@alicloud/cloudsso20210515 1.1.0 → 1.3.0

package/src/client.ts

@@ -734,6 +734,93 @@ export class CreateUserResponse extends $tea.Model {
   }
 }
 
+export class CreateUserProvisioningRequest extends $tea.Model {
+  deletionStrategy?: string;
+  description?: string;
+  directoryId?: string;
+  duplicationStrategy?: string;
+  principalId?: string;
+  principalType?: string;
+  targetId?: string;
+  targetType?: string;
+  static names(): { [key: string]: string } {
+    return {
+      deletionStrategy: 'DeletionStrategy',
+      description: 'Description',
+      directoryId: 'DirectoryId',
+      duplicationStrategy: 'DuplicationStrategy',
+      principalId: 'PrincipalId',
+      principalType: 'PrincipalType',
+      targetId: 'TargetId',
+      targetType: 'TargetType',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      deletionStrategy: 'string',
+      description: 'string',
+      directoryId: 'string',
+      duplicationStrategy: 'string',
+      principalId: 'string',
+      principalType: 'string',
+      targetId: 'string',
+      targetType: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateUserProvisioningResponseBody extends $tea.Model {
+  requestId?: string;
+  userProvisioning?: CreateUserProvisioningResponseBodyUserProvisioning;
+  static names(): { [key: string]: string } {
+    return {
+      requestId: 'RequestId',
+      userProvisioning: 'UserProvisioning',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      requestId: 'string',
+      userProvisioning: CreateUserProvisioningResponseBodyUserProvisioning,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateUserProvisioningResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: CreateUserProvisioningResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: CreateUserProvisioningResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class DeleteAccessAssignmentRequest extends $tea.Model {
   accessConfigurationId?: string;
   deprovisionStrategy?: string;
@@ -1217,6 +1304,144 @@ export class DeleteUserResponse extends $tea.Model {
   }
 }
 
+export class DeleteUserProvisioningRequest extends $tea.Model {
+  deletionStrategy?: string;
+  directoryId?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      deletionStrategy: 'DeletionStrategy',
+      directoryId: 'DirectoryId',
+      userProvisioningId: 'UserProvisioningId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      deletionStrategy: 'string',
+      directoryId: 'string',
+      userProvisioningId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class DeleteUserProvisioningResponseBody extends $tea.Model {
+  requestId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      requestId: 'RequestId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      requestId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class DeleteUserProvisioningResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: DeleteUserProvisioningResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: DeleteUserProvisioningResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class DeleteUserProvisioningEventRequest extends $tea.Model {
+  directoryId?: string;
+  eventId?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      eventId: 'EventId',
+      userProvisioningId: 'UserProvisioningId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      eventId: 'string',
+      userProvisioningId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class DeleteUserProvisioningEventResponseBody extends $tea.Model {
+  requestId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      requestId: 'RequestId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      requestId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class DeleteUserProvisioningEventResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: DeleteUserProvisioningEventResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: DeleteUserProvisioningEventResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class DeprovisionAccessConfigurationRequest extends $tea.Model {
   accessConfigurationId?: string;
   directoryId?: string;
@@ -2369,38 +2594,20 @@ export class GetUserMFAAuthenticationSettingsResponse extends $tea.Model {
   }
 }
 
-export class ListAccessAssignmentsRequest extends $tea.Model {
-  accessConfigurationId?: string;
+export class GetUserProvisioningRequest extends $tea.Model {
   directoryId?: string;
-  maxResults?: number;
-  nextToken?: string;
-  principalId?: string;
-  principalType?: string;
-  targetId?: string;
-  targetType?: string;
+  userProvisioningId?: string;
   static names(): { [key: string]: string } {
     return {
-      accessConfigurationId: 'AccessConfigurationId',
       directoryId: 'DirectoryId',
-      maxResults: 'MaxResults',
-      nextToken: 'NextToken',
-      principalId: 'PrincipalId',
-      principalType: 'PrincipalType',
-      targetId: 'TargetId',
-      targetType: 'TargetType',
+      userProvisioningId: 'UserProvisioningId',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      accessConfigurationId: 'string',
       directoryId: 'string',
-      maxResults: 'number',
-      nextToken: 'string',
-      principalId: 'string',
-      principalType: 'string',
-      targetId: 'string',
-      targetType: 'string',
+      userProvisioningId: 'string',
     };
   }
 
@@ -2409,32 +2616,20 @@ export class ListAccessAssignmentsRequest extends $tea.Model {
   }
 }
 
-export class ListAccessAssignmentsResponseBody extends $tea.Model {
-  accessAssignments?: ListAccessAssignmentsResponseBodyAccessAssignments[];
-  isTruncated?: boolean;
-  maxResults?: number;
-  nextToken?: string;
+export class GetUserProvisioningResponseBody extends $tea.Model {
   requestId?: string;
-  totalCounts?: number;
+  userProvisioning?: GetUserProvisioningResponseBodyUserProvisioning;
   static names(): { [key: string]: string } {
     return {
-      accessAssignments: 'AccessAssignments',
-      isTruncated: 'IsTruncated',
-      maxResults: 'MaxResults',
-      nextToken: 'NextToken',
       requestId: 'RequestId',
-      totalCounts: 'TotalCounts',
+      userProvisioning: 'UserProvisioning',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      accessAssignments: { 'type': 'array', 'itemType': ListAccessAssignmentsResponseBodyAccessAssignments },
-      isTruncated: 'boolean',
-      maxResults: 'number',
-      nextToken: 'string',
       requestId: 'string',
-      totalCounts: 'number',
+      userProvisioning: GetUserProvisioningResponseBodyUserProvisioning,
     };
   }
 
@@ -2443,10 +2638,10 @@ export class ListAccessAssignmentsResponseBody extends $tea.Model {
   }
 }
 
-export class ListAccessAssignmentsResponse extends $tea.Model {
+export class GetUserProvisioningResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListAccessAssignmentsResponseBody;
+  body: GetUserProvisioningResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -2459,7 +2654,7 @@ export class ListAccessAssignmentsResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListAccessAssignmentsResponseBody,
+      body: GetUserProvisioningResponseBody,
     };
   }
 
@@ -2468,35 +2663,17 @@ export class ListAccessAssignmentsResponse extends $tea.Model {
   }
 }
 
-export class ListAccessConfigurationProvisioningsRequest extends $tea.Model {
-  accessConfigurationId?: string;
+export class GetUserProvisioningConfigurationRequest extends $tea.Model {
   directoryId?: string;
-  maxResults?: number;
-  nextToken?: string;
-  provisioningStatus?: string;
-  targetId?: string;
-  targetType?: string;
   static names(): { [key: string]: string } {
     return {
-      accessConfigurationId: 'AccessConfigurationId',
       directoryId: 'DirectoryId',
-      maxResults: 'MaxResults',
-      nextToken: 'NextToken',
-      provisioningStatus: 'ProvisioningStatus',
-      targetId: 'TargetId',
-      targetType: 'TargetType',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      accessConfigurationId: 'string',
       directoryId: 'string',
-      maxResults: 'number',
-      nextToken: 'string',
-      provisioningStatus: 'string',
-      targetId: 'string',
-      targetType: 'string',
     };
   }
 
@@ -2505,32 +2682,20 @@ export class ListAccessConfigurationProvisioningsRequest extends $tea.Model {
   }
 }
 
-export class ListAccessConfigurationProvisioningsResponseBody extends $tea.Model {
-  accessConfigurationProvisionings?: ListAccessConfigurationProvisioningsResponseBodyAccessConfigurationProvisionings[];
-  isTruncated?: boolean;
-  maxResults?: number;
-  nextToken?: string;
+export class GetUserProvisioningConfigurationResponseBody extends $tea.Model {
   requestId?: string;
-  totalCounts?: number;
+  userProvisioningConfiguration?: GetUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration;
   static names(): { [key: string]: string } {
     return {
-      accessConfigurationProvisionings: 'AccessConfigurationProvisionings',
-      isTruncated: 'IsTruncated',
-      maxResults: 'MaxResults',
-      nextToken: 'NextToken',
       requestId: 'RequestId',
-      totalCounts: 'TotalCounts',
+      userProvisioningConfiguration: 'UserProvisioningConfiguration',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      accessConfigurationProvisionings: { 'type': 'array', 'itemType': ListAccessConfigurationProvisioningsResponseBodyAccessConfigurationProvisionings },
-      isTruncated: 'boolean',
-      maxResults: 'number',
-      nextToken: 'string',
       requestId: 'string',
-      totalCounts: 'number',
+      userProvisioningConfiguration: GetUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration,
     };
   }
 
@@ -2539,10 +2704,10 @@ export class ListAccessConfigurationProvisioningsResponseBody extends $tea.Model
   }
 }
 
-export class ListAccessConfigurationProvisioningsResponse extends $tea.Model {
+export class GetUserProvisioningConfigurationResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListAccessConfigurationProvisioningsResponseBody;
+  body: GetUserProvisioningConfigurationResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -2555,7 +2720,7 @@ export class ListAccessConfigurationProvisioningsResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListAccessConfigurationProvisioningsResponseBody,
+      body: GetUserProvisioningConfigurationResponseBody,
     };
   }
 
@@ -2564,29 +2729,20 @@ export class ListAccessConfigurationProvisioningsResponse extends $tea.Model {
   }
 }
 
-export class ListAccessConfigurationsRequest extends $tea.Model {
+export class GetUserProvisioningEventRequest extends $tea.Model {
   directoryId?: string;
-  filter?: string;
-  maxResults?: number;
-  nextToken?: string;
-  statusNotifications?: string;
+  eventId?: string;
   static names(): { [key: string]: string } {
     return {
       directoryId: 'DirectoryId',
-      filter: 'Filter',
-      maxResults: 'MaxResults',
-      nextToken: 'NextToken',
-      statusNotifications: 'StatusNotifications',
+      eventId: 'EventId',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       directoryId: 'string',
-      filter: 'string',
-      maxResults: 'number',
-      nextToken: 'string',
-      statusNotifications: 'string',
+      eventId: 'string',
     };
   }
 
@@ -2595,32 +2751,20 @@ export class ListAccessConfigurationsRequest extends $tea.Model {
   }
 }
 
-export class ListAccessConfigurationsResponseBody extends $tea.Model {
-  accessConfigurations?: ListAccessConfigurationsResponseBodyAccessConfigurations[];
-  isTruncated?: boolean;
-  maxResults?: number;
-  nextToken?: string;
+export class GetUserProvisioningEventResponseBody extends $tea.Model {
   requestId?: string;
-  totalCounts?: number;
+  userProvisioningEvent?: GetUserProvisioningEventResponseBodyUserProvisioningEvent;
   static names(): { [key: string]: string } {
     return {
-      accessConfigurations: 'AccessConfigurations',
-      isTruncated: 'IsTruncated',
-      maxResults: 'MaxResults',
-      nextToken: 'NextToken',
       requestId: 'RequestId',
-      totalCounts: 'TotalCounts',
+      userProvisioningEvent: 'UserProvisioningEvent',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      accessConfigurations: { 'type': 'array', 'itemType': ListAccessConfigurationsResponseBodyAccessConfigurations },
-      isTruncated: 'boolean',
-      maxResults: 'number',
-      nextToken: 'string',
       requestId: 'string',
-      totalCounts: 'number',
+      userProvisioningEvent: GetUserProvisioningEventResponseBodyUserProvisioningEvent,
     };
   }
 
@@ -2629,10 +2773,10 @@ export class ListAccessConfigurationsResponseBody extends $tea.Model {
   }
 }
 
-export class ListAccessConfigurationsResponse extends $tea.Model {
+export class GetUserProvisioningEventResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListAccessConfigurationsResponseBody;
+  body: GetUserProvisioningEventResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -2645,7 +2789,7 @@ export class ListAccessConfigurationsResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListAccessConfigurationsResponseBody,
+      body: GetUserProvisioningEventResponseBody,
     };
   }
 
@@ -2654,23 +2798,42 @@ export class ListAccessConfigurationsResponse extends $tea.Model {
   }
 }
 
-export class ListDirectoriesResponseBody extends $tea.Model {
-  directories?: ListDirectoriesResponseBodyDirectories[];
+export class GetUserProvisioningRdAccountStatisticsRequest extends $tea.Model {
+  directoryId?: string;
+  rdMemberId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      rdMemberId: 'RdMemberId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      rdMemberId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetUserProvisioningRdAccountStatisticsResponseBody extends $tea.Model {
   requestId?: string;
-  totalCounts?: number;
+  userProvisioningStatistics?: GetUserProvisioningRdAccountStatisticsResponseBodyUserProvisioningStatistics;
   static names(): { [key: string]: string } {
     return {
-      directories: 'Directories',
       requestId: 'RequestId',
-      totalCounts: 'TotalCounts',
+      userProvisioningStatistics: 'UserProvisioningStatistics',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      directories: { 'type': 'array', 'itemType': ListDirectoriesResponseBodyDirectories },
       requestId: 'string',
-      totalCounts: 'number',
+      userProvisioningStatistics: GetUserProvisioningRdAccountStatisticsResponseBodyUserProvisioningStatistics,
     };
   }
 
@@ -2679,10 +2842,10 @@ export class ListDirectoriesResponseBody extends $tea.Model {
   }
 }
 
-export class ListDirectoriesResponse extends $tea.Model {
+export class GetUserProvisioningRdAccountStatisticsResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListDirectoriesResponseBody;
+  body: GetUserProvisioningRdAccountStatisticsResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -2695,7 +2858,7 @@ export class ListDirectoriesResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListDirectoriesResponseBody,
+      body: GetUserProvisioningRdAccountStatisticsResponseBody,
     };
   }
 
@@ -2704,17 +2867,20 @@ export class ListDirectoriesResponse extends $tea.Model {
   }
 }
 
-export class ListExternalSAMLIdPCertificatesRequest extends $tea.Model {
+export class GetUserProvisioningStatisticsRequest extends $tea.Model {
   directoryId?: string;
+  userProvisioningId?: string;
   static names(): { [key: string]: string } {
     return {
       directoryId: 'DirectoryId',
+      userProvisioningId: 'UserProvisioningId',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       directoryId: 'string',
+      userProvisioningId: 'string',
     };
   }
 
@@ -2723,23 +2889,20 @@ export class ListExternalSAMLIdPCertificatesRequest extends $tea.Model {
   }
 }
 
