Skip to content
Cloudflare API
Start here
API Reference
Zero Trust

Risk Scoring

Risk ScoringBehaviours

resource cloudflare_zero_trust_risk_behavior

required Expand Collapse
account_id: String
behaviors: Map[Attributes]
enabled: Bool
risk_level: String

cloudflare_zero_trust_risk_behavior

resource "cloudflare_zero_trust_risk_behavior" "example_zero_trust_risk_behavior" {
  account_id = "account_id"
  behaviors = {
    foo = {
      enabled = true
      risk_level = "low"
    }
  }
}

data cloudflare_zero_trust_risk_behavior

required Expand Collapse
account_id: String
computed Expand Collapse
behaviors: Map[Attributes]
description: String
enabled: Bool
name: String
risk_level: String

cloudflare_zero_trust_risk_behavior

data "cloudflare_zero_trust_risk_behavior" "example_zero_trust_risk_behavior" {
  account_id = "account_id"
}

Risk ScoringIntegrations

resource cloudflare_zero_trust_risk_scoring_integration

required Expand Collapse
account_id: String
integration_type: String
tenant_url: String

The base url of the tenant, e.g. "https://tenant.okta.com".

optional Expand Collapse
active?: Bool

Whether this integration is enabled. If disabled, no risk changes will be exported to the third-party.

reference_id?: String

A reference id that can be supplied by the client. Currently this should be set to the Access-Okta IDP ID (a UUIDv4). https://developers.cloudflare.com/api/operations/access-identity-providers-get-an-access-identity-provider

computed Expand Collapse
id: String

The id of the integration, a UUIDv4.

account_tag: String

The Cloudflare account tag.

created_at: Time

When the integration was created in RFC3339 format.

well_known_url: String

The URL for the Shared Signals Framework configuration, e.g. "/.well-known/sse-configuration/{integration_uuid}/". https://openid.net/specs/openid-sse-framework-1_0.html#rfc.section.6.2.1.

cloudflare_zero_trust_risk_scoring_integration

resource "cloudflare_zero_trust_risk_scoring_integration" "example_zero_trust_risk_scoring_integration" {
  account_id = "account_id"
  integration_type = "Okta"
  tenant_url = "https://example.com"
  reference_id = "reference_id"
}

data cloudflare_zero_trust_risk_scoring_integration

required Expand Collapse
integration_id: String
account_id: String
computed Expand Collapse
id: String
account_tag: String

The Cloudflare account tag.

active: Bool

Whether this integration is enabled and should export changes in risk score.

created_at: Time

When the integration was created in RFC3339 format.

integration_type: String
reference_id: String

A reference ID defined by the client. Should be set to the Access-Okta IDP integration ID. Useful when the risk-score integration needs to be associated with a secondary asset and recalled using that ID.

tenant_url: String

The base URL for the tenant. E.g. "https://tenant.okta.com".

well_known_url: String

The URL for the Shared Signals Framework configuration, e.g. "/.well-known/sse-configuration/{integration_uuid}/". https://openid.net/specs/openid-sse-framework-1_0.html#rfc.section.6.2.1.

cloudflare_zero_trust_risk_scoring_integration

data "cloudflare_zero_trust_risk_scoring_integration" "example_zero_trust_risk_scoring_integration" {
  account_id = "account_id"
  integration_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_risk_scoring_integrations

required Expand Collapse
account_id: String
optional Expand Collapse
max_items?: Int64

Max items to fetch, default: 1000

computed Expand Collapse
result: List[Attributes]

The items returned by the data source

id: String

The id of the integration, a UUIDv4.

account_tag: String

The Cloudflare account tag.

active: Bool

Whether this integration is enabled and should export changes in risk score.

created_at: Time

When the integration was created in RFC3339 format.

integration_type: String
reference_id: String

A reference ID defined by the client. Should be set to the Access-Okta IDP integration ID. Useful when the risk-score integration needs to be associated with a secondary asset and recalled using that ID.

tenant_url: String

The base URL for the tenant. E.g. "https://tenant.okta.com".

well_known_url: String

The URL for the Shared Signals Framework configuration, e.g. "/.well-known/sse-configuration/{integration_uuid}/". https://openid.net/specs/openid-sse-framework-1_0.html#rfc.section.6.2.1.

cloudflare_zero_trust_risk_scoring_integrations

data "cloudflare_zero_trust_risk_scoring_integrations" "example_zero_trust_risk_scoring_integrations" {
  account_id = "account_id"
}