quorate/terraform/internal/zitadel/login_policy.tf

21 lines
980 B
HCL

resource "zitadel_default_login_policy" "instance" {
user_login = true
allow_register = false
allow_external_idp = true
force_mfa = false
force_mfa_local_only = false
passwordless_type = "PASSWORDLESS_TYPE_ALLOWED"
hide_password_reset = false
ignore_unknown_usernames = false
allow_domain_discovery = false
disable_login_with_email = false
disable_login_with_phone = false
default_redirect_uri = "https://${var.zitadel_domain}/ui/console"
password_check_lifetime = "240h0m0s"
external_login_check_lifetime = "240h0m0s"
multi_factor_check_lifetime = "12h0m0s"
mfa_init_skip_lifetime = "720h0m0s"
second_factor_check_lifetime = "18h0m0s"
second_factors = ["SECOND_FACTOR_TYPE_OTP", "SECOND_FACTOR_TYPE_U2F"]
multi_factors = ["MULTI_FACTOR_TYPE_U2F_WITH_VERIFICATION"]
}