-export class ListExternalSAMLIdPCertificatesResponseBody extends $tea.Model {
+export class GetUserProvisioningStatisticsResponseBody extends $tea.Model {
   requestId?: string;
-  SAMLIdPCertificates?: ListExternalSAMLIdPCertificatesResponseBodySAMLIdPCertificates[];
-  totalCounts?: number;
+  userProvisioningStatistics?: GetUserProvisioningStatisticsResponseBodyUserProvisioningStatistics;
   static names(): { [key: string]: string } {
     return {
       requestId: 'RequestId',
-      SAMLIdPCertificates: 'SAMLIdPCertificates',
-      totalCounts: 'TotalCounts',
+      userProvisioningStatistics: 'UserProvisioningStatistics',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       requestId: 'string',
-      SAMLIdPCertificates: { 'type': 'array', 'itemType': ListExternalSAMLIdPCertificatesResponseBodySAMLIdPCertificates },
-      totalCounts: 'number',
+      userProvisioningStatistics: GetUserProvisioningStatisticsResponseBodyUserProvisioningStatistics,
     };
   }
 
@@ -2748,10 +2911,10 @@ export class ListExternalSAMLIdPCertificatesResponseBody extends $tea.Model {
   }
 }
 
-export class ListExternalSAMLIdPCertificatesResponse extends $tea.Model {
+export class GetUserProvisioningStatisticsResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListExternalSAMLIdPCertificatesResponseBody;
+  body: GetUserProvisioningStatisticsResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -2764,7 +2927,7 @@ export class ListExternalSAMLIdPCertificatesResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListExternalSAMLIdPCertificatesResponseBody,
+      body: GetUserProvisioningStatisticsResponseBody,
     };
   }
 
@@ -2773,26 +2936,38 @@ export class ListExternalSAMLIdPCertificatesResponse extends $tea.Model {
   }
 }
 
-export class ListGroupMembersRequest extends $tea.Model {
+export class ListAccessAssignmentsRequest extends $tea.Model {
+  accessConfigurationId?: string;
   directoryId?: string;
-  groupId?: string;
   maxResults?: number;
   nextToken?: string;
+  principalId?: string;
+  principalType?: string;
+  targetId?: string;
+  targetType?: string;
   static names(): { [key: string]: string } {
     return {
+      accessConfigurationId: 'AccessConfigurationId',
       directoryId: 'DirectoryId',
-      groupId: 'GroupId',
       maxResults: 'MaxResults',
       nextToken: 'NextToken',
+      principalId: 'PrincipalId',
+      principalType: 'PrincipalType',
+      targetId: 'TargetId',
+      targetType: 'TargetType',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
+      accessConfigurationId: 'string',
       directoryId: 'string',
-      groupId: 'string',
       maxResults: 'number',
       nextToken: 'string',
+      principalId: 'string',
+      principalType: 'string',
+      targetId: 'string',
+      targetType: 'string',
     };
   }
 
@@ -2801,8 +2976,8 @@ export class ListGroupMembersRequest extends $tea.Model {
   }
 }
 
-export class ListGroupMembersResponseBody extends $tea.Model {
-  groupMembers?: ListGroupMembersResponseBodyGroupMembers[];
+export class ListAccessAssignmentsResponseBody extends $tea.Model {
+  accessAssignments?: ListAccessAssignmentsResponseBodyAccessAssignments[];
   isTruncated?: boolean;
   maxResults?: number;
   nextToken?: string;
@@ -2810,7 +2985,7 @@ export class ListGroupMembersResponseBody extends $tea.Model {
   totalCounts?: number;
   static names(): { [key: string]: string } {
     return {
-      groupMembers: 'GroupMembers',
+      accessAssignments: 'AccessAssignments',
       isTruncated: 'IsTruncated',
       maxResults: 'MaxResults',
       nextToken: 'NextToken',
@@ -2821,7 +2996,7 @@ export class ListGroupMembersResponseBody extends $tea.Model {
 
   static types(): { [key: string]: any } {
     return {
-      groupMembers: { 'type': 'array', 'itemType': ListGroupMembersResponseBodyGroupMembers },
+      accessAssignments: { 'type': 'array', 'itemType': ListAccessAssignmentsResponseBodyAccessAssignments },
       isTruncated: 'boolean',
       maxResults: 'number',
       nextToken: 'string',
@@ -2835,10 +3010,10 @@ export class ListGroupMembersResponseBody extends $tea.Model {
   }
 }
 
-export class ListGroupMembersResponse extends $tea.Model {
+export class ListAccessAssignmentsResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListGroupMembersResponseBody;
+  body: ListAccessAssignmentsResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -2851,7 +3026,7 @@ export class ListGroupMembersResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListGroupMembersResponseBody,
+      body: ListAccessAssignmentsResponseBody,
     };
   }
 
@@ -2860,29 +3035,35 @@ export class ListGroupMembersResponse extends $tea.Model {
   }
 }
 
-export class ListGroupsRequest extends $tea.Model {
+export class ListAccessConfigurationProvisioningsRequest extends $tea.Model {
+  accessConfigurationId?: string;
   directoryId?: string;
-  filter?: string;
   maxResults?: number;
   nextToken?: string;
-  provisionType?: string;
+  provisioningStatus?: string;
+  targetId?: string;
+  targetType?: string;
   static names(): { [key: string]: string } {
     return {
+      accessConfigurationId: 'AccessConfigurationId',
       directoryId: 'DirectoryId',
-      filter: 'Filter',
       maxResults: 'MaxResults',
       nextToken: 'NextToken',
-      provisionType: 'ProvisionType',
+      provisioningStatus: 'ProvisioningStatus',
+      targetId: 'TargetId',
+      targetType: 'TargetType',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
+      accessConfigurationId: 'string',
       directoryId: 'string',
-      filter: 'string',
       maxResults: 'number',
       nextToken: 'string',
-      provisionType: 'string',
+      provisioningStatus: 'string',
+      targetId: 'string',
+      targetType: 'string',
     };
   }
 
@@ -2891,8 +3072,8 @@ export class ListGroupsRequest extends $tea.Model {
   }
 }
 
-export class ListGroupsResponseBody extends $tea.Model {
-  groups?: ListGroupsResponseBodyGroups[];
+export class ListAccessConfigurationProvisioningsResponseBody extends $tea.Model {
+  accessConfigurationProvisionings?: ListAccessConfigurationProvisioningsResponseBodyAccessConfigurationProvisionings[];
   isTruncated?: boolean;
   maxResults?: number;
   nextToken?: string;
@@ -2900,7 +3081,7 @@ export class ListGroupsResponseBody extends $tea.Model {
   totalCounts?: number;
   static names(): { [key: string]: string } {
     return {
-      groups: 'Groups',
+      accessConfigurationProvisionings: 'AccessConfigurationProvisionings',
       isTruncated: 'IsTruncated',
       maxResults: 'MaxResults',
       nextToken: 'NextToken',
@@ -2911,7 +3092,7 @@ export class ListGroupsResponseBody extends $tea.Model {
 
   static types(): { [key: string]: any } {
     return {
-      groups: { 'type': 'array', 'itemType': ListGroupsResponseBodyGroups },
+      accessConfigurationProvisionings: { 'type': 'array', 'itemType': ListAccessConfigurationProvisioningsResponseBodyAccessConfigurationProvisionings },
       isTruncated: 'boolean',
       maxResults: 'number',
       nextToken: 'string',
@@ -2925,10 +3106,10 @@ export class ListGroupsResponseBody extends $tea.Model {
   }
 }
 
-export class ListGroupsResponse extends $tea.Model {
+export class ListAccessConfigurationProvisioningsResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListGroupsResponseBody;
+  body: ListAccessConfigurationProvisioningsResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -2941,7 +3122,7 @@ export class ListGroupsResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListGroupsResponseBody,
+      body: ListAccessConfigurationProvisioningsResponseBody,
     };
   }
 
@@ -2950,26 +3131,29 @@ export class ListGroupsResponse extends $tea.Model {
   }
 }
 
-export class ListJoinedGroupsForUserRequest extends $tea.Model {
+export class ListAccessConfigurationsRequest extends $tea.Model {
   directoryId?: string;
+  filter?: string;
   maxResults?: number;
   nextToken?: string;
-  userId?: string;
+  statusNotifications?: string;
   static names(): { [key: string]: string } {
     return {
       directoryId: 'DirectoryId',
+      filter: 'Filter',
       maxResults: 'MaxResults',
       nextToken: 'NextToken',
-      userId: 'UserId',
+      statusNotifications: 'StatusNotifications',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       directoryId: 'string',
+      filter: 'string',
       maxResults: 'number',
       nextToken: 'string',
-      userId: 'string',
+      statusNotifications: 'string',
     };
   }
 
@@ -2978,17 +3162,17 @@ export class ListJoinedGroupsForUserRequest extends $tea.Model {
   }
 }
 
-export class ListJoinedGroupsForUserResponseBody extends $tea.Model {
+export class ListAccessConfigurationsResponseBody extends $tea.Model {
+  accessConfigurations?: ListAccessConfigurationsResponseBodyAccessConfigurations[];
   isTruncated?: boolean;
-  joinedGroups?: ListJoinedGroupsForUserResponseBodyJoinedGroups[];
   maxResults?: number;
   nextToken?: string;
   requestId?: string;
   totalCounts?: number;
   static names(): { [key: string]: string } {
     return {
+      accessConfigurations: 'AccessConfigurations',
       isTruncated: 'IsTruncated',
-      joinedGroups: 'JoinedGroups',
       maxResults: 'MaxResults',
       nextToken: 'NextToken',
       requestId: 'RequestId',
@@ -2998,8 +3182,8 @@ export class ListJoinedGroupsForUserResponseBody extends $tea.Model {
 
   static types(): { [key: string]: any } {
     return {
+      accessConfigurations: { 'type': 'array', 'itemType': ListAccessConfigurationsResponseBodyAccessConfigurations },
       isTruncated: 'boolean',
-      joinedGroups: { 'type': 'array', 'itemType': ListJoinedGroupsForUserResponseBodyJoinedGroups },
       maxResults: 'number',
       nextToken: 'string',
       requestId: 'string',
@@ -3012,10 +3196,10 @@ export class ListJoinedGroupsForUserResponseBody extends $tea.Model {
   }
 }
 
-export class ListJoinedGroupsForUserResponse extends $tea.Model {
+export class ListAccessConfigurationsResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListJoinedGroupsForUserResponseBody;
+  body: ListAccessConfigurationsResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -3028,29 +3212,7 @@ export class ListJoinedGroupsForUserResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListJoinedGroupsForUserResponseBody,
-    };
-  }
-
-  constructor(map?: { [key: string]: any }) {
-    super(map);
-  }
-}
-
-export class ListMFADevicesForUserRequest extends $tea.Model {
-  directoryId?: string;
-  userId?: string;
-  static names(): { [key: string]: string } {
-    return {
-      directoryId: 'DirectoryId',
-      userId: 'UserId',
-    };
-  }
-
-  static types(): { [key: string]: any } {
-    return {
-      directoryId: 'string',
-      userId: 'string',
+      body: ListAccessConfigurationsResponseBody,
     };
   }
 
@@ -3059,13 +3221,13 @@ export class ListMFADevicesForUserRequest extends $tea.Model {
   }
 }
 
-export class ListMFADevicesForUserResponseBody extends $tea.Model {
-  MFADevices?: ListMFADevicesForUserResponseBodyMFADevices[];
+export class ListDirectoriesResponseBody extends $tea.Model {
+  directories?: ListDirectoriesResponseBodyDirectories[];
   requestId?: string;
   totalCounts?: number;
   static names(): { [key: string]: string } {
     return {
-      MFADevices: 'MFADevices',
+      directories: 'Directories',
       requestId: 'RequestId',
       totalCounts: 'TotalCounts',
     };
@@ -3073,7 +3235,7 @@ export class ListMFADevicesForUserResponseBody extends $tea.Model {
 
   static types(): { [key: string]: any } {
     return {
-      MFADevices: { 'type': 'array', 'itemType': ListMFADevicesForUserResponseBodyMFADevices },
+      directories: { 'type': 'array', 'itemType': ListDirectoriesResponseBodyDirectories },
       requestId: 'string',
       totalCounts: 'number',
     };
@@ -3084,10 +3246,10 @@ export class ListMFADevicesForUserResponseBody extends $tea.Model {
   }
 }
 
-export class ListMFADevicesForUserResponse extends $tea.Model {
+export class ListDirectoriesResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListMFADevicesForUserResponseBody;
+  body: ListDirectoriesResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -3100,7 +3262,7 @@ export class ListMFADevicesForUserResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListMFADevicesForUserResponseBody,
+      body: ListDirectoriesResponseBody,
     };
   }
 
@@ -3109,23 +3271,17 @@ export class ListMFADevicesForUserResponse extends $tea.Model {
   }
 }
 
-export class ListPermissionPoliciesInAccessConfigurationRequest extends $tea.Model {
-  accessConfigurationId?: string;
+export class ListExternalSAMLIdPCertificatesRequest extends $tea.Model {
   directoryId?: string;
-  permissionPolicyType?: string;
   static names(): { [key: string]: string } {
     return {
-      accessConfigurationId: 'AccessConfigurationId',
       directoryId: 'DirectoryId',
-      permissionPolicyType: 'PermissionPolicyType',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      accessConfigurationId: 'string',
       directoryId: 'string',
-      permissionPolicyType: 'string',
     };
   }
 
@@ -3134,22 +3290,22 @@ export class ListPermissionPoliciesInAccessConfigurationRequest extends $tea.Mod
   }
 }
 
-export class ListPermissionPoliciesInAccessConfigurationResponseBody extends $tea.Model {
-  permissionPolicies?: ListPermissionPoliciesInAccessConfigurationResponseBodyPermissionPolicies[];
+export class ListExternalSAMLIdPCertificatesResponseBody extends $tea.Model {
   requestId?: string;
+  SAMLIdPCertificates?: ListExternalSAMLIdPCertificatesResponseBodySAMLIdPCertificates[];
   totalCounts?: number;
   static names(): { [key: string]: string } {
     return {
-      permissionPolicies: 'PermissionPolicies',
       requestId: 'RequestId',
+      SAMLIdPCertificates: 'SAMLIdPCertificates',
       totalCounts: 'TotalCounts',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      permissionPolicies: { 'type': 'array', 'itemType': ListPermissionPoliciesInAccessConfigurationResponseBodyPermissionPolicies },
       requestId: 'string',
+      SAMLIdPCertificates: { 'type': 'array', 'itemType': ListExternalSAMLIdPCertificatesResponseBodySAMLIdPCertificates },
       totalCounts: 'number',
     };
   }
@@ -3159,10 +3315,10 @@ export class ListPermissionPoliciesInAccessConfigurationResponseBody extends $te
   }
 }
 
