Fixes #287

CHANGELOG.md

@@ -218,3 +218,9 @@ ENHANCEMENTS:
 BUG FIXES:
 
 * Remove resource from state on 404. [GH-269]
+
+## 3.0.29
+
+BUG FIXES:
+
+* Ensure we safely sync auth server properties. [GH-299]

examples/okta_auth_server/dependency.tf

@@ -6,4 +6,5 @@ resource okta_auth_server test {
 resource okta_auth_server test1 {
   name                      = "testAcc_replace_with_uuid1"
   audiences                 = ["api://selfservice_client_2"]
+  credentials_rotation_mode = "MANUAL"
 }

okta/resource_okta_auth_server.go

@@ -99,13 +99,23 @@ func buildAuthServer(d *schema.ResourceData) *sdk.AuthorizationServer {
 
 func resourceAuthServerCreate(d *schema.ResourceData, m interface{}) error {
 	authServer := buildAuthServer(d)
+
 	responseAuthServer, _, err := getSupplementFromMetadata(m).CreateAuthorizationServer(*authServer, nil)
 	if err != nil {
 		return err
 	}
 
 	d.SetId(responseAuthServer.Id)
 
+	if d.Get("credentials_rotation_mode").(string) == "MANUAL" {
+		// Auth servers can only be set to manual on update. No clue why.
+		err = resourceAuthServerUpdate(d, m)
+
+		if err != nil {
+			return err
+		}
+	}
+
 	return resourceAuthServerRead(d, m)
 }
 

okta/resource_okta_auth_server_test.go

@@ -155,7 +155,7 @@ func TestAccOktaAuthServer_gh299(t *testing.T) {
 
 					resource.TestCheckResourceAttr(resource2Name, "name", name+"1"),
 					resource.TestCheckResourceAttr(resource2Name, "audiences.#", "1"),
-					resource.TestCheckResourceAttr(resource2Name, "credentials_rotation_mode", "AUTO"),
+					resource.TestCheckResourceAttr(resource2Name, "credentials_rotation_mode", "MANUAL"),
 				),
 			},
 		},