@alicloud/eiam20211201 2.17.1 → 2.17.3

package/dist/client.js

@@ -70,7 +70,7 @@ class Client extends openapi_core_1.default {
         return openapi_core_2.OpenApiUtil.getEndpointRules(productId, regionId, endpointRule, network, suffix);
     }
     /**
-     * Adds an application account to a specified user in the current application.
+     * Adds an application account for a specified employee under the current application.
      *
      * @param request - AddApplicationAccountToUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -108,7 +108,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.AddApplicationAccountToUserResponse({}));
     }
     /**
-     * Adds an application account to a specified user in the current application.
+     * Adds an application account for a specified employee under the current application.
      *
      * @param request - AddApplicationAccountToUserRequest
      * @returns AddApplicationAccountToUserResponse
@@ -421,7 +421,7 @@ class Client extends openapi_core_1.default {
         return await this.addUsersToGroupWithOptions(request, runtime);
     }
     /**
-     * Grants multiple EIAM groups access to an application.
+     * Grants multiple EIAM groups access to an application in a batch.
      *
      * @param request - AuthorizeApplicationToGroupsRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -459,7 +459,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.AuthorizeApplicationToGroupsResponse({}));
     }
     /**
-     * Grants multiple EIAM groups access to an application.
+     * Grants multiple EIAM groups access to an application in a batch.
      *
      * @param request - AuthorizeApplicationToGroupsRequest
      * @returns AuthorizeApplicationToGroupsResponse
@@ -517,7 +517,7 @@ class Client extends openapi_core_1.default {
         return await this.authorizeApplicationToOrganizationalUnitsWithOptions(request, runtime);
     }
     /**
-     * Grants permissions to multiple EIAM accounts to access an application.
+     * Grants multiple EIAM accounts access to an application in a batch.
      *
      * @param request - AuthorizeApplicationToUsersRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -555,7 +555,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.AuthorizeApplicationToUsersResponse({}));
     }
     /**
-     * Grants permissions to multiple EIAM accounts to access an application.
+     * Grants multiple EIAM accounts access to an application in a batch.
      *
      * @param request - AuthorizeApplicationToUsersRequest
      * @returns AuthorizeApplicationToUsersResponse
@@ -565,7 +565,7 @@ class Client extends openapi_core_1.default {
         return await this.authorizeApplicationToUsersWithOptions(request, runtime);
     }
     /**
-     * Grants a client application permissions for specific scopes on a specified resource server.
+     * Grants Scope permissions under a specified ResourceServer to a Client application.
      *
      * @param request - AuthorizeResourceServerScopesToClientRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -603,7 +603,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.AuthorizeResourceServerScopesToClientResponse({}));
     }
     /**
-     * Grants a client application permissions for specific scopes on a specified resource server.
+     * Grants Scope permissions under a specified ResourceServer to a Client application.
      *
      * @param request - AuthorizeResourceServerScopesToClientRequest
      * @returns AuthorizeResourceServerScopesToClientResponse
@@ -613,7 +613,7 @@ class Client extends openapi_core_1.default {
         return await this.authorizeResourceServerScopesToClientWithOptions(request, runtime);
     }
     /**
-     * Grants a group permissions for specified scopes on a resource server.
+     * Grants Scope permissions under a specified ResourceServer to a group.
      *
      * @param request - AuthorizeResourceServerScopesToGroupRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -654,7 +654,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.AuthorizeResourceServerScopesToGroupResponse({}));
     }
     /**
-     * Grants a group permissions for specified scopes on a resource server.
+     * Grants Scope permissions under a specified ResourceServer to a group.
      *
      * @param request - AuthorizeResourceServerScopesToGroupRequest
      * @returns AuthorizeResourceServerScopesToGroupResponse
@@ -664,7 +664,7 @@ class Client extends openapi_core_1.default {
         return await this.authorizeResourceServerScopesToGroupWithOptions(request, runtime);
     }
     /**
-     * Grants scope permissions for a specified resource server to an organization.
+     * Grants scope permissions under a specified ResourceServer to an organizational unit.
      *
      * @param request - AuthorizeResourceServerScopesToOrganizationalUnitRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -705,7 +705,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.AuthorizeResourceServerScopesToOrganizationalUnitResponse({}));
     }
     /**
-     * Grants scope permissions for a specified resource server to an organization.
+     * Grants scope permissions under a specified ResourceServer to an organizational unit.
      *
      * @param request - AuthorizeResourceServerScopesToOrganizationalUnitRequest
      * @returns AuthorizeResourceServerScopesToOrganizationalUnitResponse
@@ -715,7 +715,7 @@ class Client extends openapi_core_1.default {
         return await this.authorizeResourceServerScopesToOrganizationalUnitWithOptions(request, runtime);
     }
     /**
-     * Grants scope permissions for a specified resource server to a user account.
+     * Grants Scope permissions under a specified ResourceServer to an account.
      *
      * @param request - AuthorizeResourceServerScopesToUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -756,7 +756,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.AuthorizeResourceServerScopesToUserResponse({}));
     }
     /**
-     * Grants scope permissions for a specified resource server to a user account.
+     * Grants Scope permissions under a specified ResourceServer to an account.
      *
      * @param request - AuthorizeResourceServerScopesToUserRequest
      * @returns AuthorizeResourceServerScopesToUserResponse
@@ -766,7 +766,7 @@ class Client extends openapi_core_1.default {
         return await this.authorizeResourceServerScopesToUserWithOptions(request, runtime);
     }
     /**
-     * Authorizes a resource server for a client application.
+     * Authorizes a specified ResourceServer for a Client application.
      *
      * @param request - AuthorizeResourceServerToClientRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -801,7 +801,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.AuthorizeResourceServerToClientResponse({}));
     }
     /**
-     * Authorizes a resource server for a client application.
+     * Authorizes a specified ResourceServer for a Client application.
      *
      * @param request - AuthorizeResourceServerToClientRequest
      * @returns AuthorizeResourceServerToClientResponse
@@ -859,7 +859,7 @@ class Client extends openapi_core_1.default {
         return await this.bindUserAuthnSourceMappingWithOptions(request, runtime);
     }
     /**
-     * Checks whether the primary organizational unit for an application is within the synchronization scope.
+     * Checks whether the primary organization for application synchronization is within the application synchronization scope.
      *
      * @param request - CheckApplicationProvisioningUserPrimaryOrganizationalUnitRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -894,7 +894,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CheckApplicationProvisioningUserPrimaryOrganizationalUnitResponse({}));
     }
     /**
-     * Checks whether the primary organizational unit for an application is within the synchronization scope.
+     * Checks whether the primary organization for application synchronization is within the application synchronization scope.
      *
      * @param request - CheckApplicationProvisioningUserPrimaryOrganizationalUnitRequest
      * @returns CheckApplicationProvisioningUserPrimaryOrganizationalUnitResponse
@@ -991,10 +991,10 @@ class Client extends openapi_core_1.default {
         return await this.checkInstanceModuleStatusWithOptions(request, runtime);
     }
     /**
-     * Creates an application in the specified EIAM instance.
+     * Creates an application resource in a specified EIAM instance.
