import * as pulumi from "@pulumi/pulumi";
/**
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as authentik from "@osmit-gmbh/pulumi-authentik";
 * import * as authentik from "@pulumi/authentik";
 *
 * // Create a SAML Provider
 * const default-authorization-flow = authentik.getFlow({
 *     slug: "default-provider-authorization-implicit-consent",
 * });
 * const name = new authentik.ProviderSaml("name", {
 *     name: "test-app",
 *     authorizationFlow: default_authorization_flow.then(default_authorization_flow => default_authorization_flow.id),
 *     acsUrl: "http://localhost",
 * });
 * const nameApplication = new authentik.Application("name", {
 *     name: "test-app",
 *     slug: "test-app",
 *     protocolProvider: name.id,
 * });
 * ```
 */
export declare class ProviderSaml extends pulumi.CustomResource {
    /**
     * Get an existing ProviderSaml resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProviderSamlState, opts?: pulumi.CustomResourceOptions): ProviderSaml;
    /**
     * Returns true if the given object is an instance of ProviderSaml.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is ProviderSaml;
    readonly acsUrl: pulumi.Output<string>;
    readonly assertionValidNotBefore: pulumi.Output<string | undefined>;
    readonly assertionValidNotOnOrAfter: pulumi.Output<string | undefined>;
    readonly audience: pulumi.Output<string | undefined>;
    readonly authenticationFlow: pulumi.Output<string | undefined>;
    readonly authorizationFlow: pulumi.Output<string>;
    readonly defaultRelayState: pulumi.Output<string | undefined>;
    /**
     * Allowed values: - `http://www.w3.org/2000/09/xmldsig#sha1` - `http://www.w3.org/2001/04/xmlenc#sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#sha384` - `http://www.w3.org/2001/04/xmlenc#sha512`
     */
    readonly digestAlgorithm: pulumi.Output<string | undefined>;
    readonly encryptionKp: pulumi.Output<string | undefined>;
    readonly invalidationFlow: pulumi.Output<string>;
    readonly issuer: pulumi.Output<string | undefined>;
    readonly name: pulumi.Output<string>;
    readonly nameIdMapping: pulumi.Output<string | undefined>;
    readonly propertyMappings: pulumi.Output<string[] | undefined>;
    readonly sessionValidNotOnOrAfter: pulumi.Output<string | undefined>;
    readonly signAssertion: pulumi.Output<boolean | undefined>;
    readonly signResponse: pulumi.Output<boolean | undefined>;
    /**
     * Allowed values: - `http://www.w3.org/2000/09/xmldsig#rsa-sha1` - `http://www.w3.org/2001/04/xmldsig-more#rsa-sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#rsa-sha384` - `http://www.w3.org/2001/04/xmldsig-more#rsa-sha512` -
     * `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1` - `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384` - `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512` -
     * `http://www.w3.org/2000/09/xmldsig#dsa-sha1`
     */
    readonly signatureAlgorithm: pulumi.Output<string | undefined>;
    readonly signingKp: pulumi.Output<string | undefined>;
    /**
     * Allowed values: - `redirect` - `post`
     */
    readonly spBinding: pulumi.Output<string | undefined>;
    readonly urlSloPost: pulumi.Output<string>;
    readonly urlSloRedirect: pulumi.Output<string>;
    readonly urlSsoInit: pulumi.Output<string>;
    readonly urlSsoPost: pulumi.Output<string>;
    readonly urlSsoRedirect: pulumi.Output<string>;
    readonly verificationKp: pulumi.Output<string | undefined>;
    /**
     * Create a ProviderSaml resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: ProviderSamlArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering ProviderSaml resources.
