openai 0.66.1 → 0.68.0

data/rbi/openai/models/realtime/realtime_response_create_mcp_tool.rbi

@@ -43,8 +43,8 @@ module OpenAI
         attr_writer :authorization
 
         # Identifier for service connectors, like those available in ChatGPT. One of
-        # `server_url` or `connector_id` must be provided. Learn more about service
-        # connectors
+        # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+        # service connectors
         # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
         #
         # Currently supported `connector_id` values are:
@@ -106,14 +106,22 @@ module OpenAI
         sig { params(server_description: String).void }
         attr_writer :server_description
 
-        # The URL for the MCP server. One of `server_url` or `connector_id` must be
-        # provided.
+        # The URL for the MCP server. One of `server_url`, `connector_id`, or `tunnel_id`
+        # must be provided.
         sig { returns(T.nilable(String)) }
         attr_reader :server_url
 
         sig { params(server_url: String).void }
         attr_writer :server_url
 
+        # The Secure MCP Tunnel ID to use instead of a direct server URL. One of
+        # `server_url`, `connector_id`, or `tunnel_id` must be provided.
+        sig { returns(T.nilable(String)) }
+        attr_reader :tunnel_id
+
+        sig { params(tunnel_id: String).void }
+        attr_writer :tunnel_id
+
         # Give the model access to additional tools via remote Model Context Protocol
         # (MCP) servers.
         # [Learn more about MCP](https://platform.openai.com/docs/guides/tools-remote-mcp).
@@ -141,6 +149,7 @@ module OpenAI
               ),
             server_description: String,
             server_url: String,
+            tunnel_id: String,
             type: Symbol
           ).returns(T.attached_class)
         end
@@ -154,8 +163,8 @@ module OpenAI
           # OAuth authorization flow and provide the token here.
           authorization: nil,
           # Identifier for service connectors, like those available in ChatGPT. One of
-          # `server_url` or `connector_id` must be provided. Learn more about service
-          # connectors
+          # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+          # service connectors
           # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
           #
           # Currently supported `connector_id` values are:
@@ -178,9 +187,12 @@ module OpenAI
           require_approval: nil,
           # Optional description of the MCP server, used to provide more context.
           server_description: nil,
-          # The URL for the MCP server. One of `server_url` or `connector_id` must be
-          # provided.
+          # The URL for the MCP server. One of `server_url`, `connector_id`, or `tunnel_id`
+          # must be provided.
           server_url: nil,
+          # The Secure MCP Tunnel ID to use instead of a direct server URL. One of
+          # `server_url`, `connector_id`, or `tunnel_id` must be provided.
+          tunnel_id: nil,
           # The type of the MCP tool. Always `mcp`.
           type: :mcp
         )
@@ -211,7 +223,8 @@ module OpenAI
                   )
                 ),
               server_description: String,
-              server_url: String
+              server_url: String,
+              tunnel_id: String
             }
           )
         end
@@ -301,8 +314,8 @@ module OpenAI
         end
 
         # Identifier for service connectors, like those available in ChatGPT. One of
-        # `server_url` or `connector_id` must be provided. Learn more about service
-        # connectors
+        # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+        # service connectors
         # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
         #
         # Currently supported `connector_id` values are:

data/rbi/openai/models/realtime/realtime_session_create_response.rbi

@@ -1531,8 +1531,8 @@ module OpenAI
             attr_writer :authorization
 
             # Identifier for service connectors, like those available in ChatGPT. One of
-            # `server_url` or `connector_id` must be provided. Learn more about service
-            # connectors
+            # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+            # service connectors
             # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
             #
             # Currently supported `connector_id` values are:
@@ -1591,14 +1591,22 @@ module OpenAI
             sig { params(server_description: String).void }
             attr_writer :server_description
 
