@alicloud/cloudsso20210515 1.5.2 → 1.5.3

package/src/models/GetDirectorySamlserviceProviderInfoResponseBody.ts

@@ -1,8 +1,105 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetDirectorySAMLServiceProviderInfoResponseBodySAMLServiceProvider } from "./GetDirectorySamlserviceProviderInfoResponseBodySamlserviceProvider";
 
 
+export class GetDirectorySAMLServiceProviderInfoResponseBodySAMLServiceProvider extends $dara.Model {
+  /**
+   * @remarks
+   * The Assertion Consumer Service (ACS) URL of the SP.
+   * 
+   * @example
+   * https://signin-cn-shanghai.alibabacloudsso.com/saml/acs/51d298a9-2a3f-4e23-97c7-7ad1cfa9****
+   */
+  acsUrl?: string;
+  /**
+   * @remarks
+   * The signature algorithm supported by the AuthNRequest initiated by Alibaba Cloud. Value:
+   * 
+   * - rsa-sha256
+   * 
+   * - rsa-sha1
+   * 
+   * @example
+   * rsa-sha256
+   */
+  authnSignAlgo?: string;
+  /**
+   * @remarks
+   * The certificate type used by Alibaba Cloud for signing during the SSO process. Value:
+   * 
+   * - self-signed: Use a self-signed certificate.
+   * 
+   * - public: Use a certificate issued by CA.
+   * 
+   * @example
+   * public
+   */
+  certificateType?: string;
+  /**
+   * @remarks
+   * The ID of the directory.
+   * 
+   * @example
+   * d-00fc2p61****
+   */
+  directoryId?: string;
+  /**
+   * @remarks
+   * The metadata file of the SP. The value of this parameter is Base64-encoded.
+   * 
+   * @example
+   * PD94bWwgdmVyc2lv****
+   */
+  encodedMetadataDocument?: string;
+  /**
+   * @remarks
+   * The entity ID of the SP.
+   * 
+   * @example
+   * https://signin-cn-shanghai.alibabacloudsso.com/saml/sp/d-00fc2p61****
+   */
+  entityId?: string;
+  /**
+   * @remarks
+   * Whether to support Assertion encryption on the IdP side.
+   * 
+   * @example
+   * true
+   */
+  supportEncryptedAssertion?: boolean;
+  static names(): { [key: string]: string } {
+    return {
+      acsUrl: 'AcsUrl',
+      authnSignAlgo: 'AuthnSignAlgo',
+      certificateType: 'CertificateType',
+      directoryId: 'DirectoryId',
+      encodedMetadataDocument: 'EncodedMetadataDocument',
+      entityId: 'EntityId',
+      supportEncryptedAssertion: 'SupportEncryptedAssertion',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      acsUrl: 'string',
+      authnSignAlgo: 'string',
+      certificateType: 'string',
+      directoryId: 'string',
+      encodedMetadataDocument: 'string',
+      entityId: 'string',
+      supportEncryptedAssertion: 'boolean',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetDirectorySAMLServiceProviderInfoResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetDirectoryStatisticsResponseBody.ts

@@ -1,8 +1,193 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetDirectoryStatisticsResponseBodyDirectoryStatistics } from "./GetDirectoryStatisticsResponseBodyDirectoryStatistics";
 
