@alicloud/cloudsso20210515 1.5.2 → 1.5.4

package/dist/client.js

@@ -49,6 +49,14 @@ class Client extends openapi_core_1.default {
     constructor(config) {
         super(config);
         this._endpointRule = "regional";
+        this._endpointMap = {
+            'cn-shanghai': "cloudsso.cn-shanghai.aliyuncs.com",
+            'cn-hongkong': "cloudsso.cn-hongkong.aliyuncs.com",
+            'ap-northeast-2': "cloudsso.ap-northeast-2.aliyuncs.com",
+            'ap-southeast-1': "cloudsso.ap-southeast-1.aliyuncs.com",
+            'us-west-1': "cloudsso.us-west-1.aliyuncs.com",
+            'eu-central-1': "cloudsso.eu-central-1.aliyuncs.com",
+        };
         this.checkConfig(config);
         this._endpoint = this.getEndpoint("cloudsso", this._regionId, this._endpointRule, this._network, this._suffix, this._endpointMap, this._endpoint);
     }
@@ -289,6 +297,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.directoryId)) {
             query["DirectoryId"] = request.directoryId;
         }
+        if (!$dara.isNull(request.originTargetId)) {
+            query["OriginTargetId"] = request.originTargetId;
+        }
         if (!$dara.isNull(request.principalId)) {
             query["PrincipalId"] = request.principalId;
         }
@@ -336,7 +347,7 @@ class Client extends openapi_core_1.default {
      * Creates an access configuration.
      *
      * @remarks
-     * For more information about access configurations, see [Overview of access configurations](https://help.aliyun.com/document_detail/266737.html).
+     * For more information about access configurations, see [Access configuration overview](https://help.aliyun.com/document_detail/266737.html).
      * This topic provides an example on how to create an access configuration named `ECS-Admin`.
      *
      * @param request - CreateAccessConfigurationRequest
@@ -384,7 +395,7 @@ class Client extends openapi_core_1.default {
      * Creates an access configuration.
      *
      * @remarks
-     * For more information about access configurations, see [Overview of access configurations](https://help.aliyun.com/document_detail/266737.html).
+     * For more information about access configurations, see [Access configuration overview](https://help.aliyun.com/document_detail/266737.html).
      * This topic provides an example on how to create an access configuration named `ECS-Admin`.
      *
      * @param request - CreateAccessConfigurationRequest
@@ -550,10 +561,7 @@ class Client extends openapi_core_1.default {
         return await this.createSCIMServerCredentialWithOptions(request, runtime);
     }
     /**
-     * Creates a user.
-     *
-     * @remarks
-     * This topic provides an example on how to create a user named `Alice`.
+     * Creates a user by calling CreateUser.
      *
      * @param request - CreateUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -606,10 +614,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CreateUserResponse({}));
     }
     /**
-     * Creates a user.
-     *
-     * @remarks
-     * This topic provides an example on how to create a user named `Alice`.
+     * Creates a user by calling CreateUser.
      *
      * @param request - CreateUserRequest
      * @returns CreateUserResponse
@@ -707,6 +712,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.directoryId)) {
             query["DirectoryId"] = request.directoryId;
         }
+        if (!$dara.isNull(request.originTargetId)) {
+            query["OriginTargetId"] = request.originTargetId;
+        }
         if (!$dara.isNull(request.principalId)) {
             query["PrincipalId"] = request.principalId;
         }
@@ -875,8 +883,8 @@ class Client extends openapi_core_1.default {
      * @remarks
      * ### [](#)Prerequisites
      * The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
-     * *   Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
-     * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
+     * - Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
+     * - Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
      * ### [](#)Operation description
      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a group that is synchronized by using SCIM.
      * This topic provides an example on how to delete the group `g-00jqzghi2n3o5hkh****`.
@@ -916,8 +924,8 @@ class Client extends openapi_core_1.default {
      * @remarks
      * ### [](#)Prerequisites
      * The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
-     * *   Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
-     * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
+     * - Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
+     * - Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
      * ### [](#)Operation description
      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a group that is synchronized by using SCIM.
      * This topic provides an example on how to delete the group `g-00jqzghi2n3o5hkh****`.
