# okta Dialect

See which types this Dialect interprets and which architectural facts its Rules can establish.

<!-- Generated by scripts/generate-provider-coverage.ts from official Dialect sources. -->

<details>
<summary>Version and compatibility</summary>

**Version:** `0.1.0`.

**Provider bindings and declared compatibility**

- `okta/okta`: `= 7.0.0`.

[All official Dialects](https://docs.rootform.dev/reference/provider-coverage/)

</details>

## Interpreted types

Each row identifies a type and instance kind. Conditional Rules retain their individual conditions in the details below.

| Terraform type | Kind | Classification | Rules |
| --- | --- | --- | --- |
| `okta_api_service_integration` | `data` | [`identity-application`](#okta-concept-identity-application) | [`api-service-integration-lookup`](#rule-api-service-integration-lookup) |
| `okta_api_service_integration` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`api-service-integration`](#rule-api-service-integration) |
| `okta_app_access_policy_assignment` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-access-policy-assignment`](#rule-app-access-policy-assignment) |
| `okta_app_auto_login` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-auto-login`](#rule-app-auto-login) |
| `okta_app_basic_auth` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-basic-auth`](#rule-app-basic-auth) |
| `okta_app_bookmark` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-bookmark`](#rule-app-bookmark) |
| `okta_app_connection` | `data` | [`provisioning-connection`](#okta-concept-provisioning-connection) | [`app-connection-lookup`](#rule-app-connection-lookup) |
| `okta_app_connection` | `resource` | [`provisioning-connection`](#okta-concept-provisioning-connection) | [`app-connection`](#rule-app-connection) |
| `okta_app_features` | `data` | [`application-configuration`](#okta-concept-application-configuration) | [`app-features-lookup`](#rule-app-features-lookup) |
| `okta_app_features` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-features`](#rule-app-features) |
| `okta_app_federated_claim` | `data` | [`application-configuration`](#okta-concept-application-configuration) | [`app-federated-claim-lookup`](#rule-app-federated-claim-lookup) |
| `okta_app_federated_claim` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-federated-claim`](#rule-app-federated-claim) |
| `okta_app_oauth_api_scope` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-oauth-api-scope`](#rule-app-oauth-api-scope) |
| `okta_app_oauth_post_logout_redirect_uri` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-oauth-post-logout-redirect-uri`](#rule-app-oauth-post-logout-redirect-uri) |
| `okta_app_oauth_redirect_uri` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-oauth-redirect-uri`](#rule-app-oauth-redirect-uri) |
| `okta_app_oauth` | `data` | [`identity-application`](#okta-concept-identity-application) | [`app-oauth-lookup`](#rule-app-oauth-lookup) |
| `okta_app_oauth` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-oauth`](#rule-app-oauth) |
| `okta_app_saml_app_settings` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-saml-app-settings`](#rule-app-saml-app-settings) |
| `okta_app_saml` | `data` | [`identity-application`](#okta-concept-identity-application) | [`app-saml-lookup`](#rule-app-saml-lookup) |
| `okta_app_saml` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-saml`](#rule-app-saml) |
| `okta_app_secure_password_store` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-secure-password-store`](#rule-app-secure-password-store) |
| `okta_app_shared_credentials` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-shared-credentials`](#rule-app-shared-credentials) |
| `okta_app_sign_on_policy_rule` | `data` | [`application-configuration`](#okta-concept-application-configuration) | [`app-sign-on-policy-rule-lookup`](#rule-app-sign-on-policy-rule-lookup) |
| `okta_app_signon_policy_rule` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-signon-policy-rule`](#rule-app-signon-policy-rule) |
| `okta_app_signon_policy` | `data` | [`application-configuration`](#okta-concept-application-configuration) | [`app-signon-policy-lookup`](#rule-app-signon-policy-lookup) |
| `okta_app_signon_policy` | `resource` | [`application-configuration`](#okta-concept-application-configuration) | [`app-signon-policy`](#rule-app-signon-policy) |
| `okta_app_swa` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-swa`](#rule-app-swa) |
| `okta_app_three_field` | `resource` | [`identity-application`](#okta-concept-identity-application) | [`app-three-field`](#rule-app-three-field) |
| `okta_app` | `data` | [`identity-application`](#okta-concept-identity-application) | [`app-lookup`](#rule-app-lookup) |
| `okta_auth_server_claim_default` | `resource` | [`authorization-server-configuration`](#okta-concept-authorization-server-configuration) | [`auth-server-claim-default`](#rule-auth-server-claim-default) |
| `okta_auth_server_claim` | `data` | [`authorization-server-configuration`](#okta-concept-authorization-server-configuration) | [`auth-server-claim-lookup`](#rule-auth-server-claim-lookup) |
| `okta_auth_server_claim` | `resource` | [`authorization-server-configuration`](#okta-concept-authorization-server-configuration) | [`auth-server-claim`](#rule-auth-server-claim) |
| `okta_auth_server_default` | `resource` | [`authorization-server`](#okta-concept-authorization-server) | [`auth-server-default`](#rule-auth-server-default) |
| `okta_auth_server_policy_rule` | `resource` | [`authorization-server-configuration`](#okta-concept-authorization-server-configuration) | [`auth-server-policy-rule`](#rule-auth-server-policy-rule) |
| `okta_auth_server_policy` | `data` | [`authorization-server-configuration`](#okta-concept-authorization-server-configuration) | [`auth-server-policy-lookup`](#rule-auth-server-policy-lookup) |
| `okta_auth_server_policy` | `resource` | [`authorization-server-configuration`](#okta-concept-authorization-server-configuration) | [`auth-server-policy`](#rule-auth-server-policy) |
| `okta_auth_server_scope` | `resource` | [`authorization-server-configuration`](#okta-concept-authorization-server-configuration) | [`auth-server-scope`](#rule-auth-server-scope) |
| `okta_auth_server` | `data` | [`authorization-server`](#okta-concept-authorization-server) | [`auth-server-lookup`](#rule-auth-server-lookup) |
| `okta_auth_server` | `resource` | [`authorization-server`](#okta-concept-authorization-server) | [`auth-server`](#rule-auth-server) |
| `okta_authenticator_method_webauthn` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`authenticator-method-webauthn-lookup`](#rule-authenticator-method-webauthn-lookup) |
