okta_trusted_server not reflecting okta api status

[Caribosaurus]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform Version

Terraform v1.10.4
on darwin_arm64

• provider registry.terraform.io/hashicorp/local v2.5.2
• provider registry.terraform.io/hashicorp/random v3.6.3
• provider registry.terraform.io/hashicorp/tls v4.0.6
• provider registry.terraform.io/iwarapter/jwks v0.1.0
• provider registry.terraform.io/okta/okta v4.13.1

Affected Resource(s)

okta_trusted_server

• okta_xxx

Terraform Configuration Files

resource "okta_trusted_server" "external_partners_trusted_servers" {
  auth_server_id = resource.okta_auth_server.external_partners_server.id
  trusted        = []
}

Expected Behavior

I created the ressource in terraform (with a trusted server).
I removed the trusted server in the dasboard
I removed the trusted server in my config.
Plan shows No changes. Your infrastructure matches the configuration.

Can this be done in the Admin UI?

yes

Can this be done in the actual API call?

yes

Actual Behavior

I created the ressource in terraform (with a trusted server).
I removed the trusted server in the dasboard
I removed the trusted server in my config.
Plan shows the trusted server as to be removed
Apply returns a 404 error

│ Error: failed to delete trusted server aus12id6i0cJ7p0MA0h8
│ 
│   with module.external-partners.okta_trusted_server.external_partners_trusted_servers,
│   on modules/external-partners/main.tf line 55, in resource "okta_trusted_server" "external_partners_trusted_servers":
│   55: resource "okta_trusted_server" "external_partners_trusted_servers" {
│ 
│ 404 Not Found

Other mentions

The creation does not work for existing trusted servers. Even with a matching config were the trusted servers are the same in the dashboard and in the tf config, it shows the creation as adding it to the state and return http 400 (since the trusted server already is trusted).
I was kind of expecting this but there is no option to import. Currently the only way to start tracking the trusted servers is by removing it completely from the dashboard and only adding it in tf. This causes down time in prod