Revert OKTA-1001373 Add authenticator methods to okta_authenticator (#2619)

Author: aditya-okta

docs/data-sources/authenticator.md

@@ -35,7 +35,6 @@ data "okta_authenticator" "test_1" {
 
 ### Read-Only
 
-- `method` (Set of Object) Method-level configuration for authenticators that support it (phone_number, okta_verify, custom_otp). (see [below for nested schema](#nestedatt--method))
 - `provider_auth_port` (Number) The RADIUS server port (for example 1812). This is defined when the On-Prem RADIUS server is configured
 - `provider_hostname` (String) Server host name or IP address
 - `provider_instance_id` (String) (Specific to `security_key`) App Instance ID.
@@ -46,13 +45,4 @@ data "okta_authenticator" "test_1" {
 - `status` (String) Status of the Authenticator.
 - `type` (String) Type of the authenticator
 
-<a id="nestedatt--method"></a>
-### Nested Schema for `method`
-
-Read-Only:
-
-- `type` (String) The type of authenticator method.
-- `status` (String) The method status: ACTIVE or INACTIVE.
-- `settings` (String) Method-specific settings as a JSON string.
-
 

docs/resources/authenticator.md

@@ -70,66 +70,6 @@ resource "okta_authenticator" "otp" {
   legacy_ignore_name = false
 }
 
-# Phone authenticator with method-level control
-resource "okta_authenticator" "phone" {
-  name = "Phone Authentication"
-  key  = "phone_number"
-  
-  # Enable SMS method
-  method {
-    type   = "sms"
-    status = "ACTIVE"
-  }
-  
-  # Disable voice method
-  method {
-    type   = "voice"
-    status = "INACTIVE"
-  }
-}
-
-# Okta Verify with specific methods enabled
-resource "okta_authenticator" "okta_verify" {
-  name = "Okta Verify"
-  key  = "okta_verify"
-  
-  method {
-    type   = "push"
-    status = "ACTIVE"
-  }
-  
-  method {
-    type   = "totp"
-    status = "ACTIVE"
-  }
-  
-  method {
-    type   = "signed_nonce"
-    status = "INACTIVE"
-  }
-}
-
-# Custom OTP with method settings
-resource "okta_authenticator" "custom_otp_with_method" {
-  name   = "Custom OTP Authenticator"
-  key    = "custom_otp"
-  status = "ACTIVE"
-  legacy_ignore_name = false
-  
-  method {
-    type   = "otp"
-    status = "ACTIVE"
-    settings = jsonencode({
-      "protocol" : "TOTP",
-      "encoding" : "base32",
-      "algorithm" : "HMacSHA256",
-      "timeIntervalInSeconds" : 30,
-      "passCodeLength" : 6,
-      "acceptableAdjacentIntervals" : 3
-    })
-  }
-}
-
 resource "okta_authenticator" "custom_app" {
   key                = "custom_app"
   name               = "Custom Push Auth"
@@ -161,7 +101,6 @@ resource "okta_authenticator" "custom_app" {
 
 ### Optional
 
-- `method` (Block Set) Method-level configuration for authenticators. Only supported for authenticators with key `phone_number`, `okta_verify`, or `custom_otp`. (see [below for nested schema](#nestedblock--method))
 - `agree_to_terms` (Boolean) A value of true indicates that the administrator accepts the terms for creating a new authenticator. Okta requires that you accept the terms when creating a new custom_app authenticator. Other authenticators don't require this field.
 - `legacy_ignore_name` (Boolean) Name does not trigger change detection (legacy behavior). Must be set to false for custom_app authenticators.
 - `provider_auth_port` (Number) The RADIUS server port (for example 1812). This is defined when the On-Prem RADIUS server is configured. Used only for authenticators with type `security_key`.  Conflicts with `provider_json` argument.
@@ -180,32 +119,7 @@ resource "okta_authenticator" "custom_app" {
 - `id` (String) The ID of this resource.
 - `provider_instance_id` (String) App Instance ID.
 - `provider_type` (String) Provider type. Supported value for Duo: `DUO`. Supported value for Custom App: `PUSH`
-- `type` (String) The type of Authenticator. Values include: `password`, `security_question`, `phone`, `email`, `app`, `federated`, and `security_key`.
-
-<a id="nestedblock--method"></a>
-### Nested Schema for `method`
-
-Required:
-
-- `type` (String) The method type. Supported values depend on the authenticator key:
-  - For `phone_number`: `sms`, `voice`
-  - For `okta_verify`: `push`, `totp`, `signed_nonce`
-  - For `custom_otp`: `otp`
-
-Optional:
-
-- `status` (String) The method status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
-- `settings` (String) Method-specific settings as a JSON string. Settings vary by method type:
-  - For `otp` method (custom_otp authenticator):
-    - `protocol` (String) - Protocol type: `TOTP` or `HOTP`
-    - `encoding` (String) - Encoding format: `base32` or `base64`
-    - `algorithm` (String) - Hash algorithm: `HMACSHA1`, `HMACSHA256`, or `HMACSHA512`
-    - `timeIntervalInSeconds` (Number) - Time step in seconds (TOTP only)
-    - `passCodeLength` (Number) - Length of the OTP code
-    - `acceptableAdjacentIntervals` (Number) - Number of adjacent time intervals to accept
-  - For `signed_nonce` method (okta_verify authenticator):
-    - `algorithms` (Array) - Supported algorithms: `ES256`, `ES384`, `ES512`, `RS256`, `RS384`, `RS512`, `EdDSA`
-    - `keyProtection` (String) - Key protection level: `ANY`, `SOFTWARE`, or `HARDWARE`
+- `type` (String) he type of Authenticator. Values include: `password`, `security_question`, `phone`, `email`, `app`, `federated`, and `security_key`.
 