| `okta_authenticator_method_webauthn` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`authenticator-method-webauthn`](#rule-authenticator-method-webauthn) |
| `okta_authenticator_webauthn_custom_aaguid` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`authenticator-webauthn-custom-aaguid`](#rule-authenticator-webauthn-custom-aaguid) |
| `okta_authenticator_webauthn_custom_aaguids` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`authenticator-webauthn-custom-aaguids-lookup`](#rule-authenticator-webauthn-custom-aaguids-lookup) |
| `okta_authenticator` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`authenticator-lookup`](#rule-authenticator-lookup) |
| `okta_authenticator` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`authenticator`](#rule-authenticator) |
| `okta_behavior` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`behavior-lookup`](#rule-behavior-lookup) |
| `okta_behavior` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`behavior`](#rule-behavior) |
| `okta_captcha` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`captcha-lookup`](#rule-captcha-lookup) |
| `okta_captcha` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`captcha`](#rule-captcha) |
| `okta_domain_certificate` | `resource` | [`domain-configuration`](#okta-concept-domain-configuration) | [`domain-certificate`](#rule-domain-certificate) |
| `okta_domain_verification` | `resource` | [`domain-configuration`](#okta-concept-domain-configuration) | [`domain-verification`](#rule-domain-verification) |
| `okta_domain` | `data` | [`identity-domain`](#okta-concept-identity-domain) | [`domain-lookup`](#rule-domain-lookup) |
| `okta_domain` | `resource` | [`identity-domain`](#okta-concept-identity-domain) | [`domain`](#rule-domain) |
| `okta_event_hook_verification` | `resource` | [`hook-configuration`](#okta-concept-hook-configuration) | [`event-hook-verification`](#rule-event-hook-verification) |
| `okta_event_hook` | `resource` | [`identity-event-extension`](#okta-concept-identity-event-extension) | [`event-hook`](#rule-event-hook) |
| `okta_hook_key` | `data` | [`hook-configuration`](#okta-concept-hook-configuration) | [`hook-key-lookup`](#rule-hook-key-lookup) |
| `okta_hook_key` | `resource` | [`hook-configuration`](#okta-concept-hook-configuration) | [`hook-key`](#rule-hook-key) |
| `okta_idp_oidc` | `data` | [`external-identity-provider`](#okta-concept-external-identity-provider) | [`idp-oidc-lookup`](#rule-idp-oidc-lookup) |
| `okta_idp_oidc` | `resource` | [`external-identity-provider`](#okta-concept-external-identity-provider) | [`idp-oidc`](#rule-idp-oidc) |
| `okta_idp_saml` | `data` | [`external-identity-provider`](#okta-concept-external-identity-provider) | [`idp-saml-lookup`](#rule-idp-saml-lookup) |
| `okta_idp_saml` | `resource` | [`external-identity-provider`](#okta-concept-external-identity-provider) | [`idp-saml`](#rule-idp-saml) |
| `okta_idp_social` | `data` | [`external-identity-provider`](#okta-concept-external-identity-provider) | [`idp-social-lookup`](#rule-idp-social-lookup) |
| `okta_idp_social` | `resource` | [`external-identity-provider`](#okta-concept-external-identity-provider) | [`idp-social`](#rule-idp-social) |
| `okta_inline_hook` | `resource` | [`identity-event-extension`](#okta-concept-identity-event-extension) | [`inline-hook`](#rule-inline-hook) |
| `okta_log_stream` | `data` | [`identity-log-stream`](#okta-concept-identity-log-stream) | [`log-stream-lookup`](#rule-log-stream-lookup) |
| `okta_log_stream` | `resource` | [`identity-log-stream`](#okta-concept-identity-log-stream) | [`log-stream`](#rule-log-stream) |
| `okta_network_zone` | `data` | [`network-zone`](#okta-concept-network-zone) | [`network-zone-lookup`](#rule-network-zone-lookup) |
| `okta_network_zone` | `resource` | [`network-zone`](#okta-concept-network-zone) | [`network-zone`](#rule-network-zone) |
| `okta_oauth_authorization_server` | `data` | [`authorization-server`](#okta-concept-authorization-server) | [`oauth-authorization-server-lookup`](#rule-oauth-authorization-server-lookup) |
| `okta_org_captcha` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`org-captcha-lookup`](#rule-org-captcha-lookup) |
| `okta_org_captcha` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`org-captcha`](#rule-org-captcha) |
| `okta_org_configuration` | `resource` | [`identity-tenant`](#okta-concept-identity-tenant) | [`org-configuration`](#rule-org-configuration) |
| `okta_org_metadata` | `data` | [`identity-tenant`](#okta-concept-identity-tenant) | [`org-metadata-lookup`](#rule-org-metadata-lookup) |
| `okta_realm_assignment` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`realm-assignment-lookup`](#rule-realm-assignment-lookup) |
| `okta_realm_assignment` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`realm-assignment`](#rule-realm-assignment) |
| `okta_realm` | `data` | [`identity-realm`](#okta-concept-identity-realm) | [`realm-lookup`](#rule-realm-lookup) |
| `okta_realm` | `resource` | [`identity-realm`](#okta-concept-identity-realm) | [`realm`](#rule-realm) |
| `okta_security_events_provider` | `data` | [`security-events-provider`](#okta-concept-security-events-provider) | [`security-events-provider-lookup`](#rule-security-events-provider-lookup) |
| `okta_security_events_provider` | `resource` | [`security-events-provider`](#okta-concept-security-events-provider) | [`security-events-provider`](#rule-security-events-provider) |
| `okta_threat_insight_settings` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`threat-insight-settings-lookup`](#rule-threat-insight-settings-lookup) |
| `okta_threat_insight_settings` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`threat-insight-settings`](#rule-threat-insight-settings) |
| `okta_trusted_origin` | `data` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`trusted-origin-lookup`](#rule-trusted-origin-lookup) |
| `okta_trusted_origin` | `resource` | [`authentication-configuration`](#okta-concept-authentication-configuration) | [`trusted-origin`](#rule-trusted-origin) |
| `okta_trusted_server` | `resource` | [`authorization-server-configuration`](#okta-concept-authorization-server-configuration) | [`trusted-server`](#rule-trusted-server) |

## Local vocabulary

### Concepts

<dl>

<div>
<dt id="okta-concept-application-configuration"><code>okta.concept.application-configuration</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L1-L3">Source</a></dt>
<dd>

Claims, features, redirects, scopes, or access policy supporting an app integration.

