Cannot modify the default authentication policy

[MScottBlake]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform Version

1.9.8
1.10.1

Affected Resource(s)

• okta_app_signon_policy

Terraform Configuration Files

resource "okta_app_signon_policy" "this" {
  name        = var.name
  description = var.description

  lifecycle {
    create_before_destroy = true
  }
}

Debug Output

On change, I might get something similar to this when I run terraform plan.

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
Terraform will perform the following actions:
  # module.standard_policy.okta_app_signon_policy.this will be updated in-place
  ~ resource "okta_app_signon_policy" "this" {
      ~ description = "Our standard authentication policy. Users must use a managed device on macOS/Windows and a registered device on Android/iOS. Managed by Terraform at https://examplle.com/okta/authentication-policies." -> "Our standard authentication policy. Users must use a managed device on macOS/Windows and a registered device on Android/iOS. Managed by Terraform at https://example.com/iam/okta-authentication-policies."
        id          = "********************"
        name        = "Standard Policy"
    }
Plan: 0 to add, 1 to change, 0 to destroy.

Expected Behavior

The authentication policy should have a new description.

Can this be done in the Admin UI?

Yes

Can this be done in the actual API call?

I don't know

Actual Behavior

module.standard_policy.okta_app_signon_policy.this: Modifying... [id=********************]
╷
│ Error: failed to update authentication policy: the API returned an error: Cannot modify the priority attribute because it is read-only.
│ 
│   with module.standard_policy.okta_app_signon_policy.this,
│   on okta_authentication_policy/main.tf line 1, in resource "okta_app_signon_policy" "this":
│    1: resource "okta_app_signon_policy" "this" {

Steps to Reproduce

1. Import the default authentication policy.
2. Modify a value
3. terraform apply