-            # The URL for the MCP server. One of `server_url` or `connector_id` must be
-            # provided.
+            # The URL for the MCP server. One of `server_url`, `connector_id`, or `tunnel_id`
+            # must be provided.
             sig { returns(T.nilable(String)) }
             attr_reader :server_url
 
             sig { params(server_url: String).void }
             attr_writer :server_url
 
+            # The Secure MCP Tunnel ID to use instead of a direct server URL. One of
+            # `server_url`, `connector_id`, or `tunnel_id` must be provided.
+            sig { returns(T.nilable(String)) }
+            attr_reader :tunnel_id
+
+            sig { params(tunnel_id: String).void }
+            attr_writer :tunnel_id
+
             # Give the model access to additional tools via remote Model Context Protocol
             # (MCP) servers.
             # [Learn more about MCP](https://platform.openai.com/docs/guides/tools-remote-mcp).
@@ -1626,6 +1634,7 @@ module OpenAI
                   ),
                 server_description: String,
                 server_url: String,
+                tunnel_id: String,
                 type: Symbol
               ).returns(T.attached_class)
             end
@@ -1639,8 +1648,8 @@ module OpenAI
               # OAuth authorization flow and provide the token here.
               authorization: nil,
               # Identifier for service connectors, like those available in ChatGPT. One of
-              # `server_url` or `connector_id` must be provided. Learn more about service
-              # connectors
+              # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+              # service connectors
               # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
               #
               # Currently supported `connector_id` values are:
@@ -1663,9 +1672,12 @@ module OpenAI
               require_approval: nil,
               # Optional description of the MCP server, used to provide more context.
               server_description: nil,
-              # The URL for the MCP server. One of `server_url` or `connector_id` must be
-              # provided.
+              # The URL for the MCP server. One of `server_url`, `connector_id`, or `tunnel_id`
+              # must be provided.
               server_url: nil,
+              # The Secure MCP Tunnel ID to use instead of a direct server URL. One of
+              # `server_url`, `connector_id`, or `tunnel_id` must be provided.
+              tunnel_id: nil,
               # The type of the MCP tool. Always `mcp`.
               type: :mcp
             )
@@ -1690,7 +1702,8 @@ module OpenAI
                       OpenAI::Realtime::RealtimeSessionCreateResponse::Tool::McpTool::RequireApproval::Variants
                     ),
                   server_description: String,
-                  server_url: String
+                  server_url: String,
+                  tunnel_id: String
                 }
               )
             end
@@ -1780,8 +1793,8 @@ module OpenAI
             end
 
             # Identifier for service connectors, like those available in ChatGPT. One of
-            # `server_url` or `connector_id` must be provided. Learn more about service
-            # connectors
+            # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+            # service connectors
             # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
             #
             # Currently supported `connector_id` values are:

data/rbi/openai/models/realtime/realtime_tools_config_union.rbi

@@ -57,8 +57,8 @@ module OpenAI
           attr_writer :authorization
 
           # Identifier for service connectors, like those available in ChatGPT. One of
-          # `server_url` or `connector_id` must be provided. Learn more about service
-          # connectors
+          # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+          # service connectors
           # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
           #
           # Currently supported `connector_id` values are:
@@ -120,14 +120,22 @@ module OpenAI
           sig { params(server_description: String).void }
           attr_writer :server_description
 
-          # The URL for the MCP server. One of `server_url` or `connector_id` must be
-          # provided.
+          # The URL for the MCP server. One of `server_url`, `connector_id`, or `tunnel_id`
+          # must be provided.
           sig { returns(T.nilable(String)) }
           attr_reader :server_url
 