-export class ListPermissionPoliciesInAccessConfigurationResponse extends $tea.Model {
+export class ListExternalSAMLIdPCertificatesResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListPermissionPoliciesInAccessConfigurationResponseBody;
+  body: ListExternalSAMLIdPCertificatesResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -3175,7 +3331,7 @@ export class ListPermissionPoliciesInAccessConfigurationResponse extends $tea.Mo
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListPermissionPoliciesInAccessConfigurationResponseBody,
+      body: ListExternalSAMLIdPCertificatesResponseBody,
     };
   }
 
@@ -3184,17 +3340,26 @@ export class ListPermissionPoliciesInAccessConfigurationResponse extends $tea.Mo
   }
 }
 
-export class ListSCIMServerCredentialsRequest extends $tea.Model {
+export class ListGroupMembersRequest extends $tea.Model {
   directoryId?: string;
+  groupId?: string;
+  maxResults?: number;
+  nextToken?: string;
   static names(): { [key: string]: string } {
     return {
       directoryId: 'DirectoryId',
+      groupId: 'GroupId',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       directoryId: 'string',
+      groupId: 'string',
+      maxResults: 'number',
+      nextToken: 'string',
     };
   }
 
@@ -3203,9 +3368,411 @@ export class ListSCIMServerCredentialsRequest extends $tea.Model {
   }
 }
 
-export class ListSCIMServerCredentialsResponseBody extends $tea.Model {
+export class ListGroupMembersResponseBody extends $tea.Model {
+  groupMembers?: ListGroupMembersResponseBodyGroupMembers[];
+  isTruncated?: boolean;
+  maxResults?: number;
+  nextToken?: string;
   requestId?: string;
-  SCIMServerCredentials?: ListSCIMServerCredentialsResponseBodySCIMServerCredentials[];
+  totalCounts?: number;
+  static names(): { [key: string]: string } {
+    return {
+      groupMembers: 'GroupMembers',
+      isTruncated: 'IsTruncated',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      requestId: 'RequestId',
+      totalCounts: 'TotalCounts',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      groupMembers: { 'type': 'array', 'itemType': ListGroupMembersResponseBodyGroupMembers },
+      isTruncated: 'boolean',
+      maxResults: 'number',
+      nextToken: 'string',
+      requestId: 'string',
+      totalCounts: 'number',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListGroupMembersResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: ListGroupMembersResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: ListGroupMembersResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListGroupsRequest extends $tea.Model {
+  directoryId?: string;
+  filter?: string;
+  maxResults?: number;
+  nextToken?: string;
+  provisionType?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      filter: 'Filter',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      provisionType: 'ProvisionType',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      filter: 'string',
+      maxResults: 'number',
+      nextToken: 'string',
+      provisionType: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListGroupsResponseBody extends $tea.Model {
+  groups?: ListGroupsResponseBodyGroups[];
+  isTruncated?: boolean;
+  maxResults?: number;
+  nextToken?: string;
+  requestId?: string;
+  totalCounts?: number;
+  static names(): { [key: string]: string } {
+    return {
+      groups: 'Groups',
+      isTruncated: 'IsTruncated',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      requestId: 'RequestId',
+      totalCounts: 'TotalCounts',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      groups: { 'type': 'array', 'itemType': ListGroupsResponseBodyGroups },
+      isTruncated: 'boolean',
+      maxResults: 'number',
+      nextToken: 'string',
+      requestId: 'string',
+      totalCounts: 'number',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListGroupsResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: ListGroupsResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: ListGroupsResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListJoinedGroupsForUserRequest extends $tea.Model {
+  directoryId?: string;
+  maxResults?: number;
+  nextToken?: string;
+  userId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      userId: 'UserId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      maxResults: 'number',
+      nextToken: 'string',
+      userId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListJoinedGroupsForUserResponseBody extends $tea.Model {
+  isTruncated?: boolean;
+  joinedGroups?: ListJoinedGroupsForUserResponseBodyJoinedGroups[];
+  maxResults?: number;
+  nextToken?: string;
+  requestId?: string;
+  totalCounts?: number;
+  static names(): { [key: string]: string } {
+    return {
+      isTruncated: 'IsTruncated',
+      joinedGroups: 'JoinedGroups',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      requestId: 'RequestId',
+      totalCounts: 'TotalCounts',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      isTruncated: 'boolean',
+      joinedGroups: { 'type': 'array', 'itemType': ListJoinedGroupsForUserResponseBodyJoinedGroups },
+      maxResults: 'number',
+      nextToken: 'string',
+      requestId: 'string',
+      totalCounts: 'number',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListJoinedGroupsForUserResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: ListJoinedGroupsForUserResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: ListJoinedGroupsForUserResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListMFADevicesForUserRequest extends $tea.Model {
+  directoryId?: string;
+  userId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      userId: 'UserId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      userId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListMFADevicesForUserResponseBody extends $tea.Model {
+  MFADevices?: ListMFADevicesForUserResponseBodyMFADevices[];
+  requestId?: string;
+  totalCounts?: number;
+  static names(): { [key: string]: string } {
+    return {
+      MFADevices: 'MFADevices',
+      requestId: 'RequestId',
+      totalCounts: 'TotalCounts',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      MFADevices: { 'type': 'array', 'itemType': ListMFADevicesForUserResponseBodyMFADevices },
+      requestId: 'string',
+      totalCounts: 'number',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListMFADevicesForUserResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: ListMFADevicesForUserResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: ListMFADevicesForUserResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListPermissionPoliciesInAccessConfigurationRequest extends $tea.Model {
+  accessConfigurationId?: string;
+  directoryId?: string;
+  permissionPolicyType?: string;
+  static names(): { [key: string]: string } {
+    return {
+      accessConfigurationId: 'AccessConfigurationId',
+      directoryId: 'DirectoryId',
+      permissionPolicyType: 'PermissionPolicyType',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      accessConfigurationId: 'string',
+      directoryId: 'string',
+      permissionPolicyType: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListPermissionPoliciesInAccessConfigurationResponseBody extends $tea.Model {
+  permissionPolicies?: ListPermissionPoliciesInAccessConfigurationResponseBodyPermissionPolicies[];
+  requestId?: string;
+  totalCounts?: number;
+  static names(): { [key: string]: string } {
+    return {
+      permissionPolicies: 'PermissionPolicies',
+      requestId: 'RequestId',
+      totalCounts: 'TotalCounts',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      permissionPolicies: { 'type': 'array', 'itemType': ListPermissionPoliciesInAccessConfigurationResponseBodyPermissionPolicies },
+      requestId: 'string',
+      totalCounts: 'number',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListPermissionPoliciesInAccessConfigurationResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: ListPermissionPoliciesInAccessConfigurationResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: ListPermissionPoliciesInAccessConfigurationResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListSCIMServerCredentialsRequest extends $tea.Model {
+  directoryId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListSCIMServerCredentialsResponseBody extends $tea.Model {
+  requestId?: string;
+  SCIMServerCredentials?: ListSCIMServerCredentialsResponseBodySCIMServerCredentials[];
   totalCounts?: number;
   static names(): { [key: string]: string } {
     return {
@@ -3218,8 +3785,203 @@ export class ListSCIMServerCredentialsResponseBody extends $tea.Model {
   static types(): { [key: string]: any } {
     return {
       requestId: 'string',
-      SCIMServerCredentials: { 'type': 'array', 'itemType': ListSCIMServerCredentialsResponseBodySCIMServerCredentials },
+      SCIMServerCredentials: { 'type': 'array', 'itemType': ListSCIMServerCredentialsResponseBodySCIMServerCredentials },
+      totalCounts: 'number',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListSCIMServerCredentialsResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: ListSCIMServerCredentialsResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: ListSCIMServerCredentialsResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListTasksRequest extends $tea.Model {
+  accessConfigurationId?: string;
+  directoryId?: string;
+  filter?: string;
+  maxResults?: number;
+  nextToken?: string;
+  principalId?: string;
+  principalType?: string;
+  status?: string;
+  targetId?: string;
+  targetType?: string;
+  taskType?: string;
+  static names(): { [key: string]: string } {
+    return {
+      accessConfigurationId: 'AccessConfigurationId',
+      directoryId: 'DirectoryId',
+      filter: 'Filter',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      principalId: 'PrincipalId',
+      principalType: 'PrincipalType',
+      status: 'Status',
+      targetId: 'TargetId',
+      targetType: 'TargetType',
+      taskType: 'TaskType',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      accessConfigurationId: 'string',
+      directoryId: 'string',
+      filter: 'string',
+      maxResults: 'number',
+      nextToken: 'string',
+      principalId: 'string',
+      principalType: 'string',
+      status: 'string',
+      targetId: 'string',
+      targetType: 'string',
+      taskType: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListTasksResponseBody extends $tea.Model {
+  isTruncated?: boolean;
+  maxResults?: number;
+  nextToken?: string;
+  requestId?: string;
+  tasks?: ListTasksResponseBodyTasks[];
+  totalCounts?: number;
+  static names(): { [key: string]: string } {
+    return {
+      isTruncated: 'IsTruncated',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      requestId: 'RequestId',
+      tasks: 'Tasks',
+      totalCounts: 'TotalCounts',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      isTruncated: 'boolean',
+      maxResults: 'number',
+      nextToken: 'string',
+      requestId: 'string',
+      tasks: { 'type': 'array', 'itemType': ListTasksResponseBodyTasks },
+      totalCounts: 'number',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListTasksResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: ListTasksResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: ListTasksResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListUserProvisioningEventsRequest extends $tea.Model {
+  directoryId?: string;
+  maxResults?: number;
+  nextToken?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      userProvisioningId: 'UserProvisioningId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      maxResults: 'number',
+      nextToken: 'string',
+      userProvisioningId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListUserProvisioningEventsResponseBody extends $tea.Model {
+  isTruncated?: boolean;
+  maxResults?: number;
+  nextToken?: string;
+  requestId?: string;
+  totalCounts?: number;
+  userProvisioningEvents?: ListUserProvisioningEventsResponseBodyUserProvisioningEvents[];
+  static names(): { [key: string]: string } {
+    return {
+      isTruncated: 'IsTruncated',
+      maxResults: 'MaxResults',
+      nextToken: 'NextToken',
+      requestId: 'RequestId',
+      totalCounts: 'TotalCounts',
+      userProvisioningEvents: 'UserProvisioningEvents',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      isTruncated: 'boolean',
+      maxResults: 'number',
+      nextToken: 'string',
+      requestId: 'string',
       totalCounts: 'number',
+      userProvisioningEvents: { 'type': 'array', 'itemType': ListUserProvisioningEventsResponseBodyUserProvisioningEvents },
     };
   }
 
@@ -3228,10 +3990,10 @@ export class ListSCIMServerCredentialsResponseBody extends $tea.Model {
   }
 }
 
-export class ListSCIMServerCredentialsResponse extends $tea.Model {
+export class ListUserProvisioningEventsResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListSCIMServerCredentialsResponseBody;
+  body: ListUserProvisioningEventsResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -3244,7 +4006,7 @@ export class ListSCIMServerCredentialsResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListSCIMServerCredentialsResponseBody,
+      body: ListUserProvisioningEventsResponseBody,
     };
   }
 
@@ -3253,47 +4015,35 @@ export class ListSCIMServerCredentialsResponse extends $tea.Model {
   }
 }
 
-export class ListTasksRequest extends $tea.Model {
-  accessConfigurationId?: string;
+export class ListUserProvisioningsRequest extends $tea.Model {
   directoryId?: string;
-  filter?: string;
   maxResults?: number;
   nextToken?: string;
   principalId?: string;
   principalType?: string;
-  status?: string;
   targetId?: string;
   targetType?: string;
-  taskType?: string;
   static names(): { [key: string]: string } {
     return {
-      accessConfigurationId: 'AccessConfigurationId',
       directoryId: 'DirectoryId',
-      filter: 'Filter',
       maxResults: 'MaxResults',
       nextToken: 'NextToken',
       principalId: 'PrincipalId',
       principalType: 'PrincipalType',
-      status: 'Status',
       targetId: 'TargetId',
       targetType: 'TargetType',
-      taskType: 'TaskType',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      accessConfigurationId: 'string',
       directoryId: 'string',
-      filter: 'string',
       maxResults: 'number',
       nextToken: 'string',
       principalId: 'string',
       principalType: 'string',
-      status: 'string',
       targetId: 'string',
       targetType: 'string',
-      taskType: 'string',
     };
   }
 
@@ -3302,21 +4052,21 @@ export class ListTasksRequest extends $tea.Model {
   }
 }
 
-export class ListTasksResponseBody extends $tea.Model {
+export class ListUserProvisioningsResponseBody extends $tea.Model {
   isTruncated?: boolean;
   maxResults?: number;
   nextToken?: string;
   requestId?: string;
-  tasks?: ListTasksResponseBodyTasks[];
   totalCounts?: number;
+  userProvisionings?: ListUserProvisioningsResponseBodyUserProvisionings[];
   static names(): { [key: string]: string } {
     return {
       isTruncated: 'IsTruncated',
       maxResults: 'MaxResults',
       nextToken: 'NextToken',
       requestId: 'RequestId',
-      tasks: 'Tasks',
       totalCounts: 'TotalCounts',
+      userProvisionings: 'UserProvisionings',
     };
   }
 
@@ -3326,8 +4076,8 @@ export class ListTasksResponseBody extends $tea.Model {
       maxResults: 'number',
       nextToken: 'string',
       requestId: 'string',
-      tasks: { 'type': 'array', 'itemType': ListTasksResponseBodyTasks },
       totalCounts: 'number',
+      userProvisionings: { 'type': 'array', 'itemType': ListUserProvisioningsResponseBodyUserProvisionings },
     };
   }
 
