add federate option in vpn

main.tf

@@ -131,7 +131,9 @@ resource "aws_ec2_client_vpn_endpoint" "default" {
   client_cidr_block      = var.cidr_block
 
   authentication_options {
-    type                       = "certificate-authentication"
+    type                            = var.type
+    saml_provider_arn               = var.saml_arn
+    self_service_saml_provider_arn  = var.self_saml_arn
     root_certificate_chain_arn = join("", aws_acm_certificate.root.*.arn)
   }
 

variables.tf

@@ -86,4 +86,22 @@ variable "network_cidr" {
   type        = list(any)
   default     = []
   description = "Client Network CIDR"
+}
+
+variable "type" {
+  type        = string
+  default     = "certificate-authentication"
+  description = "The type of client authentication to be used. "
+}
+
+variable "saml_arn" {
+  type        = string
+  default     = ""
+  description = "The ARN of the IAM SAML identity provider. "
+}
+
+variable "self_saml_arn" {
+  type        = string
+  default     = ""
+  description = "The ARN of the IAM SAML identity provider for the self service portal. "
 }