</dd>
<dd>


<details>
<summary>Used by 13 Rules</summary>

- [`app-access-policy-assignment`](#rule-app-access-policy-assignment)
- [`app-features`](#rule-app-features)
- [`app-features-lookup`](#rule-app-features-lookup)
- [`app-federated-claim`](#rule-app-federated-claim)
- [`app-federated-claim-lookup`](#rule-app-federated-claim-lookup)
- [`app-oauth-api-scope`](#rule-app-oauth-api-scope)
- [`app-oauth-post-logout-redirect-uri`](#rule-app-oauth-post-logout-redirect-uri)
- [`app-oauth-redirect-uri`](#rule-app-oauth-redirect-uri)
- [`app-saml-app-settings`](#rule-app-saml-app-settings)
- [`app-sign-on-policy-rule-lookup`](#rule-app-sign-on-policy-rule-lookup)
- [`app-signon-policy`](#rule-app-signon-policy)
- [`app-signon-policy-lookup`](#rule-app-signon-policy-lookup)
- [`app-signon-policy-rule`](#rule-app-signon-policy-rule)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-authentication-configuration"><code>okta.concept.authentication-configuration</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L1-L3">Source</a></dt>
<dd>

Authenticator, CAPTCHA, behavior, trusted-origin, or threat configuration supporting authentication.

</dd>
<dd>


<details>
<summary>Used by 18 Rules</summary>

- [`authenticator`](#rule-authenticator)
- [`authenticator-lookup`](#rule-authenticator-lookup)
- [`authenticator-method-webauthn`](#rule-authenticator-method-webauthn)
- [`authenticator-method-webauthn-lookup`](#rule-authenticator-method-webauthn-lookup)
- [`authenticator-webauthn-custom-aaguid`](#rule-authenticator-webauthn-custom-aaguid)
- [`authenticator-webauthn-custom-aaguids-lookup`](#rule-authenticator-webauthn-custom-aaguids-lookup)
- [`behavior`](#rule-behavior)
- [`behavior-lookup`](#rule-behavior-lookup)
- [`captcha`](#rule-captcha)
- [`captcha-lookup`](#rule-captcha-lookup)
- [`org-captcha`](#rule-org-captcha)
- [`org-captcha-lookup`](#rule-org-captcha-lookup)
- [`realm-assignment`](#rule-realm-assignment)
- [`realm-assignment-lookup`](#rule-realm-assignment-lookup)
- [`threat-insight-settings`](#rule-threat-insight-settings)
- [`threat-insight-settings-lookup`](#rule-threat-insight-settings-lookup)
- [`trusted-origin`](#rule-trusted-origin)
- [`trusted-origin-lookup`](#rule-trusted-origin-lookup)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-authorization-server"><code>okta.concept.authorization-server</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/authorization-servers.rf.hcl#L1-L3">Source</a></dt>
<dd>

An Okta custom Authorization Server that mints OAuth and OIDC tokens.

</dd>
<dd>


<details>
<summary>Used by 12 Rules</summary>

- [`auth-server`](#rule-auth-server)
- [`auth-server-claim`](#rule-auth-server-claim)
- [`auth-server-claim-default`](#rule-auth-server-claim-default)
- [`auth-server-claim-lookup`](#rule-auth-server-claim-lookup)
- [`auth-server-default`](#rule-auth-server-default)
- [`auth-server-lookup`](#rule-auth-server-lookup)
- [`auth-server-policy`](#rule-auth-server-policy)
- [`auth-server-policy-lookup`](#rule-auth-server-policy-lookup)
- [`auth-server-policy-rule`](#rule-auth-server-policy-rule)
- [`auth-server-scope`](#rule-auth-server-scope)
- [`oauth-authorization-server-lookup`](#rule-oauth-authorization-server-lookup)
- [`trusted-server`](#rule-trusted-server)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-authorization-server-configuration"><code>okta.concept.authorization-server-configuration</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L1-L3">Source</a></dt>
<dd>

A claim, scope, policy, rule, or trusted-server association supporting an Authorization Server.

</dd>
<dd>


<details>
<summary>Used by 8 Rules</summary>

- [`auth-server-claim`](#rule-auth-server-claim)
- [`auth-server-claim-default`](#rule-auth-server-claim-default)
- [`auth-server-claim-lookup`](#rule-auth-server-claim-lookup)
- [`auth-server-policy`](#rule-auth-server-policy)
- [`auth-server-policy-lookup`](#rule-auth-server-policy-lookup)
- [`auth-server-policy-rule`](#rule-auth-server-policy-rule)
- [`auth-server-scope`](#rule-auth-server-scope)
- [`trusted-server`](#rule-trusted-server)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-domain-configuration"><code>okta.concept.domain-configuration</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/domains/custom-domains.rf.hcl#L1-L3">Source</a></dt>
<dd>

Certificate or verification configuration supporting an Okta custom domain.

</dd>
<dd>

Used by [`domain-certificate`](#rule-domain-certificate), [`domain-verification`](#rule-domain-verification).

</dd>
</div>

<div>
<dt id="okta-concept-external-identity-provider"><code>okta.concept.external-identity-provider</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/federation/identity-providers.rf.hcl#L1-L3">Source</a></dt>
<dd>

An external OIDC, SAML, or social Identity Provider trusted by Okta.