@@ -3336,10 +4086,10 @@ export class ListTasksResponseBody extends $tea.Model {
   }
 }
 
-export class ListTasksResponse extends $tea.Model {
+export class ListUserProvisioningsResponse extends $tea.Model {
   headers: { [key: string]: string };
   statusCode: number;
-  body: ListTasksResponseBody;
+  body: ListUserProvisioningsResponseBody;
   static names(): { [key: string]: string } {
     return {
       headers: 'headers',
@@ -3352,7 +4102,7 @@ export class ListTasksResponse extends $tea.Model {
     return {
       headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
       statusCode: 'number',
-      body: ListTasksResponseBody,
+      body: ListUserProvisioningsResponseBody,
     };
   }
 
@@ -3814,6 +4564,75 @@ export class ResetUserPasswordResponse extends $tea.Model {
   }
 }
 
+export class RetryUserProvisioningEventRequest extends $tea.Model {
+  directoryId?: string;
+  duplicationStrategy?: string;
+  eventId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      duplicationStrategy: 'DuplicationStrategy',
+      eventId: 'EventId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      duplicationStrategy: 'string',
+      eventId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class RetryUserProvisioningEventResponseBody extends $tea.Model {
+  requestId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      requestId: 'RequestId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      requestId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class RetryUserProvisioningEventResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: RetryUserProvisioningEventResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: RetryUserProvisioningEventResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class SetExternalSAMLIdentityProviderRequest extends $tea.Model {
   directoryId?: string;
   encodedMetadataDocument?: string;
@@ -4618,6 +5437,156 @@ export class UpdateUserMFAAuthenticationSettingsResponse extends $tea.Model {
   }
 }
 
+export class UpdateUserProvisioningRequest extends $tea.Model {
+  directoryId?: string;
+  newDeletionStrategy?: string;
+  newDescription?: string;
+  newDuplicationStrategy?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      newDeletionStrategy: 'NewDeletionStrategy',
+      newDescription: 'NewDescription',
+      newDuplicationStrategy: 'NewDuplicationStrategy',
+      userProvisioningId: 'UserProvisioningId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      newDeletionStrategy: 'string',
+      newDescription: 'string',
+      newDuplicationStrategy: 'string',
+      userProvisioningId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class UpdateUserProvisioningResponseBody extends $tea.Model {
+  requestId?: string;
+  userProvisioning?: UpdateUserProvisioningResponseBodyUserProvisioning;
+  static names(): { [key: string]: string } {
+    return {
+      requestId: 'RequestId',
+      userProvisioning: 'UserProvisioning',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      requestId: 'string',
+      userProvisioning: UpdateUserProvisioningResponseBodyUserProvisioning,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class UpdateUserProvisioningResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: UpdateUserProvisioningResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: UpdateUserProvisioningResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class UpdateUserProvisioningConfigurationRequest extends $tea.Model {
+  directoryId?: string;
+  newDefaultLandingPage?: string;
+  newSessionDuration?: number;
+  static names(): { [key: string]: string } {
+    return {
+      directoryId: 'DirectoryId',
+      newDefaultLandingPage: 'NewDefaultLandingPage',
+      newSessionDuration: 'NewSessionDuration',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      directoryId: 'string',
+      newDefaultLandingPage: 'string',
+      newSessionDuration: 'number',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class UpdateUserProvisioningConfigurationResponseBody extends $tea.Model {
+  requestId?: string;
+  userProvisioningConfiguration?: UpdateUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration;
+  static names(): { [key: string]: string } {
+    return {
+      requestId: 'RequestId',
+      userProvisioningConfiguration: 'UserProvisioningConfiguration',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      requestId: 'string',
+      userProvisioningConfiguration: UpdateUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class UpdateUserProvisioningConfigurationResponse extends $tea.Model {
+  headers: { [key: string]: string };
+  statusCode: number;
+  body: UpdateUserProvisioningConfigurationResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: UpdateUserProvisioningConfigurationResponseBody,
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class UpdateUserStatusRequest extends $tea.Model {
   directoryId?: string;
   newStatus?: string;
@@ -4884,47 +5853,111 @@ export class CreateSCIMServerCredentialResponseBodySCIMServerCredential extends
   }
 }
 
-export class CreateUserResponseBodyUser extends $tea.Model {
+export class CreateUserResponseBodyUser extends $tea.Model {
+  createTime?: string;
+  description?: string;
+  displayName?: string;
+  email?: string;
+  firstName?: string;
+  lastName?: string;
+  provisionType?: string;
+  status?: string;
+  updateTime?: string;
+  userId?: string;
+  userName?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      description: 'Description',
+      displayName: 'DisplayName',
+      email: 'Email',
+      firstName: 'FirstName',
+      lastName: 'LastName',
+      provisionType: 'ProvisionType',
+      status: 'Status',
+      updateTime: 'UpdateTime',
+      userId: 'UserId',
+      userName: 'UserName',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      description: 'string',
+      displayName: 'string',
+      email: 'string',
+      firstName: 'string',
+      lastName: 'string',
+      provisionType: 'string',
+      status: 'string',
+      updateTime: 'string',
+      userId: 'string',
+      userName: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateUserProvisioningResponseBodyUserProvisioning extends $tea.Model {
   createTime?: string;
+  deletionStrategy?: string;
   description?: string;
-  displayName?: string;
-  email?: string;
-  firstName?: string;
-  lastName?: string;
-  provisionType?: string;
+  directoryId?: string;
+  duplicationStrategy?: string;
+  ownerPk?: string;
+  principalId?: string;
+  principalName?: string;
+  principalType?: string;
   status?: string;
+  targetId?: string;
+  targetName?: string;
+  targetPath?: string;
+  targetType?: string;
   updateTime?: string;
-  userId?: string;
-  userName?: string;
+  userProvisioningId?: string;
   static names(): { [key: string]: string } {
     return {
       createTime: 'CreateTime',
+      deletionStrategy: 'DeletionStrategy',
       description: 'Description',
-      displayName: 'DisplayName',
-      email: 'Email',
-      firstName: 'FirstName',
-      lastName: 'LastName',
-      provisionType: 'ProvisionType',
+      directoryId: 'DirectoryId',
+      duplicationStrategy: 'DuplicationStrategy',
+      ownerPk: 'OwnerPk',
+      principalId: 'PrincipalId',
+      principalName: 'PrincipalName',
+      principalType: 'PrincipalType',
       status: 'Status',
+      targetId: 'TargetId',
+      targetName: 'TargetName',
+      targetPath: 'TargetPath',
+      targetType: 'TargetType',
       updateTime: 'UpdateTime',
-      userId: 'UserId',
-      userName: 'UserName',
+      userProvisioningId: 'UserProvisioningId',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       createTime: 'string',
+      deletionStrategy: 'string',
       description: 'string',
-      displayName: 'string',
-      email: 'string',
-      firstName: 'string',
-      lastName: 'string',
-      provisionType: 'string',
+      directoryId: 'string',
+      duplicationStrategy: 'string',
+      ownerPk: 'string',
+      principalId: 'string',
+      principalName: 'string',
+      principalType: 'string',
       status: 'string',
+      targetId: 'string',
+      targetName: 'string',
+      targetPath: 'string',
+      targetType: 'string',
       updateTime: 'string',
-      userId: 'string',
-      userName: 'string',
+      userProvisioningId: 'string',
     };
   }
 
@@ -5107,24 +6140,33 @@ export class GetDirectoryResponseBodyDirectory extends $tea.Model {
 
 export class GetDirectorySAMLServiceProviderInfoResponseBodySAMLServiceProvider extends $tea.Model {
   acsUrl?: string;
+  authnSignAlgo?: string;
+  certificateType?: string;
   directoryId?: string;
   encodedMetadataDocument?: string;
   entityId?: string;
+  supportEncryptedAssertion?: boolean;
   static names(): { [key: string]: string } {
     return {
       acsUrl: 'AcsUrl',
+      authnSignAlgo: 'AuthnSignAlgo',
+      certificateType: 'CertificateType',
       directoryId: 'DirectoryId',
       encodedMetadataDocument: 'EncodedMetadataDocument',
       entityId: 'EntityId',
+      supportEncryptedAssertion: 'SupportEncryptedAssertion',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       acsUrl: 'string',
+      authnSignAlgo: 'string',
+      certificateType: 'string',
       directoryId: 'string',
       encodedMetadataDocument: 'string',
       entityId: 'string',
+      supportEncryptedAssertion: 'boolean',
     };
   }
 
@@ -5368,15 +6410,263 @@ export class GetTaskResponseBodyTask extends $tea.Model {
       principalId: 'string',
       principalName: 'string',
       principalType: 'string',
-      startTime: 'string',
-      status: 'string',
+      startTime: 'string',
+      status: 'string',
+      targetId: 'string',
+      targetName: 'string',
+      targetPath: 'string',
+      targetPathName: 'string',
+      targetType: 'string',
+      taskId: 'string',
+      taskType: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetTaskStatusResponseBodyTaskStatus extends $tea.Model {
+  endTime?: string;
+  failureReason?: string;
+  startTime?: string;
+  status?: string;
+  taskId?: string;
+  taskType?: string;
+  static names(): { [key: string]: string } {
+    return {
+      endTime: 'EndTime',
+      failureReason: 'FailureReason',
+      startTime: 'StartTime',
+      status: 'Status',
+      taskId: 'TaskId',
+      taskType: 'TaskType',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      endTime: 'string',
+      failureReason: 'string',
+      startTime: 'string',
+      status: 'string',
+      taskId: 'string',
+      taskType: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetUserResponseBodyUser extends $tea.Model {
+  createTime?: string;
+  description?: string;
+  displayName?: string;
+  email?: string;
+  firstName?: string;
+  lastName?: string;
+  provisionType?: string;
+  status?: string;
+  updateTime?: string;
+  userId?: string;
+  userName?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      description: 'Description',
+      displayName: 'DisplayName',
+      email: 'Email',
+      firstName: 'FirstName',
+      lastName: 'LastName',
+      provisionType: 'ProvisionType',
+      status: 'Status',
+      updateTime: 'UpdateTime',
+      userId: 'UserId',
+      userName: 'UserName',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      description: 'string',
+      displayName: 'string',
+      email: 'string',
+      firstName: 'string',
+      lastName: 'string',
+      provisionType: 'string',
+      status: 'string',
+      updateTime: 'string',
+      userId: 'string',
+      userName: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetUserProvisioningResponseBodyUserProvisioning extends $tea.Model {
+  createTime?: string;
+  deletionStrategy?: string;
+  description?: string;
+  directoryId?: string;
+  duplicationStrategy?: string;
+  ownerPk?: string;
+  principalId?: string;
+  principalName?: string;
+  principalType?: string;
+  status?: string;
+  targetId?: string;
+  targetName?: string;
+  targetPath?: string;
+  targetType?: string;
+  updateTime?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      deletionStrategy: 'DeletionStrategy',
+      description: 'Description',
+      directoryId: 'DirectoryId',
+      duplicationStrategy: 'DuplicationStrategy',
+      ownerPk: 'OwnerPk',
+      principalId: 'PrincipalId',
+      principalName: 'PrincipalName',
+      principalType: 'PrincipalType',
+      status: 'Status',
+      targetId: 'TargetId',
+      targetName: 'TargetName',
+      targetPath: 'TargetPath',
+      targetType: 'TargetType',
+      updateTime: 'UpdateTime',
+      userProvisioningId: 'UserProvisioningId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      deletionStrategy: 'string',
+      description: 'string',
+      directoryId: 'string',
+      duplicationStrategy: 'string',
+      ownerPk: 'string',
+      principalId: 'string',
+      principalName: 'string',
+      principalType: 'string',
+      status: 'string',
+      targetId: 'string',
+      targetName: 'string',
+      targetPath: 'string',
+      targetType: 'string',
+      updateTime: 'string',
+      userProvisioningId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration extends $tea.Model {
+  createTime?: string;
+  defaultLandingPage?: string;
+  directoryId?: string;
+  sessionDuration?: number;
+  updateTime?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      defaultLandingPage: 'DefaultLandingPage',
+      directoryId: 'DirectoryId',
+      sessionDuration: 'SessionDuration',
+      updateTime: 'UpdateTime',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      defaultLandingPage: 'string',
+      directoryId: 'string',
+      sessionDuration: 'number',
+      updateTime: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetUserProvisioningEventResponseBodyUserProvisioningEvent extends $tea.Model {
+  createTime?: string;
+  deletionStrategy?: string;
+  directoryId?: string;
+  duplicationStrategy?: string;
+  errorCount?: number;
+  errorInfo?: string;
+  eventId?: string;
+  latestAsyncTime?: string;
+  principalId?: string;
+  principalName?: string;
+  principalType?: string;
+  sourceType?: string;
+  targetId?: string;
+  targetName?: string;
+  targetPath?: string;
+  targetType?: string;
+  updateTime?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      deletionStrategy: 'DeletionStrategy',
+      directoryId: 'DirectoryId',
+      duplicationStrategy: 'DuplicationStrategy',
+      errorCount: 'ErrorCount',
+      errorInfo: 'ErrorInfo',
+      eventId: 'EventId',
+      latestAsyncTime: 'LatestAsyncTime',
+      principalId: 'PrincipalId',
+      principalName: 'PrincipalName',
+      principalType: 'PrincipalType',
+      sourceType: 'SourceType',
+      targetId: 'TargetId',
+      targetName: 'TargetName',
+      targetPath: 'TargetPath',
+      targetType: 'TargetType',
+      updateTime: 'UpdateTime',
+      userProvisioningId: 'UserProvisioningId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      deletionStrategy: 'string',
+      directoryId: 'string',
+      duplicationStrategy: 'string',
+      errorCount: 'number',
+      errorInfo: 'string',
+      eventId: 'string',
+      latestAsyncTime: 'string',
+      principalId: 'string',
+      principalName: 'string',
+      principalType: 'string',
+      sourceType: 'string',
       targetId: 'string',
       targetName: 'string',
       targetPath: 'string',
-      targetPathName: 'string',
       targetType: 'string',
-      taskId: 'string',
-      taskType: 'string',
+      updateTime: 'string',
+      userProvisioningId: 'string',
     };
   }
 
@@ -5385,32 +6675,32 @@ export class GetTaskResponseBodyTask extends $tea.Model {
   }
 }
 
