New data source: okta_app_user_profile

examples/okta_app_user_profile/datasource.tf

@@ -0,0 +1,47 @@
+resource "okta_app_oauth" "test" {
+  label          = "testAcc_replace_with_uuid"
+  type           = "web"
+  grant_types    = ["implicit", "authorization_code"]
+  redirect_uris  = ["http://d.com/"]
+  response_types = ["code", "token", "id_token"]
+  issuer_mode    = "ORG_URL"
+
+  lifecycle {
+    ignore_changes = [users, groups]
+  }
+}
+
+resource "okta_user" "test" {
+  first_name = "TestAcc"
+  last_name  = "Smith"
+  login      = "[email protected]"
+  email      = "[email protected]"
+}
+
+resource "okta_app_user_schema_property" "test" {
+  app_id      = okta_app_oauth.test.id
+  index       = "testCustom"
+  title       = "terraform acceptance test"
+  type        = "string"
+  description = "terraform acceptance test updated"
+  required    = true
+  master      = "OKTA"
+  scope       = "SELF"
+}
+
+resource "okta_app_user" "test" {
+  app_id   = okta_app_oauth.test.id
+  user_id  = okta_user.test.id
+  username = okta_user.test.email
+
+  profile = <<JSON
+{"testCustom":"testing"}
+JSON
+
+  depends_on = [okta_app_user_schema_property.test]
+}
+
+data "okta_app_user_profile" "test" {
+  app_id = okta_app_oauth.test.id
+  user_id = okta_user.test.id
+}

okta/data_source_okta_app_user_profile.go

@@ -0,0 +1,60 @@
+package okta
+
+import (
+	"context"
+	"encoding/json"
+
+	"github.com/hashicorp/terraform-plugin-sdk/v2/diag"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+	"github.com/okta/okta-sdk-golang/v2/okta"
+	"github.com/okta/okta-sdk-golang/v2/okta/query"
+)
+
+func dataSourceAppUserProfile() *schema.Resource {
+	return &schema.Resource{
+		ReadContext: dataSourceAppUserProfileRead,
+		Schema: map[string]*schema.Schema{
+			"app_id": {
+				Type:        schema.TypeString,
+				Required:    true,
+				Description: "ID of the Okta App being queried for",
+				ForceNew:    true,
+			},
+			"user_id": {
+				Type:        schema.TypeString,
+				Required:    true,
+				Description: "ID of the User associated with the application",
+				ForceNew:    true,
+			},
+			"profile": {
+				Type:        schema.TypeString,
+				Computed:    true,
+				Description: "The application profile for the user",
+				ForceNew:    true,
+			},
+		},
+	}
+}
+
+func dataSourceAppUserProfileRead(ctx context.Context, d *schema.ResourceData, m interface{}) diag.Diagnostics {
+	client := getOktaClientFromMetadata(m)
+	appId := d.Get("app_id").(string)
+	userId := d.Get("user_id").(string)
+
+	var appUser *okta.AppUser
+
+	appUser, _, err := client.Application.GetApplicationUser(ctx, appId, userId, &query.Params{})
+	if err != nil {
+		return diag.Errorf("unable to get profile for user (%s) assisgned to app (%s): %s", userId, appId, err)
+	}
+
+	jsonProfile, err := json.Marshal(appUser.Profile)
+	if err != nil {
+		return diag.Errorf("failed to marshal app user profile to JSON: %v", err)
+	}
+	_ = d.Set("profile", string(jsonProfile))
+
+	_ = d.Set("user_id", userId)
+	d.SetId(appId)
+	return nil
+}

okta/data_source_okta_app_user_profile_test.go

@@ -0,0 +1,28 @@
+package okta
+
+import (
+	"testing"
+
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/acctest"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+)
+
+func TestAccOktaDataSourceAppUserProfile_read(t *testing.T) {
+	ri := acctest.RandInt()
+	mgr := newFixtureManager("okta_app_user_profile")
+	config := mgr.GetFixtures("datasource.tf", ri, t)
+
+	resource.Test(t, resource.TestCase{
+		PreCheck:          testAccPreCheck(t),
+		ErrorCheck:        testAccErrorChecks(t),
+		ProviderFactories: testAccProvidersFactories,
+		Steps: []resource.TestStep{
+			{
+				Config: config,
+				Check: resource.ComposeTestCheckFunc(
+					resource.TestCheckResourceAttrSet("data.okta_app_user_profile.test", "profile"),
+				),
+			},
+		},
+	})
+}

okta/provider.go

@@ -379,6 +379,7 @@ func Provider() *schema.Provider {
 			appSaml:                  dataSourceAppSaml(),
 			appSignOnPolicy:          dataSourceAppSignOnPolicy(),
 			appUserAssignments:       dataSourceAppUserAssignments(),
+			appUserProfile:           dataSourceAppUserProfile(),
 			authenticator:            dataSourceAuthenticator(),
 			authServer:               dataSourceAuthServer(),
 			authServerClaim:          dataSourceAuthServerClaim(),

website/docs/d/app_user_profile.html.markdown

@@ -0,0 +1,48 @@
+---
+layout: 'okta'
+page_title: 'Okta: okta_app_user_profile'
+sidebar_current: 'docs-okta-datasource-app-user-profile'
+description: |-
+Get the application profile for a user assigned to an Okta application.
+---
+
+
+# okta_app_user_profile
+
+Use this data source to get the app profile for a user assigned to the given Okta application (by ID). This allows you to retrieve
+custom app profile attributes for use within Terraform.
+
+## Example Usage
+
+```hcl
+data "okta_app" "example" {
+  label = "Example App"
+
+  skip_groups = true
+  skip_users  = true
+}
+
+data "okta_user" "example" {
+  user_id = "00u22mtxlrJ8YkzXQ357"
+}
+
+data "okta_app_user_profile" "test" {
+  app_id  = data.okta_app.example.id
+  user_id = data.okta_user.example.id
+}
+```
+
+## Argument Reference
+
+- `app_id` - (Required) The ID of the Okta application you want to retrieve the user profile for.
+
+- `user_id` - (Required) The ID of the user you want to retrieve the user profile for.
+
+## Attribute Reference
+
+- `app_id` - ID of the application.
+
+- `user_id` - ID of the user.
+
+- `profile` - The profile for the user.
+