</dd>
<dd>


<details>
<summary>Used by 6 Rules</summary>

- [`idp-oidc`](#rule-idp-oidc)
- [`idp-oidc-lookup`](#rule-idp-oidc-lookup)
- [`idp-saml`](#rule-idp-saml)
- [`idp-saml-lookup`](#rule-idp-saml-lookup)
- [`idp-social`](#rule-idp-social)
- [`idp-social-lookup`](#rule-idp-social-lookup)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-hook-configuration"><code>okta.concept.hook-configuration</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/extensibility/hooks.rf.hcl#L1-L3">Source</a></dt>
<dd>

Verification or key configuration supporting an Okta hook.

</dd>
<dd>

Used by [`event-hook-verification`](#rule-event-hook-verification), [`hook-key`](#rule-hook-key), [`hook-key-lookup`](#rule-hook-key-lookup).

</dd>
</div>

<div>
<dt id="okta-concept-identity-application"><code>okta.concept.identity-application</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/vocabulary.rf.hcl#L1-L3">Source</a></dt>
<dd>

An application or relying-party client registered with an identity platform.

</dd>
<dd>


<details>
<summary>Used by 23 Rules</summary>

- [`api-service-integration`](#rule-api-service-integration)
- [`api-service-integration-lookup`](#rule-api-service-integration-lookup)
- [`app-access-policy-assignment`](#rule-app-access-policy-assignment)
- [`app-auto-login`](#rule-app-auto-login)
- [`app-basic-auth`](#rule-app-basic-auth)
- [`app-bookmark`](#rule-app-bookmark)
- [`app-features`](#rule-app-features)
- [`app-features-lookup`](#rule-app-features-lookup)
- [`app-federated-claim`](#rule-app-federated-claim)
- [`app-federated-claim-lookup`](#rule-app-federated-claim-lookup)
- [`app-lookup`](#rule-app-lookup)
- [`app-oauth`](#rule-app-oauth)
- [`app-oauth-api-scope`](#rule-app-oauth-api-scope)
- [`app-oauth-lookup`](#rule-app-oauth-lookup)
- [`app-oauth-post-logout-redirect-uri`](#rule-app-oauth-post-logout-redirect-uri)
- [`app-oauth-redirect-uri`](#rule-app-oauth-redirect-uri)
- [`app-saml`](#rule-app-saml)
- [`app-saml-app-settings`](#rule-app-saml-app-settings)
- [`app-saml-lookup`](#rule-app-saml-lookup)
- [`app-secure-password-store`](#rule-app-secure-password-store)
- [`app-shared-credentials`](#rule-app-shared-credentials)
- [`app-swa`](#rule-app-swa)
- [`app-three-field`](#rule-app-three-field)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-identity-domain"><code>okta.concept.identity-domain</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/domains/custom-domains.rf.hcl#L5-L7">Source</a></dt>
<dd>

A custom domain exposing an Okta-hosted identity endpoint.

</dd>
<dd>


<details>
<summary>Used by 4 Rules</summary>

- [`domain`](#rule-domain)
- [`domain-certificate`](#rule-domain-certificate)
- [`domain-lookup`](#rule-domain-lookup)
- [`domain-verification`](#rule-domain-verification)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-identity-event-extension"><code>okta.concept.identity-event-extension</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/extensibility/hooks.rf.hcl#L5-L7">Source</a></dt>
<dd>

An Okta event or inline hook integrating an external callback into an identity lifecycle.

</dd>
<dd>


<details>
<summary>Used by 4 Rules</summary>

- [`app-saml`](#rule-app-saml)
- [`event-hook`](#rule-event-hook)
- [`event-hook-verification`](#rule-event-hook-verification)
- [`inline-hook`](#rule-inline-hook)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-identity-log-stream"><code>okta.concept.identity-log-stream</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security-observability/log-streams.rf.hcl#L1-L3">Source</a></dt>
<dd>

An Okta System Log stream delivering security events to an external destination.

</dd>
<dd>

Used by [`log-stream`](#rule-log-stream), [`log-stream-lookup`](#rule-log-stream-lookup).

</dd>
</div>

<div>
<dt id="okta-concept-identity-realm"><code>okta.concept.identity-realm</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/tenancy/orgs-realms.rf.hcl#L1-L3">Source</a></dt>
<dd>

An Okta Realm partitioning users within an organization.

</dd>
<dd>


<details>
<summary>Used by 4 Rules</summary>

- [`realm`](#rule-realm)
- [`realm-assignment`](#rule-realm-assignment)
- [`realm-assignment-lookup`](#rule-realm-assignment-lookup)
- [`realm-lookup`](#rule-realm-lookup)

</details>

</dd>
</div>

<div>
<dt id="okta-concept-identity-tenant"><code>okta.concept.identity-tenant</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/tenancy/orgs-realms.rf.hcl#L5-L7">Source</a></dt>
<dd>

An Okta organization acting as an identity tenant boundary.

</dd>
<dd>

Used by [`org-configuration`](#rule-org-configuration), [`org-metadata-lookup`](#rule-org-metadata-lookup).

</dd>
</div>

<div>
<dt id="okta-concept-network-zone"><code>okta.concept.network-zone</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L5-L7">Source</a></dt>
<dd>

A network location boundary used by Okta authentication and access decisions.

</dd>
<dd>

Used by [`network-zone`](#rule-network-zone), [`network-zone-lookup`](#rule-network-zone-lookup).

</dd>
</div>

<div>
<dt id="okta-concept-provisioning-connection"><code>okta.concept.provisioning-connection</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/provisioning-connections.rf.hcl#L1-L3">Source</a></dt>
<dd>

An Okta application provisioning connection to an external system.

</dd>
<dd>

Used by [`app-connection`](#rule-app-connection), [`app-connection-lookup`](#rule-app-connection-lookup).

</dd>
</div>

<div>
<dt id="okta-concept-security-events-provider"><code>okta.concept.security-events-provider</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security-observability/security-events.rf.hcl#L1-L3">Source</a></dt>
<dd>

A Security Events Provider supplying shared security signals to Okta.

</dd>
<dd>

Used by [`security-events-provider`](#rule-security-events-provider), [`security-events-provider-lookup`](#rule-security-events-provider-lookup).

