@alicloud/cloudsso20210515 1.3.0 → 1.4.0

package/dist/client.js

@@ -1,15 +1,28 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
 var __importStar = (this && this.__importStar) || function (mod) {
     if (mod && mod.__esModule) return mod;
     var result = {};
-    if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
-    result["default"] = mod;
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
     return result;
 };
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration = exports.UpdateUserProvisioningResponseBodyUserProvisioning = exports.UpdateUserResponseBodyUser = exports.UpdateSCIMServerCredentialStatusResponseBodySCIMServerCredential = exports.UpdateGroupResponseBodyGroup = exports.UpdateDirectoryResponseBodyDirectory = exports.UpdateAccessConfigurationResponseBodyAccessConfiguration = exports.SetExternalSAMLIdentityProviderResponseBodySAMLIdentityProviderConfiguration = exports.ProvisionAccessConfigurationResponseBodyTasks = exports.ListUsersResponseBodyUsers = exports.ListUsersResponseBodyUsersExternalId = exports.ListUserProvisioningsResponseBodyUserProvisionings = exports.ListUserProvisioningEventsResponseBodyUserProvisioningEvents = exports.ListTasksResponseBodyTasks = exports.ListSCIMServerCredentialsResponseBodySCIMServerCredentials = exports.ListPermissionPoliciesInAccessConfigurationResponseBodyPermissionPolicies = exports.ListMFADevicesForUserResponseBodyMFADevices = exports.ListJoinedGroupsForUserResponseBodyJoinedGroups = exports.ListGroupsResponseBodyGroups = exports.ListGroupMembersResponseBodyGroupMembers = exports.ListExternalSAMLIdPCertificatesResponseBodySAMLIdPCertificates = exports.ListDirectoriesResponseBodyDirectories = exports.ListAccessConfigurationsResponseBodyAccessConfigurations = exports.ListAccessConfigurationProvisioningsResponseBodyAccessConfigurationProvisionings = exports.ListAccessAssignmentsResponseBodyAccessAssignments = exports.GetUserProvisioningStatisticsResponseBodyUserProvisioningStatistics = exports.GetUserProvisioningRdAccountStatisticsResponseBodyUserProvisioningStatistics = exports.GetUserProvisioningEventResponseBodyUserProvisioningEvent = exports.GetUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration = exports.GetUserProvisioningResponseBodyUserProvisioning = exports.GetUserIdRequestExternalId = exports.GetUserResponseBodyUser = exports.GetUserResponseBodyUserExternalId = exports.GetTaskStatusResponseBodyTaskStatus = exports.GetTaskResponseBodyTask = exports.GetServiceStatusResponseBodyServiceStatus = exports.GetPasswordPolicyResponseBodyPasswordPolicy = exports.GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo = exports.GetLoginPreferenceResponseBodyLoginPreference = exports.GetGroupResponseBodyGroup = exports.GetExternalSAMLIdentityProviderResponseBodySAMLIdentityProviderConfiguration = exports.GetDirectoryStatisticsResponseBodyDirectoryStatistics = exports.GetDirectorySAMLServiceProviderInfoResponseBodySAMLServiceProvider = exports.GetDirectoryResponseBodyDirectory = exports.GetAccessConfigurationResponseBodyAccessConfiguration = exports.DeprovisionAccessConfigurationResponseBodyTasks = exports.DeleteAccessAssignmentResponseBodyTask = exports.CreateUserProvisioningResponseBodyUserProvisioning = exports.CreateUserResponseBodyUser = exports.CreateSCIMServerCredentialResponseBodySCIMServerCredential = exports.CreateGroupResponseBodyGroup = exports.CreateDirectoryResponseBodyDirectory = exports.CreateAccessConfigurationResponseBodyAccessConfiguration = exports.CreateAccessAssignmentResponseBodyTask = exports.UpdateUserStatusResponse = exports.UpdateUserStatusResponseBody = exports.UpdateUserStatusRequest = exports.UpdateUserProvisioningConfigurationResponse = exports.UpdateUserProvisioningConfigurationResponseBody = exports.UpdateUserProvisioningConfigurationRequest = exports.UpdateUserProvisioningResponse = exports.UpdateUserProvisioningResponseBody = exports.UpdateUserProvisioningRequest = exports.UpdateUserMFAAuthenticationSettingsResponse = exports.UpdateUserMFAAuthenticationSettingsResponseBody = exports.UpdateUserMFAAuthenticationSettingsRequest = exports.UpdateUserResponse = exports.UpdateUserResponseBody = exports.UpdateUserRequest = exports.UpdateSCIMServerCredentialStatusResponse = exports.UpdateSCIMServerCredentialStatusResponseBody = exports.UpdateSCIMServerCredentialStatusRequest = exports.UpdateMFAAuthenticationSettingsResponse = exports.UpdateMFAAuthenticationSettingsResponseBody = exports.UpdateMFAAuthenticationSettingsRequest = exports.UpdateInlinePolicyForAccessConfigurationResponse = exports.UpdateInlinePolicyForAccessConfigurationResponseBody = exports.UpdateInlinePolicyForAccessConfigurationRequest = exports.UpdateGroupResponse = exports.UpdateGroupResponseBody = exports.UpdateGroupRequest = exports.UpdateDirectoryResponse = exports.UpdateDirectoryResponseBody = exports.UpdateDirectoryRequest = exports.UpdateAccessConfigurationResponse = exports.UpdateAccessConfigurationResponseBody = exports.UpdateAccessConfigurationRequest = exports.SetSCIMSynchronizationStatusResponse = exports.SetSCIMSynchronizationStatusResponseBody = exports.SetSCIMSynchronizationStatusRequest = exports.SetPasswordPolicyResponse = exports.SetPasswordPolicyResponseBody = exports.SetPasswordPolicyRequest = exports.SetMFAAuthenticationStatusResponse = exports.SetMFAAuthenticationStatusResponseBody = exports.SetMFAAuthenticationStatusRequest = exports.SetLoginPreferenceResponse = exports.SetLoginPreferenceResponseBody = exports.SetLoginPreferenceRequest = exports.SetExternalSAMLIdentityProviderResponse = exports.SetExternalSAMLIdentityProviderResponseBody = exports.SetExternalSAMLIdentityProviderRequest = exports.RetryUserProvisioningEventResponse = exports.RetryUserProvisioningEventResponseBody = exports.RetryUserProvisioningEventRequest = exports.ResetUserPasswordResponse = exports.ResetUserPasswordResponseBody = exports.ResetUserPasswordRequest = exports.RemoveUserFromGroupResponse = exports.RemoveUserFromGroupResponseBody = exports.RemoveUserFromGroupRequest = exports.RemovePermissionPolicyFromAccessConfigurationResponse = exports.RemovePermissionPolicyFromAccessConfigurationResponseBody = exports.RemovePermissionPolicyFromAccessConfigurationRequest = exports.RemoveExternalSAMLIdPCertificateResponse = exports.RemoveExternalSAMLIdPCertificateResponseBody = exports.RemoveExternalSAMLIdPCertificateRequest = exports.ProvisionAccessConfigurationResponse = exports.ProvisionAccessConfigurationResponseBody = exports.ProvisionAccessConfigurationRequest = exports.ListUsersResponse = exports.ListUsersResponseBody = exports.ListUsersRequest = exports.ListUserProvisioningsResponse = exports.ListUserProvisioningsResponseBody = exports.ListUserProvisioningsRequest = exports.ListUserProvisioningEventsResponse = exports.ListUserProvisioningEventsResponseBody = exports.ListUserProvisioningEventsRequest = exports.ListTasksResponse = exports.ListTasksResponseBody = exports.ListTasksRequest = exports.ListSCIMServerCredentialsResponse = exports.ListSCIMServerCredentialsResponseBody = exports.ListSCIMServerCredentialsRequest = exports.ListPermissionPoliciesInAccessConfigurationResponse = exports.ListPermissionPoliciesInAccessConfigurationResponseBody = exports.ListPermissionPoliciesInAccessConfigurationRequest = exports.ListMFADevicesForUserResponse = exports.ListMFADevicesForUserResponseBody = exports.ListMFADevicesForUserRequest = exports.ListJoinedGroupsForUserResponse = exports.ListJoinedGroupsForUserResponseBody = exports.ListJoinedGroupsForUserRequest = exports.ListGroupsResponse = exports.ListGroupsResponseBody = exports.ListGroupsRequest = exports.ListGroupMembersResponse = exports.ListGroupMembersResponseBody = exports.ListGroupMembersRequest = exports.ListExternalSAMLIdPCertificatesResponse = exports.ListExternalSAMLIdPCertificatesResponseBody = exports.ListExternalSAMLIdPCertificatesRequest = exports.ListDirectoriesResponse = exports.ListDirectoriesResponseBody = exports.ListAccessConfigurationsResponse = exports.ListAccessConfigurationsResponseBody = exports.ListAccessConfigurationsRequest = exports.ListAccessConfigurationProvisioningsResponse = exports.ListAccessConfigurationProvisioningsResponseBody = exports.ListAccessConfigurationProvisioningsRequest = exports.ListAccessAssignmentsResponse = exports.ListAccessAssignmentsResponseBody = exports.ListAccessAssignmentsRequest = exports.GetUserProvisioningStatisticsResponse = exports.GetUserProvisioningStatisticsResponseBody = exports.GetUserProvisioningStatisticsRequest = exports.GetUserProvisioningRdAccountStatisticsResponse = exports.GetUserProvisioningRdAccountStatisticsResponseBody = exports.GetUserProvisioningRdAccountStatisticsRequest = exports.GetUserProvisioningEventResponse = exports.GetUserProvisioningEventResponseBody = exports.GetUserProvisioningEventRequest = exports.GetUserProvisioningConfigurationResponse = exports.GetUserProvisioningConfigurationResponseBody = exports.GetUserProvisioningConfigurationRequest = exports.GetUserProvisioningResponse = exports.GetUserProvisioningResponseBody = exports.GetUserProvisioningRequest = exports.GetUserMFAAuthenticationSettingsResponse = exports.GetUserMFAAuthenticationSettingsResponseBody = exports.GetUserMFAAuthenticationSettingsRequest = exports.GetUserIdResponse = exports.GetUserIdResponseBody = exports.GetUserIdShrinkRequest = exports.GetUserIdRequest = exports.GetUserResponse = exports.GetUserResponseBody = exports.GetUserRequest = exports.GetTaskStatusResponse = exports.GetTaskStatusResponseBody = exports.GetTaskStatusRequest = exports.GetTaskResponse = exports.GetTaskResponseBody = exports.GetTaskRequest = exports.GetServiceStatusResponse = exports.GetServiceStatusResponseBody = exports.GetSCIMSynchronizationStatusResponse = exports.GetSCIMSynchronizationStatusResponseBody = exports.GetSCIMSynchronizationStatusRequest = exports.GetPasswordPolicyResponse = exports.GetPasswordPolicyResponseBody = exports.GetPasswordPolicyRequest = exports.GetMFAAuthenticationStatusResponse = exports.GetMFAAuthenticationStatusResponseBody = exports.GetMFAAuthenticationStatusRequest = exports.GetMFAAuthenticationSettingsResponse = exports.GetMFAAuthenticationSettingsResponseBody = exports.GetMFAAuthenticationSettingsRequest = exports.GetMFAAuthenticationSettingInfoResponse = exports.GetMFAAuthenticationSettingInfoResponseBody = exports.GetMFAAuthenticationSettingInfoRequest = exports.GetLoginPreferenceResponse = exports.GetLoginPreferenceResponseBody = exports.GetLoginPreferenceRequest = exports.GetGroupResponse = exports.GetGroupResponseBody = exports.GetGroupRequest = exports.GetExternalSAMLIdentityProviderResponse = exports.GetExternalSAMLIdentityProviderResponseBody = exports.GetExternalSAMLIdentityProviderRequest = exports.GetDirectoryStatisticsResponse = exports.GetDirectoryStatisticsResponseBody = exports.GetDirectoryStatisticsRequest = exports.GetDirectorySAMLServiceProviderInfoResponse = exports.GetDirectorySAMLServiceProviderInfoResponseBody = exports.GetDirectorySAMLServiceProviderInfoRequest = exports.GetDirectoryResponse = exports.GetDirectoryResponseBody = exports.GetDirectoryRequest = exports.GetAccessConfigurationResponse = exports.GetAccessConfigurationResponseBody = exports.GetAccessConfigurationRequest = exports.EnableServiceResponse = exports.EnableServiceResponseBody = exports.DisableServiceResponse = exports.DisableServiceResponseBody = exports.DeprovisionAccessConfigurationResponse = exports.DeprovisionAccessConfigurationResponseBody = exports.DeprovisionAccessConfigurationRequest = exports.DeleteUserProvisioningEventResponse = exports.DeleteUserProvisioningEventResponseBody = exports.DeleteUserProvisioningEventRequest = exports.DeleteUserProvisioningResponse = exports.DeleteUserProvisioningResponseBody = exports.DeleteUserProvisioningRequest = exports.DeleteUserResponse = exports.DeleteUserResponseBody = exports.DeleteUserRequest = exports.DeleteSCIMServerCredentialResponse = exports.DeleteSCIMServerCredentialResponseBody = exports.DeleteSCIMServerCredentialRequest = exports.DeleteMFADeviceForUserResponse = exports.DeleteMFADeviceForUserResponseBody = exports.DeleteMFADeviceForUserRequest = exports.DeleteGroupResponse = exports.DeleteGroupResponseBody = exports.DeleteGroupRequest = exports.DeleteDirectoryResponse = exports.DeleteDirectoryResponseBody = exports.DeleteDirectoryRequest = exports.DeleteAccessConfigurationResponse = exports.DeleteAccessConfigurationResponseBody = exports.DeleteAccessConfigurationRequest = exports.DeleteAccessAssignmentResponse = exports.DeleteAccessAssignmentResponseBody = exports.DeleteAccessAssignmentRequest = exports.CreateUserProvisioningResponse = exports.CreateUserProvisioningResponseBody = exports.CreateUserProvisioningRequest = exports.CreateUserResponse = exports.CreateUserResponseBody = exports.CreateUserRequest = exports.CreateSCIMServerCredentialResponse = exports.CreateSCIMServerCredentialResponseBody = exports.CreateSCIMServerCredentialRequest = exports.CreateGroupResponse = exports.CreateGroupResponseBody = exports.CreateGroupRequest = exports.CreateDirectoryResponse = exports.CreateDirectoryResponseBody = exports.CreateDirectoryRequest = exports.CreateAccessConfigurationResponse = exports.CreateAccessConfigurationResponseBody = exports.CreateAccessConfigurationRequest = exports.CreateAccessAssignmentResponse = exports.CreateAccessAssignmentResponseBody = exports.CreateAccessAssignmentRequest = exports.ClearExternalSAMLIdentityProviderResponse = exports.ClearExternalSAMLIdentityProviderResponseBody = exports.ClearExternalSAMLIdentityProviderRequest = exports.AddUserToGroupResponse = exports.AddUserToGroupResponseBody = exports.AddUserToGroupRequest = exports.AddPermissionPolicyToAccessConfigurationResponse = exports.AddPermissionPolicyToAccessConfigurationResponseBody = exports.AddPermissionPolicyToAccessConfigurationRequest = exports.AddExternalSAMLIdPCertificateResponse = exports.AddExternalSAMLIdPCertificateResponseBody = exports.AddExternalSAMLIdPCertificateRequest = void 0;
 // This file is auto-generated, don't edit it
 /**
  *
@@ -1635,6 +1648,60 @@ class GetGroupResponse extends $tea.Model {
     }
 }
 exports.GetGroupResponse = GetGroupResponse;
+class GetLoginPreferenceRequest extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            directoryId: 'DirectoryId',
+        };
+    }
+    static types() {
+        return {
+            directoryId: 'string',
+        };
+    }
+}
+exports.GetLoginPreferenceRequest = GetLoginPreferenceRequest;