 ## Import
 

examples/resources/okta_authenticator/custom_app.tf

@@ -1,19 +1,19 @@
 resource "okta_authenticator" "test1" {
-  key                = "custom_app"
-  name               = "VCRTestCustomAppAuthNew"
-  status             = "ACTIVE"
-  agree_to_terms     = "true"
-  legacy_ignore_name = false
-  settings = jsonencode({
-    "userVerification" : "REQUIRED",
-    "appInstanceId" : "0oa12345678ABCDEFG"
-  })
-  provider_json = jsonencode({
-    "type" : "PUSH",
-    "configuration" : {
-      "fcm" : {
-        "id" : "ppcABCDEFGH12345678"
-      }
-    }
-  })
+key    = "custom_app"
+name =  "VCRTestCustomAppAuth"
+status = "ACTIVE"
+agree_to_terms = "true"
+legacy_ignore_name = false
+settings = jsonencode({
+    "userVerification": "REQUIRED",
+    "appInstanceId": "0oaspABCDEF12345678"
+    })
+provider_json = jsonencode({
+    "type": "PUSH",
+    "configuration": {
+        "fcm": {
+            "id": "ppcrb12345678ABCDEF"
+            }
+        }      
+    })
 }

examples/resources/okta_authenticator/custom_app_updated.tf

@@ -1,19 +1,19 @@
 resource "okta_authenticator" "test1" {
-  key                = "custom_app"
-  name               = "VCRTestCustomAppAuthNewRenamed"
-  status             = "ACTIVE"
-  agree_to_terms     = "true"
-  legacy_ignore_name = false
-  settings = jsonencode({
-    "userVerification" : "PREFERRED",
-    "appInstanceId" : "0oa12345678ABCDEFG"
-  })
-  provider_json = jsonencode({
-    "type" : "PUSH",
-    "configuration" : {
-      "fcm" : {
-        "id" : "ppcABCDEFGH12345678"
-      }
-    }
-  })
+key    = "custom_app"
+name =  "VCRTestCustomAppAuthRenamed"
+status = "ACTIVE"
+agree_to_terms = "true"
+legacy_ignore_name = false
+settings = jsonencode({
+    "userVerification": "PREFERRED",
+    "appInstanceId": "0oaspGHIJKL12345678"
+    })
+provider_json = jsonencode({
+    "type": "PUSH",
+    "configuration": {
+        "fcm": {
+            "id": "ppcrb12345678ABCDEF"
+            }
+        }      
+    })
 }

examples/resources/okta_authenticator/custom_otp_with_method.tf

@@ -12,21 +12,5 @@ resource "okta_authenticator" "okta_verify" {
     "userVerificationMethods" : ["BIOMETRICS"]
   })
   status = "ACTIVE"
-
-  # Optional: Control specific authentication methods
-  method {
-    type   = "push"
-    status = "ACTIVE"
-  }
-
-  method {
-    type   = "totp"
-    status = "ACTIVE"
-  }
-
-  method {
-    type   = "signed_nonce"
-    status = "ACTIVE"
-  }
 }