 
+export class GetDirectoryStatisticsResponseBodyDirectoryStatistics extends $dara.Model {
+  /**
+   * @remarks
+   * The number of access permissions that are assigned.
+   * 
+   * @example
+   * 5
+   */
+  accessAssignmentCount?: number;
+  /**
+   * @remarks
+   * The number of access configurations.
+   * 
+   * @example
+   * 6
+   */
+  accessConfigurationCount?: number;
+  /**
+   * @remarks
+   * The quota for access configurations.
+   * 
+   * @example
+   * 1000
+   */
+  accessConfigurationQuota?: number;
+  /**
+   * @remarks
+   * The ID of the directory.
+   * 
+   * @example
+   * d-00fc2p61****
+   */
+  directoryId?: string;
+  /**
+   * @remarks
+   * The name of the directory.
+   * 
+   * @example
+   * new-example
+   */
+  directoryName?: string;
+  /**
+   * @remarks
+   * The number of user groups.
+   * 
+   * @example
+   * 4
+   */
+  groupCount?: number;
+  /**
+   * @remarks
+   * The quota for user groups.
+   * 
+   * @example
+   * 500
+   */
+  groupQuota?: number;
+  /**
+   * @remarks
+   * The number of tasks that are being performed.
+   * 
+   * @example
+   * 0
+   */
+  inProgressTaskCount?: number;
+  /**
+   * @remarks
+   * The number of inline policies that can be configured for an access configuration.
+   * 
+   * @example
+   * 1
+   */
+  inlinePolicyPerAccessConfigurationQuota?: number;
+  /**
+   * @remarks
+   * The region ID of the directory.
+   * 
+   * @example
+   * cn-shanghai
+   */
+  region?: string;
+  /**
+   * @remarks
+   * The number of SCIM credentials.
+   * 
+   * @example
+   * 2
+   */
+  SCIMServerCredentialCount?: number;
+  /**
+   * @remarks
+   * Indicates whether SCIM synchronization is enabled. Valid values:
+   * 
+   * *   true
+   * *   false
+   * 
+   * @example
+   * true
+   */
+  SCIMSyncEnabled?: boolean;
+  /**
+   * @remarks
+   * Indicates whether SSO is enabled. Valid values:
+   * 
+   * *   true
+   * *   false
+   * 
+   * @example
+   * false
+   */
+  SSOEnabled?: boolean;
+  /**
+   * @remarks
+   * The quota for system policies that can be configured for an access configuration.
+   * 
+   * @example
+   * 20
+   */
+  systemPolicyPerAccessConfigurationQuota?: number;
+  /**
+   * @remarks
+   * The number of users.
+   * 
+   * @example
+   * 16
+   */
+  userCount?: number;
+  /**
+   * @remarks
+   * The quota for users.
+   * 
+   * @example
+   * 1000
+   */
+  userQuota?: number;
+  static names(): { [key: string]: string } {
+    return {
+      accessAssignmentCount: 'AccessAssignmentCount',
+      accessConfigurationCount: 'AccessConfigurationCount',
+      accessConfigurationQuota: 'AccessConfigurationQuota',
+      directoryId: 'DirectoryId',
+      directoryName: 'DirectoryName',
+      groupCount: 'GroupCount',
+      groupQuota: 'GroupQuota',
+      inProgressTaskCount: 'InProgressTaskCount',
+      inlinePolicyPerAccessConfigurationQuota: 'InlinePolicyPerAccessConfigurationQuota',
+      region: 'Region',
+      SCIMServerCredentialCount: 'SCIMServerCredentialCount',
+      SCIMSyncEnabled: 'SCIMSyncEnabled',
+      SSOEnabled: 'SSOEnabled',
+      systemPolicyPerAccessConfigurationQuota: 'SystemPolicyPerAccessConfigurationQuota',
+      userCount: 'UserCount',
+      userQuota: 'UserQuota',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      accessAssignmentCount: 'number',
+      accessConfigurationCount: 'number',
+      accessConfigurationQuota: 'number',
+      directoryId: 'string',
+      directoryName: 'string',
+      groupCount: 'number',
+      groupQuota: 'number',
+      inProgressTaskCount: 'number',
+      inlinePolicyPerAccessConfigurationQuota: 'number',
+      region: 'string',
+      SCIMServerCredentialCount: 'number',
+      SCIMSyncEnabled: 'boolean',
+      SSOEnabled: 'boolean',
+      systemPolicyPerAccessConfigurationQuota: 'number',
+      userCount: 'number',
+      userQuota: 'number',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetDirectoryStatisticsResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetExternalSamlidentityProviderResponseBody.ts

@@ -1,8 +1,133 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetExternalSAMLIdentityProviderResponseBodySAMLIdentityProviderConfiguration } from "./GetExternalSamlidentityProviderResponseBodySamlidentityProviderConfiguration";
 