      *
      * @remarks
-     * You must select the required SSO protocol when you create the application. This selection cannot be changed after creation.
+     * EIAM supports two standard SSO protocols for application access: SAML 2.0 and OIDC. This parameter cannot be changed after it is specified. Create the application based on the SSO protocol type used in your business scenario.
      *
      * @param request - CreateApplicationRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -1050,10 +1050,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CreateApplicationResponse({}));
     }
     /**
-     * Creates an application in the specified EIAM instance.
+     * Creates an application resource in a specified EIAM instance.
      *
      * @remarks
-     * You must select the required SSO protocol when you create the application. This selection cannot be changed after creation.
+     * EIAM supports two standard SSO protocols for application access: SAML 2.0 and OIDC. This parameter cannot be changed after it is specified. Create the application based on the SSO protocol type used in your business scenario.
      *
      * @param request - CreateApplicationRequest
      * @returns CreateApplicationResponse
@@ -1063,7 +1063,7 @@ class Client extends openapi_core_1.default {
         return await this.createApplicationWithOptions(request, runtime);
     }
     /**
-     * Creates a client secret for an EIAM application. You can create up to two client secrets for each application.
+     * Creates a client secret for an EIAM application. You can create a maximum of two client secrets for each EIAM application.
      *
      * @param request - CreateApplicationClientSecretRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -1098,7 +1098,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CreateApplicationClientSecretResponse({}));
     }
     /**
-     * Creates a client secret for an EIAM application. You can create up to two client secrets for each application.
+     * Creates a client secret for an EIAM application. You can create a maximum of two client secrets for each EIAM application.
      *
      * @param request - CreateApplicationClientSecretRequest
      * @returns CreateApplicationClientSecretResponse
@@ -1108,7 +1108,7 @@ class Client extends openapi_core_1.default {
         return await this.createApplicationClientSecretWithOptions(request, runtime);
     }
     /**
-     * Creates an application federated credential.
+     * Creates an application federated identity credential.
      *
      * @param request - CreateApplicationFederatedCredentialRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -1138,9 +1138,18 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.instanceId)) {
             query["InstanceId"] = request.instanceId;
         }
+        if (!$dara.isNull(request.oidcVerificationConfig)) {
+            query["OidcVerificationConfig"] = request.oidcVerificationConfig;
+        }
+        if (!$dara.isNull(request.pkcs7VerificationConfig)) {
+            query["Pkcs7VerificationConfig"] = request.pkcs7VerificationConfig;
+        }
         if (!$dara.isNull(request.verificationCondition)) {
             query["VerificationCondition"] = request.verificationCondition;
         }
+        if (!$dara.isNull(request.verificationMode)) {
+            query["VerificationMode"] = request.verificationMode;
+        }
         let req = new openapi_core_2.$OpenApiUtil.OpenApiRequest({
             query: openapi_core_2.OpenApiUtil.query(query),
         });
@@ -1158,7 +1167,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CreateApplicationFederatedCredentialResponse({}));
     }
     /**
-     * Creates an application federated credential.
+     * Creates an application federated identity credential.
      *
      * @param request - CreateApplicationFederatedCredentialRequest
      * @returns CreateApplicationFederatedCredentialResponse
@@ -1418,7 +1427,7 @@ class Client extends openapi_core_1.default {
         return await this.createBrandWithOptions(request, runtime);
     }
     /**
-     * Creates a client public key for an application. The machine-to-machine (M2M) authorization server uses this public key to verify the assertion included in a token request from an M2M client using the PRIVATE_KEY_JWT method.
+     * Creates a ClientPublicKey for an application. When an M2M client uses the PRIVATE_KEY_JWT method to request the token endpoint, this public key is used by the M2M authorization server to verify the assertion carried in the client\\"s token endpoint request.
      *
      * @param request - CreateClientPublicKeyRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -1459,7 +1468,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CreateClientPublicKeyResponse({}));
     }
     /**
-     * Creates a client public key for an application. The machine-to-machine (M2M) authorization server uses this public key to verify the assertion included in a token request from an M2M client using the PRIVATE_KEY_JWT method.
+     * Creates a ClientPublicKey for an application. When an M2M client uses the PRIVATE_KEY_JWT method to request the token endpoint, this public key is used by the M2M authorization server to verify the assertion carried in the client\\"s token endpoint request.
      *
      * @param request - CreateClientPublicKeyRequest
      * @returns CreateClientPublicKeyResponse
@@ -1469,10 +1478,10 @@ class Client extends openapi_core_1.default {
         return await this.createClientPublicKeyWithOptions(request, runtime);
     }
     /**
-     * Creates a cloud account in the specified IDaaS EIAM instance.
+     * Creates a cloud account resource in a specified EIAM instance.
      *
      * @remarks
-     * *Before you call this operation, ensure that you understand the billing methods and [pricing](https://www.aliyun.com/price/product#/ecs/detail) of IDaaS EIAM.**
+     * *Before you call this operation, make sure that you fully understand the billing methods and [pricing](https://www.aliyun.com/price/product#/ecs/detail) of IDaaS EIAM.**
      *
      * @param request - CreateCloudAccountRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -1522,10 +1531,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CreateCloudAccountResponse({}));
     }
     /**
-     * Creates a cloud account in the specified IDaaS EIAM instance.
+     * Creates a cloud account resource in a specified EIAM instance.
      *
      * @remarks
-     * *Before you call this operation, ensure that you understand the billing methods and [pricing](https://www.aliyun.com/price/product#/ecs/detail) of IDaaS EIAM.**
+     * *Before you call this operation, make sure that you fully understand the billing methods and [pricing](https://www.aliyun.com/price/product#/ecs/detail) of IDaaS EIAM.**
      *
      * @param request - CreateCloudAccountRequest
      * @returns CreateCloudAccountResponse
@@ -1661,7 +1670,7 @@ class Client extends openapi_core_1.default {
         return await this.createConditionalAccessPolicyWithOptions(request, runtime);
     }
     /**
-     * Creates a credential in a specified EIAM instance.
+     * Creates a credential resource in a specified EIAM instance.
      *
      * @param request - CreateCredentialRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -1726,7 +1735,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CreateCredentialResponse({}));
     }
     /**
-     * Creates a credential in a specified EIAM instance.
+     * Creates a credential resource in a specified EIAM instance.
      *
      * @param request - CreateCredentialRequest
      * @returns CreateCredentialResponse
@@ -2012,7 +2021,7 @@ class Client extends openapi_core_1.default {
         return await this.createDomainProxyTokenWithOptions(request, runtime);
     }
     /**
-     * Create an identity provider.
+     * Creates a federated trust source.
      *
      * @param request - CreateFederatedCredentialProviderRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -2065,7 +2074,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.CreateFederatedCredentialProviderResponse({}));
     }
     /**
-     * Create an identity provider.
+     * Creates a federated trust source.
      *
      * @param request - CreateFederatedCredentialProviderRequest
      * @returns CreateFederatedCredentialProviderResponse
@@ -2636,10 +2645,10 @@ class Client extends openapi_core_1.default {
         return await this.createUserWithOptions(request, runtime);
     }
     /**
-     * Deletes an Employee Identity and Access Management (EIAM) application.
+     * Deletes an EIAM application resource.
