For an Okta SAML app, a valid property value for idpIssuer is http://www.okta.com/${org.externalKey}, however Pulumi tries to evaluate that as a variable. I tried to encapsulate it with quotes without luck - any idea how to escape those values?

resources:  
  example:
    type: okta:app:Saml
    properties:
	  ...
      idpIssuer: "<http://www.okta.com/${org.externalKey}>"
      subjectNameIdTemplate: "${user.userName}"
      userNameTemplate: "${source.samAccountName}"	  
	  ...

could you file an issue in github.com/pulumi/pulumi-yaml

Just tried doing $$ and it has seemed to work - validating.

Using

$$

to escape is correct, it is in the docs but a bit easy to overlook