# \#terraform **URL:** https://devforum.okta.com/tag/terraform/38.md [Latest](https://devforum.okta.com/latest.md) · [Categories](https://devforum.okta.com/categories.md) · [Tags](https://devforum.okta.com/tags.md) --- ## [Groups\_claim field is deprecated](https://devforum.okta.com/t/groups-claim-field-is-deprecated/34849)
**Author:** [@airwork](https://devforum.okta.com/u/airwork)\ **Replies:** 1\ **Last updated:** [February 3, 2026, 11:10pm UTC](https://devforum.okta.com/t/groups-claim-field-is-deprecated/34849 "2026-02-03T23:10:33Z")
Hello All, We have an OIDC app with groups claim in place and same the config exist on Terraform, now when I run a Terraform plan, I get the warning stating group claim is being deprecated and “The groups\_claim field is… --- ## [Setting applications' custom attributes via Terraform](https://devforum.okta.com/t/setting-applications-custom-attributes-via-terraform/32674)
**Author:** [@ojensen](https://devforum.okta.com/u/ojensen)\ **Replies:** 1\ **Last updated:** [March 24, 2025, 11:15pm UTC](https://devforum.okta.com/t/setting-applications-custom-attributes-via-terraform/32674 "2025-03-24T23:15:21Z")
I am using Terraform to configure my applications in my organization. I have found the easiest way to accomplish this is to create the application connector in the UI (making use of the App Catalog), and then importing t… --- ## [What is argument name in okta\_app to enable VPN notification for Okta app by terraform?](https://devforum.okta.com/t/what-is-argument-name-in-okta-app-to-enable-vpn-notification-for-okta-app-by-terraform/31904)
**Author:** [@rayluo](https://devforum.okta.com/u/rayluo)\ **Replies:** 0\ **Last updated:** [February 6, 2025, 2:15pm UTC](https://devforum.okta.com/t/what-is-argument-name-in-okta-app-to-enable-vpn-notification-for-okta-app-by-terraform/31904 "2025-02-06T14:15:19Z")
Hi Folks, I try to use teffaform to enable VPN notifcation for okta app… does anyone know which argument I can use? Thanks, Ray --- ## [Error: failed to change group rule status: the API returned an unknown error](https://devforum.okta.com/t/error-failed-to-change-group-rule-status-the-api-returned-an-unknown-error/31606)
**Author:** [@HennessyWorks](https://devforum.okta.com/u/HennessyWorks)\ **Replies:** 2\ **Last updated:** [January 20, 2025, 3:13pm UTC](https://devforum.okta.com/t/error-failed-to-change-group-rule-status-the-api-returned-an-unknown-error/31606 "2025-01-20T15:13:30Z")
Hey all, Currently doing a piece of work with importing our group rules into terraform (yay such fun!) just wanted to spot check a couple of rules to see if they would update accordingly. When running the apply I’m gett… --- ## [Create OIDC APP via Terraform](https://devforum.okta.com/t/create-oidc-app-via-terraform/31214)
**Author:** [@nelson1991](https://devforum.okta.com/u/nelson1991)\ **Replies:** 1\ **Last updated:** [November 18, 2024, 4:15pm UTC](https://devforum.okta.com/t/create-oidc-app-via-terraform/31214 "2024-11-18T16:15:56Z")
Hello Guys, I am trying to create an OIDC app via terraform. The code works fine, although there is a field in the OKTA gui interface that is called IDP usage with 2 options: SSO Factor Only I am not able to pass or… --- ## [Unknown error creating okta\_app\_oauth with Terraform](https://devforum.okta.com/t/unknown-error-creating-okta-app-oauth-with-terraform/30606)
**Author:** [@jrice\_fieldroutes](https://devforum.okta.com/u/jrice_fieldroutes)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 5:09pm UTC](https://devforum.okta.com/t/unknown-error-creating-okta-app-oauth-with-terraform/30606 "2024-09-17T17:09:52Z")
I am getting “unknown api error” when I run the code below. If I remove the okta\_app\_oauth then it correctly creates the new group. I had to remove “https” from the code sample as okta forum says I can only post 2 links … --- ## [Create okta resource using terraform with mfa opt grant types](https://devforum.okta.com/t/create-okta-resource-using-terraform-with-mfa-opt-grant-types/29355)