      *
      * @remarks
-     * Make sure that the EIAM application that you want to delete is not used before you delete the EIAM application. After you delete the EIAM application, all configurations are deleted and cannot be restored.
+     * Before deleting a specified EIAM application, make sure the application is no longer in use. After the application is deleted, all configuration data is permanently deleted and cannot be recovered.
      *
      * @param request - DeleteApplicationRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -2671,10 +2680,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DeleteApplicationResponse({}));
     }
     /**
-     * Deletes an Employee Identity and Access Management (EIAM) application.
+     * Deletes an EIAM application resource.
      *
      * @remarks
-     * Make sure that the EIAM application that you want to delete is not used before you delete the EIAM application. After you delete the EIAM application, all configurations are deleted and cannot be restored.
+     * Before deleting a specified EIAM application, make sure the application is no longer in use. After the application is deleted, all configuration data is permanently deleted and cannot be recovered.
      *
      * @param request - DeleteApplicationRequest
      * @returns DeleteApplicationResponse
@@ -2684,7 +2693,7 @@ class Client extends openapi_core_1.default {
         return await this.deleteApplicationWithOptions(request, runtime);
     }
     /**
-     * Deletes a client key for an Employee Identity and Access Management (EIAM) application.
+     * Deletes a client secret of an EIAM application.
      *
      * @param request - DeleteApplicationClientSecretRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -2719,7 +2728,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DeleteApplicationClientSecretResponse({}));
     }
     /**
-     * Deletes a client key for an Employee Identity and Access Management (EIAM) application.
+     * Deletes a client secret of an EIAM application.
      *
      * @param request - DeleteApplicationClientSecretRequest
      * @returns DeleteApplicationClientSecretResponse
@@ -2729,7 +2738,7 @@ class Client extends openapi_core_1.default {
         return await this.deleteApplicationClientSecretWithOptions(request, runtime);
     }
     /**
-     * Deletes a federated credential for an application.
+     * Deletes a federated identity credential of an application.
      *
      * @param request - DeleteApplicationFederatedCredentialRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -2764,7 +2773,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DeleteApplicationFederatedCredentialResponse({}));
     }
     /**
-     * Deletes a federated credential for an application.
+     * Deletes a federated identity credential of an application.
      *
      * @param request - DeleteApplicationFederatedCredentialRequest
      * @returns DeleteApplicationFederatedCredentialResponse
@@ -2819,7 +2828,7 @@ class Client extends openapi_core_1.default {
         return await this.deleteApplicationRoleWithOptions(request, runtime);
     }
     /**
-     * Deletes an application token.
+     * Deletes an ApplicationToken.
      *
      * @param request - DeleteApplicationTokenRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -2854,7 +2863,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DeleteApplicationTokenResponse({}));
     }
     /**
-     * Deletes an application token.
+     * Deletes an ApplicationToken.
      *
      * @param request - DeleteApplicationTokenRequest
      * @returns DeleteApplicationTokenResponse
@@ -2993,7 +3002,7 @@ class Client extends openapi_core_1.default {
         return await this.deleteBrandWithOptions(request, runtime);
     }
     /**
-     * Deletes the ClientPublicKey for a specified application.
+     * Deletes a specified application ClientPublicKey.
      *
      * @param request - DeleteClientPublicKeyRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -3028,7 +3037,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DeleteClientPublicKeyResponse({}));
     }
     /**
-     * Deletes the ClientPublicKey for a specified application.
+     * Deletes a specified application ClientPublicKey.
      *
      * @param request - DeleteClientPublicKeyRequest
      * @returns DeleteClientPublicKeyResponse
@@ -3773,7 +3782,7 @@ class Client extends openapi_core_1.default {
         return await this.deleteOrganizationalUnitChildrenWithOptions(request, runtime);
     }
     /**
-     * Deletes a scope permission from a specified resource server.
+     * Deletes a scope permission under a specified ResourceServer.
      *
      * @param request - DeleteResourceServerScopeRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -3808,7 +3817,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DeleteResourceServerScopeResponse({}));
     }
     /**
-     * Deletes a scope permission from a specified resource server.
+     * Deletes a scope permission under a specified ResourceServer.
      *
      * @param request - DeleteResourceServerScopeRequest
      * @returns DeleteResourceServerScopeResponse
@@ -3947,10 +3956,10 @@ class Client extends openapi_core_1.default {
         return await this.deleteWebAuthnAuthenticatorWithOptions(request, runtime);
     }
     /**
-     * Disables an enabled Employee Identity and Access Management (EIAM) application. All features of the EIAM application cannot be used if you disable the EIAM application.
+     * Disables an application by changing its status from enabled to disabled, making all capabilities of the application unavailable.
      *
      * @remarks
-     * All features of the EIAM application cannot be used if you disable the EIAM application, such as single sign-on (SSO) and account synchronization. Make sure that you acknowledge the risks of the delete operation.
+     * When you change an application from the enabled state to the disabled state, all features of the application become unavailable (such as SSO and account synchronization). Confirm that you are aware of the risks that this operation may cause.
      *
      * @param request - DisableApplicationRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -3982,10 +3991,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DisableApplicationResponse({}));
     }
     /**
-     * Disables an enabled Employee Identity and Access Management (EIAM) application. All features of the EIAM application cannot be used if you disable the EIAM application.
+     * Disables an application by changing its status from enabled to disabled, making all capabilities of the application unavailable.
      *
      * @remarks
-     * All features of the EIAM application cannot be used if you disable the EIAM application, such as single sign-on (SSO) and account synchronization. Make sure that you acknowledge the risks of the delete operation.
+     * When you change an application from the enabled state to the disabled state, all features of the application become unavailable (such as SSO and account synchronization). Confirm that you are aware of the risks that this operation may cause.
      *
      * @param request - DisableApplicationRequest
      * @returns DisableApplicationResponse
@@ -4082,7 +4091,7 @@ class Client extends openapi_core_1.default {
         return await this.disableApplicationClientSecretWithOptions(request, runtime);
     }
     /**
-     * Disables a federated credential for an application.
+     * Disables a federated identity credential for an application.
      *
      * @param request - DisableApplicationFederatedCredentialRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -4117,7 +4126,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DisableApplicationFederatedCredentialResponse({}));
     }
     /**
-     * Disables a federated credential for an application.
+     * Disables a federated identity credential for an application.
      *
      * @param request - DisableApplicationFederatedCredentialRequest
      * @returns DisableApplicationFederatedCredentialResponse
@@ -4211,7 +4220,7 @@ class Client extends openapi_core_1.default {
         return await this.disableApplicationProvisioningWithOptions(request, runtime);
     }
     /**
-     * Disables the resource server functionality for a specified application.
+     * Disables the ResourceServer capability of a specified application.
      *
      * @param request - DisableApplicationResourceServerRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -4243,7 +4252,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DisableApplicationResourceServerResponse({}));
     }
     /**
-     * Disables the resource server functionality for a specified application.
+     * Disables the ResourceServer capability of a specified application.
      *
      * @param request - DisableApplicationResourceServerRequest
      * @returns DisableApplicationResourceServerResponse
@@ -4298,7 +4307,7 @@ class Client extends openapi_core_1.default {
      * Disables an application token.
