authentik-api 2026.2.4 → 2026.5.0.rc1

data/lib/authentik/api/models/saml_provider.rb

@@ -57,8 +57,8 @@ module Authentik::Api
     # Value of the audience restriction field of the assertion. When left empty, no audience restriction will be added.
     attr_accessor :audience
 
-    # Also known as EntityID
-    attr_accessor :issuer
+    # Also known as EntityID. Providing a value overrides the default issuer generated by authentik.
+    attr_accessor :issuer_override
 
     # Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3).
     attr_accessor :assertion_valid_not_before
@@ -94,6 +94,8 @@ module Authentik::Api
 
     attr_accessor :sign_logout_request
 
+    attr_accessor :sign_logout_response
+
     # This determines how authentik sends the response back to the Service Provider.
     attr_accessor :sp_binding
 
@@ -111,6 +113,15 @@ module Authentik::Api
     # Get metadata download URL
     attr_accessor :url_download_metadata
 
+    # Get Issuer/EntityID URL
+    attr_accessor :url_issuer
+
+    # Get unified SAML endpoint URL (handles SSO and SLO)
+    attr_accessor :url_unified
+
+    # Get IdP-initiated SAML URL
+    attr_accessor :url_unified_init
+
     # Get SSO Post URL
     attr_accessor :url_sso_post
 
@@ -168,7 +179,7 @@ module Authentik::Api
         :'acs_url' => :'acs_url',
         :'sls_url' => :'sls_url',
         :'audience' => :'audience',
-        :'issuer' => :'issuer',
+        :'issuer_override' => :'issuer_override',
         :'assertion_valid_not_before' => :'assertion_valid_not_before',
         :'assertion_valid_not_on_or_after' => :'assertion_valid_not_on_or_after',
         :'session_valid_not_on_or_after' => :'session_valid_not_on_or_after',
@@ -182,12 +193,16 @@ module Authentik::Api
         :'sign_assertion' => :'sign_assertion',
         :'sign_response' => :'sign_response',
         :'sign_logout_request' => :'sign_logout_request',
+        :'sign_logout_response' => :'sign_logout_response',
         :'sp_binding' => :'sp_binding',
         :'sls_binding' => :'sls_binding',
         :'logout_method' => :'logout_method',
         :'default_relay_state' => :'default_relay_state',
         :'default_name_id_policy' => :'default_name_id_policy',
         :'url_download_metadata' => :'url_download_metadata',
+        :'url_issuer' => :'url_issuer',
+        :'url_unified' => :'url_unified',
+        :'url_unified_init' => :'url_unified_init',
         :'url_sso_post' => :'url_sso_post',
         :'url_sso_redirect' => :'url_sso_redirect',
         :'url_sso_init' => :'url_sso_init',
@@ -226,7 +241,7 @@ module Authentik::Api
         :'acs_url' => :'String',
         :'sls_url' => :'String',
         :'audience' => :'String',
-        :'issuer' => :'String',
+        :'issuer_override' => :'String',
         :'assertion_valid_not_before' => :'String',
         :'assertion_valid_not_on_or_after' => :'String',
         :'session_valid_not_on_or_after' => :'String',
@@ -240,12 +255,16 @@ module Authentik::Api
         :'sign_assertion' => :'Boolean',
         :'sign_response' => :'Boolean',
         :'sign_logout_request' => :'Boolean',
+        :'sign_logout_response' => :'Boolean',
         :'sp_binding' => :'SAMLBindingsEnum',
         :'sls_binding' => :'SAMLBindingsEnum',
         :'logout_method' => :'SAMLLogoutMethods',
         :'default_relay_state' => :'String',
         :'default_name_id_policy' => :'SAMLNameIDPolicyEnum',
         :'url_download_metadata' => :'String',
+        :'url_issuer' => :'String',
+        :'url_unified' => :'String',
+        :'url_unified_init' => :'String',
         :'url_sso_post' => :'String',
         :'url_sso_redirect' => :'String',
         :'url_sso_init' => :'String',
@@ -382,8 +401,8 @@ module Authentik::Api
         self.audience = attributes[:'audience']
       end
 
