uuid = "string",
});
Copy
example, err := authentik.NewApplication(ctx, "applicationResource", &authentik.ApplicationArgs{
	Slug:             pulumi.String("string"),
	MetaPublisher:    pulumi.String("string"),
	Group:            pulumi.String("string"),
	MetaDescription:  pulumi.String("string"),
	MetaIcon:         pulumi.String("string"),
	MetaLaunchUrl:    pulumi.String("string"),
	ApplicationId:    pulumi.String("string"),
	Name:             pulumi.String("string"),
	OpenInNewTab:     pulumi.Bool(false),
	PolicyEngineMode: pulumi.String("string"),
	ProtocolProvider: pulumi.Float64(0),
	BackchannelProviders: pulumi.Float64Array{
		pulumi.Float64(0),
	},
	Uuid: pulumi.String("string"),
})
Copy
var applicationResource = new Application("applicationResource", ApplicationArgs.builder()
    .slug("string")
    .metaPublisher("string")
    .group("string")
    .metaDescription("string")
    .metaIcon("string")
    .metaLaunchUrl("string")
    .applicationId("string")
    .name("string")
    .openInNewTab(false)
    .policyEngineMode("string")
    .protocolProvider(0)
    .backchannelProviders(0)
    .uuid("string")
    .build());
Copy
application_resource = authentik.Application("applicationResource",
    slug="string",
    meta_publisher="string",
    group="string",
    meta_description="string",
    meta_icon="string",
    meta_launch_url="string",
    application_id="string",
    name="string",
    open_in_new_tab=False,
    policy_engine_mode="string",
    protocol_provider=0,
    backchannel_providers=[0],
    uuid="string")
Copy
const applicationResource = new authentik.Application("applicationResource", {
    slug: "string",
    metaPublisher: "string",
    group: "string",
    metaDescription: "string",
    metaIcon: "string",
    metaLaunchUrl: "string",
    applicationId: "string",
    name: "string",
    openInNewTab: false,
    policyEngineMode: "string",
    protocolProvider: 0,
    backchannelProviders: [0],
    uuid: "string",
});
Copy
type: authentik:Application
properties:
    applicationId: string
    backchannelProviders:
        - 0
    group: string
    metaDescription: string
    metaIcon: string
    metaLaunchUrl: string
    metaPublisher: string
    name: string
    openInNewTab: false
    policyEngineMode: string
    protocolProvider: 0
    slug: string
    uuid: string
Copy

Application Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Application resource accepts the following input properties:

Slug This property is required. string
ApplicationId string
BackchannelProviders List<double>
Group string
MetaDescription string
MetaIcon string
MetaLaunchUrl string
MetaPublisher string
Name string
OpenInNewTab bool
Defaults to false.
PolicyEngineMode string
Allowed values: - all - any Defaults to any.
ProtocolProvider double
Uuid string
Generated.
Slug This property is required. string
ApplicationId string
BackchannelProviders []float64
Group string
MetaDescription string
MetaIcon string
MetaLaunchUrl string
MetaPublisher string
Name string
OpenInNewTab bool
Defaults to false.
PolicyEngineMode string
Allowed values: - all - any Defaults to any.
ProtocolProvider float64
Uuid string
Generated.
slug This property is required. String
applicationId String
backchannelProviders List<Double>
group String
metaDescription String
metaIcon String
metaLaunchUrl String
metaPublisher String
name String
openInNewTab Boolean
Defaults to false.
policyEngineMode String
Allowed values: - all - any Defaults to any.
protocolProvider Double
uuid String
Generated.
slug This property is required. string
applicationId string
backchannelProviders number[]
group string
metaDescription string
metaIcon string
metaLaunchUrl string
metaPublisher string
name string
openInNewTab boolean
Defaults to false.
policyEngineMode string
Allowed values: - all - any Defaults to any.
protocolProvider number
uuid string
Generated.
slug This property is required. str
application_id str
backchannel_providers Sequence[float]
group str
meta_description str
meta_icon str
meta_launch_url str
meta_publisher str
name str
open_in_new_tab bool
Defaults to false.
policy_engine_mode str
Allowed values: - all - any Defaults to any.
protocol_provider float
uuid str
Generated.
slug This property is required. String
applicationId String
backchannelProviders List<Number>
group String
metaDescription String
metaIcon String
metaLaunchUrl String
metaPublisher String
name String
openInNewTab Boolean
Defaults to false.
policyEngineMode String
Allowed values: - all - any Defaults to any.
protocolProvider Number
uuid String
Generated.