           sig { params(server_url: String).void }
           attr_writer :server_url
 
+          # The Secure MCP Tunnel ID to use instead of a direct server URL. One of
+          # `server_url`, `connector_id`, or `tunnel_id` must be provided.
+          sig { returns(T.nilable(String)) }
+          attr_reader :tunnel_id
+
+          sig { params(tunnel_id: String).void }
+          attr_writer :tunnel_id
+
           # Give the model access to additional tools via remote Model Context Protocol
           # (MCP) servers.
           # [Learn more about MCP](https://platform.openai.com/docs/guides/tools-remote-mcp).
@@ -155,6 +163,7 @@ module OpenAI
                 ),
               server_description: String,
               server_url: String,
+              tunnel_id: String,
               type: Symbol
             ).returns(T.attached_class)
           end
@@ -168,8 +177,8 @@ module OpenAI
             # OAuth authorization flow and provide the token here.
             authorization: nil,
             # Identifier for service connectors, like those available in ChatGPT. One of
-            # `server_url` or `connector_id` must be provided. Learn more about service
-            # connectors
+            # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+            # service connectors
             # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
             #
             # Currently supported `connector_id` values are:
@@ -192,9 +201,12 @@ module OpenAI
             require_approval: nil,
             # Optional description of the MCP server, used to provide more context.
             server_description: nil,
-            # The URL for the MCP server. One of `server_url` or `connector_id` must be
-            # provided.
+            # The URL for the MCP server. One of `server_url`, `connector_id`, or `tunnel_id`
+            # must be provided.
             server_url: nil,
+            # The Secure MCP Tunnel ID to use instead of a direct server URL. One of
+            # `server_url`, `connector_id`, or `tunnel_id` must be provided.
+            tunnel_id: nil,
             # The type of the MCP tool. Always `mcp`.
             type: :mcp
           )
@@ -225,7 +237,8 @@ module OpenAI
                     )
                   ),
                 server_description: String,
-                server_url: String
+                server_url: String,
+                tunnel_id: String
               }
             )
           end
@@ -315,8 +328,8 @@ module OpenAI
           end
 
           # Identifier for service connectors, like those available in ChatGPT. One of
-          # `server_url` or `connector_id` must be provided. Learn more about service
-          # connectors
+          # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+          # service connectors
           # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
           #
           # Currently supported `connector_id` values are:

data/rbi/openai/models/reasoning.rbi

@@ -6,6 +6,12 @@ module OpenAI
       OrHash =
         T.type_alias { T.any(OpenAI::Reasoning, OpenAI::Internal::AnyHash) }
 
+      # Controls which reasoning items are rendered back to the model on later turns.
+      # When returned on a response, this is the effective reasoning context mode used
+      # for the response.
+      sig { returns(T.nilable(OpenAI::Reasoning::Context::OrSymbol)) }
+      attr_accessor :context
+
       # Constrains effort on reasoning for
       # [reasoning models](https://platform.openai.com/docs/guides/reasoning). Currently
       # supported values are `none`, `minimal`, `low`, `medium`, `high`, and `xhigh`.
@@ -45,6 +51,7 @@ module OpenAI
       # [reasoning models](https://platform.openai.com/docs/guides/reasoning).
       sig do
         params(
+          context: T.nilable(OpenAI::Reasoning::Context::OrSymbol),
           effort: T.nilable(OpenAI::ReasoningEffort::OrSymbol),
           generate_summary:
             T.nilable(OpenAI::Reasoning::GenerateSummary::OrSymbol),
@@ -52,6 +59,10 @@ module OpenAI
         ).returns(T.attached_class)
       end
       def self.new(
+        # Controls which reasoning items are rendered back to the model on later turns.
+        # When returned on a response, this is the effective reasoning context mode used
+        # for the response.
+        context: nil,
         # Constrains effort on reasoning for
         # [reasoning models](https://platform.openai.com/docs/guides/reasoning). Currently
         # supported values are `none`, `minimal`, `low`, `medium`, `high`, and `xhigh`.
@@ -85,6 +96,7 @@ module OpenAI
       sig do
         override.returns(
           {
+            context: T.nilable(OpenAI::Reasoning::Context::OrSymbol),
             effort: T.nilable(OpenAI::ReasoningEffort::OrSymbol),
             generate_summary:
               T.nilable(OpenAI::Reasoning::GenerateSummary::OrSymbol),
@@ -95,6 +107,28 @@ module OpenAI
       def to_hash
       end
 