@@ -930,10 +938,10 @@ class Client extends openapi_core_1.default {
         return await this.deleteGroupWithOptions(request, runtime);
     }
     /**
-     * Unbinds a multi-factor authentication (MFA) device from a user.
+     * Deletes the MFA device of a user.
      *
      * @remarks
-     * This topic provides an example on how to unbind the MFA device whose ID is `mfa-00ujhet8pycljj7j****` from the user whose ID is `u-00q8wbq42wiltcrk****`.
+     * This topic provides an example on how to delete the MFA device `mfa-00ujhet8pycljj7j****` that is attached to the user `u-00q8wbq42wiltcrk****`.
      *
      * @param request - DeleteMFADeviceForUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -948,6 +956,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.MFADeviceId)) {
             query["MFADeviceId"] = request.MFADeviceId;
         }
+        if (!$dara.isNull(request.mfaType)) {
+            query["MfaType"] = request.mfaType;
+        }
         if (!$dara.isNull(request.userId)) {
             query["UserId"] = request.userId;
         }
@@ -968,10 +979,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DeleteMFADeviceForUserResponse({}));
     }
     /**
-     * Unbinds a multi-factor authentication (MFA) device from a user.
+     * Deletes the MFA device of a user.
      *
      * @remarks
-     * This topic provides an example on how to unbind the MFA device whose ID is `mfa-00ujhet8pycljj7j****` from the user whose ID is `u-00q8wbq42wiltcrk****`.
+     * This topic provides an example on how to delete the MFA device `mfa-00ujhet8pycljj7j****` that is attached to the user `u-00q8wbq42wiltcrk****`.
      *
      * @param request - DeleteMFADeviceForUserRequest
      * @returns DeleteMFADeviceForUserResponse
@@ -1202,6 +1213,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.directoryId)) {
             query["DirectoryId"] = request.directoryId;
         }
+        if (!$dara.isNull(request.originTargetId)) {
+            query["OriginTargetId"] = request.originTargetId;
+        }
         if (!$dara.isNull(request.targetId)) {
             query["TargetId"] = request.targetId;
         }
@@ -1281,9 +1295,8 @@ class Client extends openapi_core_1.default {
      * Disables CloudSSO.
      *
      * @remarks
-     * If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
+     * You can disable CloudSSO only when no directories exist in CloudSSO. After you disable CloudSSO, you can re-enable it at any time.
      *
-     * @param request - DisableServiceRequest
      * @param runtime - runtime options for this request RuntimeOptions
      * @returns DisableServiceResponse
      */
@@ -1306,7 +1319,7 @@ class Client extends openapi_core_1.default {
      * Disables CloudSSO.
      *
      * @remarks
-     * If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
+     * You can disable CloudSSO only when no directories exist in CloudSSO. After you disable CloudSSO, you can re-enable it at any time.
      * @returns DisableServiceResponse
      */
     async disableService() {
@@ -1364,10 +1377,9 @@ class Client extends openapi_core_1.default {
      * Enables CloudSSO.
      *
      * @remarks
-     * You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has the permissions to enable CloudSSO. For more information, see [Enable CloudSSO](https://help.aliyun.com/document_detail/262819.html).
-     * If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
+     * Only users under the management account of a resource directory who have the permissions to enable CloudSSO can call this operation. For more information, see [Enable CloudSSO](https://help.aliyun.com/document_detail/262819.html).
+     * By calling this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
      *
-     * @param request - EnableServiceRequest
      * @param runtime - runtime options for this request RuntimeOptions
      * @returns EnableServiceResponse
      */
@@ -1390,8 +1402,8 @@ class Client extends openapi_core_1.default {
      * Enables CloudSSO.
      *
      * @remarks
-     * You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has the permissions to enable CloudSSO. For more information, see [Enable CloudSSO](https://help.aliyun.com/document_detail/262819.html).
-     * If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
+     * Only users under the management account of a resource directory who have the permissions to enable CloudSSO can call this operation. For more information, see [Enable CloudSSO](https://help.aliyun.com/document_detail/262819.html).
