README.md

IBM Security Verify module

This module is used to create an IBM Security Verify instance to provide Single Sign-On (SSO), multi-factor authentication (MFA), identity governance, and identity lifecycle controls for internal (workforce) and external (consumer) user types.

Note: As of now, this Terraform module only supports the creation of an IBM Security Verify instance. It does not yet support attaching applications to provide identity and access management services.

For more information, see IBM Security Verify Documentation Hub

Overview

• terraform-ibm-security-verify
• Examples
  • Basic example
• Contributing

terraform-ibm-security-verify

Usage

module "isv_instance" {
  source            = "terraform-ibm-modules/security-verify/ibm"
  version           = "X.X.X" # Replace "X.X.X" with a release version to lock into a specific release
  resource_group_id = "a8cff104f1764e98aac9ab879198230a" # pragma: allowlist secret
  instance_name     = "ibm-security-verify-instance"
  hostname          = "my-security-verify-tenant"
  access_tags       = ["env:dev","env:test"]
  tags              = ["dev", "qa"]
  region            = "eu-de"
}

Required access policies

You need the following permissions to run this module:

• Service
  • Resource group only
    • Viewer access on the specific resource group
  • IBM Verify service
    • Editor platform access

Requirements

Name	Version
terraform	>= 1.9.0
ibm	>= 1.65.0, < 2.0.0

Modules

No modules.

Resources

Name	Type
ibm_resource_instance.isv_instance	resource
ibm_resource_tag.access_tags	resource

Inputs

Name	Description	Type	Default	Required
access_tags	A list of access tags to apply to the resources created by the module. For more information, see https://cloud.ibm.com/docs/account?topic=account-access-tags-tutorial.	list(string)	[]	no
hostname	The hostname of the IBM Security Verify instance which is used to construct the Dashboard/Account URL in the format: https://.verify.ibm.com/ui/admin/. Note: After the service instance creation returns, the instance may take up to two minutes to be available.	string	n/a	yes
instance_name	The name of the IBM Security Verify instance.	string	n/a	yes
plan	The pricing plan of the IBM Security Verify instance.Possible values: verify-lite	string	"verify-lite"	no
region	The IBM Cloud region where the IBM Security Verify resource is created.Possible values: eu-de (Frankfurt)	string	"eu-de"	no
resource_group_id	The ID of the resource group where the IBM Security Verify instance is created.	string	n/a	yes
resource_tags	A list of tags to apply to resources created by the module.	list(string)	[]	no

Outputs

Name	Description
account_url	The IBM Security Verify Account URL
crn	The IBM Security Verify instance CRN.
guid	The globally unique identifier of the IBM Security Verify instance.
isv_instance_name	The name of the IBM Security Verify instance.

Contributing

You can report issues and request features for this module in GitHub issues in the module repo. See Report an issue or request a feature.

To set up your local development environment, see Local development setup in the project documentation.