-      if attributes.key?(:'issuer')
-        self.issuer = attributes[:'issuer']
+      if attributes.key?(:'issuer_override')
+        self.issuer_override = attributes[:'issuer_override']
       end
 
       if attributes.key?(:'assertion_valid_not_before')
@@ -438,6 +457,10 @@ module Authentik::Api
         self.sign_logout_request = attributes[:'sign_logout_request']
       end
 
+      if attributes.key?(:'sign_logout_response')
+        self.sign_logout_response = attributes[:'sign_logout_response']
+      end
+
       if attributes.key?(:'sp_binding')
         self.sp_binding = attributes[:'sp_binding']
       end
@@ -464,6 +487,24 @@ module Authentik::Api
         self.url_download_metadata = nil
       end
 
+      if attributes.key?(:'url_issuer')
+        self.url_issuer = attributes[:'url_issuer']
+      else
+        self.url_issuer = nil
+      end
+
+      if attributes.key?(:'url_unified')
+        self.url_unified = attributes[:'url_unified']
+      else
+        self.url_unified = nil
+      end
+
+      if attributes.key?(:'url_unified_init')
+        self.url_unified_init = attributes[:'url_unified_init']
+      else
+        self.url_unified_init = nil
+      end
+
       if attributes.key?(:'url_sso_post')
         self.url_sso_post = attributes[:'url_sso_post']
       else
@@ -540,6 +581,18 @@ module Authentik::Api
         invalid_properties.push('invalid value for "url_download_metadata", url_download_metadata cannot be nil.')
       end
 
+      if @url_issuer.nil?
+        invalid_properties.push('invalid value for "url_issuer", url_issuer cannot be nil.')
+      end
+
+      if @url_unified.nil?
+        invalid_properties.push('invalid value for "url_unified", url_unified cannot be nil.')
+      end
+
+      if @url_unified_init.nil?
+        invalid_properties.push('invalid value for "url_unified_init", url_unified_init cannot be nil.')
+      end
+
       if @url_sso_post.nil?
         invalid_properties.push('invalid value for "url_sso_post", url_sso_post cannot be nil.')
       end
@@ -577,6 +630,9 @@ module Authentik::Api
       return false if @meta_model_name.nil?
       return false if @acs_url.nil?
       return false if @url_download_metadata.nil?
+      return false if @url_issuer.nil?
+      return false if @url_unified.nil?
+      return false if @url_unified_init.nil?
       return false if @url_sso_post.nil?
       return false if @url_sso_redirect.nil?
       return false if @url_sso_init.nil?
@@ -685,6 +741,36 @@ module Authentik::Api
       @url_download_metadata = url_download_metadata
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] url_issuer Value to be assigned
+    def url_issuer=(url_issuer)
+      if url_issuer.nil?
+        fail ArgumentError, 'url_issuer cannot be nil'
+      end
+
+      @url_issuer = url_issuer
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] url_unified Value to be assigned
+    def url_unified=(url_unified)
+      if url_unified.nil?
+        fail ArgumentError, 'url_unified cannot be nil'
+      end
+
+      @url_unified = url_unified
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] url_unified_init Value to be assigned
+    def url_unified_init=(url_unified_init)
+      if url_unified_init.nil?
+        fail ArgumentError, 'url_unified_init cannot be nil'
+      end
+
+      @url_unified_init = url_unified_init
+    end
+
     # Custom attribute writer method with validation
     # @param [Object] url_sso_post Value to be assigned
     def url_sso_post=(url_sso_post)
@@ -757,7 +843,7 @@ module Authentik::Api
           acs_url == o.acs_url &&
           sls_url == o.sls_url &&
           audience == o.audience &&
-          issuer == o.issuer &&
+          issuer_override == o.issuer_override &&
           assertion_valid_not_before == o.assertion_valid_not_before &&
           assertion_valid_not_on_or_after == o.assertion_valid_not_on_or_after &&
           session_valid_not_on_or_after == o.session_valid_not_on_or_after &&
@@ -771,12 +857,16 @@ module Authentik::Api
           sign_assertion == o.sign_assertion &&
           sign_response == o.sign_response &&
           sign_logout_request == o.sign_logout_request &&
+          sign_logout_response == o.sign_logout_response &&
           sp_binding == o.sp_binding &&
           sls_binding == o.sls_binding &&
           logout_method == o.logout_method &&
           default_relay_state == o.default_relay_state &&
           default_name_id_policy == o.default_name_id_policy &&
           url_download_metadata == o.url_download_metadata &&
+          url_issuer == o.url_issuer &&
+          url_unified == o.url_unified &&
+          url_unified_init == o.url_unified_init &&
           url_sso_post == o.url_sso_post &&
           url_sso_redirect == o.url_sso_redirect &&
           url_sso_init == o.url_sso_init &&
@@ -793,7 +883,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, component, assigned_application_slug, assigned_application_name, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, acs_url, sls_url, audience, issuer, assertion_valid_not_before, assertion_valid_not_on_or_after, session_valid_not_on_or_after, name_id_mapping, authn_context_class_ref_mapping, digest_algorithm, signature_algorithm, signing_kp, verification_kp, encryption_kp, sign_assertion, sign_response, sign_logout_request, sp_binding, sls_binding, logout_method, default_relay_state, default_name_id_policy, url_download_metadata, url_sso_post, url_sso_redirect, url_sso_init, url_slo_post, url_slo_redirect].hash
+      [pk, name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, component, assigned_application_slug, assigned_application_name, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, acs_url, sls_url, audience, issuer_override, assertion_valid_not_before, assertion_valid_not_on_or_after, session_valid_not_on_or_after, name_id_mapping, authn_context_class_ref_mapping, digest_algorithm, signature_algorithm, signing_kp, verification_kp, encryption_kp, sign_assertion, sign_response, sign_logout_request, sign_logout_response, sp_binding, sls_binding, logout_method, default_relay_state, default_name_id_policy, url_download_metadata, url_issuer, url_unified, url_unified_init, url_sso_post, url_sso_redirect, url_sso_init, url_slo_post, url_slo_redirect].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/saml_provider_request.rb

