Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cisco ISE Provider
  3. API Docs
  4. identitymanagement
  5. CertificateAuthenticationProfile
Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise

ise.identitymanagement.CertificateAuthenticationProfile

Explore with Pulumi AI

ise logo
Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise

    This resource can manage a Certificate Authentication Profile.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";

const example = new ise.identitymanagement.CertificateAuthenticationProfile("example", {
    name: "CertProf1",
    description: "My cert profile",
    allowedAsUserName: false,
    externalIdentityStoreName: "[not applicable]",
    certificateAttributeName: "SUBJECT_COMMON_NAME",
    matchMode: "NEVER",
    usernameFrom: "CERTIFICATE",
});

    import pulumi
import pulumi_ise as ise

example = ise.identitymanagement.CertificateAuthenticationProfile("example",
    name="CertProf1",
    description="My cert profile",
    allowed_as_user_name=False,
    external_identity_store_name="[not applicable]",
    certificate_attribute_name="SUBJECT_COMMON_NAME",
    match_mode="NEVER",
    username_from="CERTIFICATE")

    package main

import (
	"github.com/pulumi/pulumi-ise/sdk/go/ise/identitymanagement"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := identitymanagement.NewCertificateAuthenticationProfile(ctx, "example", &identitymanagement.CertificateAuthenticationProfileArgs{
			Name:                      pulumi.String("CertProf1"),
			Description:               pulumi.String("My cert profile"),
			AllowedAsUserName:         pulumi.Bool(false),
			ExternalIdentityStoreName: pulumi.String("[not applicable]"),
			CertificateAttributeName:  pulumi.String("SUBJECT_COMMON_NAME"),
			MatchMode:                 pulumi.String("NEVER"),
			UsernameFrom:              pulumi.String("CERTIFICATE"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;

return await Deployment.RunAsync(() => 
{
    var example = new Ise.IdentityManagement.CertificateAuthenticationProfile("example", new()
    {
        Name = "CertProf1",
        Description = "My cert profile",
        AllowedAsUserName = false,
        ExternalIdentityStoreName = "[not applicable]",
        CertificateAttributeName = "SUBJECT_COMMON_NAME",
        MatchMode = "NEVER",
        UsernameFrom = "CERTIFICATE",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.identitymanagement.CertificateAuthenticationProfile;
import com.pulumi.ise.identitymanagement.CertificateAuthenticationProfileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new CertificateAuthenticationProfile("example", CertificateAuthenticationProfileArgs.builder()
            .name("CertProf1")
            .description("My cert profile")
            .allowedAsUserName(false)
            .externalIdentityStoreName("[not applicable]")
            .certificateAttributeName("SUBJECT_COMMON_NAME")
            .matchMode("NEVER")
            .usernameFrom("CERTIFICATE")
            .build());

    }
}

    resources:
  example:
    type: ise:identitymanagement:CertificateAuthenticationProfile
    properties:
      name: CertProf1
      description: My cert profile
      allowedAsUserName: false
      externalIdentityStoreName: '[not applicable]'
      certificateAttributeName: SUBJECT_COMMON_NAME
      matchMode: NEVER
      usernameFrom: CERTIFICATE

    Create CertificateAuthenticationProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CertificateAuthenticationProfile(name: string, args?: CertificateAuthenticationProfileArgs, opts?: CustomResourceOptions);
    @overload
def CertificateAuthenticationProfile(resource_name: str,
                                     args: Optional[CertificateAuthenticationProfileArgs] = None,
                                     opts: Optional[ResourceOptions] = None)

@overload
def CertificateAuthenticationProfile(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     allowed_as_user_name: Optional[bool] = None,
                                     certificate_attribute_name: Optional[str] = None,
                                     description: Optional[str] = None,
                                     external_identity_store_name: Optional[str] = None,
                                     match_mode: Optional[str] = None,
                                     name: Optional[str] = None,
                                     username_from: Optional[str] = None)
    func NewCertificateAuthenticationProfile(ctx *Context, name string, args *CertificateAuthenticationProfileArgs, opts ...ResourceOption) (*CertificateAuthenticationProfile, error)
    public CertificateAuthenticationProfile(string name, CertificateAuthenticationProfileArgs? args = null, CustomResourceOptions? opts = null)
    public CertificateAuthenticationProfile(String name, CertificateAuthenticationProfileArgs args)
public CertificateAuthenticationProfile(String name, CertificateAuthenticationProfileArgs args, CustomResourceOptions options)