</dd>
</div>

</dl>

### Relations

<dl>

<div>
<dt id="okta-relation-uses-inline-hook"><code>okta.relation.uses-inline-hook</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L156-L166">Source</a></dt>
<dd>

Introduced by a labeled emission.
Used by [`app-saml`](#rule-app-saml).

</dd>
</div>

</dl>

## Rule details

Open a Rule for its declared behavior and source. [Matching](https://docs.rootform.dev/language/reference/rules/#eligibility-pipeline), [emission resolution](https://docs.rootform.dev/language/reference/emissions/) and [composition](https://docs.rootform.dev/language/reference/composition/) define how evidence can establish it.

<details>
<summary><code>okta.rule.api-service-integration-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L18-L34">Source</a></summary>

<div id="rule-api-service-integration-lookup"></div>

Matches `data` instances of `okta_api_service_integration`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.api-service-integration</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L1-L16">Source</a></summary>

<div id="rule-api-service-integration"></div>

Matches `resource` instances of `okta_api_service_integration`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-access-policy-assignment</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L5-L23">Source</a></summary>

<div id="rule-app-access-policy-assignment"></div>

Matches `resource` instances of `okta_app_access_policy_assignment`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-auto-login</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L36-L51">Source</a></summary>

<div id="rule-app-auto-login"></div>

Matches `resource` instances of `okta_app_auto_login`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-basic-auth</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L53-L68">Source</a></summary>

<div id="rule-app-basic-auth"></div>

Matches `resource` instances of `okta_app_basic_auth`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-bookmark</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L70-L85">Source</a></summary>

<div id="rule-app-bookmark"></div>

Matches `resource` instances of `okta_app_bookmark`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-connection-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/provisioning-connections.rf.hcl#L13-L20">Source</a></summary>

<div id="rule-app-connection-lookup"></div>

Matches `data` instances of `okta_app_connection`.

**Classification:** [`okta.concept.provisioning-connection`](#okta-concept-provisioning-connection).

</details>

<details>
<summary><code>okta.rule.app-connection</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/provisioning-connections.rf.hcl#L5-L11">Source</a></summary>

<div id="rule-app-connection"></div>

Matches `resource` instances of `okta_app_connection`.

**Classification:** [`okta.concept.provisioning-connection`](#okta-concept-provisioning-connection).

</details>

<details>
<summary><code>okta.rule.app-features-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L45-L64">Source</a></summary>

<div id="rule-app-features-lookup"></div>

Matches `data` instances of `okta_app_features`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"indeterminate"`
- `on_empty`: `"indeterminate"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-features</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L25-L43">Source</a></summary>

<div id="rule-app-features"></div>

Matches `resource` instances of `okta_app_features`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-federated-claim-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L86-L105">Source</a></summary>

<div id="rule-app-federated-claim-lookup"></div>

Matches `data` instances of `okta_app_federated_claim`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"indeterminate"`
- `on_empty`: `"indeterminate"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-federated-claim</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L66-L84">Source</a></summary>

<div id="rule-app-federated-claim"></div>

Matches `resource` instances of `okta_app_federated_claim`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-oauth-api-scope</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L107-L125">Source</a></summary>

<div id="rule-app-oauth-api-scope"></div>

Matches `resource` instances of `okta_app_oauth_api_scope`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-oauth-post-logout-redirect-uri</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L127-L145">Source</a></summary>

<div id="rule-app-oauth-post-logout-redirect-uri"></div>

Matches `resource` instances of `okta_app_oauth_post_logout_redirect_uri`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-oauth-redirect-uri</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L147-L165">Source</a></summary>

<div id="rule-app-oauth-redirect-uri"></div>

Matches `resource` instances of `okta_app_oauth_redirect_uri`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-oauth-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L122-L138">Source</a></summary>

<div id="rule-app-oauth-lookup"></div>

Matches `data` instances of `okta_app_oauth`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-oauth</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L105-L120">Source</a></summary>

<div id="rule-app-oauth"></div>

Matches `resource` instances of `okta_app_oauth`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-saml-app-settings</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L167-L185">Source</a></summary>

<div id="rule-app-saml-app-settings"></div>

Matches `resource` instances of `okta_app_saml_app_settings`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

**Contributions**

- targets [`okta.concept.identity-application`](#okta-concept-identity-application) through `source.app_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.app_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-saml-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L169-L185">Source</a></summary>

<div id="rule-app-saml-lookup"></div>

Matches `data` instances of `okta_app_saml`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-saml</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L140-L167">Source</a></summary>

<div id="rule-app-saml"></div>

Matches `resource` instances of `okta_app_saml`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

**Relations**

- [`okta.relation.uses-inline-hook`](#okta-relation-uses-inline-hook): targets [`okta.concept.identity-event-extension`](#okta-concept-identity-event-extension) through `source.inline_hook_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

**Relation through `source.inline_hook_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.app-secure-password-store</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L187-L202">Source</a></summary>

<div id="rule-app-secure-password-store"></div>

Matches `resource` instances of `okta_app_secure_password_store`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-shared-credentials</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L204-L219">Source</a></summary>

<div id="rule-app-shared-credentials"></div>

Matches `resource` instances of `okta_app_shared_credentials`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-sign-on-policy-rule-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L187-L194">Source</a></summary>

<div id="rule-app-sign-on-policy-rule-lookup"></div>

Matches `data` instances of `okta_app_sign_on_policy_rule`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

</details>

<details>
<summary><code>okta.rule.app-signon-policy-rule</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L213-L219">Source</a></summary>

<div id="rule-app-signon-policy-rule"></div>

Matches `resource` instances of `okta_app_signon_policy_rule`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

</details>

<details>
<summary><code>okta.rule.app-signon-policy-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L204-L211">Source</a></summary>

<div id="rule-app-signon-policy-lookup"></div>

Matches `data` instances of `okta_app_signon_policy`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

</details>

<details>
<summary><code>okta.rule.app-signon-policy</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/configuration.rf.hcl#L196-L202">Source</a></summary>

<div id="rule-app-signon-policy"></div>

Matches `resource` instances of `okta_app_signon_policy`.