@@ -31,8 +31,8 @@ module Authentik::Api
     # Value of the audience restriction field of the assertion. When left empty, no audience restriction will be added.
     attr_accessor :audience
 
-    # Also known as EntityID
-    attr_accessor :issuer
+    # Also known as EntityID. Providing a value overrides the default issuer generated by authentik.
+    attr_accessor :issuer_override
 
     # Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3).
     attr_accessor :assertion_valid_not_before
@@ -68,6 +68,8 @@ module Authentik::Api
 
     attr_accessor :sign_logout_request
 
+    attr_accessor :sign_logout_response
+
     # This determines how authentik sends the response back to the Service Provider.
     attr_accessor :sp_binding
 
@@ -115,7 +117,7 @@ module Authentik::Api
         :'acs_url' => :'acs_url',
         :'sls_url' => :'sls_url',
         :'audience' => :'audience',
-        :'issuer' => :'issuer',
+        :'issuer_override' => :'issuer_override',
         :'assertion_valid_not_before' => :'assertion_valid_not_before',
         :'assertion_valid_not_on_or_after' => :'assertion_valid_not_on_or_after',
         :'session_valid_not_on_or_after' => :'session_valid_not_on_or_after',
@@ -129,6 +131,7 @@ module Authentik::Api
         :'sign_assertion' => :'sign_assertion',
         :'sign_response' => :'sign_response',
         :'sign_logout_request' => :'sign_logout_request',
+        :'sign_logout_response' => :'sign_logout_response',
         :'sp_binding' => :'sp_binding',
         :'sls_binding' => :'sls_binding',
         :'logout_method' => :'logout_method',
@@ -158,7 +161,7 @@ module Authentik::Api
         :'acs_url' => :'String',
         :'sls_url' => :'String',
         :'audience' => :'String',
-        :'issuer' => :'String',
+        :'issuer_override' => :'String',
         :'assertion_valid_not_before' => :'String',
         :'assertion_valid_not_on_or_after' => :'String',
         :'session_valid_not_on_or_after' => :'String',
@@ -172,6 +175,7 @@ module Authentik::Api
         :'sign_assertion' => :'Boolean',
         :'sign_response' => :'Boolean',
         :'sign_logout_request' => :'Boolean',
+        :'sign_logout_response' => :'Boolean',
         :'sp_binding' => :'SAMLBindingsEnum',
         :'sls_binding' => :'SAMLBindingsEnum',
         :'logout_method' => :'SAMLLogoutMethods',
@@ -250,8 +254,8 @@ module Authentik::Api
         self.audience = attributes[:'audience']
       end
 