    type: ise:identitymanagement:CertificateAuthenticationProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args CertificateAuthenticationProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CertificateAuthenticationProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CertificateAuthenticationProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CertificateAuthenticationProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CertificateAuthenticationProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var certificateAuthenticationProfileResource = new Ise.IdentityManagement.CertificateAuthenticationProfile("certificateAuthenticationProfileResource", new()
{
    AllowedAsUserName = false,
    CertificateAttributeName = "string",
    Description = "string",
    ExternalIdentityStoreName = "string",
    MatchMode = "string",
    Name = "string",
    UsernameFrom = "string",
});

    example, err := identitymanagement.NewCertificateAuthenticationProfile(ctx, "certificateAuthenticationProfileResource", &identitymanagement.CertificateAuthenticationProfileArgs{
	AllowedAsUserName:         pulumi.Bool(false),
	CertificateAttributeName:  pulumi.String("string"),
	Description:               pulumi.String("string"),
	ExternalIdentityStoreName: pulumi.String("string"),
	MatchMode:                 pulumi.String("string"),
	Name:                      pulumi.String("string"),
	UsernameFrom:              pulumi.String("string"),
})

    var certificateAuthenticationProfileResource = new CertificateAuthenticationProfile("certificateAuthenticationProfileResource", CertificateAuthenticationProfileArgs.builder()
    .allowedAsUserName(false)
    .certificateAttributeName("string")
    .description("string")
    .externalIdentityStoreName("string")
    .matchMode("string")
    .name("string")
    .usernameFrom("string")
    .build());

    certificate_authentication_profile_resource = ise.identitymanagement.CertificateAuthenticationProfile("certificateAuthenticationProfileResource",
    allowed_as_user_name=False,
    certificate_attribute_name="string",
    description="string",
    external_identity_store_name="string",
    match_mode="string",
    name="string",
    username_from="string")

    const certificateAuthenticationProfileResource = new ise.identitymanagement.CertificateAuthenticationProfile("certificateAuthenticationProfileResource", {
    allowedAsUserName: false,
    certificateAttributeName: "string",
    description: "string",
    externalIdentityStoreName: "string",
    matchMode: "string",
    name: "string",
    usernameFrom: "string",
});

    type: ise:identitymanagement:CertificateAuthenticationProfile
properties:
    allowedAsUserName: false
    certificateAttributeName: string
    description: string
    externalIdentityStoreName: string
    matchMode: string
    name: string
    usernameFrom: string

    CertificateAuthenticationProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CertificateAuthenticationProfile resource accepts the following input properties:

    AllowedAsUserName bool
    Allow as username - Default value: false
    CertificateAttributeName string
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    Description string
    Description
    ExternalIdentityStoreName string
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    MatchMode string
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    Name string
    The name of the certificate profile
    UsernameFrom string
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    AllowedAsUserName bool
    Allow as username - Default value: false
    CertificateAttributeName string
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    Description string
    Description
    ExternalIdentityStoreName string
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    MatchMode string
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    Name string
    The name of the certificate profile
    UsernameFrom string
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    allowedAsUserName Boolean
    Allow as username - Default value: false
    certificateAttributeName String
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    description String
    Description
    externalIdentityStoreName String
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    matchMode String
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    name String
    The name of the certificate profile
    usernameFrom String
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    allowedAsUserName boolean
    Allow as username - Default value: false
    certificateAttributeName string
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    description string
    Description
    externalIdentityStoreName string
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    matchMode string
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    name string
    The name of the certificate profile
    usernameFrom string
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    allowed_as_user_name bool
    Allow as username - Default value: false
    certificate_attribute_name str
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    description str
    Description
    external_identity_store_name str
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    match_mode str
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    name str
    The name of the certificate profile
    username_from str
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    allowedAsUserName Boolean
    Allow as username - Default value: false
    certificateAttributeName String
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    description String
    Description
    externalIdentityStoreName String
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    matchMode String
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    name String
    The name of the certificate profile
    usernameFrom String
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CertificateAuthenticationProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing CertificateAuthenticationProfile Resource