 
+export class GetExternalSAMLIdentityProviderResponseBodySAMLIdentityProviderConfiguration extends $dara.Model {
+  /**
+   * @remarks
+   * The binding for sending SAML requests. Valid values:
+   * 
+   * *   Post: HTTP Post bindings.
+   * *   Redirect: HTTP Redirect bindings.
+   * 
+   * @example
+   * Post
+   */
+  bindingType?: string;
+  /**
+   * @remarks
+   * The SAML signing certificates.
+   */
+  certificateIds?: string[];
+  /**
+   * @remarks
+   * The time when the IdP was configured for the first time.
+   * 
+   * @example
+   * 2021-11-09T09:30:13Z
+   */
+  createTime?: string;
+  /**
+   * @remarks
+   * The ID of the directory.
+   * 
+   * @example
+   * d-00fc2p61****
+   */
+  directoryId?: string;
+  /**
+   * @remarks
+   * The metadata file of the IdP. The value of this parameter is Base64-encoded.
+   * 
+   * @example
+   * PD94bWwgdmVyc2lvbj0iMS4****
+   */
+  encodedMetadataDocument?: string;
+  /**
+   * @remarks
+   * The ID of the IdP.
+   * 
+   * @example
+   * http://www.okta.com/exk3qwgtjhetR2Od****
+   */
+  entityId?: string;
+  /**
+   * @remarks
+   * The logon URL of the IdP.
+   */
+  loginUrl?: string;
+  /**
+   * @remarks
+   * Indicates whether SSO is enabled. Valid values:
+   * 
+   * *   Enabled
+   * *   Disabled
+   * 
+   * @example
+   * Enabled
+   */
+  SSOStatus?: string;
+  /**
+   * @remarks
+   * The time when the IdP configurations were last modified.
+   * 
+   * @example
+   * 2021-11-09T09:30:22Z
+   */
+  updateTime?: string;
+  /**
+   * @remarks
+   * Indicates whether CloudSSO needs to sign SAML requests. The requests are sent when users log on to the CloudSSO user portal to initiate SAML-based SSO. Valid values:
+   * 
+   * *   true:
+   * *   false (default)
+   * 
+   * @example
+   * false
+   */
+  wantRequestSigned?: boolean;
+  static names(): { [key: string]: string } {
+    return {
+      bindingType: 'BindingType',
+      certificateIds: 'CertificateIds',
+      createTime: 'CreateTime',
+      directoryId: 'DirectoryId',
+      encodedMetadataDocument: 'EncodedMetadataDocument',
+      entityId: 'EntityId',
+      loginUrl: 'LoginUrl',
+      SSOStatus: 'SSOStatus',
+      updateTime: 'UpdateTime',
+      wantRequestSigned: 'WantRequestSigned',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      bindingType: 'string',
+      certificateIds: { 'type': 'array', 'itemType': 'string' },
+      createTime: 'string',
+      directoryId: 'string',
+      encodedMetadataDocument: 'string',
+      entityId: 'string',
+      loginUrl: 'string',
+      SSOStatus: 'string',
+      updateTime: 'string',
+      wantRequestSigned: 'boolean',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.certificateIds)) {
+      $dara.Model.validateArray(this.certificateIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetExternalSAMLIdentityProviderResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetGroupResponseBody.ts

@@ -1,8 +1,90 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetGroupResponseBodyGroup } from "./GetGroupResponseBodyGroup";
 
 
+export class GetGroupResponseBodyGroup extends $dara.Model {
+  /**
+   * @remarks
+   * The time when the group was created.
+   * 
+   * @example
+   * 2021-11-01T02:38:27Z
+   */
+  createTime?: string;
+  /**
+   * @remarks
+   * The description of the group.
+   * 
+   * @example
+   * This is a group.
+   */
+  description?: string;
+  /**
+   * @remarks
+   * The ID of the group.
+   * 
+   * @example
+   * g-00jqzghi2n3o5hkh****
+   */
+  groupId?: string;
+  /**
+   * @remarks
+   * The name of the group.
+   * 
+   * @example
+   * TestGroup
+   */
+  groupName?: string;
+  /**
+   * @remarks
+   * The type of the group. Valid values:
+   * 
+   * *   Manual: The group is manually created.
+   * *   Synchronized: The group is synchronized from an external identity provider (IdP).
+   * 
+   * @example
+   * Manual
+   */
+  provisionType?: string;
+  /**
+   * @remarks
+   * The time when information about the group was modified.
+   * 
+   * @example
+   * 2021-11-01T02:38:27Z
+   */
+  updateTime?: string;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      description: 'Description',
+      groupId: 'GroupId',
+      groupName: 'GroupName',
+      provisionType: 'ProvisionType',
+      updateTime: 'UpdateTime',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'string',
+      description: 'string',
+      groupId: 'string',
+      groupName: 'string',
+      provisionType: 'string',
+      updateTime: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetGroupResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetLoginPreferenceResponseBody.ts

@@ -1,8 +1,54 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetLoginPreferenceResponseBodyLoginPreference } from "./GetLoginPreferenceResponseBodyLoginPreference";
 
 
+export class GetLoginPreferenceResponseBodyLoginPreference extends $dara.Model {
+  /**
+   * @remarks
+   * Indicates whether a user can obtain the application access credential after logon to the portal. Valid values:
+   * 
+   * *   True
+   * *   False (default)
+   * 
+   * @example
+   * True
+   */
+  allowUserToGetCredentials?: boolean;
+  /**
+   * @remarks
+   * The IP address whitelist. CloudSSO users can log on to the CloudSSO user portal only by using the IP addresses in the whitelist.
+   * 
+   * The IP address whitelist takes effect only on CloudSSO users who want to log on to the CloudSSO user portal by using the username-password logon or single sign-on (SSO) method. The IP address whitelist does not take effect on CloudSSO users who access accounts in a resource directory from the CloudSSO user portal.
+   * 
+   * If the return value of this parameter is empty, no IP address whitelists are configured.
+   * 
+   * @example
+   * 192.168.0.0/16;10.0.0.0/8
+   */
+  loginNetworkMasks?: string;
+  static names(): { [key: string]: string } {
+    return {
+      allowUserToGetCredentials: 'AllowUserToGetCredentials',
+      loginNetworkMasks: 'LoginNetworkMasks',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      allowUserToGetCredentials: 'boolean',
+      loginNetworkMasks: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetLoginPreferenceResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetMfaauthenticationSettingInfoRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class GetMFAAuthenticationSettingInfoRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the directory.
+   * The directory ID.
    * 
    * @example
    * u-00q8wbq42wiltcrk****

package/src/models/GetMfaauthenticationSettingInfoResponseBody.ts

@@ -1,17 +1,72 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo } from "./GetMfaauthenticationSettingInfoResponseBodyMfaauthenticationSettingInfo";
 
 
+export class GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo extends $dara.Model {
+  allowedVerificationTypes?: string[];
+  /**
+   * @remarks
+   * The global MFA verification policy. Valid values:
+   * 
+   * - Enabled: MFA verification is enabled for all users.
+   * - Byuser: MFA verification depends on the independent MFA configuration of each user. For more information about user-specific MFA configuration, see [UpdateUserMFAAuthenticationSettings](https://help.aliyun.com/document_detail/450135.html).
+   * - Disabled: MFA verification is disabled for all users.
+   * - OnlyRiskyLogin: MFA verification is required only for unusual logon attempts.
+   * 
+   * @example
+   * OnlyRiskyLogin
+   */
+  mfaAuthenticationAdvanceSettings?: string;
+  /**
+   * @remarks
+   * The MFA verification policy for unusual logon attempts. Valid values:
+   * 
+   * - Autonomous: Users can skip MFA binding during unusual logon, but users who have already bound MFA must complete verification.
+   * - EnforceVerify: Users are required to bind or verify MFA during unusual logon.
+   * 
+   * > This parameter is displayed only when MfaAuthenticationAdvanceSettings is set to Byuser or OnlyRiskyLogin.
+   * 
+   * @example
+   * EnforceVerify
+   */
+  operationForRiskLogin?: string;
+  static names(): { [key: string]: string } {
+    return {
+      allowedVerificationTypes: 'AllowedVerificationTypes',
+      mfaAuthenticationAdvanceSettings: 'MfaAuthenticationAdvanceSettings',
+      operationForRiskLogin: 'OperationForRiskLogin',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      allowedVerificationTypes: { 'type': 'array', 'itemType': 'string' },
+      mfaAuthenticationAdvanceSettings: 'string',
+      operationForRiskLogin: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.allowedVerificationTypes)) {
+      $dara.Model.validateArray(this.allowedVerificationTypes);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetMFAAuthenticationSettingInfoResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The MFA setting of all users.
+   * The global MFA verification configuration.
    */
   MFAAuthenticationSettingInfo?: GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo;
   /**
    * @remarks
-   * The ID of the request.
+   * The request ID.
    * 
    * @example
    * 95D3B107-DA80-5B34-A3D0-9E82F8F0DA0E