+      # Controls which reasoning items are rendered back to the model on later turns.
+      # When returned on a response, this is the effective reasoning context mode used
+      # for the response.
+      module Context
+        extend OpenAI::Internal::Type::Enum
+
+        TaggedSymbol =
+          T.type_alias { T.all(Symbol, OpenAI::Reasoning::Context) }
+        OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+        AUTO = T.let(:auto, OpenAI::Reasoning::Context::TaggedSymbol)
+        CURRENT_TURN =
+          T.let(:current_turn, OpenAI::Reasoning::Context::TaggedSymbol)
+        ALL_TURNS = T.let(:all_turns, OpenAI::Reasoning::Context::TaggedSymbol)
+
+        sig do
+          override.returns(T::Array[OpenAI::Reasoning::Context::TaggedSymbol])
+        end
+        def self.values
+        end
+      end
+
       # **Deprecated:** use `summary` instead.
       #
       # A summary of the reasoning performed by the model. This can be useful for

data/rbi/openai/models/responses/tool.rbi

@@ -65,8 +65,8 @@ module OpenAI
           attr_writer :authorization
 
           # Identifier for service connectors, like those available in ChatGPT. One of
-          # `server_url` or `connector_id` must be provided. Learn more about service
-          # connectors
+          # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+          # service connectors
           # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
           #
           # Currently supported `connector_id` values are:
@@ -125,14 +125,22 @@ module OpenAI
           sig { params(server_description: String).void }
           attr_writer :server_description
 
-          # The URL for the MCP server. One of `server_url` or `connector_id` must be
-          # provided.
+          # The URL for the MCP server. One of `server_url`, `connector_id`, or `tunnel_id`
+          # must be provided.
           sig { returns(T.nilable(String)) }
           attr_reader :server_url
 
           sig { params(server_url: String).void }
           attr_writer :server_url
 
+          # The Secure MCP Tunnel ID to use instead of a direct server URL. One of
+          # `server_url`, `connector_id`, or `tunnel_id` must be provided.
+          sig { returns(T.nilable(String)) }
+          attr_reader :tunnel_id
+
+          sig { params(tunnel_id: String).void }
+          attr_writer :tunnel_id
+
           # Give the model access to additional tools via remote Model Context Protocol
           # (MCP) servers.
           # [Learn more about MCP](https://platform.openai.com/docs/guides/tools-remote-mcp).
@@ -159,6 +167,7 @@ module OpenAI
                 ),
               server_description: String,
               server_url: String,
+              tunnel_id: String,
               type: Symbol
             ).returns(T.attached_class)
           end
@@ -172,8 +181,8 @@ module OpenAI
             # OAuth authorization flow and provide the token here.
             authorization: nil,
             # Identifier for service connectors, like those available in ChatGPT. One of
-            # `server_url` or `connector_id` must be provided. Learn more about service
-            # connectors
+            # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+            # service connectors
             # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
             #
             # Currently supported `connector_id` values are:
@@ -196,9 +205,12 @@ module OpenAI
             require_approval: nil,
             # Optional description of the MCP server, used to provide more context.
             server_description: nil,
-            # The URL for the MCP server. One of `server_url` or `connector_id` must be
-            # provided.
+            # The URL for the MCP server. One of `server_url`, `connector_id`, or `tunnel_id`
+            # must be provided.
             server_url: nil,
+            # The Secure MCP Tunnel ID to use instead of a direct server URL. One of
+            # `server_url`, `connector_id`, or `tunnel_id` must be provided.
+            tunnel_id: nil,
             # The type of the MCP tool. Always `mcp`.
             type: :mcp
           )
@@ -229,7 +241,8 @@ module OpenAI
                     )
                   ),
                 server_description: String,
-                server_url: String
+                server_url: String,
+                tunnel_id: String
               }
             )
           end
@@ -317,8 +330,8 @@ module OpenAI
           end
 
           # Identifier for service connectors, like those available in ChatGPT. One of
-          # `server_url` or `connector_id` must be provided. Learn more about service
-          # connectors
+          # `server_url`, `connector_id`, or `tunnel_id` must be provided. Learn more about
+          # service connectors
           # [here](https://platform.openai.com/docs/guides/tools-remote-mcp#connectors).
           #
           # Currently supported `connector_id` values are:

data/rbi/openai/models/video_edit_params.rbi

@@ -87,7 +87,7 @@ module OpenAI
           sig { returns(String) }
           attr_accessor :id
 