**Author:** [@shal](https://devforum.okta.com/u/shal)\ **Replies:** 3\ **Last updated:** [September 17, 2024, 3:25pm UTC](https://devforum.okta.com/t/create-okta-resource-using-terraform-with-mfa-opt-grant-types/29355 "2024-09-17T15:25:16Z")
HI, I have a requirement to use below grant types with okta terraform provider okta\_app\_oauth, but its not supported in okta, is there a way could use auth0 grant types in okta? auth0.com-mfa-oob auth0.com-mfa-otp --- ## [Terraform : Set approver group for custom saml app](https://devforum.okta.com/t/terraform-set-approver-group-for-custom-saml-app/29608)
**Author:** [@Priyaiam](https://devforum.okta.com/u/Priyaiam)\ **Replies:** 0\ **Last updated:** [July 25, 2024, 12:16am UTC](https://devforum.okta.com/t/terraform-set-approver-group-for-custom-saml-app/29608 "2024-07-25T00:16:47Z")
Hi, Trying to create custom saml app via terraform. Can you help me with these questions: How do i set approver group for custom saml app via Terraform How do i retrieve the policy id of an existing app sign on policy… --- ## [Terraform API integration permissions issue](https://devforum.okta.com/t/terraform-api-integration-permissions-issue/28401)
**Author:** [@aeiras](https://devforum.okta.com/u/aeiras)\ **Replies:** 2\ **Last updated:** [May 22, 2024, 12:27pm UTC](https://devforum.okta.com/t/terraform-api-integration-permissions-issue/28401 "2024-05-22T12:27:11Z")
Hi! :wave: I’m following this guide to enable Terraform access for a Workforce Cloud Identity Developer Edition organisation and I consistently get a 403 error from the create group endpoint, with the message failed t… --- ## [Update SAML App certificate with Terraform](https://devforum.okta.com/t/update-saml-app-certificate-with-terraform/27201)
**Author:** [@vliapko](https://devforum.okta.com/u/vliapko)\ **Replies:** 1\ **Last updated:** [March 11, 2024, 8:58am UTC](https://devforum.okta.com/t/update-saml-app-certificate-with-terraform/27201 "2024-03-11T08:58:13Z")
Hello, I found okta\_app\_saml resource is pretty useles without certificate managenet support. The same certificate can’t be copied to multiple SAML applications with Terraform. If a certificate is cloned with REST AP… --- ## [How to reference a file from different directory in current terraform code](https://devforum.okta.com/t/how-to-reference-a-file-from-different-directory-in-current-terraform-code/27117)
**Author:** [@suren424](https://devforum.okta.com/u/suren424)\ **Replies:** 2\ **Last updated:** [March 9, 2024, 12:14am UTC](https://devforum.okta.com/t/how-to-reference-a-file-from-different-directory-in-current-terraform-code/27117 "2024-03-09T00:14:12Z")
Hi Team, I have 2 directories where i have the code for each of them: app\_dev1 and app\_dev2 app\_dev1 contains app\_dev1.json file which defines the groups for dev1 app and it’s being used in app\_dev1.tf code. app\_dev2 … --- ## [Email magic link Terraform question](https://devforum.okta.com/t/email-magic-link-terraform-question/26802)
**Author:** [@izum286](https://devforum.okta.com/u/izum286)\ **Replies:** 1\ **Last updated:** [February 21, 2024, 10:56am UTC](https://devforum.okta.com/t/email-magic-link-terraform-question/26802 "2024-02-21T10:56:59Z")
Hi, I need to add magic link callback URI to my application, but not found any documentation how is it possible to implement via Terraform. Could someone assist? --- ## [Terraform Profile Mapping not setting value for existing users](https://devforum.okta.com/t/terraform-profile-mapping-not-setting-value-for-existing-users/23648)