      *
      * @remarks
-     * When you change the status of an application from enabled to disabled, all application features, such as single sign-on (SSO) and account synchronization, become unavailable. Be aware of the potential threats associated with this operation.
+     * When you change an application from the enabled state to the disabled state, all features of the application become unavailable, such as SSO and account synchronization. Make sure that you are aware of the risks that this operation may cause.
      *
      * @param request - DisableApplicationTokenRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -4336,7 +4345,7 @@ class Client extends openapi_core_1.default {
      * Disables an application token.
      *
      * @remarks
-     * When you change the status of an application from enabled to disabled, all application features, such as single sign-on (SSO) and account synchronization, become unavailable. Be aware of the potential threats associated with this operation.
+     * When you change an application from the enabled state to the disabled state, all features of the application become unavailable, such as SSO and account synchronization. Make sure that you are aware of the risks that this operation may cause.
      *
      * @param request - DisableApplicationTokenRequest
      * @returns DisableApplicationTokenResponse
@@ -4435,7 +4444,7 @@ class Client extends openapi_core_1.default {
         return await this.disableBrandWithOptions(request, runtime);
     }
     /**
-     * Disables the ClientPublicKey for a specified application.
+     * Disables a specified application ClientPublicKey.
      *
      * @param request - DisableClientPublicKeyRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -4473,7 +4482,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.DisableClientPublicKeyResponse({}));
     }
     /**
-     * Disables the ClientPublicKey for a specified application.
+     * Disables a specified application ClientPublicKey.
      *
      * @param request - DisableClientPublicKeyRequest
      * @returns DisableClientPublicKeyResponse
@@ -5434,7 +5443,7 @@ class Client extends openapi_core_1.default {
         return await this.enableApplicationResourceServerWithOptions(request, runtime);
     }
     /**
-     * Enables single sign-on (SSO) for an EIAM application.
+     * Enables the SSO feature for an EIAM application.
      *
      * @param request - EnableApplicationSsoRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -5466,7 +5475,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.EnableApplicationSsoResponse({}));
     }
     /**
-     * Enables single sign-on (SSO) for an EIAM application.
+     * Enables the SSO feature for an EIAM application.
      *
      * @param request - EnableApplicationSsoRequest
      * @returns EnableApplicationSsoResponse
@@ -5610,7 +5619,7 @@ class Client extends openapi_core_1.default {
         return await this.enableBrandWithOptions(request, runtime);
     }
     /**
-     * Enables the specified ClientPublicKey for an application.
+     * Enables a specified application ClientPublicKey.
      *
      * @param request - EnableClientPublicKeyRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -5648,7 +5657,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.EnableClientPublicKeyResponse({}));
     }
     /**
-     * Enables the specified ClientPublicKey for an application.
+     * Enables a specified application ClientPublicKey.
      *
      * @param request - EnableClientPublicKeyRequest
      * @returns EnableClientPublicKeyResponse
@@ -6450,7 +6459,7 @@ class Client extends openapi_core_1.default {
         return await this.generateFileImportTemplateWithOptions(request, runtime);
     }
     /**
-     * Obtain an access token to call a resource server using a specified application as the client.
+     * Obtains an access token for accessing a resource server by using a specified application as the client identity.
      *
      * @param request - GenerateOauthTokenRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -6465,12 +6474,24 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.audience)) {
             query["Audience"] = request.audience;
         }
+        if (!$dara.isNull(request.grantType)) {
+            query["GrantType"] = request.grantType;
+        }
         if (!$dara.isNull(request.instanceId)) {
             query["InstanceId"] = request.instanceId;
         }
+        if (!$dara.isNull(request.requestedTokenType)) {
+            query["RequestedTokenType"] = request.requestedTokenType;
+        }
         if (!$dara.isNull(request.scopeValues)) {
             query["ScopeValues"] = request.scopeValues;
         }
+        if (!$dara.isNull(request.subjectToken)) {
+            query["SubjectToken"] = request.subjectToken;
+        }
+        if (!$dara.isNull(request.subjectTokenType)) {
+            query["SubjectTokenType"] = request.subjectTokenType;
+        }
         let req = new openapi_core_2.$OpenApiUtil.OpenApiRequest({
             query: openapi_core_2.OpenApiUtil.query(query),
         });
@@ -6488,7 +6509,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GenerateOauthTokenResponse({}));
     }
     /**
-     * Obtain an access token to call a resource server using a specified application as the client.
+     * Obtains an access token for accessing a resource server by using a specified application as the client identity.
      *
      * @param request - GenerateOauthTokenRequest
      * @returns GenerateOauthTokenResponse
@@ -6672,7 +6693,7 @@ class Client extends openapi_core_1.default {
         return await this.getApplicationAdvancedConfigWithOptions(request, runtime);
     }
     /**
-     * Retrieves the federated credential for an application.
+     * Retrieves the federated identity credential of an application.
      *
      * @param request - GetApplicationFederatedCredentialRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -6707,7 +6728,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetApplicationFederatedCredentialResponse({}));
     }
     /**
-     * Retrieves the federated credential for an application.
+     * Retrieves the federated identity credential of an application.
      *
      * @param request - GetApplicationFederatedCredentialRequest
      * @returns GetApplicationFederatedCredentialResponse
@@ -6717,7 +6738,7 @@ class Client extends openapi_core_1.default {
         return await this.getApplicationFederatedCredentialWithOptions(request, runtime);
     }
     /**
-     * Queries the permissions of the Developer API feature for an Employee Identity and Access Management (EIAM) application.
+     * Queries the Developer API authorization scope of an EIAM application.
      *
      * @param request - GetApplicationGrantScopeRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -6749,7 +6770,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetApplicationGrantScopeResponse({}));
     }
     /**
-     * Queries the permissions of the Developer API feature for an Employee Identity and Access Management (EIAM) application.
+     * Queries the Developer API authorization scope of an EIAM application.
      *
      * @param request - GetApplicationGrantScopeRequest
      * @returns GetApplicationGrantScopeResponse
@@ -6885,7 +6906,7 @@ class Client extends openapi_core_1.default {
         return await this.getApplicationProvisioningUserPrimaryOrganizationalUnitWithOptions(request, runtime);
     }
     /**
-     * Retrieves the details of an application role.
+     * Retrieves application role information.
      *
      * @param request - GetApplicationRoleRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -6920,7 +6941,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetApplicationRoleResponse({}));
     }
     /**
-     * Retrieves the details of an application role.
+     * Retrieves application role information.
      *
      * @param request - GetApplicationRoleRequest
      * @returns GetApplicationRoleResponse
@@ -6972,7 +6993,7 @@ class Client extends openapi_core_1.default {
         return await this.getApplicationSsoConfigWithOptions(request, runtime);
     }
     /**
-     * Retrieves the details of an application template.
+     * Retrieves application template information.
      *
      * @param request - GetApplicationTemplateRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -7001,7 +7022,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetApplicationTemplateResponse({}));
     }
     /**
-     * Retrieves the details of an application template.
+     * Retrieves application template information.