-          # Reference to the completed video.
+          # Reference to the completed video to edit.
           sig { params(id: String).returns(T.attached_class) }
           def self.new(
             # The identifier of the completed video.

data/rbi/openai/resources/admin/organization/admin_api_keys.rbi

@@ -9,12 +9,19 @@ module OpenAI
           sig do
             params(
               name: String,
+              expires_in_seconds: Integer,
               request_options: OpenAI::RequestOptions::OrHash
             ).returns(
               OpenAI::Models::Admin::Organization::AdminAPIKeyCreateResponse
             )
           end
-          def create(name:, request_options: {})
+          def create(
+            name:,
+            # The number of seconds until the API key expires. Omit this field for a key that
+            # does not expire.
+            expires_in_seconds: nil,
+            request_options: {}
+          )
           end
 
           # Retrieve a single organization API key

data/rbi/openai/resources/admin/organization/audit_logs.rbi

@@ -22,6 +22,7 @@ module OpenAI
               limit: Integer,
               project_ids: T::Array[String],
               resource_ids: T::Array[String],
+              tenant_only: T::Boolean,
               request_options: OpenAI::RequestOptions::OrHash
             ).returns(
               OpenAI::Internal::ConversationCursorPage[
@@ -57,8 +58,14 @@ module OpenAI
             # Return only events for these projects.
             project_ids: nil,
             # Return only events performed on these targets. For example, a project ID
-            # updated.
+            # updated. For ChatGPT connector role events, use the workspace connector resource
+            # ID shown in `details.id`, such as `<workspace_id>__<connector_id>`.
             resource_ids: nil,
+            # Return only tenant-scoped events associated with this organization. Required for
+            # tenant-scoped events such as `role.bound_to_resource` and
+            # `role.unbound_from_resource`. When `true`, all supplied event types must be
+            # tenant-scoped.
+            tenant_only: nil,
             request_options: {}
           )
           end

data/rbi/openai/resources/admin/organization/projects/spend_alerts.rbi

@@ -37,6 +37,25 @@ module OpenAI
             )
             end
 
+            # Retrieves a project spend alert.
+            sig do
+              params(
+                alert_id: String,
+                project_id: String,
+                request_options: OpenAI::RequestOptions::OrHash
+              ).returns(
+                OpenAI::Admin::Organization::Projects::ProjectSpendAlert
+              )
+            end
+            def retrieve(
+              # The ID of the spend alert to retrieve.
+              alert_id,
+              # The ID of the project.
+              project_id:,
+              request_options: {}
+            )
+            end
+
             # Updates a project spend alert.
             sig do
               params(

data/rbi/openai/resources/admin/organization/spend_alerts.rbi

@@ -31,6 +31,20 @@ module OpenAI
           )
           end
 
+          # Retrieves an organization spend alert.
+          sig do
+            params(
+              alert_id: String,
+              request_options: OpenAI::RequestOptions::OrHash
+            ).returns(OpenAI::Admin::Organization::OrganizationSpendAlert)
+          end
+          def retrieve(
+            # The ID of the spend alert to retrieve.
+            alert_id,
+            request_options: {}
+          )
+          end
+
           # Updates an organization spend alert.
           sig do
             params(

data/sig/openai/models/admin/organization/admin_api_key.rbs

@@ -6,6 +6,7 @@ module OpenAI
           {
             id: String,
             created_at: Integer,
+            expires_at: Integer?,
             object: :"organization.admin_api_key",
             owner: OpenAI::Admin::Organization::AdminAPIKey::Owner,
             redacted_value: String,
@@ -18,6 +19,8 @@ module OpenAI
 
           attr_accessor created_at: Integer
 
+          attr_accessor expires_at: Integer?
+
           attr_accessor object: :"organization.admin_api_key"
 