-export class GetTaskStatusResponseBodyTaskStatus extends $tea.Model {
-  endTime?: string;
-  failureReason?: string;
-  startTime?: string;
-  status?: string;
-  taskId?: string;
-  taskType?: string;
+export class GetUserProvisioningRdAccountStatisticsResponseBodyUserProvisioningStatistics extends $tea.Model {
+  directoryId?: string;
+  entityId?: string;
+  failedEventCount?: number;
+  latestAsyncTime?: string;
+  ownerPk?: string;
+  type?: string;
   static names(): { [key: string]: string } {
     return {
-      endTime: 'EndTime',
-      failureReason: 'FailureReason',
-      startTime: 'StartTime',
-      status: 'Status',
-      taskId: 'TaskId',
-      taskType: 'TaskType',
+      directoryId: 'DirectoryId',
+      entityId: 'EntityId',
+      failedEventCount: 'FailedEventCount',
+      latestAsyncTime: 'LatestAsyncTime',
+      ownerPk: 'OwnerPk',
+      type: 'Type',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      endTime: 'string',
-      failureReason: 'string',
-      startTime: 'string',
-      status: 'string',
-      taskId: 'string',
-      taskType: 'string',
+      directoryId: 'string',
+      entityId: 'string',
+      failedEventCount: 'number',
+      latestAsyncTime: 'string',
+      ownerPk: 'string',
+      type: 'string',
     };
   }
 
@@ -5419,47 +6709,32 @@ export class GetTaskStatusResponseBodyTaskStatus extends $tea.Model {
   }
 }
 
-export class GetUserResponseBodyUser extends $tea.Model {
-  createTime?: string;
-  description?: string;
-  displayName?: string;
-  email?: string;
-  firstName?: string;
-  lastName?: string;
-  provisionType?: string;
-  status?: string;
-  updateTime?: string;
-  userId?: string;
-  userName?: string;
+export class GetUserProvisioningStatisticsResponseBodyUserProvisioningStatistics extends $tea.Model {
+  directoryId?: string;
+  entityId?: string;
+  failedEventCount?: number;
+  latestAsyncTime?: string;
+  ownerPk?: string;
+  type?: string;
   static names(): { [key: string]: string } {
     return {
-      createTime: 'CreateTime',
-      description: 'Description',
-      displayName: 'DisplayName',
-      email: 'Email',
-      firstName: 'FirstName',
-      lastName: 'LastName',
-      provisionType: 'ProvisionType',
-      status: 'Status',
-      updateTime: 'UpdateTime',
-      userId: 'UserId',
-      userName: 'UserName',
+      directoryId: 'DirectoryId',
+      entityId: 'EntityId',
+      failedEventCount: 'FailedEventCount',
+      latestAsyncTime: 'LatestAsyncTime',
+      ownerPk: 'OwnerPk',
+      type: 'Type',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
-      createTime: 'string',
-      description: 'string',
-      displayName: 'string',
-      email: 'string',
-      firstName: 'string',
-      lastName: 'string',
-      provisionType: 'string',
-      status: 'string',
-      updateTime: 'string',
-      userId: 'string',
-      userName: 'string',
+      directoryId: 'string',
+      entityId: 'string',
+      failedEventCount: 'number',
+      latestAsyncTime: 'string',
+      ownerPk: 'string',
+      type: 'string',
     };
   }
 
@@ -5957,6 +7232,140 @@ export class ListTasksResponseBodyTasks extends $tea.Model {
   }
 }
 
+export class ListUserProvisioningEventsResponseBodyUserProvisioningEvents extends $tea.Model {
+  createTime?: string;
+  deletionStrategy?: string;
+  directoryId?: string;
+  duplicationStrategy?: string;
+  errorCount?: number;
+  errorInfo?: string;
+  eventId?: string;
+  latestAsyncTime?: string;
+  principalId?: string;
+  principalName?: string;
+  principalType?: string;
+  sourceType?: string;
+  targetId?: string;
+  targetName?: string;
+  targetPath?: string;
+  targetType?: string;
+  updateTime?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      deletionStrategy: 'DeletionStrategy',
+      directoryId: 'DirectoryId',
+      duplicationStrategy: 'DuplicationStrategy',
+      errorCount: 'ErrorCount',
+      errorInfo: 'ErrorInfo',
+      eventId: 'EventId',
+      latestAsyncTime: 'LatestAsyncTime',
+      principalId: 'PrincipalId',
+      principalName: 'PrincipalName',
+      principalType: 'PrincipalType',
+      sourceType: 'SourceType',
+      targetId: 'TargetId',
+      targetName: 'TargetName',
+      targetPath: 'TargetPath',
+      targetType: 'TargetType',
+      updateTime: 'UpdateTime',
+      userProvisioningId: 'UserProvisioningId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      deletionStrategy: 'string',
+      directoryId: 'string',
+      duplicationStrategy: 'string',
+      errorCount: 'number',
+      errorInfo: 'string',
+      eventId: 'string',
+      latestAsyncTime: 'string',
+      principalId: 'string',
+      principalName: 'string',
+      principalType: 'string',
+      sourceType: 'string',
+      targetId: 'string',
+      targetName: 'string',
+      targetPath: 'string',
+      targetType: 'string',
+      updateTime: 'string',
+      userProvisioningId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class ListUserProvisioningsResponseBodyUserProvisionings extends $tea.Model {
+  createTime?: string;
+  deletionStrategy?: string;
+  description?: string;
+  directoryId?: string;
+  duplicationStrategy?: string;
+  ownerPk?: string;
+  principalId?: string;
+  principalName?: string;
+  principalType?: string;
+  status?: string;
+  targetId?: string;
+  targetName?: string;
+  targetPath?: string;
+  targetType?: string;
+  updateTime?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      deletionStrategy: 'DeletionStrategy',
+      description: 'Description',
+      directoryId: 'DirectoryId',
+      duplicationStrategy: 'DuplicationStrategy',
+      ownerPk: 'OwnerPk',
+      principalId: 'PrincipalId',
+      principalName: 'PrincipalName',
+      principalType: 'PrincipalType',
+      status: 'Status',
+      targetId: 'TargetId',
+      targetName: 'TargetName',
+      targetPath: 'TargetPath',
+      targetType: 'TargetType',
+      updateTime: 'UpdateTime',
+      userProvisioningId: 'UserProvisioningId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      deletionStrategy: 'string',
+      description: 'string',
+      directoryId: 'string',
+      duplicationStrategy: 'string',
+      ownerPk: 'string',
+      principalId: 'string',
+      principalName: 'string',
+      principalType: 'string',
+      status: 'string',
+      targetId: 'string',
+      targetName: 'string',
+      targetPath: 'string',
+      targetType: 'string',
+      updateTime: 'string',
+      userProvisioningId: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class ListUsersResponseBodyUsers extends $tea.Model {
   createTime?: string;
   description?: string;
@@ -6210,22 +7619,135 @@ export class UpdateSCIMServerCredentialStatusResponseBodySCIMServerCredential ex
   static names(): { [key: string]: string } {
     return {
       createTime: 'CreateTime',
-      credentialId: 'CredentialId',
-      credentialType: 'CredentialType',
+      credentialId: 'CredentialId',
+      credentialType: 'CredentialType',
+      directoryId: 'DirectoryId',
+      expireTime: 'ExpireTime',
+      status: 'Status',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      credentialId: 'string',
+      credentialType: 'string',
+      directoryId: 'string',
+      expireTime: 'string',
+      status: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class UpdateUserResponseBodyUser extends $tea.Model {
+  createTime?: string;
+  description?: string;
+  displayName?: string;
+  email?: string;
+  firstName?: string;
+  lastName?: string;
+  provisionType?: string;
+  status?: string;
+  updateTime?: string;
+  userId?: string;
+  userName?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      description: 'Description',
+      displayName: 'DisplayName',
+      email: 'Email',
+      firstName: 'FirstName',
+      lastName: 'LastName',
+      provisionType: 'ProvisionType',
+      status: 'Status',
+      updateTime: 'UpdateTime',
+      userId: 'UserId',
+      userName: 'UserName',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      description: 'string',
+      displayName: 'string',
+      email: 'string',
+      firstName: 'string',
+      lastName: 'string',
+      provisionType: 'string',
+      status: 'string',
+      updateTime: 'string',
+      userId: 'string',
+      userName: 'string',
+    };
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class UpdateUserProvisioningResponseBodyUserProvisioning extends $tea.Model {
+  createTime?: string;
+  deletionStrategy?: string;
+  description?: string;
+  directoryId?: string;
+  duplicationStrategy?: string;
+  ownerPk?: string;
+  principalId?: string;
+  principalName?: string;
+  principalType?: string;
+  status?: string;
+  targetId?: string;
+  targetName?: string;
+  targetPath?: string;
+  targetType?: string;
+  updateTime?: string;
+  userProvisioningId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      deletionStrategy: 'DeletionStrategy',
+      description: 'Description',
       directoryId: 'DirectoryId',
-      expireTime: 'ExpireTime',
+      duplicationStrategy: 'DuplicationStrategy',
+      ownerPk: 'OwnerPk',
+      principalId: 'PrincipalId',
+      principalName: 'PrincipalName',
+      principalType: 'PrincipalType',
       status: 'Status',
+      targetId: 'TargetId',
+      targetName: 'TargetName',
+      targetPath: 'TargetPath',
+      targetType: 'TargetType',
+      updateTime: 'UpdateTime',
+      userProvisioningId: 'UserProvisioningId',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       createTime: 'string',
-      credentialId: 'string',
-      credentialType: 'string',
+      deletionStrategy: 'string',
+      description: 'string',
       directoryId: 'string',
-      expireTime: 'string',
+      duplicationStrategy: 'string',
+      ownerPk: 'string',
+      principalId: 'string',
+      principalName: 'string',
+      principalType: 'string',
       status: 'string',
+      targetId: 'string',
+      targetName: 'string',
+      targetPath: 'string',
+      targetType: 'string',
+      updateTime: 'string',
+      userProvisioningId: 'string',
     };
   }
 
@@ -6234,47 +7756,29 @@ export class UpdateSCIMServerCredentialStatusResponseBodySCIMServerCredential ex
   }
 }
 
-export class UpdateUserResponseBodyUser extends $tea.Model {
+export class UpdateUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration extends $tea.Model {
   createTime?: string;
-  description?: string;
-  displayName?: string;
-  email?: string;
-  firstName?: string;
-  lastName?: string;
-  provisionType?: string;
-  status?: string;
+  defaultLandingPage?: string;
+  directoryId?: string;
+  sessionDuration?: number;
   updateTime?: string;
-  userId?: string;
-  userName?: string;
   static names(): { [key: string]: string } {
     return {
       createTime: 'CreateTime',
-      description: 'Description',
-      displayName: 'DisplayName',
-      email: 'Email',
-      firstName: 'FirstName',
-      lastName: 'LastName',
-      provisionType: 'ProvisionType',
-      status: 'Status',
+      defaultLandingPage: 'DefaultLandingPage',
+      directoryId: 'DirectoryId',
+      sessionDuration: 'SessionDuration',
       updateTime: 'UpdateTime',
-      userId: 'UserId',
-      userName: 'UserName',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
       createTime: 'string',
-      description: 'string',
-      displayName: 'string',
-      email: 'string',
-      firstName: 'string',
-      lastName: 'string',
-      provisionType: 'string',
-      status: 'string',
+      defaultLandingPage: 'string',
+      directoryId: 'string',
+      sessionDuration: 'number',
       updateTime: 'string',
-      userId: 'string',
-      userName: 'string',
     };
   }
 
@@ -6309,8 +7813,6 @@ export default class Client extends OpenApi {
   /**
     * You can add up to two SAML signing certificates.
     * This topic provides an example on how to add a SAML signing certificate to the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request AddExternalSAMLIdPCertificateRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6347,8 +7849,6 @@ export default class Client extends OpenApi {
   /**
     * You can add up to two SAML signing certificates.
     * This topic provides an example on how to add a SAML signing certificate to the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request AddExternalSAMLIdPCertificateRequest
     * @return AddExternalSAMLIdPCertificateResponse
@@ -6360,8 +7860,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to add the system policy `AliyunECSFullAccess` to the access configuration `ac-00jhtfl8thteu6uj****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request AddPermissionPolicyToAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6409,8 +7907,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to add the system policy `AliyunECSFullAccess` to the access configuration `ac-00jhtfl8thteu6uj****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request AddPermissionPolicyToAccessConfigurationRequest
     * @return AddPermissionPolicyToAccessConfigurationResponse
@@ -6423,8 +7919,6 @@ export default class Client extends OpenApi {
   /**
     * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot add a user to a group that is synchronized by using SCIM.
     * This topic provides an example of how to add the user `u-00q8wbq42wiltcrk****` to the group `g-00jqzghi2n3o5hkh****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request AddUserToGroupRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6465,8 +7959,6 @@ export default class Client extends OpenApi {
   /**
     * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot add a user to a group that is synchronized by using SCIM.
     * This topic provides an example of how to add the user `u-00q8wbq42wiltcrk****` to the group `g-00jqzghi2n3o5hkh****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request AddUserToGroupRequest
     * @return AddUserToGroupResponse
@@ -6479,8 +7971,6 @@ export default class Client extends OpenApi {
   /**
     * If single sign-on (SSO) logon is disabled, you can clear the configurations of a SAML IdP. If SSO logon is enabled, you cannot clear the configurations.
     * This topic provides an example on how to clear the configurations of the SAML IdP within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ClearExternalSAMLIdentityProviderRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6513,8 +8003,6 @@ export default class Client extends OpenApi {
   /**
     * If single sign-on (SSO) logon is disabled, you can clear the configurations of a SAML IdP. If SSO logon is enabled, you cannot clear the configurations.
     * This topic provides an example on how to clear the configurations of the SAML IdP within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ClearExternalSAMLIdentityProviderRequest
     * @return ClearExternalSAMLIdentityProviderResponse
@@ -6528,8 +8016,6 @@ export default class Client extends OpenApi {
     * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of task execution by using the value of the `TaskId` response parameter.
     * For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](~~266726~~).
     * This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateAccessAssignmentRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6583,8 +8069,6 @@ export default class Client extends OpenApi {
     * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of task execution by using the value of the `TaskId` response parameter.
     * For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](~~266726~~).
     * This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateAccessAssignmentRequest
     * @return CreateAccessAssignmentResponse
@@ -6597,8 +8081,6 @@ export default class Client extends OpenApi {
   /**
     * For more information about access configurations, see [Overview of access configurations](~~266737~~).
     * This topic provides an example on how to create an access configuration named `ECS-Admin`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6647,8 +8129,6 @@ export default class Client extends OpenApi {
   /**
     * For more information about access configurations, see [Overview of access configurations](~~266737~~).
     * This topic provides an example on how to create an access configuration named `ECS-Admin`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateAccessConfigurationRequest
     * @return CreateAccessConfigurationResponse
@@ -6665,8 +8145,6 @@ export default class Client extends OpenApi {
     * ## Limits
     * - You can create only one directory for a management account.
     * - If you want to change the region of a directory, you must delete the directory and then create a directory in a different region.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateDirectoryRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6703,8 +8181,6 @@ export default class Client extends OpenApi {
     * ## Limits
     * - You can create only one directory for a management account.
     * - If you want to change the region of a directory, you must delete the directory and then create a directory in a different region.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateDirectoryRequest
     * @return CreateDirectoryResponse
@@ -6716,8 +8192,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to create a group named `TestGroup`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateGroupRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6757,8 +8231,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to create a group named `TestGroup`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateGroupRequest
     * @return CreateGroupResponse
@@ -6771,8 +8243,6 @@ export default class Client extends OpenApi {
   /**
     * SCIM credentials are required for SCIM synchronization. You can create up to two SCIM credentials.
     * This topic provides an example on how to create a SCIM credential within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateSCIMServerCredentialRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6805,8 +8275,6 @@ export default class Client extends OpenApi {
   /**
     * SCIM credentials are required for SCIM synchronization. You can create up to two SCIM credentials.
     * This topic provides an example on how to create a SCIM credential within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request CreateSCIMServerCredentialRequest
     * @return CreateSCIMServerCredentialResponse
@@ -6817,9 +8285,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to create a user named `Alice`.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to create a user named `Alice`.
     *
     * @param request CreateUserRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6878,9 +8344,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to create a user named `Alice`.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to create a user named `Alice`.
     *
     * @param request CreateUserRequest
     * @return CreateUserResponse
@@ -6890,11 +8354,66 @@ export default class Client extends OpenApi {
     return await this.createUserWithOptions(request, runtime);
   }
 