+     * By calling this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
      * @returns EnableServiceResponse
      */
     async enableService() {
@@ -1399,10 +1411,10 @@ class Client extends openapi_core_1.default {
         return await this.enableServiceWithOptions(runtime);
     }
     /**
-     * Queries information about an access configuration.
+     * Queries the information about an access configuration.
      *
      * @remarks
-     * This topic provides an example on how to query information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
+     * This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
      *
      * @param request - GetAccessConfigurationRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -1434,10 +1446,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetAccessConfigurationResponse({}));
     }
     /**
-     * Queries information about an access configuration.
+     * Queries the information about an access configuration.
      *
      * @remarks
-     * This topic provides an example on how to query information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
+     * This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
      *
      * @param request - GetAccessConfigurationRequest
      * @returns GetAccessConfigurationResponse
@@ -1716,11 +1728,11 @@ class Client extends openapi_core_1.default {
         return await this.getLoginPreferenceWithOptions(request, runtime);
     }
     /**
-     * Queries the multi-factor authentication (MFA) setting of all users.
+     * Queries the global multi-factor authentication (MFA) configuration.
      *
      * @remarks
-     * If you enable username-password logon for CloudSSO users, you can query the MFA setting for the users.
-     * This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `u-00q8wbq42wiltcrk****`.
+     * When username-password logon is enabled, you can retrieve the global MFA verification policy for user logon.
+     * This topic provides an example on how to query the global MFA verification policy for CloudSSO users in the directory `u-00q8wbq42wiltcrk****`.
      *
      * @param request - GetMFAAuthenticationSettingInfoRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -1749,11 +1761,11 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetMFAAuthenticationSettingInfoResponse({}));
     }
     /**
-     * Queries the multi-factor authentication (MFA) setting of all users.
+     * Queries the global multi-factor authentication (MFA) configuration.
      *
      * @remarks
-     * If you enable username-password logon for CloudSSO users, you can query the MFA setting for the users.
-     * This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `u-00q8wbq42wiltcrk****`.
+     * When username-password logon is enabled, you can retrieve the global MFA verification policy for user logon.
+     * This topic provides an example on how to query the global MFA verification policy for CloudSSO users in the directory `u-00q8wbq42wiltcrk****`.
      *
      * @param request - GetMFAAuthenticationSettingInfoRequest
      * @returns GetMFAAuthenticationSettingInfoResponse
@@ -1941,7 +1953,6 @@ class Client extends openapi_core_1.default {
     /**
      * Queries the status of CloudSSO.
      *
-     * @param request - GetServiceStatusRequest
      * @param runtime - runtime options for this request RuntimeOptions
      * @returns GetServiceStatusResponse
      */
@@ -2067,10 +2078,7 @@ class Client extends openapi_core_1.default {
         return await this.getTaskStatusWithOptions(request, runtime);
     }
     /**
-     * Queries information about a user.
-     *
-     * @remarks
-     * This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
+     * Queries the information about a specified user.
      *
      * @param request - GetUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -2102,10 +2110,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetUserResponse({}));
     }
     /**
-     * Queries information about a user.
-     *
-     * @remarks
-     * This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
+     * Queries the information about a specified user.
      *
      * @param request - GetUserRequest
      * @returns GetUserResponse
@@ -2441,6 +2446,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.nextToken)) {
             query["NextToken"] = request.nextToken;
         }
+        if (!$dara.isNull(request.originTargetId)) {
+            query["OriginTargetId"] = request.originTargetId;
+        }
         if (!$dara.isNull(request.principalId)) {
             query["PrincipalId"] = request.principalId;
         }
@@ -2507,6 +2515,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.nextToken)) {
             query["NextToken"] = request.nextToken;
         }
+        if (!$dara.isNull(request.originTargetId)) {
+            query["OriginTargetId"] = request.originTargetId;
+        }
         if (!$dara.isNull(request.provisioningStatus)) {
             query["ProvisioningStatus"] = request.provisioningStatus;
         }
@@ -2546,10 +2557,10 @@ class Client extends openapi_core_1.default {
         return await this.listAccessConfigurationProvisioningsWithOptions(request, runtime);
     }
     /**
-     * Queries access configurations.
+     * Queries the list of access configurations.