-      if attributes.key?(:'issuer')
-        self.issuer = attributes[:'issuer']
+      if attributes.key?(:'issuer_override')
+        self.issuer_override = attributes[:'issuer_override']
       end
 
       if attributes.key?(:'assertion_valid_not_before')
@@ -306,6 +310,10 @@ module Authentik::Api
         self.sign_logout_request = attributes[:'sign_logout_request']
       end
 
+      if attributes.key?(:'sign_logout_response')
+        self.sign_logout_response = attributes[:'sign_logout_response']
+      end
+
       if attributes.key?(:'sp_binding')
         self.sp_binding = attributes[:'sp_binding']
       end
@@ -356,10 +364,6 @@ module Authentik::Api
         invalid_properties.push('invalid value for "acs_url", the character length must be greater than or equal to 1.')
       end
 
-      if !@issuer.nil? && @issuer.to_s.length < 1
-        invalid_properties.push('invalid value for "issuer", the character length must be greater than or equal to 1.')
-      end
-
       if !@assertion_valid_not_before.nil? && @assertion_valid_not_before.to_s.length < 1
         invalid_properties.push('invalid value for "assertion_valid_not_before", the character length must be greater than or equal to 1.')
       end
@@ -385,7 +389,6 @@ module Authentik::Api
       return false if @invalidation_flow.nil?
       return false if @acs_url.nil?
       return false if @acs_url.to_s.length < 1
-      return false if !@issuer.nil? && @issuer.to_s.length < 1
       return false if !@assertion_valid_not_before.nil? && @assertion_valid_not_before.to_s.length < 1
       return false if !@assertion_valid_not_on_or_after.nil? && @assertion_valid_not_on_or_after.to_s.length < 1
       return false if !@session_valid_not_on_or_after.nil? && @session_valid_not_on_or_after.to_s.length < 1
@@ -440,20 +443,6 @@ module Authentik::Api
       @acs_url = acs_url
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] issuer Value to be assigned
-    def issuer=(issuer)
-      if issuer.nil?
-        fail ArgumentError, 'issuer cannot be nil'
-      end
-
-      if issuer.to_s.length < 1
-        fail ArgumentError, 'invalid value for "issuer", the character length must be greater than or equal to 1.'
-      end
-
-      @issuer = issuer
-    end
-
     # Custom attribute writer method with validation
     # @param [Object] assertion_valid_not_before Value to be assigned
     def assertion_valid_not_before=(assertion_valid_not_before)
@@ -509,7 +498,7 @@ module Authentik::Api
           acs_url == o.acs_url &&
           sls_url == o.sls_url &&
           audience == o.audience &&
-          issuer == o.issuer &&
+          issuer_override == o.issuer_override &&
           assertion_valid_not_before == o.assertion_valid_not_before &&
           assertion_valid_not_on_or_after == o.assertion_valid_not_on_or_after &&
           session_valid_not_on_or_after == o.session_valid_not_on_or_after &&
@@ -523,6 +512,7 @@ module Authentik::Api
           sign_assertion == o.sign_assertion &&
           sign_response == o.sign_response &&
           sign_logout_request == o.sign_logout_request &&
+          sign_logout_response == o.sign_logout_response &&
           sp_binding == o.sp_binding &&
           sls_binding == o.sls_binding &&
           logout_method == o.logout_method &&
@@ -539,7 +529,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, acs_url, sls_url, audience, issuer, assertion_valid_not_before, assertion_valid_not_on_or_after, session_valid_not_on_or_after, name_id_mapping, authn_context_class_ref_mapping, digest_algorithm, signature_algorithm, signing_kp, verification_kp, encryption_kp, sign_assertion, sign_response, sign_logout_request, sp_binding, sls_binding, logout_method, default_relay_state, default_name_id_policy].hash
+      [name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, acs_url, sls_url, audience, issuer_override, assertion_valid_not_before, assertion_valid_not_on_or_after, session_valid_not_on_or_after, name_id_mapping, authn_context_class_ref_mapping, digest_algorithm, signature_algorithm, signing_kp, verification_kp, encryption_kp, sign_assertion, sign_response, sign_logout_request, sign_logout_response, sp_binding, sls_binding, logout_method, default_relay_state, default_name_id_policy].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/saml_source.rb