+  async createUserProvisioningWithOptions(request: CreateUserProvisioningRequest, runtime: $Util.RuntimeOptions): Promise<CreateUserProvisioningResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.deletionStrategy)) {
+      query["DeletionStrategy"] = request.deletionStrategy;
+    }
+
+    if (!Util.isUnset(request.description)) {
+      query["Description"] = request.description;
+    }
+
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.duplicationStrategy)) {
+      query["DuplicationStrategy"] = request.duplicationStrategy;
+    }
+
+    if (!Util.isUnset(request.principalId)) {
+      query["PrincipalId"] = request.principalId;
+    }
+
+    if (!Util.isUnset(request.principalType)) {
+      query["PrincipalType"] = request.principalType;
+    }
+
+    if (!Util.isUnset(request.targetId)) {
+      query["TargetId"] = request.targetId;
+    }
+
+    if (!Util.isUnset(request.targetType)) {
+      query["TargetType"] = request.targetType;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "CreateUserProvisioning",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<CreateUserProvisioningResponse>(await this.callApi(params, req, runtime), new CreateUserProvisioningResponse({}));
+  }
+
+  async createUserProvisioning(request: CreateUserProvisioningRequest): Promise<CreateUserProvisioningResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.createUserProvisioningWithOptions(request, runtime);
+  }
+
   /**
     * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
     * This topic provides an example on how to remove the access permissions on the account `114240524784****` in the resource directory from the CloudSSO user `u-00q8wbq42wiltcrk****`. The access permissions are assigned by using the access configuration `ac-00jhtfl8thteu6uj****`.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteAccessAssignmentRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -6951,8 +8470,6 @@ export default class Client extends OpenApi {
   /**
     * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
     * This topic provides an example on how to remove the access permissions on the account `114240524784****` in the resource directory from the CloudSSO user `u-00q8wbq42wiltcrk****`. The access permissions are assigned by using the access configuration `ac-00jhtfl8thteu6uj****`.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteAccessAssignmentRequest
     * @return DeleteAccessAssignmentResponse
@@ -6966,8 +8483,6 @@ export default class Client extends OpenApi {
     * This topic provides an example on how to delete the access configuration whose ID is `ac-001j9mcm3k7335bc****`.
     * ## Prerequisites
     * The access configuration that you want to delete is de-provisioned from the accounts in your resource directory. For more information, see [DeprovisionAccessConfiguration](~~338352~~).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7009,8 +8524,6 @@ export default class Client extends OpenApi {
     * This topic provides an example on how to delete the access configuration whose ID is `ac-001j9mcm3k7335bc****`.
     * ## Prerequisites
     * The access configuration that you want to delete is de-provisioned from the accounts in your resource directory. For more information, see [DeprovisionAccessConfiguration](~~338352~~).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteAccessConfigurationRequest
     * @return DeleteAccessConfigurationResponse
@@ -7030,8 +8543,6 @@ export default class Client extends OpenApi {
     * *   Access configurations are deleted. For more information, see [DeleteAccessConfiguration](~~336907~~).
     * *   System for Cross-domain Identity Management (SCIM) credentials are deleted. For more information, see [DeleteSCIMServerCredential](~~341842~~).
     * *   SSO logon configurations are deleted. For more information, see [ClearExternalSAMLIdentityProvider](~~341573~~).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteDirectoryRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7071,8 +8582,6 @@ export default class Client extends OpenApi {
     * *   Access configurations are deleted. For more information, see [DeleteAccessConfiguration](~~336907~~).
     * *   System for Cross-domain Identity Management (SCIM) credentials are deleted. For more information, see [DeleteSCIMServerCredential](~~341842~~).
     * *   SSO logon configurations are deleted. For more information, see [ClearExternalSAMLIdentityProvider](~~341573~~).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteDirectoryRequest
     * @return DeleteDirectoryResponse
@@ -7088,8 +8597,6 @@ export default class Client extends OpenApi {
     * The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
     * *   Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](~~335116~~).
     * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](~~338350~~).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteGroupRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7129,8 +8636,6 @@ export default class Client extends OpenApi {
     * The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
     * *   Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](~~335116~~).
     * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](~~338350~~).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteGroupRequest
     * @return DeleteGroupResponse
@@ -7142,8 +8647,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to unbind the MFA device `mfa-00ujhet8pycljj7j****` from the user `u-00q8wbq42wiltcrk****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteMFADeviceForUserRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7183,8 +8686,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to unbind the MFA device `mfa-00ujhet8pycljj7j****` from the user `u-00q8wbq42wiltcrk****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteMFADeviceForUserRequest
     * @return DeleteMFADeviceForUserResponse
@@ -7197,29 +8698,127 @@ export default class Client extends OpenApi {
   /**
     * After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
     * This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeleteSCIMServerCredentialRequest
     * @param runtime runtime options for this request RuntimeOptions
     * @return DeleteSCIMServerCredentialResponse
    */
-  async deleteSCIMServerCredentialWithOptions(request: DeleteSCIMServerCredentialRequest, runtime: $Util.RuntimeOptions): Promise<DeleteSCIMServerCredentialResponse> {
+  async deleteSCIMServerCredentialWithOptions(request: DeleteSCIMServerCredentialRequest, runtime: $Util.RuntimeOptions): Promise<DeleteSCIMServerCredentialResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.credentialId)) {
+      query["CredentialId"] = request.credentialId;
+    }
+
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "DeleteSCIMServerCredential",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<DeleteSCIMServerCredentialResponse>(await this.callApi(params, req, runtime), new DeleteSCIMServerCredentialResponse({}));
+  }
+
+  /**
+    * After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
+    * This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
+    *
+    * @param request DeleteSCIMServerCredentialRequest
+    * @return DeleteSCIMServerCredentialResponse
+   */
+  async deleteSCIMServerCredential(request: DeleteSCIMServerCredentialRequest): Promise<DeleteSCIMServerCredentialResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.deleteSCIMServerCredentialWithOptions(request, runtime);
+  }
+
+  /**
+    * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
+    * ## Prerequisites
+    * The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
+    * *   Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](~~341675~~).
+    * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](~~338350~~).
+    * *   Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](~~335116~~).
+    *
+    * @param request DeleteUserRequest
+    * @param runtime runtime options for this request RuntimeOptions
+    * @return DeleteUserResponse
+   */
+  async deleteUserWithOptions(request: DeleteUserRequest, runtime: $Util.RuntimeOptions): Promise<DeleteUserResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.userId)) {
+      query["UserId"] = request.userId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "DeleteUser",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<DeleteUserResponse>(await this.callApi(params, req, runtime), new DeleteUserResponse({}));
+  }
+
+  /**
+    * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
+    * ## Prerequisites
+    * The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
+    * *   Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](~~341675~~).
+    * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](~~338350~~).
+    * *   Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](~~335116~~).
+    *
+    * @param request DeleteUserRequest
+    * @return DeleteUserResponse
+   */
+  async deleteUser(request: DeleteUserRequest): Promise<DeleteUserResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.deleteUserWithOptions(request, runtime);
+  }
+
+  async deleteUserProvisioningWithOptions(request: DeleteUserProvisioningRequest, runtime: $Util.RuntimeOptions): Promise<DeleteUserProvisioningResponse> {
     Util.validateModel(request);
     let query = { };
-    if (!Util.isUnset(request.credentialId)) {
-      query["CredentialId"] = request.credentialId;
+    if (!Util.isUnset(request.deletionStrategy)) {
+      query["DeletionStrategy"] = request.deletionStrategy;
     }
 
     if (!Util.isUnset(request.directoryId)) {
       query["DirectoryId"] = request.directoryId;
     }
 
+    if (!Util.isUnset(request.userProvisioningId)) {
+      query["UserProvisioningId"] = request.userProvisioningId;
+    }
+
     let req = new $OpenApi.OpenApiRequest({
       query: OpenApiUtil.query(query),
     });
     let params = new $OpenApi.Params({
-      action: "DeleteSCIMServerCredential",
+      action: "DeleteUserProvisioning",
       version: "2021-05-15",
       protocol: "HTTPS",
       pathname: "/",
@@ -7229,53 +8828,34 @@ export default class Client extends OpenApi {
       reqBodyType: "formData",
       bodyType: "json",
     });
-    return $tea.cast<DeleteSCIMServerCredentialResponse>(await this.callApi(params, req, runtime), new DeleteSCIMServerCredentialResponse({}));
+    return $tea.cast<DeleteUserProvisioningResponse>(await this.callApi(params, req, runtime), new DeleteUserProvisioningResponse({}));
   }
 
-  /**
-    * After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
-    * This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
-    *
-    * @param request DeleteSCIMServerCredentialRequest
-    * @return DeleteSCIMServerCredentialResponse
-   */
-  async deleteSCIMServerCredential(request: DeleteSCIMServerCredentialRequest): Promise<DeleteSCIMServerCredentialResponse> {
+  async deleteUserProvisioning(request: DeleteUserProvisioningRequest): Promise<DeleteUserProvisioningResponse> {
     let runtime = new $Util.RuntimeOptions({ });
-    return await this.deleteSCIMServerCredentialWithOptions(request, runtime);
+    return await this.deleteUserProvisioningWithOptions(request, runtime);
   }
 
-  /**
-    * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
-    * ## Prerequisites
-    * The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
-    * *   Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](~~341675~~).
-    * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](~~338350~~).
-    * *   Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](~~335116~~).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
-    *
-    * @param request DeleteUserRequest
-    * @param runtime runtime options for this request RuntimeOptions
-    * @return DeleteUserResponse
-   */
-  async deleteUserWithOptions(request: DeleteUserRequest, runtime: $Util.RuntimeOptions): Promise<DeleteUserResponse> {
+  async deleteUserProvisioningEventWithOptions(request: DeleteUserProvisioningEventRequest, runtime: $Util.RuntimeOptions): Promise<DeleteUserProvisioningEventResponse> {
     Util.validateModel(request);
     let query = { };
     if (!Util.isUnset(request.directoryId)) {
       query["DirectoryId"] = request.directoryId;
     }
 
-    if (!Util.isUnset(request.userId)) {
-      query["UserId"] = request.userId;
+    if (!Util.isUnset(request.eventId)) {
+      query["EventId"] = request.eventId;
+    }
+
+    if (!Util.isUnset(request.userProvisioningId)) {
+      query["UserProvisioningId"] = request.userProvisioningId;
     }
 
     let req = new $OpenApi.OpenApiRequest({
       query: OpenApiUtil.query(query),
     });
     let params = new $OpenApi.Params({
-      action: "DeleteUser",
+      action: "DeleteUserProvisioningEvent",
       version: "2021-05-15",
       protocol: "HTTPS",
       pathname: "/",
@@ -7285,32 +8865,17 @@ export default class Client extends OpenApi {
       reqBodyType: "formData",
       bodyType: "json",
     });
-    return $tea.cast<DeleteUserResponse>(await this.callApi(params, req, runtime), new DeleteUserResponse({}));
+    return $tea.cast<DeleteUserProvisioningEventResponse>(await this.callApi(params, req, runtime), new DeleteUserProvisioningEventResponse({}));
   }
 
-  /**
-    * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
-    * ## Prerequisites
-    * The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
-    * *   Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](~~341675~~).
-    * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](~~338350~~).
-    * *   Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](~~335116~~).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
-    *
-    * @param request DeleteUserRequest
-    * @return DeleteUserResponse
-   */
-  async deleteUser(request: DeleteUserRequest): Promise<DeleteUserResponse> {
+  async deleteUserProvisioningEvent(request: DeleteUserProvisioningEventRequest): Promise<DeleteUserProvisioningEventResponse> {
     let runtime = new $Util.RuntimeOptions({ });
-    return await this.deleteUserWithOptions(request, runtime);
+    return await this.deleteUserProvisioningEventWithOptions(request, runtime);
   }
 