+class GetLoginPreferenceResponseBody extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            loginPreference: 'LoginPreference',
+            requestId: 'RequestId',
+        };
+    }
+    static types() {
+        return {
+            loginPreference: GetLoginPreferenceResponseBodyLoginPreference,
+            requestId: 'string',
+        };
+    }
+}
+exports.GetLoginPreferenceResponseBody = GetLoginPreferenceResponseBody;
+class GetLoginPreferenceResponse extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            headers: 'headers',
+            statusCode: 'statusCode',
+            body: 'body',
+        };
+    }
+    static types() {
+        return {
+            headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+            statusCode: 'number',
+            body: GetLoginPreferenceResponseBody,
+        };
+    }
+}
+exports.GetLoginPreferenceResponse = GetLoginPreferenceResponse;
 class GetMFAAuthenticationSettingInfoRequest extends $tea.Model {
     constructor(map) {
         super(map);
@@ -1797,6 +1864,60 @@ class GetMFAAuthenticationStatusResponse extends $tea.Model {
     }
 }
 exports.GetMFAAuthenticationStatusResponse = GetMFAAuthenticationStatusResponse;
+class GetPasswordPolicyRequest extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            directoryId: 'DirectoryId',
+        };
+    }
+    static types() {
+        return {
+            directoryId: 'string',
+        };
+    }
+}
+exports.GetPasswordPolicyRequest = GetPasswordPolicyRequest;
+class GetPasswordPolicyResponseBody extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            passwordPolicy: 'PasswordPolicy',
+            requestId: 'RequestId',
+        };
+    }
+    static types() {
+        return {
+            passwordPolicy: GetPasswordPolicyResponseBodyPasswordPolicy,
+            requestId: 'string',
+        };
+    }
+}
+exports.GetPasswordPolicyResponseBody = GetPasswordPolicyResponseBody;
+class GetPasswordPolicyResponse extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            headers: 'headers',
+            statusCode: 'statusCode',
+            body: 'body',
+        };
+    }
+    static types() {
+        return {
+            headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+            statusCode: 'number',
+            body: GetPasswordPolicyResponseBody,
+        };
+    }
+}
+exports.GetPasswordPolicyResponse = GetPasswordPolicyResponse;
 class GetSCIMSynchronizationStatusRequest extends $tea.Model {
     constructor(map) {
         super(map);
@@ -2057,6 +2178,80 @@ class GetUserResponse extends $tea.Model {
     }
 }
 exports.GetUserResponse = GetUserResponse;
+class GetUserIdRequest extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            directoryId: 'DirectoryId',
+            externalId: 'ExternalId',
+        };
+    }
+    static types() {
+        return {
+            directoryId: 'string',
+            externalId: GetUserIdRequestExternalId,
+        };
+    }
+}
+exports.GetUserIdRequest = GetUserIdRequest;
+class GetUserIdShrinkRequest extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            directoryId: 'DirectoryId',
+            externalIdShrink: 'ExternalId',
+        };
+    }
+    static types() {
+        return {
+            directoryId: 'string',
+            externalIdShrink: 'string',
+        };
+    }
+}
+exports.GetUserIdShrinkRequest = GetUserIdShrinkRequest;
+class GetUserIdResponseBody extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            requestId: 'RequestId',
+            userId: 'UserId',
+        };
+    }
+    static types() {
+        return {
+            requestId: 'string',
+            userId: 'string',
+        };
+    }
+}
+exports.GetUserIdResponseBody = GetUserIdResponseBody;
+class GetUserIdResponse extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            headers: 'headers',
+            statusCode: 'statusCode',
+            body: 'body',
+        };
+    }
+    static types() {
+        return {
+            headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+            statusCode: 'number',
+            body: GetUserIdResponseBody,
+        };
+    }
+}
+exports.GetUserIdResponse = GetUserIdResponse;
 class GetUserMFAAuthenticationSettingsRequest extends $tea.Model {
     constructor(map) {
         super(map);
@@ -3795,6 +3990,60 @@ class SetExternalSAMLIdentityProviderResponse extends $tea.Model {
     }
 }
 exports.SetExternalSAMLIdentityProviderResponse = SetExternalSAMLIdentityProviderResponse;
+class SetLoginPreferenceRequest extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            directoryId: 'DirectoryId',
+            loginNetworkMasks: 'LoginNetworkMasks',
+        };
+    }
+    static types() {
+        return {
+            directoryId: 'string',
+            loginNetworkMasks: 'string',
+        };
+    }