**Classification:** [`okta.concept.application-configuration`](#okta-concept-application-configuration).

</details>

<details>
<summary><code>okta.rule.app-swa</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L221-L236">Source</a></summary>

<div id="rule-app-swa"></div>

Matches `resource` instances of `okta_app_swa`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-three-field</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L238-L253">Source</a></summary>

<div id="rule-app-three-field"></div>

Matches `resource` instances of `okta_app_three_field`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.app-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/applications/app-integrations.rf.hcl#L87-L103">Source</a></summary>

<div id="rule-app-lookup"></div>

Matches `data` instances of `okta_app`.

**Classification:** [`okta.concept.identity-application`](#okta-concept-identity-application).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-claim-default</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L25-L43">Source</a></summary>

<div id="rule-auth-server-claim-default"></div>

Matches `resource` instances of `okta_auth_server_claim_default`.

**Classification:** [`okta.concept.authorization-server-configuration`](#okta-concept-authorization-server-configuration).

**Contributions**

- targets [`okta.concept.authorization-server`](#okta-concept-authorization-server) through `source.auth_server_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.auth_server_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-claim-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L45-L64">Source</a></summary>

<div id="rule-auth-server-claim-lookup"></div>

Matches `data` instances of `okta_auth_server_claim`.

**Classification:** [`okta.concept.authorization-server-configuration`](#okta-concept-authorization-server-configuration).

**Contributions**

- targets [`okta.concept.authorization-server`](#okta-concept-authorization-server) through `source.auth_server_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.auth_server_id`**

- `on_null`: `"indeterminate"`
- `on_empty`: `"indeterminate"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-claim</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L5-L23">Source</a></summary>

<div id="rule-auth-server-claim"></div>

Matches `resource` instances of `okta_auth_server_claim`.

**Classification:** [`okta.concept.authorization-server-configuration`](#okta-concept-authorization-server-configuration).

**Contributions**

- targets [`okta.concept.authorization-server`](#okta-concept-authorization-server) through `source.auth_server_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.auth_server_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-default</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/authorization-servers.rf.hcl#L22-L37">Source</a></summary>

<div id="rule-auth-server-default"></div>

Matches `resource` instances of `okta_auth_server_default`.

**Classification:** [`okta.concept.authorization-server`](#okta-concept-authorization-server).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-policy-rule</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L107-L125">Source</a></summary>

<div id="rule-auth-server-policy-rule"></div>

Matches `resource` instances of `okta_auth_server_policy_rule`.

**Classification:** [`okta.concept.authorization-server-configuration`](#okta-concept-authorization-server-configuration).

**Contributions**

- targets [`okta.concept.authorization-server`](#okta-concept-authorization-server) through `source.auth_server_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.auth_server_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-policy-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L86-L105">Source</a></summary>

<div id="rule-auth-server-policy-lookup"></div>

Matches `data` instances of `okta_auth_server_policy`.

**Classification:** [`okta.concept.authorization-server-configuration`](#okta-concept-authorization-server-configuration).

**Contributions**

- targets [`okta.concept.authorization-server`](#okta-concept-authorization-server) through `source.auth_server_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.auth_server_id`**

- `on_null`: `"indeterminate"`
- `on_empty`: `"indeterminate"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-policy</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L66-L84">Source</a></summary>

<div id="rule-auth-server-policy"></div>

Matches `resource` instances of `okta_auth_server_policy`.

**Classification:** [`okta.concept.authorization-server-configuration`](#okta-concept-authorization-server-configuration).

**Contributions**

- targets [`okta.concept.authorization-server`](#okta-concept-authorization-server) through `source.auth_server_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.auth_server_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-scope</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L127-L145">Source</a></summary>

<div id="rule-auth-server-scope"></div>

Matches `resource` instances of `okta_auth_server_scope`.

**Classification:** [`okta.concept.authorization-server-configuration`](#okta-concept-authorization-server-configuration).

**Contributions**

- targets [`okta.concept.authorization-server`](#okta-concept-authorization-server) through `source.auth_server_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.auth_server_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/authorization-servers.rf.hcl#L39-L55">Source</a></summary>

<div id="rule-auth-server-lookup"></div>

Matches `data` instances of `okta_auth_server`.

**Classification:** [`okta.concept.authorization-server`](#okta-concept-authorization-server).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.auth-server</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/authorization-servers.rf.hcl#L5-L20">Source</a></summary>

<div id="rule-auth-server"></div>

Matches `resource` instances of `okta_auth_server`.

**Classification:** [`okta.concept.authorization-server`](#okta-concept-authorization-server).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.authenticator-method-webauthn-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L34-L41">Source</a></summary>

<div id="rule-authenticator-method-webauthn-lookup"></div>

Matches `data` instances of `okta_authenticator_method_webauthn`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.authenticator-method-webauthn</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L26-L32">Source</a></summary>

<div id="rule-authenticator-method-webauthn"></div>

Matches `resource` instances of `okta_authenticator_method_webauthn`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.authenticator-webauthn-custom-aaguid</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L43-L49">Source</a></summary>

<div id="rule-authenticator-webauthn-custom-aaguid"></div>

Matches `resource` instances of `okta_authenticator_webauthn_custom_aaguid`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.authenticator-webauthn-custom-aaguids-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L51-L58">Source</a></summary>

<div id="rule-authenticator-webauthn-custom-aaguids-lookup"></div>

Matches `data` instances of `okta_authenticator_webauthn_custom_aaguids`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.authenticator-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L17-L24">Source</a></summary>

<div id="rule-authenticator-lookup"></div>

Matches `data` instances of `okta_authenticator`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.authenticator</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L9-L15">Source</a></summary>

<div id="rule-authenticator"></div>

Matches `resource` instances of `okta_authenticator`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.behavior-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L68-L75">Source</a></summary>

<div id="rule-behavior-lookup"></div>

Matches `data` instances of `okta_behavior`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.behavior</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L60-L66">Source</a></summary>

<div id="rule-behavior"></div>

Matches `resource` instances of `okta_behavior`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.captcha-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L85-L92">Source</a></summary>

<div id="rule-captcha-lookup"></div>

Matches `data` instances of `okta_captcha`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.captcha</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L77-L83">Source</a></summary>

<div id="rule-captcha"></div>

Matches `resource` instances of `okta_captcha`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.domain-certificate</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/domains/custom-domains.rf.hcl#L26-L47">Source</a></summary>

<div id="rule-domain-certificate"></div>

Matches `resource` instances of `okta_domain_certificate`.

