Remove computed property from set_user_root_attributes

auth0 · May 25, 2023 · 943cd23 · 943cd23
1 parent 622a7e4
commit 943cd23
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 8 deletions.
diff --git a/examples/resources/auth0_connection/resource_with_azure_ad.tf b/examples/resources/auth0_connection/resource_with_azure_ad.tf
@@ -24,7 +24,7 @@ resource "auth0_connection" "azure_ad" {
       "ext_groups",
       "ext_profile"
     ]
-    set_user_root_attributes               = "on_each_login"
+    set_user_root_attributes               = "on_first_login" # Remove this property if you want these to sync on each login.
     should_trust_email_verified_connection = "never_set_emails_as_verified"
     upstream_params = jsonencode({
       "screen_name" : {

diff --git a/internal/auth0/connection/schema.go b/internal/auth0/connection/schema.go
@@ -503,19 +503,18 @@ var resourceSchema = map[string]*schema.Schema{
 				},
 
 				"set_user_root_attributes": {
-					Type:     schema.TypeString,
-					Optional: true,
-					Computed: true,
-					ValidateFunc: validation.StringInSlice([]string{
-						"on_each_login", "on_first_login",
-					}, false),
+					Type:         schema.TypeString,
+					Optional:     true,
+					ValidateFunc: validation.StringInSlice([]string{"on_each_login", "on_first_login"}, false),
 					Description: "Determines whether the 'name', 'given_name', 'family_name', 'nickname', " +
 						"and 'picture' attributes can be independently updated when using an external IdP. " +
 						"Possible values are 'on_each_login' (default value, it configures the connection to " +
 						"automatically update the root attributes from the external IdP with each user login. " +
 						"When this setting is used, root attributes cannot be independently updated), " +
 						"'on_first_login' (configures the connection to only set the root attributes on " +
-						"first login, allowing them to be independently updated thereafter).",
+						"first login, allowing them to be independently updated thereafter). For Microsoft Azure AD " +
+						"connections (`strategy = waad`), remove this property from your config to have the user " +
+						"profile attributes sync at each login.",
 				},
 				"non_persistent_attrs": {
 					Type:     schema.TypeSet,