   /**
     * When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
     * This topic provides an example on how to de-provision the access configuration `ac-00jhtfl8thteu6uj****` from the account `114240524784****` in your resource directory.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeprovisionAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7355,8 +8920,6 @@ export default class Client extends OpenApi {
   /**
     * When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
     * This topic provides an example on how to de-provision the access configuration `ac-00jhtfl8thteu6uj****` from the account `114240524784****` in your resource directory.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DeprovisionAccessConfigurationRequest
     * @return DeprovisionAccessConfigurationResponse
@@ -7368,8 +8931,6 @@ export default class Client extends OpenApi {
 
   /**
     * If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request DisableServiceRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7393,8 +8954,6 @@ export default class Client extends OpenApi {
 
   /**
     * If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @return DisableServiceResponse
    */
@@ -7406,8 +8965,6 @@ export default class Client extends OpenApi {
   /**
     * You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has permissions to enable CloudSSO. For more information, see [Enable CloudSSO](~~262819~~).
     * If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request EnableServiceRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7432,8 +8989,6 @@ export default class Client extends OpenApi {
   /**
     * You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has permissions to enable CloudSSO. For more information, see [Enable CloudSSO](~~262819~~).
     * If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @return EnableServiceResponse
    */
@@ -7443,7 +8998,6 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * ## Usage notes
     * This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
     *
     * @param request GetAccessConfigurationRequest
@@ -7479,7 +9033,6 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * ## Usage notes
     * This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
     *
     * @param request GetAccessConfigurationRequest
@@ -7491,9 +9044,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.
     *
     * @param request GetDirectoryRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7524,9 +9075,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.
     *
     * @param request GetDirectoryRequest
     * @return GetDirectoryResponse
@@ -7539,8 +9088,6 @@ export default class Client extends OpenApi {
   /**
     * During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an identity provider (IdP).
     * This topic provides an example on how to query the information about the SP within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetDirectorySAMLServiceProviderInfoRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7573,8 +9120,6 @@ export default class Client extends OpenApi {
   /**
     * During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an identity provider (IdP).
     * This topic provides an example on how to query the information about the SP within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetDirectorySAMLServiceProviderInfoRequest
     * @return GetDirectorySAMLServiceProviderInfoResponse
@@ -7585,8 +9130,9 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO) logon, and status of SCIM synchronization.
-    * ## Limits
+    * ### [](#)
+    * This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, quota for system policies that can be configured for an access configuration, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO), and status of SCIM synchronization.
+    * ### [](#qps)Limit
     * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetDirectoryStatisticsRequest
@@ -7618,8 +9164,9 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO) logon, and status of SCIM synchronization.
-    * ## Limits
+    * ### [](#)
+    * This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, quota for system policies that can be configured for an access configuration, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO), and status of SCIM synchronization.
+    * ### [](#qps)Limit
     * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetDirectoryStatisticsRequest
@@ -7632,8 +9179,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the configurations of the SAML IdP within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetExternalSAMLIdentityProviderRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7665,8 +9210,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the configurations of the SAML IdP within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetExternalSAMLIdentityProviderRequest
     * @return GetExternalSAMLIdentityProviderResponse
@@ -7678,8 +9221,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the information about the group `g-00jqzghi2n3o5hkh****` in the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetGroupRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7715,8 +9256,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the information about the group `g-00jqzghi2n3o5hkh****` in the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetGroupRequest
     * @return GetGroupResponse
@@ -7816,8 +9355,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to check whether MFA is enabled for users in the directory whose ID is `00fc2p61****`. The returned result shows that MFA is in the Enabled state.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetMFAAuthenticationStatusRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7849,8 +9386,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to check whether MFA is enabled for users in the directory whose ID is `00fc2p61****`. The returned result shows that MFA is in the Enabled state.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetMFAAuthenticationStatusRequest
     * @return GetMFAAuthenticationStatusResponse
@@ -7862,8 +9397,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetSCIMSynchronizationStatusRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7895,8 +9428,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetSCIMSynchronizationStatusRequest
     * @return GetSCIMSynchronizationStatusResponse
@@ -7906,14 +9437,6 @@ export default class Client extends OpenApi {
     return await this.getSCIMSynchronizationStatusWithOptions(request, runtime);
   }
 
-  /**
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
-    *
-    * @param request GetServiceStatusRequest
-    * @param runtime runtime options for this request RuntimeOptions
-    * @return GetServiceStatusResponse
-   */
   async getServiceStatusWithOptions(runtime: $Util.RuntimeOptions): Promise<GetServiceStatusResponse> {
     let req = new $OpenApi.OpenApiRequest({ });
     let params = new $OpenApi.Params({
@@ -7930,12 +9453,6 @@ export default class Client extends OpenApi {
     return $tea.cast<GetServiceStatusResponse>(await this.callApi(params, req, runtime), new GetServiceStatusResponse({}));
   }
 
-  /**
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
-    *
-    * @return GetServiceStatusResponse
-   */
   async getServiceStatus(): Promise<GetServiceStatusResponse> {
     let runtime = new $Util.RuntimeOptions({ });
     return await this.getServiceStatusWithOptions(runtime);
@@ -7943,8 +9460,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetTaskRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -7980,8 +9495,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetTaskRequest
     * @return GetTaskResponse
@@ -7994,8 +9507,6 @@ export default class Client extends OpenApi {
   /**
     * You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, you can call the [GetTask](~~340670~~) operation.
     * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetTaskStatusRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8032,8 +9543,6 @@ export default class Client extends OpenApi {
   /**
     * You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, you can call the [GetTask](~~340670~~) operation.
     * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetTaskStatusRequest
     * @return GetTaskStatusResponse
@@ -8045,8 +9554,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetUserRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8082,8 +9589,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request GetUserRequest
     * @return GetUserResponse
@@ -8139,10 +9644,169 @@ export default class Client extends OpenApi {
     return await this.getUserMFAAuthenticationSettingsWithOptions(request, runtime);
   }
 
+  async getUserProvisioningWithOptions(request: GetUserProvisioningRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.userProvisioningId)) {
+      query["UserProvisioningId"] = request.userProvisioningId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "GetUserProvisioning",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<GetUserProvisioningResponse>(await this.callApi(params, req, runtime), new GetUserProvisioningResponse({}));
+  }
+
+  async getUserProvisioning(request: GetUserProvisioningRequest): Promise<GetUserProvisioningResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.getUserProvisioningWithOptions(request, runtime);
+  }
+
+  async getUserProvisioningConfigurationWithOptions(request: GetUserProvisioningConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningConfigurationResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "GetUserProvisioningConfiguration",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<GetUserProvisioningConfigurationResponse>(await this.callApi(params, req, runtime), new GetUserProvisioningConfigurationResponse({}));
+  }
+
+  async getUserProvisioningConfiguration(request: GetUserProvisioningConfigurationRequest): Promise<GetUserProvisioningConfigurationResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.getUserProvisioningConfigurationWithOptions(request, runtime);
+  }
+
+  async getUserProvisioningEventWithOptions(request: GetUserProvisioningEventRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningEventResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.eventId)) {
+      query["EventId"] = request.eventId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "GetUserProvisioningEvent",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<GetUserProvisioningEventResponse>(await this.callApi(params, req, runtime), new GetUserProvisioningEventResponse({}));
+  }
+
+  async getUserProvisioningEvent(request: GetUserProvisioningEventRequest): Promise<GetUserProvisioningEventResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.getUserProvisioningEventWithOptions(request, runtime);
+  }
+
+  async getUserProvisioningRdAccountStatisticsWithOptions(request: GetUserProvisioningRdAccountStatisticsRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningRdAccountStatisticsResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.rdMemberId)) {
+      query["RdMemberId"] = request.rdMemberId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "GetUserProvisioningRdAccountStatistics",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<GetUserProvisioningRdAccountStatisticsResponse>(await this.callApi(params, req, runtime), new GetUserProvisioningRdAccountStatisticsResponse({}));
+  }
+
+  async getUserProvisioningRdAccountStatistics(request: GetUserProvisioningRdAccountStatisticsRequest): Promise<GetUserProvisioningRdAccountStatisticsResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.getUserProvisioningRdAccountStatisticsWithOptions(request, runtime);
+  }
+
+  async getUserProvisioningStatisticsWithOptions(request: GetUserProvisioningStatisticsRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningStatisticsResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.userProvisioningId)) {
+      query["UserProvisioningId"] = request.userProvisioningId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "GetUserProvisioningStatistics",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<GetUserProvisioningStatisticsResponse>(await this.callApi(params, req, runtime), new GetUserProvisioningStatisticsResponse({}));
+  }
+
+  async getUserProvisioningStatistics(request: GetUserProvisioningStatisticsRequest): Promise<GetUserProvisioningStatisticsResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.getUserProvisioningStatisticsWithOptions(request, runtime);
+  }
+
   /**
-    * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory are assigned to one user.
     *
     * @param request ListAccessAssignmentsRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8201,9 +9865,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory are assigned to one user.
     *
     * @param request ListAccessAssignmentsRequest
     * @return ListAccessAssignmentsResponse
@@ -8214,7 +9876,6 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * ## Usage notes
     * This topic provides an example on how to query the accounts for which the access permission `ac-00ccule7tadaijxc****` is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.
     *
     * @param request ListAccessConfigurationProvisioningsRequest
@@ -8270,7 +9931,6 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * ## Usage notes
     * This topic provides an example on how to query the accounts for which the access permission `ac-00ccule7tadaijxc****` is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.
     *
     * @param request ListAccessConfigurationProvisioningsRequest
@@ -8282,7 +9942,6 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * ## Usage notes
     * This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
     *
     * @param request ListAccessConfigurationsRequest
@@ -8330,7 +9989,6 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * ## Usage notes
     * This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
     *
     * @param request ListAccessConfigurationsRequest
@@ -8342,9 +10000,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
     *
     * @param request ListDirectoriesRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8367,9 +10023,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
     *
     * @return ListDirectoriesResponse
    */
@@ -8380,8 +10034,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the SAML signing certificates within the directory `d-00fc2p61****`. The returned result shows that the directory contains one SAML signing certificate.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListExternalSAMLIdPCertificatesRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8413,8 +10065,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the SAML signing certificates within the directory `d-00fc2p61****`. The returned result shows that the directory contains one SAML signing certificate.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListExternalSAMLIdPCertificatesRequest
     * @return ListExternalSAMLIdPCertificatesResponse
@@ -8426,8 +10076,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the users in the group `g-00jqzghi2n3o5hkh****`. The returned result shows that the group contains the user `Alice` and the user `user1`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListGroupMembersRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8471,8 +10119,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the users in the group `g-00jqzghi2n3o5hkh****`. The returned result shows that the group contains the user `Alice` and the user `user1`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListGroupMembersRequest
     * @return ListGroupMembersResponse
@@ -8484,8 +10130,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the groups in the directory `d-00fc2p61****`. The returned result shows that the directory contains three groups. The groups `group1` and `group2` are synchronized from an external identity provider (IdP). The group `TestGroup` is manually created in CloudSSO.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListGroupsRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8533,8 +10177,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the groups in the directory `d-00fc2p61****`. The returned result shows that the directory contains three groups. The groups `group1` and `group2` are synchronized from an external identity provider (IdP). The group `TestGroup` is manually created in CloudSSO.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListGroupsRequest
     * @return ListGroupsResponse
@@ -8546,8 +10188,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the groups to which the user `u-00q8wbq42wiltcrk****` is added. The returned result shows that the user is added to both the `TestGroup` and the `group1` groups.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListJoinedGroupsForUserRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8591,8 +10231,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the groups to which the user `u-00q8wbq42wiltcrk****` is added. The returned result shows that the user is added to both the `TestGroup` and the `group1` groups.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListJoinedGroupsForUserRequest
     * @return ListJoinedGroupsForUserResponse
@@ -8603,9 +10241,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
     *
     * @param request ListMFADevicesForUserRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8640,9 +10276,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
     *
     * @param request ListMFADevicesForUserRequest
     * @return ListMFADevicesForUserResponse
@@ -8653,9 +10287,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.
     *
     * @param request ListPermissionPoliciesInAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8694,9 +10326,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.
     *
     * @param request ListPermissionPoliciesInAccessConfigurationRequest
     * @return ListPermissionPoliciesInAccessConfigurationResponse
@@ -8708,8 +10338,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the SCIM credentials within the `d-00fc2p61****` directory.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListSCIMServerCredentialsRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8741,8 +10369,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query the SCIM credentials within the `d-00fc2p61****` directory.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListSCIMServerCredentialsRequest
     * @return ListSCIMServerCredentialsResponse
@@ -8755,8 +10381,6 @@ export default class Client extends OpenApi {
   /**
     * By default, this operation queries the tasks within the previous 24 hours. This operation allows you to query the tasks within a maximum of 7 days. You can specify the start time of the query by using `Filter`.
     * This topic provides an example on how to query the tasks within the previous 24 hours.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListTasksRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8829,8 +10453,6 @@ export default class Client extends OpenApi {
   /**
     * By default, this operation queries the tasks within the previous 24 hours. This operation allows you to query the tasks within a maximum of 7 days. You can specify the start time of the query by using `Filter`.
     * This topic provides an example on how to query the tasks within the previous 24 hours.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListTasksRequest
     * @return ListTasksResponse
@@ -8840,10 +10462,102 @@ export default class Client extends OpenApi {
     return await this.listTasksWithOptions(request, runtime);
   }
 