**Author:** [@marshall](https://devforum.okta.com/u/marshall)\ **Replies:** 2\ **Last updated:** [August 16, 2023, 4:10am UTC](https://devforum.okta.com/t/terraform-profile-mapping-not-setting-value-for-existing-users/23648 "2023-08-16T04:10:35Z")
I have the following terraform code to set a boolean property on the user profile based on the email extension. The terraform code deploys fine and the mapping shows up in the okta admin but the rule is not applied to ex… --- ## [Terraform Support for OIE](https://devforum.okta.com/t/terraform-support-for-oie/23854)
**Author:** [@Gaz](https://devforum.okta.com/u/Gaz)\ **Replies:** 2\ **Last updated:** [May 17, 2023, 8:44am UTC](https://devforum.okta.com/t/terraform-support-for-oie/23854 "2023-05-17T08:44:05Z")
Hi, I would like to know to what extend OIE version is support from Terraform IaC deployment perspective. Will I be able to build all the functionalities via Terraform, specially around the Authenticators and Device Tru… --- ## [Want to create user and assign that user to an application using terraform](https://devforum.okta.com/t/want-to-create-user-and-assign-that-user-to-an-application-using-terraform/19294)
**Author:** [@shahnoor](https://devforum.okta.com/u/shahnoor)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 5:05pm UTC](https://devforum.okta.com/t/want-to-create-user-and-assign-that-user-to-an-application-using-terraform/19294 "2022-02-08T17:05:58Z")
i am able to create user in okta using terraform, but unable to add user to appliatiion via terraform. Has someone did it before. --- ## [Terraform import okta\_group without users](https://devforum.okta.com/t/terraform-import-okta-group-without-users/15573)
**Author:** [@phi1ipp](https://devforum.okta.com/u/phi1ipp)\ **Replies:** 1\ **Last updated:** [August 19, 2021, 4:42pm UTC](https://devforum.okta.com/t/terraform-import-okta-group-without-users/15573 "2021-08-19T16:42:31Z")
Hi All, Does anybody know how I can omit importing users assigned to a group when doing terraform import okta\_group.xxxx group\_guid? I’m not really interested in doing that, as group membership is managed by a rule, so… --- ## [Terraform okta\_user user\_type](https://devforum.okta.com/t/terraform-okta-user-user-type/14960)
**Author:** [@pmdepr](https://devforum.okta.com/u/pmdepr)\ **Replies:** 6\ **Last updated:** [July 5, 2021, 6:29pm UTC](https://devforum.okta.com/t/terraform-okta-user-user-type/14960 "2021-07-05T18:29:10Z")
I am trying to create users in a test environment using the okta\_user resource. I do not see any way to force it to use a user\_type other than the base type. Even if I set the user\_type to a custom user\_type it still see… --- ## [Terraform: okta\_idp\_saml\_key format](https://devforum.okta.com/t/terraform-okta-idp-saml-key-format/14291)
**Author:** [@jwilczak](https://devforum.okta.com/u/jwilczak)\ **Replies:** 4\ **Last updated:** [May 19, 2021, 12:27pm UTC](https://devforum.okta.com/t/terraform-okta-idp-saml-key-format/14291 "2021-05-19T12:27:09Z")
Hi there, I’m trying to terraform script a SAML IdP and running into some issues (besides the fact that the documentation is lacking). I cannot figure out, for the life of me, the proper format for the x5c attribute in … --- ## [How to set "logon initiated by" value using Terraform?](https://devforum.okta.com/t/how-to-set-logon-initiated-by-value-using-terraform/11357)
**Author:** [@jwilczak](https://devforum.okta.com/u/jwilczak)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 11:45pm UTC](https://devforum.okta.com/t/how-to-set-logon-initiated-by-value-using-terraform/11357 "2020-10-14T23:45:06Z")
I have the below Terraform script (using a module) to create apps in our Okta instance. However, I can’t find anywhere on how to modify the “logon initiated by” value… am I missing something? module "app" { source = "…