@@ -79,6 +79,9 @@ module Authentik::Api
     # Allows authentication flows initiated by the IdP. This can be a security risk, as no validation of the request ID is done.
     attr_accessor :allow_idp_initiated
 
+    # When enabled, the IdP will re-authenticate the user even if a session exists.
+    attr_accessor :force_authn
+
     # NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
     attr_accessor :name_id_policy
 
@@ -155,6 +158,7 @@ module Authentik::Api
         :'sso_url' => :'sso_url',
         :'slo_url' => :'slo_url',
         :'allow_idp_initiated' => :'allow_idp_initiated',
+        :'force_authn' => :'force_authn',
         :'name_id_policy' => :'name_id_policy',
         :'binding_type' => :'binding_type',
         :'verification_kp' => :'verification_kp',
@@ -207,6 +211,7 @@ module Authentik::Api
         :'sso_url' => :'String',
         :'slo_url' => :'String',
         :'allow_idp_initiated' => :'Boolean',
+        :'force_authn' => :'Boolean',
         :'name_id_policy' => :'SAMLNameIDPolicyEnum',
         :'binding_type' => :'BindingTypeEnum',
         :'verification_kp' => :'String',
@@ -382,6 +387,10 @@ module Authentik::Api
         self.allow_idp_initiated = attributes[:'allow_idp_initiated']
       end
 
+      if attributes.key?(:'force_authn')
+        self.force_authn = attributes[:'force_authn']
+      end
+
       if attributes.key?(:'name_id_policy')
         self.name_id_policy = attributes[:'name_id_policy']
       end
@@ -630,6 +639,7 @@ module Authentik::Api
           sso_url == o.sso_url &&
           slo_url == o.slo_url &&
           allow_idp_initiated == o.allow_idp_initiated &&
+          force_authn == o.force_authn &&
           name_id_policy == o.name_id_policy &&
           binding_type == o.binding_type &&
           verification_kp == o.verification_kp &&
@@ -651,7 +661,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, component, verbose_name, verbose_name_plural, meta_model_name, policy_engine_mode, user_matching_mode, managed, user_path_template, icon, icon_url, icon_themed_urls, group_matching_mode, pre_authentication_flow, issuer, sso_url, slo_url, allow_idp_initiated, name_id_policy, binding_type, verification_kp, signing_kp, digest_algorithm, signature_algorithm, temporary_user_delete_after, encryption_kp, signed_assertion, signed_response].hash
+      [pk, name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, component, verbose_name, verbose_name_plural, meta_model_name, policy_engine_mode, user_matching_mode, managed, user_path_template, icon, icon_url, icon_themed_urls, group_matching_mode, pre_authentication_flow, issuer, sso_url, slo_url, allow_idp_initiated, force_authn, name_id_policy, binding_type, verification_kp, signing_kp, digest_algorithm, signature_algorithm, temporary_user_delete_after, encryption_kp, signed_assertion, signed_response].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/saml_source_request.rb

@@ -58,6 +58,9 @@ module Authentik::Api
     # Allows authentication flows initiated by the IdP. This can be a security risk, as no validation of the request ID is done.
     attr_accessor :allow_idp_initiated
 