      *
      * @param request - GetApplicationTemplateRequest
      * @returns GetApplicationTemplateResponse
@@ -7182,7 +7203,7 @@ class Client extends openapi_core_1.default {
         return await this.getBrandWithOptions(request, runtime);
     }
     /**
-     * Retrieves the ClientPublicKey for a specified application.
+     * Queries the ClientPublicKey of a specified application.
      *
      * @param request - GetClientPublicKeyRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -7217,7 +7238,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetClientPublicKeyResponse({}));
     }
     /**
-     * Retrieves the ClientPublicKey for a specified application.
+     * Queries the ClientPublicKey of a specified application.
      *
      * @param request - GetClientPublicKeyRequest
      * @returns GetClientPublicKeyResponse
@@ -7269,7 +7290,7 @@ class Client extends openapi_core_1.default {
         return await this.getCloudAccountWithOptions(request, runtime);
     }
     /**
-     * Retrieves information about a cloud role.
+     * Queries the resource information of a cloud role.
      *
      * @param request - GetCloudAccountRoleRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -7304,7 +7325,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetCloudAccountRoleResponse({}));
     }
     /**
-     * Retrieves information about a cloud role.
+     * Queries the resource information of a cloud role.
      *
      * @param request - GetCloudAccountRoleRequest
      * @returns GetCloudAccountRoleResponse
@@ -7362,7 +7383,7 @@ class Client extends openapi_core_1.default {
         return await this.getConditionalAccessPolicyWithOptions(request, runtime);
     }
     /**
-     * Retrieves the details of a specific credential.
+     * Queries the information about a credential resource.
      *
      * @param request - GetCredentialRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -7394,7 +7415,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetCredentialResponse({}));
     }
     /**
-     * Retrieves the details of a specific credential.
+     * Queries the information about a credential resource.
      *
      * @param request - GetCredentialRequest
      * @returns GetCredentialResponse
@@ -7404,7 +7425,7 @@ class Client extends openapi_core_1.default {
         return await this.getCredentialWithOptions(request, runtime);
     }
     /**
-     * Retrieves the details of a credential provider.
+     * Queries the details of a credential provider.
      *
      * @param request - GetCredentialProviderRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -7436,7 +7457,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.GetCredentialProviderResponse({}));
     }
     /**
-     * Retrieves the details of a credential provider.
+     * Queries the details of a credential provider.
      *
      * @param request - GetCredentialProviderRequest
      * @returns GetCredentialProviderResponse
@@ -8817,7 +8838,7 @@ class Client extends openapi_core_1.default {
         return await this.listActionTrackEventTypesWithOptions(request, runtime);
     }
     /**
-     * Returns a paginated list of application accounts.
+     * Queries the application accounts of an application by paging.
      *
      * @param request - ListApplicationAccountsRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -8855,7 +8876,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListApplicationAccountsResponse({}));
     }
     /**
-     * Returns a paginated list of application accounts.
+     * Queries the application accounts of an application by paging.
      *
      * @param request - ListApplicationAccountsRequest
      * @returns ListApplicationAccountsResponse
@@ -8958,7 +8979,7 @@ class Client extends openapi_core_1.default {
         return await this.listApplicationClientSecretsWithOptions(request, runtime);
     }
     /**
-     * Lists the federated credentials for an application.
+     * Queries a list of application federated credentials.
      *
      * @param request - ListApplicationFederatedCredentialsRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -9002,7 +9023,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListApplicationFederatedCredentialsResponse({}));
     }
     /**
-     * Lists the federated credentials for an application.
+     * Queries a list of application federated credentials.
      *
      * @param request - ListApplicationFederatedCredentialsRequest
      * @returns ListApplicationFederatedCredentialsResponse
@@ -9012,7 +9033,7 @@ class Client extends openapi_core_1.default {
         return await this.listApplicationFederatedCredentialsWithOptions(request, runtime);
     }
     /**
-     * Lists the application federated credentials for a specified federated credential provider.
+     * Queries the list of application federated credentials by federated trust source ID.
      *
      * @param request - ListApplicationFederatedCredentialsForProviderRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -9053,7 +9074,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListApplicationFederatedCredentialsForProviderResponse({}));
     }
     /**
-     * Lists the application federated credentials for a specified federated credential provider.
+     * Queries the list of application federated credentials by federated trust source ID.
      *
      * @param request - ListApplicationFederatedCredentialsForProviderRequest
      * @returns ListApplicationFederatedCredentialsForProviderResponse
@@ -9114,7 +9135,7 @@ class Client extends openapi_core_1.default {
         return await this.listApplicationRolesWithOptions(request, runtime);
     }
     /**
-     * Call the ListApplicationSupportedProvisionProtocolTypes operation to query the account synchronization protocols supported by an application.
+     * Queries the list of account synchronization types supported by an application.
      *
      * @param request - ListApplicationSupportedProvisionProtocolTypesRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -9146,7 +9167,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListApplicationSupportedProvisionProtocolTypesResponse({}));
     }
     /**
-     * Call the ListApplicationSupportedProvisionProtocolTypes operation to query the account synchronization protocols supported by an application.
+     * Queries the list of account synchronization types supported by an application.
      *
      * @param request - ListApplicationSupportedProvisionProtocolTypesRequest
      * @returns ListApplicationSupportedProvisionProtocolTypesResponse
@@ -9156,7 +9177,7 @@ class Client extends openapi_core_1.default {
         return await this.listApplicationSupportedProvisionProtocolTypesWithOptions(request, runtime);
     }
     /**
-     * Retrieves a list of application tokens.
+     * Retrieves the list of application tokens.
      *
      * @param request - ListApplicationTokensRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -9191,7 +9212,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListApplicationTokensResponse({}));
     }
     /**
-     * Retrieves a list of application tokens.
+     * Retrieves the list of application tokens.
      *
      * @param request - ListApplicationTokensRequest
      * @returns ListApplicationTokensResponse
@@ -9201,7 +9222,7 @@ class Client extends openapi_core_1.default {
         return await this.listApplicationTokensWithOptions(request, runtime);
     }
     /**
-     * Retrieves a paginated list of EIAM applications.
+     * Performs a paged query to retrieve information about one or more EIAM applications with paging.
      *
      * @param request - ListApplicationsRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -9234,6 +9255,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.m2MClientStatus)) {
             query["M2MClientStatus"] = request.m2MClientStatus;
         }
+        if (!$dara.isNull(request.managedServiceCode)) {
+            query["ManagedServiceCode"] = request.managedServiceCode;
+        }
         if (!$dara.isNull(request.pageNumber)) {
             query["PageNumber"] = request.pageNumber;
         }
@@ -9243,6 +9267,9 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.resourceServerStatus)) {
             query["ResourceServerStatus"] = request.resourceServerStatus;
         }
+        if (!$dara.isNull(request.serviceManaged)) {
+            query["ServiceManaged"] = request.serviceManaged;
+        }
         if (!$dara.isNull(request.ssoType)) {
             query["SsoType"] = request.ssoType;
         }
@@ -9266,7 +9293,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListApplicationsResponse({}));
     }
     /**
-     * Retrieves a paginated list of EIAM applications.
+     * Performs a paged query to retrieve information about one or more EIAM applications with paging.