           attr_accessor owner: OpenAI::Admin::Organization::AdminAPIKey::Owner
@@ -31,6 +34,7 @@ module OpenAI
           def initialize: (
             id: String,
             created_at: Integer,
+            expires_at: Integer?,
             owner: OpenAI::Admin::Organization::AdminAPIKey::Owner,
             redacted_value: String,
             ?last_used_at: Integer?,
@@ -41,6 +45,7 @@ module OpenAI
           def to_hash: -> {
             id: String,
             created_at: Integer,
+            expires_at: Integer?,
             object: :"organization.admin_api_key",
             owner: OpenAI::Admin::Organization::AdminAPIKey::Owner,
             redacted_value: String,

data/sig/openai/models/admin/organization/admin_api_key_create_params.rbs

@@ -3,7 +3,8 @@ module OpenAI
     module Admin
       module Organization
         type admin_api_key_create_params =
-          { name: String } & OpenAI::Internal::Type::request_parameters
+          { name: String, expires_in_seconds: Integer }
+          & OpenAI::Internal::Type::request_parameters
 
         class AdminAPIKeyCreateParams < OpenAI::Internal::Type::BaseModel
           extend OpenAI::Internal::Type::RequestParameters::Converter
@@ -11,13 +12,19 @@ module OpenAI
 
           attr_accessor name: String
 
+          attr_reader expires_in_seconds: Integer?
+
+          def expires_in_seconds=: (Integer) -> Integer
+
           def initialize: (
             name: String,
+            ?expires_in_seconds: Integer,
             ?request_options: OpenAI::request_opts
           ) -> void
 
           def to_hash: -> {
             name: String,
+            expires_in_seconds: Integer,
             request_options: OpenAI::RequestOptions
           }
         end

data/sig/openai/models/admin/organization/audit_log_list_params.rbs

@@ -12,7 +12,8 @@ module OpenAI
             event_types: ::Array[OpenAI::Models::Admin::Organization::AuditLogListParams::event_type],
             limit: Integer,
             project_ids: ::Array[String],
-            resource_ids: ::Array[String]
+            resource_ids: ::Array[String],
+            tenant_only: bool
           }
           & OpenAI::Internal::Type::request_parameters
 
@@ -60,6 +61,10 @@ module OpenAI
 
           def resource_ids=: (::Array[String]) -> ::Array[String]
 
+          attr_reader tenant_only: bool?
+
+          def tenant_only=: (bool) -> bool
+
           def initialize: (
             ?actor_emails: ::Array[String],
             ?actor_ids: ::Array[String],
@@ -70,6 +75,7 @@ module OpenAI
             ?limit: Integer,
             ?project_ids: ::Array[String],
             ?resource_ids: ::Array[String],
+            ?tenant_only: bool,
             ?request_options: OpenAI::request_opts
           ) -> void
 
@@ -83,6 +89,7 @@ module OpenAI
             limit: Integer,
             project_ids: ::Array[String],
             resource_ids: ::Array[String],
+            tenant_only: bool,
             request_options: OpenAI::RequestOptions
           }
 
@@ -171,6 +178,8 @@ module OpenAI
             | :"role.deleted"
             | :"role.assignment.created"
             | :"role.assignment.deleted"
+            | :"role.bound_to_resource"
+            | :"role.unbound_from_resource"
             | :"scim.enabled"
             | :"scim.disabled"
             | :"service_account.created"
@@ -232,6 +241,8 @@ module OpenAI
             ROLE_DELETED: :"role.deleted"
             ROLE_ASSIGNMENT_CREATED: :"role.assignment.created"
             ROLE_ASSIGNMENT_DELETED: :"role.assignment.deleted"
+            ROLE_BOUND_TO_RESOURCE: :"role.bound_to_resource"
+            ROLE_UNBOUND_FROM_RESOURCE: :"role.unbound_from_resource"
             SCIM_ENABLED: :"scim.enabled"
             SCIM_DISABLED: :"scim.disabled"
             SERVICE_ACCOUNT_CREATED: :"service_account.created"