 */
export interface ProviderSamlState {
    acsUrl?: pulumi.Input<string>;
    assertionValidNotBefore?: pulumi.Input<string>;
    assertionValidNotOnOrAfter?: pulumi.Input<string>;
    audience?: pulumi.Input<string>;
    authenticationFlow?: pulumi.Input<string>;
    authorizationFlow?: pulumi.Input<string>;
    defaultRelayState?: pulumi.Input<string>;
    /**
     * Allowed values: - `http://www.w3.org/2000/09/xmldsig#sha1` - `http://www.w3.org/2001/04/xmlenc#sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#sha384` - `http://www.w3.org/2001/04/xmlenc#sha512`
     */
    digestAlgorithm?: pulumi.Input<string>;
    encryptionKp?: pulumi.Input<string>;
    invalidationFlow?: pulumi.Input<string>;
    issuer?: pulumi.Input<string>;
    name?: pulumi.Input<string>;
    nameIdMapping?: pulumi.Input<string>;
    propertyMappings?: pulumi.Input<pulumi.Input<string>[]>;
    sessionValidNotOnOrAfter?: pulumi.Input<string>;
    signAssertion?: pulumi.Input<boolean>;
    signResponse?: pulumi.Input<boolean>;
    /**
     * Allowed values: - `http://www.w3.org/2000/09/xmldsig#rsa-sha1` - `http://www.w3.org/2001/04/xmldsig-more#rsa-sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#rsa-sha384` - `http://www.w3.org/2001/04/xmldsig-more#rsa-sha512` -
     * `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1` - `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384` - `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512` -
     * `http://www.w3.org/2000/09/xmldsig#dsa-sha1`
     */
    signatureAlgorithm?: pulumi.Input<string>;
    signingKp?: pulumi.Input<string>;
    /**
     * Allowed values: - `redirect` - `post`
     */
    spBinding?: pulumi.Input<string>;
    urlSloPost?: pulumi.Input<string>;
    urlSloRedirect?: pulumi.Input<string>;
    urlSsoInit?: pulumi.Input<string>;
    urlSsoPost?: pulumi.Input<string>;
    urlSsoRedirect?: pulumi.Input<string>;
    verificationKp?: pulumi.Input<string>;
}
/**
 * The set of arguments for constructing a ProviderSaml resource.
 */
export interface ProviderSamlArgs {
    acsUrl: pulumi.Input<string>;
    assertionValidNotBefore?: pulumi.Input<string>;
    assertionValidNotOnOrAfter?: pulumi.Input<string>;
    audience?: pulumi.Input<string>;
    authenticationFlow?: pulumi.Input<string>;
    authorizationFlow: pulumi.Input<string>;
    defaultRelayState?: pulumi.Input<string>;
    /**
     * Allowed values: - `http://www.w3.org/2000/09/xmldsig#sha1` - `http://www.w3.org/2001/04/xmlenc#sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#sha384` - `http://www.w3.org/2001/04/xmlenc#sha512`
     */
    digestAlgorithm?: pulumi.Input<string>;
    encryptionKp?: pulumi.Input<string>;
    invalidationFlow: pulumi.Input<string>;
    issuer?: pulumi.Input<string>;
    name?: pulumi.Input<string>;
    nameIdMapping?: pulumi.Input<string>;
    propertyMappings?: pulumi.Input<pulumi.Input<string>[]>;
    sessionValidNotOnOrAfter?: pulumi.Input<string>;
    signAssertion?: pulumi.Input<boolean>;
    signResponse?: pulumi.Input<boolean>;
    /**
     * Allowed values: - `http://www.w3.org/2000/09/xmldsig#rsa-sha1` - `http://www.w3.org/2001/04/xmldsig-more#rsa-sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#rsa-sha384` - `http://www.w3.org/2001/04/xmldsig-more#rsa-sha512` -
     * `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1` - `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256` -
     * `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384` - `http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512` -
     * `http://www.w3.org/2000/09/xmldsig#dsa-sha1`
     */
    signatureAlgorithm?: pulumi.Input<string>;
    signingKp?: pulumi.Input<string>;
    /**
     * Allowed values: - `redirect` - `post`
     */
    spBinding?: pulumi.Input<string>;
    urlSloPost?: pulumi.Input<string>;
    urlSloRedirect?: pulumi.Input<string>;
    urlSsoInit?: pulumi.Input<string>;
    urlSsoPost?: pulumi.Input<string>;
    urlSsoRedirect?: pulumi.Input<string>;
    verificationKp?: pulumi.Input<string>;
}