      *
      * @param request - ListApplicationsRequest
      * @returns ListApplicationsResponse
@@ -9972,7 +9999,7 @@ class Client extends openapi_core_1.default {
         return await this.listClientPublicKeysWithOptions(request, runtime);
     }
     /**
-     * Queries a paginated list of cloud roles.
+     * Queries the information about one or more cloud roles by using paging.
      *
      * @param request - ListCloudAccountRolesRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -10013,7 +10040,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListCloudAccountRolesResponse({}));
     }
     /**
-     * Queries a paginated list of cloud roles.
+     * Queries the information about one or more cloud roles by using paging.
      *
      * @param request - ListCloudAccountRolesRequest
      * @returns ListCloudAccountRolesResponse
@@ -10257,7 +10284,7 @@ class Client extends openapi_core_1.default {
         return await this.listConditionalAccessPoliciesForUserWithOptions(request, runtime);
     }
     /**
-     * Lists the credential providers.
+     * Lists credential providers.
      *
      * @param request - ListCredentialProvidersRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -10304,7 +10331,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListCredentialProvidersResponse({}));
     }
     /**
-     * Lists the credential providers.
+     * Lists credential providers.
      *
      * @param request - ListCredentialProvidersRequest
      * @returns ListCredentialProvidersResponse
@@ -10314,7 +10341,7 @@ class Client extends openapi_core_1.default {
         return await this.listCredentialProvidersWithOptions(request, runtime);
     }
     /**
-     * Retrieves a paginated list of credentials.
+     * Queries the information of one or more credentials by using paging.
      *
      * @param request - ListCredentialsRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -10367,7 +10394,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListCredentialsResponse({}));
     }
     /**
-     * Retrieves a paginated list of credentials.
+     * Queries the information of one or more credentials by using paging.
      *
      * @param request - ListCredentialsRequest
      * @returns ListCredentialsResponse
@@ -10676,7 +10703,7 @@ class Client extends openapi_core_1.default {
         return await this.listEventTypesWithOptions(request, runtime);
     }
     /**
-     * Lists federated identity providers.
+     * Queries a list of federated trust sources.
      *
      * @param request - ListFederatedCredentialProvidersRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -10720,7 +10747,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListFederatedCredentialProvidersResponse({}));
     }
     /**
-     * Lists federated identity providers.
+     * Queries a list of federated trust sources.
      *
      * @param request - ListFederatedCredentialProvidersRequest
      * @returns ListFederatedCredentialProvidersResponse
@@ -11598,7 +11625,7 @@ class Client extends openapi_core_1.default {
         return await this.listRegionsWithOptions(runtime);
     }
     /**
-     * Query the list of Scope permissions under a specified ResourceServer using cursor-based pagination.
+     * Queries the list of scope permissions under a specified ResourceServer by using a cursor.
      *
      * @param request - ListResourceServerScopesRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -11654,7 +11681,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListResourceServerScopesResponse({}));
     }
     /**
-     * Query the list of Scope permissions under a specified ResourceServer using cursor-based pagination.
+     * Queries the list of scope permissions under a specified ResourceServer by using a cursor.
      *
      * @param request - ListResourceServerScopesRequest
      * @returns ListResourceServerScopesResponse
@@ -11664,7 +11691,7 @@ class Client extends openapi_core_1.default {
         return await this.listResourceServerScopesWithOptions(request, runtime);
     }
     /**
-     * Performs a paged query to retrieve the ResourceServer and Scope permissions that are granted to the current user.
+     * Queries the list of ResourceServer and Scope permissions granted to the current account by using a cursor-based approach.
      *
      * @param request - ListResourceServersForUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -11705,7 +11732,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ListResourceServersForUserResponse({}));
     }
     /**
-     * Performs a paged query to retrieve the ResourceServer and Scope permissions that are granted to the current user.
+     * Queries the list of ResourceServer and Scope permissions granted to the current account by using a cursor-based approach.
      *
      * @param request - ListResourceServersForUserRequest
      * @returns ListResourceServersForUserResponse
@@ -12162,7 +12189,7 @@ class Client extends openapi_core_1.default {
         return await this.listUsersForResourceServerWithOptions(request, runtime);
     }
     /**
-     * Obtains the client secret for an EIAM application. The secret is returned without desensitization. To obtain a desensitized secret, call the ListApplicationClientSecrets operation.
+     * Retrieves the client secret of an EIAM application. The returned secret is not masked. To retrieve masked secrets, call the ListApplicationClientSecrets operation.
      *
      * @param request - ObtainApplicationClientSecretRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12197,7 +12224,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ObtainApplicationClientSecretResponse({}));
     }
     /**
-     * Obtains the client secret for an EIAM application. The secret is returned without desensitization. To obtain a desensitized secret, call the ListApplicationClientSecrets operation.
+     * Retrieves the client secret of an EIAM application. The returned secret is not masked. To retrieve masked secrets, call the ListApplicationClientSecrets operation.
      *
      * @param request - ObtainApplicationClientSecretRequest
      * @returns ObtainApplicationClientSecretResponse
@@ -12207,10 +12234,10 @@ class Client extends openapi_core_1.default {
         return await this.obtainApplicationClientSecretWithOptions(request, runtime);
     }
     /**
-     * Queries the token of a specified application.
+     * Queries a specified application token.
      *
      * @remarks
-     * When you disable an application, all its features, such as single sign-on (SSO) and account synchronization, become unavailable. Ensure that you understand the potential threats of this operation.
+     * When you change an application from the enabled state to the disabled state, all features of the application become unavailable, such as SSO and account synchronization. Make sure that you are aware of the risks that may result from this operation.
      *
      * @param request - ObtainApplicationTokenRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12245,10 +12272,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ObtainApplicationTokenResponse({}));
     }
     /**
-     * Queries the token of a specified application.
+     * Queries a specified application token.
      *
      * @remarks
-     * When you disable an application, all its features, such as single sign-on (SSO) and account synchronization, become unavailable. Ensure that you understand the potential threats of this operation.
+     * When you change an application from the enabled state to the disabled state, all features of the application become unavailable, such as SSO and account synchronization. Make sure that you are aware of the risks that may result from this operation.
      *
      * @param request - ObtainApplicationTokenRequest
      * @returns ObtainApplicationTokenResponse
@@ -12258,7 +12285,7 @@ class Client extends openapi_core_1.default {
         return await this.obtainApplicationTokenWithOptions(request, runtime);
     }
     /**
-     * Retrieves a credential containing sensitive information.
+     * Queries a credential resource that contains sensitive information.
      *
      * @param request - ObtainCredentialRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12290,7 +12317,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.ObtainCredentialResponse({}));
     }
     /**
-     * Retrieves a credential containing sensitive information.
+     * Queries a credential resource that contains sensitive information.
      *
      * @param request - ObtainCredentialRequest
      * @returns ObtainCredentialResponse
@@ -12345,10 +12372,10 @@ class Client extends openapi_core_1.default {
         return await this.obtainDomainProxyTokenWithOptions(request, runtime);
     }
     /**
-     * Deletes the application account of a specified user from an application.
+     * Deletes an application account of a specified employee under the current application.
      *
      * @remarks
-     * This operation queries only applications that are directly assigned to an organization. When you call this operation, you can use the **ApplicationIds** parameter to filter the applications.