      *
      * @remarks
-     * This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
+     * This topic provides an example on how to query the access configurations in the directory `d-00fc2p61****`. The response shows that there are two access configurations: `VPC-Admin` and `ECS-Admin`.
      *
      * @param request - ListAccessConfigurationsRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -2593,10 +2604,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListAccessConfigurationsResponse({}));
     }
     /**
-     * Queries access configurations.
+     * Queries the list of access configurations.
      *
      * @remarks
-     * This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
+     * This topic provides an example on how to query the access configurations in the directory `d-00fc2p61****`. The response shows that there are two access configurations: `VPC-Admin` and `ECS-Admin`.
      *
      * @param request - ListAccessConfigurationsRequest
      * @returns ListAccessConfigurationsResponse
@@ -2611,7 +2622,6 @@ class Client extends openapi_core_1.default {
      * @remarks
      * This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
      *
-     * @param request - ListDirectoriesRequest
      * @param runtime - runtime options for this request RuntimeOptions
      * @returns ListDirectoriesResponse
      */
@@ -2852,10 +2862,10 @@ class Client extends openapi_core_1.default {
         return await this.listJoinedGroupsForUserWithOptions(request, runtime);
     }
     /**
-     * Queries the multi-factor authentication (MFA) devices that are bound to a user. Up to two MFA devices can be bound to a user.
+     * Queries the MFA device list of a user. Each user can have a maximum of two MFA devices.
      *
      * @remarks
-     * This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
+     * This topic provides an example on how to query the MFA device list of the user `u-00q8wbq42wiltcrk****`. The response shows that the user has one MFA device named `Alice-MFA1`.
      *
      * @param request - ListMFADevicesForUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -2887,10 +2897,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListMFADevicesForUserResponse({}));
     }
     /**
-     * Queries the multi-factor authentication (MFA) devices that are bound to a user. Up to two MFA devices can be bound to a user.
+     * Queries the MFA device list of a user. Each user can have a maximum of two MFA devices.
      *
      * @remarks
-     * This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
+     * This topic provides an example on how to query the MFA device list of the user `u-00q8wbq42wiltcrk****`. The response shows that the user has one MFA device named `Alice-MFA1`.
      *
      * @param request - ListMFADevicesForUserRequest
      * @returns ListMFADevicesForUserResponse
@@ -3178,10 +3188,7 @@ class Client extends openapi_core_1.default {
         return await this.listUserProvisioningsWithOptions(request, runtime);
     }
     /**
-     * Queries users.
-     *
-     * @remarks
-     * This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
+     * Queries a list of users.
      *
      * @param request - ListUsersRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -3228,10 +3235,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListUsersResponse({}));
     }
     /**
-     * Queries users.
-     *
-     * @remarks
-     * This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
+     * Queries a list of users.
      *
      * @param request - ListUsersRequest
      * @returns ListUsersResponse
@@ -3260,6 +3264,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.directoryId)) {
             query["DirectoryId"] = request.directoryId;
         }
+        if (!$dara.isNull(request.originTargetId)) {
+            query["OriginTargetId"] = request.originTargetId;
+        }
         if (!$dara.isNull(request.targetId)) {
             query["TargetId"] = request.targetId;
         }
@@ -3458,7 +3465,7 @@ class Client extends openapi_core_1.default {
      *
      * @remarks
      * If a user forgets the password, the password expires, or the password poses security risks, a CloudSSO administrator can reset the password for the user.
-     * >  After you enable single sign-on (SSO) logon, the password of a user cannot be reset.
+     * > After you enable single sign-on (SSO) logon, the password of a user cannot be reset.
      * This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
      *
      * @param request - ResetUserPasswordRequest
@@ -3504,7 +3511,7 @@ class Client extends openapi_core_1.default {
      *
      * @remarks
      * If a user forgets the password, the password expires, or the password poses security risks, a CloudSSO administrator can reset the password for the user.
-     * >  After you enable single sign-on (SSO) logon, the password of a user cannot be reset.
+     * > After you enable single sign-on (SSO) logon, the password of a user cannot be reset.