+    # When enabled, the IdP will re-authenticate the user even if a session exists.
+    attr_accessor :force_authn
+
     # NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
     attr_accessor :name_id_policy
 
@@ -126,6 +129,7 @@ module Authentik::Api
         :'sso_url' => :'sso_url',
         :'slo_url' => :'slo_url',
         :'allow_idp_initiated' => :'allow_idp_initiated',
+        :'force_authn' => :'force_authn',
         :'name_id_policy' => :'name_id_policy',
         :'binding_type' => :'binding_type',
         :'verification_kp' => :'verification_kp',
@@ -170,6 +174,7 @@ module Authentik::Api
         :'sso_url' => :'String',
         :'slo_url' => :'String',
         :'allow_idp_initiated' => :'Boolean',
+        :'force_authn' => :'Boolean',
         :'name_id_policy' => :'SAMLNameIDPolicyEnum',
         :'binding_type' => :'BindingTypeEnum',
         :'verification_kp' => :'String',
@@ -295,6 +300,10 @@ module Authentik::Api
         self.allow_idp_initiated = attributes[:'allow_idp_initiated']
       end
 
+      if attributes.key?(:'force_authn')
+        self.force_authn = attributes[:'force_authn']
+      end
+
       if attributes.key?(:'name_id_policy')
         self.name_id_policy = attributes[:'name_id_policy']
       end
@@ -510,6 +519,7 @@ module Authentik::Api
           sso_url == o.sso_url &&
           slo_url == o.slo_url &&
           allow_idp_initiated == o.allow_idp_initiated &&
+          force_authn == o.force_authn &&
           name_id_policy == o.name_id_policy &&
           binding_type == o.binding_type &&
           verification_kp == o.verification_kp &&
@@ -531,7 +541,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, policy_engine_mode, user_matching_mode, user_path_template, icon, group_matching_mode, pre_authentication_flow, issuer, sso_url, slo_url, allow_idp_initiated, name_id_policy, binding_type, verification_kp, signing_kp, digest_algorithm, signature_algorithm, temporary_user_delete_after, encryption_kp, signed_assertion, signed_response].hash
+      [name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, policy_engine_mode, user_matching_mode, user_path_template, icon, group_matching_mode, pre_authentication_flow, issuer, sso_url, slo_url, allow_idp_initiated, force_authn, name_id_policy, binding_type, verification_kp, signing_kp, digest_algorithm, signature_algorithm, temporary_user_delete_after, encryption_kp, signed_assertion, signed_response].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/ssf_provider.rb

@@ -33,10 +33,14 @@ module Authentik::Api
 
     attr_accessor :oidc_auth_providers
 
+    attr_accessor :oidc_auth_providers_obj
+
     attr_accessor :ssf_url
 
     attr_accessor :event_retention
 
+    attr_accessor :push_verify_certificates
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
@@ -49,8 +53,10 @@ module Authentik::Api
         :'signing_key' => :'signing_key',
         :'token_obj' => :'token_obj',
         :'oidc_auth_providers' => :'oidc_auth_providers',
+        :'oidc_auth_providers_obj' => :'oidc_auth_providers_obj',
         :'ssf_url' => :'ssf_url',
-        :'event_retention' => :'event_retention'
+        :'event_retention' => :'event_retention',
+        :'push_verify_certificates' => :'push_verify_certificates'
       }
     end
 
@@ -76,8 +82,10 @@ module Authentik::Api
         :'signing_key' => :'String',
         :'token_obj' => :'Token',
         :'oidc_auth_providers' => :'Array<Integer>',
+        :'oidc_auth_providers_obj' => :'Array<Provider>',
         :'ssf_url' => :'String',
-        :'event_retention' => :'String'
+        :'event_retention' => :'String',
+        :'push_verify_certificates' => :'Boolean'
       }
     end
 