    Get an existing CertificateAuthenticationProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CertificateAuthenticationProfileState, opts?: CustomResourceOptions): CertificateAuthenticationProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allowed_as_user_name: Optional[bool] = None,
        certificate_attribute_name: Optional[str] = None,
        description: Optional[str] = None,
        external_identity_store_name: Optional[str] = None,
        match_mode: Optional[str] = None,
        name: Optional[str] = None,
        username_from: Optional[str] = None) -> CertificateAuthenticationProfile
    func GetCertificateAuthenticationProfile(ctx *Context, name string, id IDInput, state *CertificateAuthenticationProfileState, opts ...ResourceOption) (*CertificateAuthenticationProfile, error)
    public static CertificateAuthenticationProfile Get(string name, Input<string> id, CertificateAuthenticationProfileState? state, CustomResourceOptions? opts = null)
    public static CertificateAuthenticationProfile get(String name, Output<String> id, CertificateAuthenticationProfileState state, CustomResourceOptions options)
    resources:  _:    type: ise:identitymanagement:CertificateAuthenticationProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowedAsUserName bool
    Allow as username - Default value: false
    CertificateAttributeName string
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    Description string
    Description
    ExternalIdentityStoreName string
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    MatchMode string
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    Name string
    The name of the certificate profile
    UsernameFrom string
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    AllowedAsUserName bool
    Allow as username - Default value: false
    CertificateAttributeName string
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    Description string
    Description
    ExternalIdentityStoreName string
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    MatchMode string
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    Name string
    The name of the certificate profile
    UsernameFrom string
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    allowedAsUserName Boolean
    Allow as username - Default value: false
    certificateAttributeName String
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    description String
    Description
    externalIdentityStoreName String
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    matchMode String
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    name String
    The name of the certificate profile
    usernameFrom String
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    allowedAsUserName boolean
    Allow as username - Default value: false
    certificateAttributeName string
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    description string
    Description
    externalIdentityStoreName string
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    matchMode string
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    name string
    The name of the certificate profile
    usernameFrom string
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    allowed_as_user_name bool
    Allow as username - Default value: false
    certificate_attribute_name str
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    description str
    Description
    external_identity_store_name str
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    match_mode str
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    name str
    The name of the certificate profile
    username_from str
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE
    allowedAsUserName Boolean
    Allow as username - Default value: false
    certificateAttributeName String
    Attribute name of the Certificate Profile - used only when CERTIFICATE is chosen in username_from. - Choices: SUBJECT_COMMON_NAME, SUBJECT_ALTERNATIVE_NAME, SUBJECT_SERIAL_NUMBER, SUBJECT, SUBJECT_ALTERNATIVE_NAME_OTHER_NAME, SUBJECT_ALTERNATIVE_NAME_EMAIL, SUBJECT_ALTERNATIVE_NAME_DNS - Default value: SUBJECT_COMMON_NAME
    description String
    Description
    externalIdentityStoreName String
    Referred IDStore name for the Certificate Profile or [not applicable] in case no identity store is chosen - Default value: [not applicable]
    matchMode String
    Match mode of the Certificate Profile. Allowed values: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Choices: NEVER, RESOLVE_IDENTITY_AMBIGUITY, BINARY_COMPARISON - Default value: NEVER
    name String
    The name of the certificate profile
    usernameFrom String
    The attribute in the certificate where the user name should be taken from. Allowed values: CERTIFICATE (for a specific attribute as defined in certificateAttributeName), UPN (for using any Subject or Alternative Name Attributes in the Certificate - an option only in AD) - Choices: CERTIFICATE, UPN - Default value: CERTIFICATE

    Import

    $ pulumi import ise:identitymanagement/certificateAuthenticationProfile:CertificateAuthenticationProfile example "76d24097-41c4-4558-a4d0-a8c07ac08470"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ise pulumi/pulumi-ise
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the ise Terraform Provider.
    ise logo
    Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
    pulumi/pulumi-ise