**Classification:** [`okta.concept.domain-configuration`](#okta-concept-domain-configuration).

**Contributions**

- targets [`okta.concept.identity-domain`](#okta-concept-identity-domain) through `source.domain_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.domain_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `external`: `"allow"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.domain-verification</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/domains/custom-domains.rf.hcl#L67-L88">Source</a></summary>

<div id="rule-domain-verification"></div>

Matches `resource` instances of `okta_domain_verification`.

**Classification:** [`okta.concept.domain-configuration`](#okta-concept-domain-configuration).

**Contributions**

- targets [`okta.concept.identity-domain`](#okta-concept-identity-domain) through `source.domain_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.domain_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `external`: `"allow"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.domain-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/domains/custom-domains.rf.hcl#L49-L65">Source</a></summary>

<div id="rule-domain-lookup"></div>

Matches `data` instances of `okta_domain`.

**Classification:** [`okta.concept.identity-domain`](#okta-concept-identity-domain).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.domain</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/domains/custom-domains.rf.hcl#L9-L24">Source</a></summary>

<div id="rule-domain"></div>

Matches `resource` instances of `okta_domain`.

**Classification:** [`okta.concept.identity-domain`](#okta-concept-identity-domain).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.event-hook-verification</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/extensibility/hooks.rf.hcl#L26-L44">Source</a></summary>

<div id="rule-event-hook-verification"></div>

Matches `resource` instances of `okta_event_hook_verification`.

**Classification:** [`okta.concept.hook-configuration`](#okta-concept-hook-configuration).

**Contributions**

- targets [`okta.concept.identity-event-extension`](#okta-concept-identity-event-extension) through `source.event_hook_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.event_hook_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.event-hook</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/extensibility/hooks.rf.hcl#L9-L24">Source</a></summary>

<div id="rule-event-hook"></div>

Matches `resource` instances of `okta_event_hook`.

**Classification:** [`okta.concept.identity-event-extension`](#okta-concept-identity-event-extension).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.hook-key-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/extensibility/hooks.rf.hcl#L54-L61">Source</a></summary>

<div id="rule-hook-key-lookup"></div>

Matches `data` instances of `okta_hook_key`.

**Classification:** [`okta.concept.hook-configuration`](#okta-concept-hook-configuration).

</details>

<details>
<summary><code>okta.rule.hook-key</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/extensibility/hooks.rf.hcl#L46-L52">Source</a></summary>

<div id="rule-hook-key"></div>

Matches `resource` instances of `okta_hook_key`.

**Classification:** [`okta.concept.hook-configuration`](#okta-concept-hook-configuration).

</details>

<details>
<summary><code>okta.rule.idp-oidc-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/federation/identity-providers.rf.hcl#L13-L20">Source</a></summary>

<div id="rule-idp-oidc-lookup"></div>

Matches `data` instances of `okta_idp_oidc`.

**Classification:** [`okta.concept.external-identity-provider`](#okta-concept-external-identity-provider).

</details>

<details>
<summary><code>okta.rule.idp-oidc</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/federation/identity-providers.rf.hcl#L5-L11">Source</a></summary>

<div id="rule-idp-oidc"></div>

Matches `resource` instances of `okta_idp_oidc`.

**Classification:** [`okta.concept.external-identity-provider`](#okta-concept-external-identity-provider).

</details>

<details>
<summary><code>okta.rule.idp-saml-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/federation/identity-providers.rf.hcl#L30-L37">Source</a></summary>

<div id="rule-idp-saml-lookup"></div>

Matches `data` instances of `okta_idp_saml`.

**Classification:** [`okta.concept.external-identity-provider`](#okta-concept-external-identity-provider).

</details>

<details>
<summary><code>okta.rule.idp-saml</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/federation/identity-providers.rf.hcl#L22-L28">Source</a></summary>

<div id="rule-idp-saml"></div>

Matches `resource` instances of `okta_idp_saml`.

**Classification:** [`okta.concept.external-identity-provider`](#okta-concept-external-identity-provider).

</details>

<details>
<summary><code>okta.rule.idp-social-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/federation/identity-providers.rf.hcl#L47-L54">Source</a></summary>

<div id="rule-idp-social-lookup"></div>

Matches `data` instances of `okta_idp_social`.

**Classification:** [`okta.concept.external-identity-provider`](#okta-concept-external-identity-provider).

</details>

<details>
<summary><code>okta.rule.idp-social</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/federation/identity-providers.rf.hcl#L39-L45">Source</a></summary>

<div id="rule-idp-social"></div>

Matches `resource` instances of `okta_idp_social`.

**Classification:** [`okta.concept.external-identity-provider`](#okta-concept-external-identity-provider).

</details>

<details>
<summary><code>okta.rule.inline-hook</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/extensibility/hooks.rf.hcl#L63-L78">Source</a></summary>

<div id="rule-inline-hook"></div>

Matches `resource` instances of `okta_inline_hook`.

**Classification:** [`okta.concept.identity-event-extension`](#okta-concept-identity-event-extension).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.log-stream-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security-observability/log-streams.rf.hcl#L13-L20">Source</a></summary>

<div id="rule-log-stream-lookup"></div>

Matches `data` instances of `okta_log_stream`.

**Classification:** [`okta.concept.identity-log-stream`](#okta-concept-identity-log-stream).

</details>

<details>
<summary><code>okta.rule.log-stream</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security-observability/log-streams.rf.hcl#L5-L11">Source</a></summary>

<div id="rule-log-stream"></div>

Matches `resource` instances of `okta_log_stream`.