+}
+exports.SetLoginPreferenceRequest = SetLoginPreferenceRequest;
+class SetLoginPreferenceResponseBody extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            requestId: 'RequestId',
+        };
+    }
+    static types() {
+        return {
+            requestId: 'string',
+        };
+    }
+}
+exports.SetLoginPreferenceResponseBody = SetLoginPreferenceResponseBody;
+class SetLoginPreferenceResponse extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            headers: 'headers',
+            statusCode: 'statusCode',
+            body: 'body',
+        };
+    }
+    static types() {
+        return {
+            headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+            statusCode: 'number',
+            body: SetLoginPreferenceResponseBody,
+        };
+    }
+}
+exports.SetLoginPreferenceResponse = SetLoginPreferenceResponse;
 class SetMFAAuthenticationStatusRequest extends $tea.Model {
     constructor(map) {
         super(map);
@@ -3849,6 +4098,70 @@ class SetMFAAuthenticationStatusResponse extends $tea.Model {
     }
 }
 exports.SetMFAAuthenticationStatusResponse = SetMFAAuthenticationStatusResponse;
+class SetPasswordPolicyRequest extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            directoryId: 'DirectoryId',
+            maxLoginAttempts: 'MaxLoginAttempts',
+            maxPasswordAge: 'MaxPasswordAge',
+            minPasswordDifferentChars: 'MinPasswordDifferentChars',
+            minPasswordLength: 'MinPasswordLength',
+            passwordNotContainUsername: 'PasswordNotContainUsername',
+            passwordReusePrevention: 'PasswordReusePrevention',
+        };
+    }
+    static types() {
+        return {
+            directoryId: 'string',
+            maxLoginAttempts: 'number',
+            maxPasswordAge: 'number',
+            minPasswordDifferentChars: 'number',
+            minPasswordLength: 'number',
+            passwordNotContainUsername: 'boolean',
+            passwordReusePrevention: 'number',
+        };
+    }
+}
+exports.SetPasswordPolicyRequest = SetPasswordPolicyRequest;
+class SetPasswordPolicyResponseBody extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            requestId: 'RequestId',
+        };
+    }
+    static types() {
+        return {
+            requestId: 'string',
+        };
+    }
+}
+exports.SetPasswordPolicyResponseBody = SetPasswordPolicyResponseBody;
+class SetPasswordPolicyResponse extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            headers: 'headers',
+            statusCode: 'statusCode',
+            body: 'body',
+        };
+    }
+    static types() {
+        return {
+            headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+            statusCode: 'number',
+            body: SetPasswordPolicyResponseBody,
+        };
+    }
+}
+exports.SetPasswordPolicyResponse = SetPasswordPolicyResponse;
 class SetSCIMSynchronizationStatusRequest extends $tea.Model {
     constructor(map) {
         super(map);
@@ -5039,6 +5352,22 @@ class GetGroupResponseBodyGroup extends $tea.Model {
     }
 }
 exports.GetGroupResponseBodyGroup = GetGroupResponseBodyGroup;
+class GetLoginPreferenceResponseBodyLoginPreference extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            loginNetworkMasks: 'LoginNetworkMasks',
+        };
+    }
+    static types() {
+        return {
+            loginNetworkMasks: 'string',
+        };
+    }
+}
+exports.GetLoginPreferenceResponseBodyLoginPreference = GetLoginPreferenceResponseBodyLoginPreference;
 class GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo extends $tea.Model {
     constructor(map) {
         super(map);
@@ -5057,6 +5386,44 @@ class GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo ex
     }
 }
 exports.GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo = GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo;
+class GetPasswordPolicyResponseBodyPasswordPolicy extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            hardExpire: 'HardExpire',
+            maxLoginAttempts: 'MaxLoginAttempts',
+            maxPasswordAge: 'MaxPasswordAge',
+            maxPasswordLength: 'MaxPasswordLength',
+            minPasswordDifferentChars: 'MinPasswordDifferentChars',
+            minPasswordLength: 'MinPasswordLength',
+            passwordNotContainUsername: 'PasswordNotContainUsername',
+            passwordReusePrevention: 'PasswordReusePrevention',
+            requireLowerCaseChars: 'RequireLowerCaseChars',
+            requireNumbers: 'RequireNumbers',
+            requireSymbols: 'RequireSymbols',
+            requireUpperCaseChars: 'RequireUpperCaseChars',
+        };
+    }
+    static types() {
+        return {
+            hardExpire: 'boolean',
+            maxLoginAttempts: 'number',
+            maxPasswordAge: 'number',
+            maxPasswordLength: 'number',
