uptimeify_sso_domain_verification
Verifies the SSO domain's DNS TXT record once (POST /api/organization/sso/verify-domain). Create fails with the expected and the found TXT values when the record is not visible yet; publish uptimeify_sso_oidc.verification_record and apply again. There is no waiting or retrying. Needs an organization admin token. Set domain = uptimeify_sso_oidc.<name>.domain, so a new domain verifies again in the same apply. A new issuer also resets the verification: the next plan shows this resource again. Destroying it changes nothing in Uptimeify. Import with the id sso.
Verifies the SSO domain's DNS TXT record once (POST /api/organization/sso/verify-domain). Create fails with the expected and the found TXT values when the record is not visible yet; publish uptimeify_sso_oidc.verification_record and apply again. There is no waiting or retrying. Needs an organization admin token.
Set domain = uptimeify_sso_oidc.<name>.domain, so a new domain verifies again in the same apply. A new issuer also resets the verification: the next plan shows this resource again. Destroying it changes nothing in Uptimeify. Import with the id sso.
Example Usage
# The TXT record from uptimeify_sso_oidc, published with your DNS provider.
resource "dns_txt_record_set" "sso" {
zone = "example.com."
name = trimsuffix(uptimeify_sso_oidc.corp.verification_record.name, ".example.com")
txt = [uptimeify_sso_oidc.corp.verification_record.value]
ttl = 300
}
# Verifies the TXT record once. Fails (no retry) while the record is not visible
# yet; apply again after DNS has propagated.
resource "uptimeify_sso_domain_verification" "corp" {
domain = uptimeify_sso_oidc.corp.domain
depends_on = [dns_txt_record_set.sso]
}Schema
Required
domain(String) The SSO domain; changing it verifies again.
Read-Only
id(String) Alwayssso.
Import
Import is supported using the following syntax:
The terraform import command can be used, for example:
# Always the id sso
terraform import uptimeify_sso_domain_verification.corp ssouptimeify_ssh_monitor
An SSH monitor: logs in (check_mode protocol) or only checks the port (tcp). The hostname must resolve to a public address. Import with the numeric id or the public id.
uptimeify_sso_oidc
Single sign-on of the organization with an OpenID Connect identity provider (PUT /api/organization/sso). One per organization; needs an organization admin token. Saving runs the issuer's discovery, so the issuer must be reachable over HTTPS from Uptimeify. Register the client at your identity provider with redirect_uri and the scopes (both known before the first apply, see GET /api/organization/sso). Prove the domain with the DNS TXT record verification_record and uptimeify_sso_domain_verification. A new domain or issuer resets the verification, the first login and enforce_sso. Destroying it removes SSO. A SAML configuration is not managed here: it reads as gone, and an apply replaces it with OIDC. Import with the id sso.