Outputs

All input properties are implicitly available as output properties. Additionally, the Application resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing Application Resource

Get an existing Application resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ApplicationState, opts?: CustomResourceOptions): Application
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        application_id: Optional[str] = None,
        backchannel_providers: Optional[Sequence[float]] = None,
        group: Optional[str] = None,
        meta_description: Optional[str] = None,
        meta_icon: Optional[str] = None,
        meta_launch_url: Optional[str] = None,
        meta_publisher: Optional[str] = None,
        name: Optional[str] = None,
        open_in_new_tab: Optional[bool] = None,
        policy_engine_mode: Optional[str] = None,
        protocol_provider: Optional[float] = None,
        slug: Optional[str] = None,
        uuid: Optional[str] = None) -> Application
func GetApplication(ctx *Context, name string, id IDInput, state *ApplicationState, opts ...ResourceOption) (*Application, error)
public static Application Get(string name, Input<string> id, ApplicationState? state, CustomResourceOptions? opts = null)
public static Application get(String name, Output<String> id, ApplicationState state, CustomResourceOptions options)
resources:  _:    type: authentik:Application    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
ApplicationId string
BackchannelProviders List<double>
Group string
MetaDescription string
MetaIcon string
MetaLaunchUrl string
MetaPublisher string
Name string
OpenInNewTab bool
Defaults to false.
PolicyEngineMode string
Allowed values: - all - any Defaults to any.
ProtocolProvider double
Slug string
Uuid string
Generated.
ApplicationId string
BackchannelProviders []float64
Group string
MetaDescription string
MetaIcon string
MetaLaunchUrl string
MetaPublisher string
Name string
OpenInNewTab bool
Defaults to false.
PolicyEngineMode string
Allowed values: - all - any Defaults to any.
ProtocolProvider float64
Slug string
Uuid string
Generated.
applicationId String
backchannelProviders List<Double>
group String
metaDescription String
metaIcon String
metaLaunchUrl String
metaPublisher String
name String
openInNewTab Boolean
Defaults to false.
policyEngineMode String
Allowed values: - all - any Defaults to any.
protocolProvider Double
slug String
uuid String
Generated.
applicationId string
backchannelProviders number[]
group string
metaDescription string
metaIcon string
metaLaunchUrl string
metaPublisher string
name string
openInNewTab boolean
Defaults to false.
policyEngineMode string
Allowed values: - all - any Defaults to any.
protocolProvider number
slug string
uuid string
Generated.
application_id str
backchannel_providers Sequence[float]
group str
meta_description str
meta_icon str
meta_launch_url str
meta_publisher str
name str
open_in_new_tab bool
Defaults to false.
policy_engine_mode str
Allowed values: - all - any Defaults to any.
protocol_provider float
slug str
uuid str
Generated.
applicationId String
backchannelProviders List<Number>
group String
metaDescription String
metaIcon String
metaLaunchUrl String
metaPublisher String
name String
openInNewTab Boolean
Defaults to false.
policyEngineMode String
Allowed values: - all - any Defaults to any.
protocolProvider Number
slug String
uuid String
Generated.

Package Details

Repository
authentik goauthentik/terraform-provider-authentik
License
Notes
This Pulumi package is based on the authentik Terraform Provider.
authentik 2025.2.0 published on Monday, Mar 24, 2025 by goauthentik
goauthentik/terraform-provider-authentik