+            minPasswordDifferentChars: 'number',
+            minPasswordLength: 'number',
+            passwordNotContainUsername: 'boolean',
+            passwordReusePrevention: 'number',
+            requireLowerCaseChars: 'boolean',
+            requireNumbers: 'boolean',
+            requireSymbols: 'boolean',
+            requireUpperCaseChars: 'boolean',
+        };
+    }
+}
+exports.GetPasswordPolicyResponseBodyPasswordPolicy = GetPasswordPolicyResponseBodyPasswordPolicy;
 class GetServiceStatusResponseBodyServiceStatus extends $tea.Model {
     constructor(map) {
         super(map);
@@ -5151,6 +5518,24 @@ class GetTaskStatusResponseBodyTaskStatus extends $tea.Model {
     }
 }
 exports.GetTaskStatusResponseBodyTaskStatus = GetTaskStatusResponseBodyTaskStatus;
+class GetUserResponseBodyUserExternalId extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            id: 'Id',
+            issuer: 'Issuer',
+        };
+    }
+    static types() {
+        return {
+            id: 'string',
+            issuer: 'string',
+        };
+    }
+}
+exports.GetUserResponseBodyUserExternalId = GetUserResponseBodyUserExternalId;
 class GetUserResponseBodyUser extends $tea.Model {
     constructor(map) {
         super(map);
@@ -5161,6 +5546,7 @@ class GetUserResponseBodyUser extends $tea.Model {
             description: 'Description',
             displayName: 'DisplayName',
             email: 'Email',
+            externalId: 'ExternalId',
             firstName: 'FirstName',
             lastName: 'LastName',
             provisionType: 'ProvisionType',
@@ -5176,6 +5562,7 @@ class GetUserResponseBodyUser extends $tea.Model {
             description: 'string',
             displayName: 'string',
             email: 'string',
+            externalId: GetUserResponseBodyUserExternalId,
             firstName: 'string',
             lastName: 'string',
             provisionType: 'string',
@@ -5187,6 +5574,24 @@ class GetUserResponseBodyUser extends $tea.Model {
     }
 }
 exports.GetUserResponseBodyUser = GetUserResponseBodyUser;
+class GetUserIdRequestExternalId extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            id: 'Id',
+            issuer: 'Issuer',
+        };
+    }
+    static types() {
+        return {
+            id: 'string',
+            issuer: 'string',
+        };
+    }
+}
+exports.GetUserIdRequestExternalId = GetUserIdRequestExternalId;
 class GetUserProvisioningResponseBodyUserProvisioning extends $tea.Model {
     constructor(map) {
         super(map);
@@ -5821,6 +6226,24 @@ class ListUserProvisioningsResponseBodyUserProvisionings extends $tea.Model {
     }
 }
 exports.ListUserProvisioningsResponseBodyUserProvisionings = ListUserProvisioningsResponseBodyUserProvisionings;
+class ListUsersResponseBodyUsersExternalId extends $tea.Model {
+    constructor(map) {
+        super(map);
+    }
+    static names() {
+        return {
+            id: 'Id',
+            issuer: 'Issuer',
+        };
+    }
+    static types() {
+        return {
+            id: 'string',
+            issuer: 'string',
+        };
+    }
+}
+exports.ListUsersResponseBodyUsersExternalId = ListUsersResponseBodyUsersExternalId;
 class ListUsersResponseBodyUsers extends $tea.Model {
     constructor(map) {
         super(map);
@@ -5831,6 +6254,7 @@ class ListUsersResponseBodyUsers extends $tea.Model {
             description: 'Description',
             displayName: 'DisplayName',
             email: 'Email',
+            externalId: 'ExternalId',
             firstName: 'FirstName',
             lastName: 'LastName',
             provisionType: 'ProvisionType',
@@ -5846,6 +6270,7 @@ class ListUsersResponseBodyUsers extends $tea.Model {
             description: 'string',
             displayName: 'string',
             email: 'string',
+            externalId: ListUsersResponseBodyUsersExternalId,
             firstName: 'string',
             lastName: 'string',
             provisionType: 'string',
@@ -6335,7 +6760,7 @@ class Client extends openapi_client_1.default {
         return await this.clearExternalSAMLIdentityProviderWithOptions(request, runtime);
     }
     /**
-      * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of task execution by using the value of the `TaskId` response parameter.
+      * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
       * For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](~~266726~~).
       * This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
       *
@@ -6381,7 +6806,7 @@ class Client extends openapi_client_1.default {
         return $tea.cast(await this.callApi(params, req, runtime), new CreateAccessAssignmentResponse({}));
     }
     /**
-      * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of task execution by using the value of the `TaskId` response parameter.