+     * This operation only queries the direct permissions of the organization, that is, applications directly assigned to the organization. When you call this operation, you can use the **ApplicationIds** parameter to filter applications.
      *
      * @param request - RemoveApplicationAccountFromUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12386,10 +12413,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.RemoveApplicationAccountFromUserResponse({}));
     }
     /**
-     * Deletes the application account of a specified user from an application.
+     * Deletes an application account of a specified employee under the current application.
      *
      * @remarks
-     * This operation queries only applications that are directly assigned to an organization. When you call this operation, you can use the **ApplicationIds** parameter to filter the applications.
+     * This operation only queries the direct permissions of the organization, that is, applications directly assigned to the organization. When you call this operation, you can use the **ApplicationIds** parameter to filter applications.
      *
      * @param request - RemoveApplicationAccountFromUserRequest
      * @returns RemoveApplicationAccountFromUserResponse
@@ -12708,7 +12735,7 @@ class Client extends openapi_core_1.default {
         return await this.renewFreeLicenseEndTimeWithOptions(request, runtime);
     }
     /**
-     * Revokes application access from multiple EIAM groups in a batch.
+     * Revokes the permissions of multiple Employee Identity and Access Management (EIAM) groups to access an application in a batch.
      *
      * @param request - RevokeApplicationFromGroupsRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12746,7 +12773,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.RevokeApplicationFromGroupsResponse({}));
     }
     /**
-     * Revokes application access from multiple EIAM groups in a batch.
+     * Revokes the permissions of multiple Employee Identity and Access Management (EIAM) groups to access an application in a batch.
      *
      * @param request - RevokeApplicationFromGroupsRequest
      * @returns RevokeApplicationFromGroupsResponse
@@ -12804,7 +12831,7 @@ class Client extends openapi_core_1.default {
         return await this.revokeApplicationFromOrganizationalUnitsWithOptions(request, runtime);
     }
     /**
-     * Revokes access to an application from multiple EIAM accounts.
+     * Revokes the permissions of multiple Enterprise Identity Access Management (EIAM) accounts to access an application in a batch.
      *
      * @param request - RevokeApplicationFromUsersRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12842,7 +12869,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.RevokeApplicationFromUsersResponse({}));
     }
     /**
-     * Revokes access to an application from multiple EIAM accounts.
+     * Revokes the permissions of multiple Enterprise Identity Access Management (EIAM) accounts to access an application in a batch.
      *
      * @param request - RevokeApplicationFromUsersRequest
      * @returns RevokeApplicationFromUsersResponse
@@ -12852,7 +12879,7 @@ class Client extends openapi_core_1.default {
         return await this.revokeApplicationFromUsersWithOptions(request, runtime);
     }
     /**
-     * Revokes the authorization for a resource server from a client application.
+     * Cancels the authorization granted by a specified ResourceServer to a Client application.
      *
      * @param request - RevokeResourceServerFromClientRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12887,7 +12914,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.RevokeResourceServerFromClientResponse({}));
     }
     /**
-     * Revokes the authorization for a resource server from a client application.
+     * Cancels the authorization granted by a specified ResourceServer to a Client application.
      *
      * @param request - RevokeResourceServerFromClientRequest
      * @returns RevokeResourceServerFromClientResponse
@@ -12897,7 +12924,7 @@ class Client extends openapi_core_1.default {
         return await this.revokeResourceServerFromClientWithOptions(request, runtime);
     }
     /**
-     * Revokes specified scope permissions of a resource server from a client application.
+     * Revokes the scope permissions of a specified ResourceServer from a client application.
      *
      * @param request - RevokeResourceServerScopesFromClientRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12935,7 +12962,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.RevokeResourceServerScopesFromClientResponse({}));
     }
     /**
-     * Revokes specified scope permissions of a resource server from a client application.
+     * Revokes the scope permissions of a specified ResourceServer from a client application.
      *
      * @param request - RevokeResourceServerScopesFromClientRequest
      * @returns RevokeResourceServerScopesFromClientResponse
@@ -12945,7 +12972,7 @@ class Client extends openapi_core_1.default {
         return await this.revokeResourceServerScopesFromClientWithOptions(request, runtime);
     }
     /**
-     * Revokes a resource server\\"s scope permissions from a group.
+     * Revokes the authorization of Scope permissions under a specified ResourceServer from a group.
      *
      * @param request - RevokeResourceServerScopesFromGroupRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -12983,7 +13010,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.RevokeResourceServerScopesFromGroupResponse({}));
     }
     /**
-     * Revokes a resource server\\"s scope permissions from a group.
+     * Revokes the authorization of Scope permissions under a specified ResourceServer from a group.
      *
      * @param request - RevokeResourceServerScopesFromGroupRequest
      * @returns RevokeResourceServerScopesFromGroupResponse
@@ -12993,7 +13020,7 @@ class Client extends openapi_core_1.default {
         return await this.revokeResourceServerScopesFromGroupWithOptions(request, runtime);
     }
     /**
-     * Revokes scope permissions for a resource server from an organization.
+     * Revokes the authorization of Scope permissions under a specified ResourceServer from an organizational unit.
      *
      * @param request - RevokeResourceServerScopesFromOrganizationalUnitRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -13031,7 +13058,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.RevokeResourceServerScopesFromOrganizationalUnitResponse({}));
     }
     /**
-     * Revokes scope permissions for a resource server from an organization.
+     * Revokes the authorization of Scope permissions under a specified ResourceServer from an organizational unit.
      *
      * @param request - RevokeResourceServerScopesFromOrganizationalUnitRequest
      * @returns RevokeResourceServerScopesFromOrganizationalUnitResponse
@@ -13041,7 +13068,7 @@ class Client extends openapi_core_1.default {
         return await this.revokeResourceServerScopesFromOrganizationalUnitWithOptions(request, runtime);
     }
     /**
-     * Revokes scope permissions for a specified resource server from an account.
+     * Revokes the Scope permissions under a specified ResourceServer from an account.
      *
      * @param request - RevokeResourceServerScopesFromUserRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -13079,7 +13106,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.RevokeResourceServerScopesFromUserResponse({}));
     }
     /**
-     * Revokes scope permissions for a specified resource server from an account.
+     * Revokes the Scope permissions under a specified ResourceServer from an account.
      *
      * @param request - RevokeResourceServerScopesFromUserRequest
      * @returns RevokeResourceServerScopesFromUserResponse
@@ -13389,10 +13416,10 @@ class Client extends openapi_core_1.default {
         return await this.setApplicationResourceServerIdentifierWithOptions(request, runtime);
     }
     /**
-     * Sets the single sign-on (SSO) properties for an IDaaS application.
+     * Sets the single sign-on (SSO) configuration properties for an EIAM application.
      *
      * @remarks
-     * In IDaaS, the Application Management feature lets you add applications that use various SSO protocols, such as SAML 2.0 and OpenID Connect (OIDC). However, each application can support only one SSO protocol. The protocol is specified during application creation and cannot be changed afterward. You must configure the SSO parameters according to the protocol that your application uses.