+  async listUserProvisioningEventsWithOptions(request: ListUserProvisioningEventsRequest, runtime: $Util.RuntimeOptions): Promise<ListUserProvisioningEventsResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.maxResults)) {
+      query["MaxResults"] = request.maxResults;
+    }
+
+    if (!Util.isUnset(request.nextToken)) {
+      query["NextToken"] = request.nextToken;
+    }
+
+    if (!Util.isUnset(request.userProvisioningId)) {
+      query["UserProvisioningId"] = request.userProvisioningId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "ListUserProvisioningEvents",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<ListUserProvisioningEventsResponse>(await this.callApi(params, req, runtime), new ListUserProvisioningEventsResponse({}));
+  }
+
+  async listUserProvisioningEvents(request: ListUserProvisioningEventsRequest): Promise<ListUserProvisioningEventsResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.listUserProvisioningEventsWithOptions(request, runtime);
+  }
+
+  async listUserProvisioningsWithOptions(request: ListUserProvisioningsRequest, runtime: $Util.RuntimeOptions): Promise<ListUserProvisioningsResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.maxResults)) {
+      query["MaxResults"] = request.maxResults;
+    }
+
+    if (!Util.isUnset(request.nextToken)) {
+      query["NextToken"] = request.nextToken;
+    }
+
+    if (!Util.isUnset(request.principalId)) {
+      query["PrincipalId"] = request.principalId;
+    }
+
+    if (!Util.isUnset(request.principalType)) {
+      query["PrincipalType"] = request.principalType;
+    }
+
+    if (!Util.isUnset(request.targetId)) {
+      query["TargetId"] = request.targetId;
+    }
+
+    if (!Util.isUnset(request.targetType)) {
+      query["TargetType"] = request.targetType;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "ListUserProvisionings",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<ListUserProvisioningsResponse>(await this.callApi(params, req, runtime), new ListUserProvisioningsResponse({}));
+  }
+
+  async listUserProvisionings(request: ListUserProvisioningsRequest): Promise<ListUserProvisioningsResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.listUserProvisioningsWithOptions(request, runtime);
+  }
+
   /**
     * This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListUsersRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8895,8 +10609,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ListUsersRequest
     * @return ListUsersResponse
@@ -8909,8 +10621,6 @@ export default class Client extends OpenApi {
   /**
     * When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
     * This topic provides an example on how to provision the access configuration `ac-00jhtfl8thteu6uj****` for the account `114240524784****` in your resource directory.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ProvisionAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -8955,8 +10665,6 @@ export default class Client extends OpenApi {
   /**
     * When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
     * This topic provides an example on how to provision the access configuration `ac-00jhtfl8thteu6uj****` for the account `114240524784****` in your resource directory.
-    * ## Limits
-    * You can call this operation up to 20 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ProvisionAccessConfigurationRequest
     * @return ProvisionAccessConfigurationResponse
@@ -8968,8 +10676,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to remove the SAML signing certificate whose ID is `idp-c-00dt9gnl7fmjaw9c****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request RemoveExternalSAMLIdPCertificateRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9005,8 +10711,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to remove the SAML signing certificate whose ID is `idp-c-00dt9gnl7fmjaw9c****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request RemoveExternalSAMLIdPCertificateRequest
     * @return RemoveExternalSAMLIdPCertificateResponse
@@ -9019,8 +10723,6 @@ export default class Client extends OpenApi {
   /**
     * After you remove an inline policy from an access configuration, the policy cannot be restored.
     * This topic provides an example on how to remove the system policy `AliyunECSFullAccess` from the access configuration `ac-00jhtfl8thteu6uj****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request RemovePermissionPolicyFromAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9065,8 +10767,6 @@ export default class Client extends OpenApi {
   /**
     * After you remove an inline policy from an access configuration, the policy cannot be restored.
     * This topic provides an example on how to remove the system policy `AliyunECSFullAccess` from the access configuration `ac-00jhtfl8thteu6uj****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request RemovePermissionPolicyFromAccessConfigurationRequest
     * @return RemovePermissionPolicyFromAccessConfigurationResponse
@@ -9078,9 +10778,7 @@ export default class Client extends OpenApi {
 
   /**
     * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot remove a user from a group that is synchronized by using SCIM.  
-    * This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.
     *
     * @param request RemoveUserFromGroupRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9120,9 +10818,7 @@ export default class Client extends OpenApi {
 
   /**
     * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot remove a user from a group that is synchronized by using SCIM.  
-    * This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.
     *
     * @param request RemoveUserFromGroupRequest
     * @return RemoveUserFromGroupResponse
@@ -9136,8 +10832,6 @@ export default class Client extends OpenApi {
     * If you forget your password or your password expires or is at risk, you must contact a CloudSSO administrator to reset your password.
     * >  After you enable SSO logon, your password cannot be reset.
     * This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ResetUserPasswordRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9187,8 +10881,6 @@ export default class Client extends OpenApi {
     * If you forget your password or your password expires or is at risk, you must contact a CloudSSO administrator to reset your password.
     * >  After you enable SSO logon, your password cannot be reset.
     * This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request ResetUserPasswordRequest
     * @return ResetUserPasswordResponse
@@ -9198,12 +10890,48 @@ export default class Client extends OpenApi {
     return await this.resetUserPasswordWithOptions(request, runtime);
   }
 
+  async retryUserProvisioningEventWithOptions(request: RetryUserProvisioningEventRequest, runtime: $Util.RuntimeOptions): Promise<RetryUserProvisioningEventResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.duplicationStrategy)) {
+      query["DuplicationStrategy"] = request.duplicationStrategy;
+    }
+
+    if (!Util.isUnset(request.eventId)) {
+      query["EventId"] = request.eventId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "RetryUserProvisioningEvent",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<RetryUserProvisioningEventResponse>(await this.callApi(params, req, runtime), new RetryUserProvisioningEventResponse({}));
+  }
+
+  async retryUserProvisioningEvent(request: RetryUserProvisioningEventRequest): Promise<RetryUserProvisioningEventResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.retryUserProvisioningEventWithOptions(request, runtime);
+  }
+
   /**
-    * ## Usage notes
     * During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an IdP.
     * You can use one of the following methods to configure a SAML IdP. You can obtain the required metadata file or parameter values from your IdP.
     * *   Use the metadata file. You can specify the `EncodedMetadataDocument` parameter to upload the metadata file.
-    * *   Manually configure the IdP. You can manually specifythe following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
+    * *   Manually configure the IdP. You can manually specify the following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
     * If you have configured a SAML IdP, the existing configurations are replaced after you call this operation.
     * *   If the IdP is configured by using the metadata file, all existing configurations are replaced with new configurations.
     * *   If the IdP is manually configured, the original parameter values that are different from the new parameter values are replaced.
@@ -9263,11 +10991,10 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * ## Usage notes
     * During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an IdP.
     * You can use one of the following methods to configure a SAML IdP. You can obtain the required metadata file or parameter values from your IdP.
     * *   Use the metadata file. You can specify the `EncodedMetadataDocument` parameter to upload the metadata file.
-    * *   Manually configure the IdP. You can manually specifythe following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
+    * *   Manually configure the IdP. You can manually specify the following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
     * If you have configured a SAML IdP, the existing configurations are replaced after you call this operation.
     * *   If the IdP is configured by using the metadata file, all existing configurations are replaced with new configurations.
     * *   If the IdP is manually configured, the original parameter values that are different from the new parameter values are replaced.
@@ -9285,8 +11012,6 @@ export default class Client extends OpenApi {
   /**
     * If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
     * This topic provides an example on how to enable MFA for users.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request SetMFAAuthenticationStatusRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9323,8 +11048,6 @@ export default class Client extends OpenApi {
   /**
     * If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
     * This topic provides an example on how to enable MFA for users.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request SetMFAAuthenticationStatusRequest
     * @return SetMFAAuthenticationStatusResponse
@@ -9339,8 +11062,6 @@ export default class Client extends OpenApi {
     * *   After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.
     * *   After you disable SCIM synchronization, you can modify and delete the users and groups that are synchronized to CloudSSO by using SCIM. You can also add users to or remove users from the groups.
     * This topic provides an example on how to enable SCIM synchronization within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request SetSCIMSynchronizationStatusRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9379,8 +11100,6 @@ export default class Client extends OpenApi {
     * *   After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.
     * *   After you disable SCIM synchronization, you can modify and delete the users and groups that are synchronized to CloudSSO by using SCIM. You can also add users to or remove users from the groups.
     * This topic provides an example on how to enable SCIM synchronization within the directory `d-00fc2p61****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request SetSCIMSynchronizationStatusRequest
     * @return SetSCIMSynchronizationStatusResponse
@@ -9393,8 +11112,6 @@ export default class Client extends OpenApi {
   /**
     * You can modify the `Description`, `SessionDuration`, and `RelayState` parameters for an access configuration.
     * This topic provides an example on how to change the initial web page in the access configuration `ac-00jhtfl8thteu6uj****` to `https://cloudsso.console.aliyun.com`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9443,8 +11160,6 @@ export default class Client extends OpenApi {
   /**
     * You can modify the `Description`, `SessionDuration`, and `RelayState` parameters for an access configuration.
     * This topic provides an example on how to change the initial web page in the access configuration `ac-00jhtfl8thteu6uj****` to `https://cloudsso.console.aliyun.com`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateAccessConfigurationRequest
     * @return UpdateAccessConfigurationResponse
@@ -9456,9 +11171,7 @@ export default class Client extends OpenApi {
 
   /**
     * After you change the name of a directory, the URL that is used to log on to the Cloud SSO user portal is changed. You must notify the Cloud SSO users of the correct URL. 
-    * This topic provides an example on how to change the name of a directory to `new-example`.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to change the name of a directory to `new-example`.
     *
     * @param request UpdateDirectoryRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9494,9 +11207,7 @@ export default class Client extends OpenApi {
 
   /**
     * After you change the name of a directory, the URL that is used to log on to the Cloud SSO user portal is changed. You must notify the Cloud SSO users of the correct URL. 
-    * This topic provides an example on how to change the name of a directory to `new-example`.  
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to change the name of a directory to `new-example`.
     *
     * @param request UpdateDirectoryRequest
     * @return UpdateDirectoryResponse
@@ -9510,8 +11221,6 @@ export default class Client extends OpenApi {
     * You can modify `GroupName` and `Description` for a group.
     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a group that is synchronized by using SCIM.
     * This topic provides an example on how to change the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateGroupRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9557,8 +11266,6 @@ export default class Client extends OpenApi {
     * You can modify `GroupName` and `Description` for a group.
     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a group that is synchronized by using SCIM.
     * This topic provides an example on how to change the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateGroupRequest
     * @return UpdateGroupResponse
@@ -9570,8 +11277,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to modify an inline policy that is created for the access configuration `ac-00jhtfl8thteu6uj****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateInlinePolicyForAccessConfigurationRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9615,8 +11320,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to modify an inline policy that is created for the access configuration `ac-00jhtfl8thteu6uj****`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateInlinePolicyForAccessConfigurationRequest
     * @return UpdateInlinePolicyForAccessConfigurationResponse
@@ -9680,8 +11383,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to disable the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`. After the SCIM credential is disabled, the synchronization task that uses the SCIM credential fails. You can call this operation again to enable the SCIM credential.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateSCIMServerCredentialStatusRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9721,8 +11422,6 @@ export default class Client extends OpenApi {
 
   /**
     * This topic provides an example on how to disable the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`. After the SCIM credential is disabled, the synchronization task that uses the SCIM credential fails. You can call this operation again to enable the SCIM credential.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateSCIMServerCredentialStatusRequest
     * @return UpdateSCIMServerCredentialStatusResponse
@@ -9736,8 +11435,6 @@ export default class Client extends OpenApi {
     * You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a user that is synchronized by using SCIM.
     * This topic provides an example on how to change the email address of the user whose ID is `u-00q8wbq42wiltcrk****` to `AliceLee@example.com`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateUserRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9795,8 +11492,6 @@ export default class Client extends OpenApi {
     * You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a user that is synchronized by using SCIM.
     * This topic provides an example on how to change the email address of the user whose ID is `u-00q8wbq42wiltcrk****` to `AliceLee@example.com`.
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
     *
     * @param request UpdateUserRequest
     * @return UpdateUserResponse
@@ -9860,10 +11555,90 @@ export default class Client extends OpenApi {
     return await this.updateUserMFAAuthenticationSettingsWithOptions(request, runtime);
   }
 
+  async updateUserProvisioningWithOptions(request: UpdateUserProvisioningRequest, runtime: $Util.RuntimeOptions): Promise<UpdateUserProvisioningResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.newDeletionStrategy)) {
+      query["NewDeletionStrategy"] = request.newDeletionStrategy;
+    }
+
+    if (!Util.isUnset(request.newDescription)) {
+      query["NewDescription"] = request.newDescription;
+    }
+
+    if (!Util.isUnset(request.newDuplicationStrategy)) {
+      query["NewDuplicationStrategy"] = request.newDuplicationStrategy;
+    }
+
+    if (!Util.isUnset(request.userProvisioningId)) {
+      query["UserProvisioningId"] = request.userProvisioningId;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "UpdateUserProvisioning",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<UpdateUserProvisioningResponse>(await this.callApi(params, req, runtime), new UpdateUserProvisioningResponse({}));
+  }
+
+  async updateUserProvisioning(request: UpdateUserProvisioningRequest): Promise<UpdateUserProvisioningResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.updateUserProvisioningWithOptions(request, runtime);
+  }
+
+  async updateUserProvisioningConfigurationWithOptions(request: UpdateUserProvisioningConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<UpdateUserProvisioningConfigurationResponse> {
+    Util.validateModel(request);
+    let query = { };
+    if (!Util.isUnset(request.directoryId)) {
+      query["DirectoryId"] = request.directoryId;
+    }
+
+    if (!Util.isUnset(request.newDefaultLandingPage)) {
+      query["NewDefaultLandingPage"] = request.newDefaultLandingPage;
+    }
+
+    if (!Util.isUnset(request.newSessionDuration)) {
+      query["NewSessionDuration"] = request.newSessionDuration;
+    }
+
+    let req = new $OpenApi.OpenApiRequest({
+      query: OpenApiUtil.query(query),
+    });
+    let params = new $OpenApi.Params({
+      action: "UpdateUserProvisioningConfiguration",
+      version: "2021-05-15",
+      protocol: "HTTPS",
+      pathname: "/",
+      method: "POST",
+      authType: "AK",
+      style: "RPC",
+      reqBodyType: "formData",
+      bodyType: "json",
+    });
+    return $tea.cast<UpdateUserProvisioningConfigurationResponse>(await this.callApi(params, req, runtime), new UpdateUserProvisioningConfigurationResponse({}));
+  }
+
+  async updateUserProvisioningConfiguration(request: UpdateUserProvisioningConfigurationRequest): Promise<UpdateUserProvisioningConfigurationResponse> {
+    let runtime = new $Util.RuntimeOptions({ });
+    return await this.updateUserProvisioningConfigurationWithOptions(request, runtime);
+  }
+
   /**
-    * This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal. 
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal.
     *
     * @param request UpdateUserStatusRequest
     * @param runtime runtime options for this request RuntimeOptions
@@ -9902,9 +11677,7 @@ export default class Client extends OpenApi {
   }
 
   /**
-    * This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal. 
-    * ## Limits
-    * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+    * This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal.
     *
     * @param request UpdateUserStatusRequest
     * @return UpdateUserStatusResponse