+      * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
       * For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](~~266726~~).
       * This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
       *
@@ -7467,6 +7892,32 @@ class Client extends openapi_client_1.default {
         let runtime = new $Util.RuntimeOptions({});
         return await this.getGroupWithOptions(request, runtime);
     }
+    async getLoginPreferenceWithOptions(request, runtime) {
+        tea_util_1.default.validateModel(request);
+        let query = {};
+        if (!tea_util_1.default.isUnset(request.directoryId)) {
+            query["DirectoryId"] = request.directoryId;
+        }
+        let req = new $OpenApi.OpenApiRequest({
+            query: openapi_util_1.default.query(query),
+        });
+        let params = new $OpenApi.Params({
+            action: "GetLoginPreference",
+            version: "2021-05-15",
+            protocol: "HTTPS",
+            pathname: "/",
+            method: "POST",
+            authType: "AK",
+            style: "RPC",
+            reqBodyType: "formData",
+            bodyType: "json",
+        });
+        return $tea.cast(await this.callApi(params, req, runtime), new GetLoginPreferenceResponse({}));
+    }
+    async getLoginPreference(request) {
+        let runtime = new $Util.RuntimeOptions({});
+        return await this.getLoginPreferenceWithOptions(request, runtime);
+    }
     /**
       * If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
       * This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `00q8wbq42wiltcrk****`.
@@ -7588,6 +8039,32 @@ class Client extends openapi_client_1.default {
         let runtime = new $Util.RuntimeOptions({});
         return await this.getMFAAuthenticationStatusWithOptions(request, runtime);
     }
+    async getPasswordPolicyWithOptions(request, runtime) {
+        tea_util_1.default.validateModel(request);
+        let query = {};
+        if (!tea_util_1.default.isUnset(request.directoryId)) {
+            query["DirectoryId"] = request.directoryId;
+        }
+        let req = new $OpenApi.OpenApiRequest({
+            query: openapi_util_1.default.query(query),
+        });
+        let params = new $OpenApi.Params({
+            action: "GetPasswordPolicy",
+            version: "2021-05-15",
+            protocol: "HTTPS",
+            pathname: "/",
+            method: "POST",
+            authType: "AK",
+            style: "RPC",
+            reqBodyType: "formData",
+            bodyType: "json",
+        });
+        return $tea.cast(await this.callApi(params, req, runtime), new GetPasswordPolicyResponse({}));
+    }
+    async getPasswordPolicy(request) {
+        let runtime = new $Util.RuntimeOptions({});
+        return await this.getPasswordPolicyWithOptions(request, runtime);
+    }
     /**
       * This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
       *
@@ -7689,7 +8166,7 @@ class Client extends openapi_client_1.default {
         return await this.getTaskWithOptions(request, runtime);
     }
     /**
-      * You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, you can call the [GetTask](~~340670~~) operation.
+      * You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, call the [GetTask](~~340670~~) operation.
       * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
       *
       * @param request GetTaskStatusRequest
@@ -7722,7 +8199,7 @@ class Client extends openapi_client_1.default {
         return $tea.cast(await this.callApi(params, req, runtime), new GetTaskStatusResponse({}));
     }
     /**
-      * You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, you can call the [GetTask](~~340670~~) operation.
+      * You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, call the [GetTask](~~340670~~) operation.
       * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
       *
       * @param request GetTaskStatusRequest
@@ -7774,6 +8251,40 @@ class Client extends openapi_client_1.default {
         let runtime = new $Util.RuntimeOptions({});
         return await this.getUserWithOptions(request, runtime);
     }
+    async getUserIdWithOptions(tmpReq, runtime) {
+        tea_util_1.default.validateModel(tmpReq);
+        let request = new GetUserIdShrinkRequest({});
+        openapi_util_1.default.convert(tmpReq, request);
+        if (!tea_util_1.default.isUnset(tmpReq.externalId)) {
+            request.externalIdShrink = openapi_util_1.default.arrayToStringWithSpecifiedStyle(tmpReq.externalId, "ExternalId", "json");
+        }
+        let query = {};
+        if (!tea_util_1.default.isUnset(request.directoryId)) {
+            query["DirectoryId"] = request.directoryId;
+        }
+        if (!tea_util_1.default.isUnset(request.externalIdShrink)) {
+            query["ExternalId"] = request.externalIdShrink;
+        }
+        let req = new $OpenApi.OpenApiRequest({
+            query: openapi_util_1.default.query(query),
+        });
+        let params = new $OpenApi.Params({
+            action: "GetUserId",
+            version: "2021-05-15",
+            protocol: "HTTPS",
+            pathname: "/",
+            method: "POST",
+            authType: "AK",
+            style: "RPC",
+            reqBodyType: "formData",
+            bodyType: "json",
+        });
+        return $tea.cast(await this.callApi(params, req, runtime), new GetUserIdResponse({}));
+    }
+    async getUserId(request) {
+        let runtime = new $Util.RuntimeOptions({});
+        return await this.getUserIdWithOptions(request, runtime);
+    }
     /**
       * This topic provides an example on how to query the MFA setting of the user named `u-00q8wbq42wiltcrk****`. The returned result shows that MFA is enabled for the user.