+     * In EIAM, application management supports adding applications that use multiple single sign-on (SSO) protocols (SAML 2.0 and OIDC). However, each application supports only one SSO protocol, which is specified during creation and cannot be changed. Specify the corresponding SSO configuration property parameters based on the SSO protocol type supported by the application.
      *
      * @param request - SetApplicationSsoConfigRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -13439,10 +13466,10 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.SetApplicationSsoConfigResponse({}));
     }
     /**
-     * Sets the single sign-on (SSO) properties for an IDaaS application.
+     * Sets the single sign-on (SSO) configuration properties for an EIAM application.
      *
      * @remarks
-     * In IDaaS, the Application Management feature lets you add applications that use various SSO protocols, such as SAML 2.0 and OpenID Connect (OIDC). However, each application can support only one SSO protocol. The protocol is specified during application creation and cannot be changed afterward. You must configure the SSO parameters according to the protocol that your application uses.
+     * In EIAM, application management supports adding applications that use multiple single sign-on (SSO) protocols (SAML 2.0 and OIDC). However, each application supports only one SSO protocol, which is specified during creation and cannot be changed. Specify the corresponding SSO configuration property parameters based on the SSO protocol type supported by the application.
      *
      * @param request - SetApplicationSsoConfigRequest
      * @returns SetApplicationSsoConfigResponse
@@ -14328,7 +14355,7 @@ class Client extends openapi_core_1.default {
         return await this.unlockUserWithOptions(request, runtime);
     }
     /**
-     * Updates the advanced configuration of an application.
+     * Modifies the advanced configuration of an application.
      *
      * @param request - UpdateApplicationAdvancedConfigRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -14363,7 +14390,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateApplicationAdvancedConfigResponse({}));
     }
     /**
-     * Updates the advanced configuration of an application.
+     * Modifies the advanced configuration of an application.
      *
      * @param request - UpdateApplicationAdvancedConfigRequest
      * @returns UpdateApplicationAdvancedConfigResponse
@@ -14418,7 +14445,7 @@ class Client extends openapi_core_1.default {
         return await this.updateApplicationAuthorizationTypeWithOptions(request, runtime);
     }
     /**
-     * Updates the expiration time of a specified client secret for an application.
+     * Updates the expiration time of a specified ClientSecret for an application.
      *
      * @param request - UpdateApplicationClientSecretExpirationTimeRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -14456,7 +14483,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateApplicationClientSecretExpirationTimeResponse({}));
     }
     /**
-     * Updates the expiration time of a specified client secret for an application.
+     * Updates the expiration time of a specified ClientSecret for an application.
      *
      * @param request - UpdateApplicationClientSecretExpirationTimeRequest
      * @returns UpdateApplicationClientSecretExpirationTimeResponse
@@ -14511,7 +14538,7 @@ class Client extends openapi_core_1.default {
         return await this.updateApplicationDescriptionWithOptions(request, runtime);
     }
     /**
-     * Updates an application\\"s federated credential.
+     * Updates a federated credential for an application.
      *
      * @param request - UpdateApplicationFederatedCredentialRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -14532,6 +14559,12 @@ class Client extends openapi_core_1.default {
         if (!$dara.isNull(request.instanceId)) {
             query["InstanceId"] = request.instanceId;
         }
+        if (!$dara.isNull(request.oidcVerificationConfig)) {
+            query["OidcVerificationConfig"] = request.oidcVerificationConfig;
+        }
+        if (!$dara.isNull(request.pkcs7VerificationConfig)) {
+            query["Pkcs7VerificationConfig"] = request.pkcs7VerificationConfig;
+        }
         if (!$dara.isNull(request.verificationCondition)) {
             query["VerificationCondition"] = request.verificationCondition;
         }
@@ -14552,7 +14585,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateApplicationFederatedCredentialResponse({}));
     }
     /**
-     * Updates an application\\"s federated credential.
+     * Updates a federated credential for an application.
      *
      * @param request - UpdateApplicationFederatedCredentialRequest
      * @returns UpdateApplicationFederatedCredentialResponse
@@ -14610,7 +14643,7 @@ class Client extends openapi_core_1.default {
         return await this.updateApplicationFederatedCredentialDescriptionWithOptions(request, runtime);
     }
     /**
-     * Updates the basic information for an application.
+     * Updates the basic information of an application.
      *
      * @param request - UpdateApplicationInfoRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -14660,7 +14693,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateApplicationInfoResponse({}));
     }
     /**
-     * Updates the basic information for an application.
+     * Updates the basic information of an application.
      *
      * @param request - UpdateApplicationInfoRequest
      * @returns UpdateApplicationInfoResponse
@@ -14721,7 +14754,7 @@ class Client extends openapi_core_1.default {
         return await this.updateApplicationRoleWithOptions(request, runtime);
     }
     /**
-     * Updates the description of an application role.
+     * Modifies the description of an application role.
      *
      * @param request - UpdateApplicationRoleDescriptionRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -14759,7 +14792,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateApplicationRoleDescriptionResponse({}));
     }
     /**
-     * Updates the description of an application role.
+     * Modifies the description of an application role.
      *
      * @param request - UpdateApplicationRoleDescriptionRequest
      * @returns UpdateApplicationRoleDescriptionResponse
@@ -15608,7 +15641,7 @@ class Client extends openapi_core_1.default {
         return await this.updateCredentialWithOptions(request, runtime);
     }
     /**
-     * Update the description of a credential.
+     * Updates the description of a credential.
      *
      * @param request - UpdateCredentialDescriptionRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -15646,7 +15679,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateCredentialDescriptionResponse({}));
     }
     /**
-     * Update the description of a credential.
+     * Updates the description of a credential.
      *
      * @param request - UpdateCredentialDescriptionRequest
      * @returns UpdateCredentialDescriptionResponse
@@ -15896,7 +15929,7 @@ class Client extends openapi_core_1.default {
         return await this.updateDomainIcpNumberWithOptions(request, runtime);
     }
     /**
-     * Updates a federated credential provider.
+     * Updates a federated trust source.
      *
      * @param request - UpdateFederatedCredentialProviderRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -15943,7 +15976,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateFederatedCredentialProviderResponse({}));
     }
     /**
-     * Updates a federated credential provider.
+     * Updates a federated trust source.
      *
      * @param request - UpdateFederatedCredentialProviderRequest
      * @returns UpdateFederatedCredentialProviderResponse
@@ -15953,7 +15986,7 @@ class Client extends openapi_core_1.default {
         return await this.updateFederatedCredentialProviderWithOptions(request, runtime);
     }
     /**
-     * Updates the description of a federated credential provider.
+     * Updates the description of a federated trust source.
      *
      * @param request - UpdateFederatedCredentialProviderDescriptionRequest
      * @param runtime - runtime options for this request RuntimeOptions
@@ -15988,7 +16021,7 @@ class Client extends openapi_core_1.default {
         return $dara.cast(await this.callApi(params, req, runtime), new $_model.UpdateFederatedCredentialProviderDescriptionResponse({}));
     }
     /**
-     * Updates the description of a federated credential provider.
+     * Updates the description of a federated trust source.
      *
      * @param request - UpdateFederatedCredentialProviderDescriptionRequest
      * @returns UpdateFederatedCredentialProviderDescriptionResponse