@@ -158,6 +166,14 @@ module Authentik::Api
         end
       end
 
+      if attributes.key?(:'oidc_auth_providers_obj')
+        if (value = attributes[:'oidc_auth_providers_obj']).is_a?(Array)
+          self.oidc_auth_providers_obj = value
+        end
+      else
+        self.oidc_auth_providers_obj = nil
+      end
+
       if attributes.key?(:'ssf_url')
         self.ssf_url = attributes[:'ssf_url']
       else
@@ -167,6 +183,10 @@ module Authentik::Api
       if attributes.key?(:'event_retention')
         self.event_retention = attributes[:'event_retention']
       end
+
+      if attributes.key?(:'push_verify_certificates')
+        self.push_verify_certificates = attributes[:'push_verify_certificates']
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -206,6 +226,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "token_obj", token_obj cannot be nil.')
       end
 
+      if @oidc_auth_providers_obj.nil?
+        invalid_properties.push('invalid value for "oidc_auth_providers_obj", oidc_auth_providers_obj cannot be nil.')
+      end
+
       invalid_properties
     end
 
@@ -221,6 +245,7 @@ module Authentik::Api
       return false if @meta_model_name.nil?
       return false if @signing_key.nil?
       return false if @token_obj.nil?
+      return false if @oidc_auth_providers_obj.nil?
       true
     end
 
@@ -304,6 +329,16 @@ module Authentik::Api
       @token_obj = token_obj
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] oidc_auth_providers_obj Value to be assigned
+    def oidc_auth_providers_obj=(oidc_auth_providers_obj)
+      if oidc_auth_providers_obj.nil?
+        fail ArgumentError, 'oidc_auth_providers_obj cannot be nil'
+      end
+
+      @oidc_auth_providers_obj = oidc_auth_providers_obj
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -318,8 +353,10 @@ module Authentik::Api
           signing_key == o.signing_key &&
           token_obj == o.token_obj &&
           oidc_auth_providers == o.oidc_auth_providers &&
+          oidc_auth_providers_obj == o.oidc_auth_providers_obj &&
           ssf_url == o.ssf_url &&
-          event_retention == o.event_retention
+          event_retention == o.event_retention &&
+          push_verify_certificates == o.push_verify_certificates
     end
 
     # @see the `==` method
@@ -331,7 +368,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, signing_key, token_obj, oidc_auth_providers, ssf_url, event_retention].hash
+      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, signing_key, token_obj, oidc_auth_providers, oidc_auth_providers_obj, ssf_url, event_retention, push_verify_certificates].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/ssf_provider_request.rb

@@ -19,13 +19,16 @@ module Authentik::Api
 
     attr_accessor :event_retention
 
+    attr_accessor :push_verify_certificates
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
         :'name' => :'name',
         :'signing_key' => :'signing_key',
         :'oidc_auth_providers' => :'oidc_auth_providers',
-        :'event_retention' => :'event_retention'
+        :'event_retention' => :'event_retention',
+        :'push_verify_certificates' => :'push_verify_certificates'
       }
     end
 
@@ -45,7 +48,8 @@ module Authentik::Api
         :'name' => :'String',
         :'signing_key' => :'String',
         :'oidc_auth_providers' => :'Array<Integer>',
-        :'event_retention' => :'String'
+        :'event_retention' => :'String',
+        :'push_verify_certificates' => :'Boolean'
       }
     end
 
@@ -92,6 +96,10 @@ module Authentik::Api
       if attributes.key?(:'event_retention')
         self.event_retention = attributes[:'event_retention']
       end
+
+      if attributes.key?(:'push_verify_certificates')
+        self.push_verify_certificates = attributes[:'push_verify_certificates']
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -175,7 +183,8 @@ module Authentik::Api
           name == o.name &&
           signing_key == o.signing_key &&
           oidc_auth_providers == o.oidc_auth_providers &&
-          event_retention == o.event_retention
+          event_retention == o.event_retention &&
+          push_verify_certificates == o.push_verify_certificates
     end
 
     # @see the `==` method
@@ -187,7 +196,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, signing_key, oidc_auth_providers, event_retention].hash
+      [name, signing_key, oidc_auth_providers, event_retention, push_verify_certificates].hash
     end
 
     # Builds the object from hash