       *
@@ -7959,7 +8470,7 @@ class Client extends openapi_client_1.default {
         return await this.getUserProvisioningStatisticsWithOptions(request, runtime);
     }
     /**
-      * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory are assigned to one user.
+      * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
       *
       * @param request ListAccessAssignmentsRequest
       * @param runtime runtime options for this request RuntimeOptions
@@ -8009,7 +8520,7 @@ class Client extends openapi_client_1.default {
         return $tea.cast(await this.callApi(params, req, runtime), new ListAccessAssignmentsResponse({}));
     }
     /**
-      * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory are assigned to one user.
+      * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
       *
       * @param request ListAccessAssignmentsRequest
       * @return ListAccessAssignmentsResponse
@@ -9022,6 +9533,35 @@ class Client extends openapi_client_1.default {
         let runtime = new $Util.RuntimeOptions({});
         return await this.setExternalSAMLIdentityProviderWithOptions(request, runtime);
     }
+    async setLoginPreferenceWithOptions(request, runtime) {
+        tea_util_1.default.validateModel(request);
+        let query = {};
+        if (!tea_util_1.default.isUnset(request.directoryId)) {
+            query["DirectoryId"] = request.directoryId;
+        }
+        if (!tea_util_1.default.isUnset(request.loginNetworkMasks)) {
+            query["LoginNetworkMasks"] = request.loginNetworkMasks;
+        }
+        let req = new $OpenApi.OpenApiRequest({
+            query: openapi_util_1.default.query(query),
+        });
+        let params = new $OpenApi.Params({
+            action: "SetLoginPreference",
+            version: "2021-05-15",
+            protocol: "HTTPS",
+            pathname: "/",
+            method: "POST",
+            authType: "AK",
+            style: "RPC",
+            reqBodyType: "formData",
+            bodyType: "json",
+        });
+        return $tea.cast(await this.callApi(params, req, runtime), new SetLoginPreferenceResponse({}));
+    }
+    async setLoginPreference(request) {
+        let runtime = new $Util.RuntimeOptions({});
+        return await this.setLoginPreferenceWithOptions(request, runtime);
+    }
     /**
       * If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
       * This topic provides an example on how to enable MFA for users.
@@ -9066,6 +9606,50 @@ class Client extends openapi_client_1.default {
         let runtime = new $Util.RuntimeOptions({});
         return await this.setMFAAuthenticationStatusWithOptions(request, runtime);
     }
+    async setPasswordPolicyWithOptions(request, runtime) {
+        tea_util_1.default.validateModel(request);
+        let query = {};
+        if (!tea_util_1.default.isUnset(request.directoryId)) {
+            query["DirectoryId"] = request.directoryId;
+        }
+        if (!tea_util_1.default.isUnset(request.maxLoginAttempts)) {
+            query["MaxLoginAttempts"] = request.maxLoginAttempts;
+        }
+        if (!tea_util_1.default.isUnset(request.maxPasswordAge)) {
+            query["MaxPasswordAge"] = request.maxPasswordAge;
+        }
+        if (!tea_util_1.default.isUnset(request.minPasswordDifferentChars)) {
+            query["MinPasswordDifferentChars"] = request.minPasswordDifferentChars;
+        }
+        if (!tea_util_1.default.isUnset(request.minPasswordLength)) {
+            query["MinPasswordLength"] = request.minPasswordLength;
+        }
+        if (!tea_util_1.default.isUnset(request.passwordNotContainUsername)) {
+            query["PasswordNotContainUsername"] = request.passwordNotContainUsername;
+        }
+        if (!tea_util_1.default.isUnset(request.passwordReusePrevention)) {
+            query["PasswordReusePrevention"] = request.passwordReusePrevention;
+        }
+        let req = new $OpenApi.OpenApiRequest({
+            query: openapi_util_1.default.query(query),
+        });
+        let params = new $OpenApi.Params({
+            action: "SetPasswordPolicy",
+            version: "2021-05-15",
+            protocol: "HTTPS",
+            pathname: "/",
+            method: "POST",
+            authType: "AK",
+            style: "RPC",
+            reqBodyType: "formData",
+            bodyType: "json",
+        });
+        return $tea.cast(await this.callApi(params, req, runtime), new SetPasswordPolicyResponse({}));
+    }
+    async setPasswordPolicy(request) {
+        let runtime = new $Util.RuntimeOptions({});
+        return await this.setPasswordPolicyWithOptions(request, runtime);
+    }
     /**
       * You can synchronize users or groups from an external identity provider (IdP) that supports SCIM 2.0 to CloudSSO only after SCIM synchronization is enabled. If you disable SCIM synchronization, you can no longer synchronize users or groups to CloudSSO. The following list describes the impacts after SCIM synchronization is enabled or disabled:
       * *   After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.