**Classification:** [`okta.concept.identity-log-stream`](#okta-concept-identity-log-stream).

</details>

<details>
<summary><code>okta.rule.network-zone-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L102-L109">Source</a></summary>

<div id="rule-network-zone-lookup"></div>

Matches `data` instances of `okta_network_zone`.

**Classification:** [`okta.concept.network-zone`](#okta-concept-network-zone).

</details>

<details>
<summary><code>okta.rule.network-zone</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L94-L100">Source</a></summary>

<div id="rule-network-zone"></div>

Matches `resource` instances of `okta_network_zone`.

**Classification:** [`okta.concept.network-zone`](#okta-concept-network-zone).

</details>

<details>
<summary><code>okta.rule.oauth-authorization-server-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/authorization-servers.rf.hcl#L57-L73">Source</a></summary>

<div id="rule-oauth-authorization-server-lookup"></div>

Matches `data` instances of `okta_oauth_authorization_server`.

**Classification:** [`okta.concept.authorization-server`](#okta-concept-authorization-server).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.org-captcha-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L119-L126">Source</a></summary>

<div id="rule-org-captcha-lookup"></div>

Matches `data` instances of `okta_org_captcha`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.org-captcha</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L111-L117">Source</a></summary>

<div id="rule-org-captcha"></div>

Matches `resource` instances of `okta_org_captcha`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.org-configuration</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/tenancy/orgs-realms.rf.hcl#L9-L15">Source</a></summary>

<div id="rule-org-configuration"></div>

Matches `resource` instances of `okta_org_configuration`.

**Classification:** [`okta.concept.identity-tenant`](#okta-concept-identity-tenant).

</details>

<details>
<summary><code>okta.rule.org-metadata-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/tenancy/orgs-realms.rf.hcl#L17-L24">Source</a></summary>

<div id="rule-org-metadata-lookup"></div>

Matches `data` instances of `okta_org_metadata`.

**Classification:** [`okta.concept.identity-tenant`](#okta-concept-identity-tenant).

</details>

<details>
<summary><code>okta.rule.realm-assignment-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/tenancy/orgs-realms.rf.hcl#L63-L82">Source</a></summary>

<div id="rule-realm-assignment-lookup"></div>

Matches `data` instances of `okta_realm_assignment`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

**Contributions**

- targets [`okta.concept.identity-realm`](#okta-concept-identity-realm) through `source.realm_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.realm_id`**

- `on_null`: `"indeterminate"`
- `on_empty`: `"indeterminate"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.realm-assignment</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/tenancy/orgs-realms.rf.hcl#L43-L61">Source</a></summary>

<div id="rule-realm-assignment"></div>

Matches `resource` instances of `okta_realm_assignment`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

**Contributions**

- targets [`okta.concept.identity-realm`](#okta-concept-identity-realm) through `source.realm_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.realm_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>

<details>
<summary><code>okta.rule.realm-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/tenancy/orgs-realms.rf.hcl#L84-L100">Source</a></summary>

<div id="rule-realm-lookup"></div>

Matches `data` instances of `okta_realm`.

**Classification:** [`okta.concept.identity-realm`](#okta-concept-identity-realm).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.realm</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/tenancy/orgs-realms.rf.hcl#L26-L41">Source</a></summary>

<div id="rule-realm"></div>

Matches `resource` instances of `okta_realm`.

**Classification:** [`okta.concept.identity-realm`](#okta-concept-identity-realm).

<details>
<summary>Conditions, identity and resolution</summary>

**Identity**

- `attributes`: `["id"]`
- `scope`: `"provider"`

**Endpoint**

- `attributes`: `["id"]`

</details>

</details>

<details>
<summary><code>okta.rule.security-events-provider-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security-observability/security-events.rf.hcl#L13-L20">Source</a></summary>

<div id="rule-security-events-provider-lookup"></div>

Matches `data` instances of `okta_security_events_provider`.

**Classification:** [`okta.concept.security-events-provider`](#okta-concept-security-events-provider).

</details>

<details>
<summary><code>okta.rule.security-events-provider</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security-observability/security-events.rf.hcl#L5-L11">Source</a></summary>

<div id="rule-security-events-provider"></div>

Matches `resource` instances of `okta_security_events_provider`.

**Classification:** [`okta.concept.security-events-provider`](#okta-concept-security-events-provider).

</details>

<details>
<summary><code>okta.rule.threat-insight-settings-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L136-L143">Source</a></summary>

<div id="rule-threat-insight-settings-lookup"></div>

Matches `data` instances of `okta_threat_insight_settings`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.threat-insight-settings</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L128-L134">Source</a></summary>

<div id="rule-threat-insight-settings"></div>

Matches `resource` instances of `okta_threat_insight_settings`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.trusted-origin-lookup</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L153-L160">Source</a></summary>

<div id="rule-trusted-origin-lookup"></div>

Matches `data` instances of `okta_trusted_origin`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.trusted-origin</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/security/authentication-boundaries.rf.hcl#L145-L151">Source</a></summary>

<div id="rule-trusted-origin"></div>

Matches `resource` instances of `okta_trusted_origin`.

**Classification:** [`okta.concept.authentication-configuration`](#okta-concept-authentication-configuration).

</details>

<details>
<summary><code>okta.rule.trusted-server</code> <a href="https://github.com/rootform-dev/rootform/blob/dev/dialects/okta/authorization/configuration.rf.hcl#L147-L165">Source</a></summary>

<div id="rule-trusted-server"></div>

Matches `resource` instances of `okta_trusted_server`.

**Classification:** [`okta.concept.authorization-server-configuration`](#okta-concept-authorization-server-configuration).

**Contributions**

- targets [`okta.concept.authorization-server`](#okta-concept-authorization-server) through `source.auth_server_id`.

<details>
<summary>Conditions, identity and resolution</summary>

**Contribution through `source.auth_server_id`**

- `on_null`: `"absent"`
- `on_empty`: `"absent"`
- `match.by`: `target.id`
- `match.strategy`: `"exact"`

</details>

</details>