      * This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
      *
      * @param request - ResetUserPasswordRequest
@@ -3961,7 +3968,7 @@ class Client extends openapi_core_1.default {
      *
      * @remarks
      * You can modify `GroupName` and `Description` for a group.
-     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify information about a group that is synchronized by using SCIM.
+     * > If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify information about a group that is synchronized by using SCIM.
      * This topic provides an example on how to modify the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
      *
      * @param request - UpdateGroupRequest
@@ -4004,7 +4011,7 @@ class Client extends openapi_core_1.default {
      *
      * @remarks
      * You can modify `GroupName` and `Description` for a group.
-     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify information about a group that is synchronized by using SCIM.
+     * > If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify information about a group that is synchronized by using SCIM.
      * This topic provides an example on how to modify the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
      *
      * @param request - UpdateGroupRequest
@@ -4069,19 +4076,27 @@ class Client extends openapi_core_1.default {
         return await this.updateInlinePolicyForAccessConfigurationWithOptions(request, runtime);
     }
     /**
-     * Modifies the multi-factor authentication (MFA) setting of all users.
+     * Modifies the global multi-factor authentication (MFA) settings.
      *
      * @remarks
-     * If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
-     * This topic provides an example on how to enable MFA for all CloudSSO users that belong to the directory named `d-00fc2p61****`.
+     * When username-password logon is enabled, you can configure the global MFA verification policy for user logon.
+     * This topic provides an example on how to enable MFA verification for all CloudSSO users in the directory `d-00fc2p61****`.
      *
-     * @param request - UpdateMFAAuthenticationSettingsRequest
+     * @param tmpReq - UpdateMFAAuthenticationSettingsRequest
      * @param runtime - runtime options for this request RuntimeOptions
      * @returns UpdateMFAAuthenticationSettingsResponse
      */
-    async updateMFAAuthenticationSettingsWithOptions(request, runtime) {
-        request.validate();
+    async updateMFAAuthenticationSettingsWithOptions(tmpReq, runtime) {
+        tmpReq.validate();
+        let request = new $_model.UpdateMFAAuthenticationSettingsShrinkRequest({});
+        openapi_core_2.OpenApiUtil.convert(tmpReq, request);
+        if (!$dara.isNull(tmpReq.allowedVerificationTypes)) {
+            request.allowedVerificationTypesShrink = openapi_core_2.OpenApiUtil.arrayToStringWithSpecifiedStyle(tmpReq.allowedVerificationTypes, "AllowedVerificationTypes", "json");
+        }
         let query = {};
+        if (!$dara.isNull(request.allowedVerificationTypesShrink)) {
+            query["AllowedVerificationTypes"] = request.allowedVerificationTypesShrink;
+        }
         if (!$dara.isNull(request.directoryId)) {
             query["DirectoryId"] = request.directoryId;
         }
@@ -4108,11 +4123,11 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateMFAAuthenticationSettingsResponse({}));
     }
     /**
-     * Modifies the multi-factor authentication (MFA) setting of all users.
+     * Modifies the global multi-factor authentication (MFA) settings.
      *
      * @remarks
-     * If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
-     * This topic provides an example on how to enable MFA for all CloudSSO users that belong to the directory named `d-00fc2p61****`.
+     * When username-password logon is enabled, you can configure the global MFA verification policy for user logon.
+     * This topic provides an example on how to enable MFA verification for all CloudSSO users in the directory `d-00fc2p61****`.
      *
      * @param request - UpdateMFAAuthenticationSettingsRequest
      * @returns UpdateMFAAuthenticationSettingsResponse
@@ -4177,7 +4192,7 @@ class Client extends openapi_core_1.default {
      *
      * @remarks
      * You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
-     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify information about a user that is synchronized by using SCIM.
+     * > If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify information about a user that is synchronized by using SCIM.
      *
      * @param request - UpdateUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -4228,7 +4243,7 @@ class Client extends openapi_core_1.default {
      *
      * @remarks
      * You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
-     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify information about a user that is synchronized by using SCIM.
+     * > If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify information about a user that is synchronized by using SCIM.
      *
      * @param request - UpdateUserRequest
      * @returns UpdateUserResponse