@alicloud/eiam20211201 2.19.0 → 2.19.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/client.d.ts +40 -36
- package/dist/client.js +40 -45
- package/dist/client.js.map +1 -1
- package/dist/models/CheckInstanceModuleStatusRequest.d.ts +17 -3
- package/dist/models/CheckInstanceModuleStatusRequest.js.map +1 -1
- package/dist/models/CreateApplicationFederatedCredentialRequest.d.ts +61 -12
- package/dist/models/CreateApplicationFederatedCredentialRequest.js.map +1 -1
- package/dist/models/CreateApplicationFederatedCredentialResponseBody.d.ts +1 -1
- package/dist/models/CreateCloudAccountRequest.d.ts +1 -1
- package/dist/models/CreateIdentityProviderRequest.d.ts +165 -142
- package/dist/models/CreateIdentityProviderRequest.js.map +1 -1
- package/dist/models/CreateIdentityProviderResponseBody.d.ts +2 -2
- package/dist/models/CreateTrustedOriginRequest.d.ts +1 -1
- package/dist/models/GetApplicationFederatedCredentialResponseBody.d.ts +79 -12
- package/dist/models/GetApplicationFederatedCredentialResponseBody.js.map +1 -1
- package/dist/models/GetApplicationSsoConfigResponseBody.d.ts +85 -65
- package/dist/models/GetApplicationSsoConfigResponseBody.js +11 -0
- package/dist/models/GetApplicationSsoConfigResponseBody.js.map +1 -1
- package/dist/models/GetAuthorizationResourceResponseBody.d.ts +2 -2
- package/dist/models/GetAuthorizationRuleResponseBody.d.ts +8 -3
- package/dist/models/GetAuthorizationRuleResponseBody.js.map +1 -1
- package/dist/models/GetBrandRequest.d.ts +2 -2
- package/dist/models/GetBrandResponseBody.d.ts +23 -7
- package/dist/models/GetBrandResponseBody.js +4 -0
- package/dist/models/GetBrandResponseBody.js.map +1 -1
- package/dist/models/GetCloudAccountResponseBody.d.ts +38 -6
- package/dist/models/GetCloudAccountResponseBody.js.map +1 -1
- package/dist/models/GetCloudAccountRoleResponseBody.d.ts +9 -0
- package/dist/models/GetCloudAccountRoleResponseBody.js.map +1 -1
- package/dist/models/GetIdentityProviderResponseBody.d.ts +54 -65
- package/dist/models/GetIdentityProviderResponseBody.js.map +1 -1
- package/dist/models/ListApplicationFederatedCredentialsForProviderRequest.d.ts +3 -3
- package/dist/models/ListApplicationFederatedCredentialsForProviderResponseBody.d.ts +85 -15
- package/dist/models/ListApplicationFederatedCredentialsForProviderResponseBody.js.map +1 -1
- package/dist/models/ListApplicationFederatedCredentialsRequest.d.ts +3 -3
- package/dist/models/ListApplicationFederatedCredentialsResponseBody.d.ts +89 -19
- package/dist/models/ListApplicationFederatedCredentialsResponseBody.js.map +1 -1
- package/dist/models/ListAuthorizationResourcesRequest.d.ts +5 -5
- package/dist/models/ListAuthorizationResourcesResponseBody.d.ts +9 -9
- package/dist/models/ListAuthorizationRulesRequest.d.ts +2 -2
- package/dist/models/ListAuthorizationRulesResponseBody.d.ts +17 -12
- package/dist/models/ListAuthorizationRulesResponseBody.js.map +1 -1
- package/dist/models/ListBrandsRequest.d.ts +1 -1
- package/dist/models/ListBrandsResponseBody.d.ts +16 -0
- package/dist/models/ListBrandsResponseBody.js +4 -0
- package/dist/models/ListBrandsResponseBody.js.map +1 -1
- package/dist/models/ListCloudAccountRolesRequest.d.ts +5 -5
- package/dist/models/ListCloudAccountRolesResponseBody.d.ts +28 -19
- package/dist/models/ListCloudAccountRolesResponseBody.js.map +1 -1
- package/dist/models/ListCloudAccountsRequest.d.ts +1 -1
- package/dist/models/ListCloudAccountsResponseBody.d.ts +36 -11
- package/dist/models/ListCloudAccountsResponseBody.js.map +1 -1
- package/dist/models/ListEiamInstancesRequest.d.ts +1 -1
- package/dist/models/ListNetworkAccessEndpointsRequest.d.ts +6 -6
- package/dist/models/ListNetworkAccessEndpointsResponseBody.d.ts +44 -7
- package/dist/models/ListNetworkAccessEndpointsResponseBody.js.map +1 -1
- package/dist/models/SetApplicationSsoConfigRequest.d.ts +55 -31
- package/dist/models/SetApplicationSsoConfigRequest.js +9 -0
- package/dist/models/SetApplicationSsoConfigRequest.js.map +1 -1
- package/dist/models/UpdateApplicationFederatedCredentialRequest.d.ts +61 -6
- package/dist/models/UpdateApplicationFederatedCredentialRequest.js.map +1 -1
- package/dist/models/UpdateIdentityProviderRequest.d.ts +85 -51
- package/dist/models/UpdateIdentityProviderRequest.js.map +1 -1
- package/dist/models/UpdateIdentityProviderResponseBody.d.ts +1 -1
- package/package.json +1 -1
- package/src/client.ts +40 -45
- package/src/models/CheckInstanceModuleStatusRequest.ts +17 -3
- package/src/models/CreateApplicationFederatedCredentialRequest.ts +61 -12
- package/src/models/CreateApplicationFederatedCredentialResponseBody.ts +1 -1
- package/src/models/CreateCloudAccountRequest.ts +1 -1
- package/src/models/CreateIdentityProviderRequest.ts +165 -142
- package/src/models/CreateIdentityProviderResponseBody.ts +2 -2
- package/src/models/CreateTrustedOriginRequest.ts +1 -1
- package/src/models/GetApplicationFederatedCredentialResponseBody.ts +79 -12
- package/src/models/GetApplicationSsoConfigResponseBody.ts +96 -65
- package/src/models/GetAuthorizationResourceResponseBody.ts +2 -2
- package/src/models/GetAuthorizationRuleResponseBody.ts +8 -3
- package/src/models/GetBrandRequest.ts +2 -2
- package/src/models/GetBrandResponseBody.ts +27 -7
- package/src/models/GetCloudAccountResponseBody.ts +38 -6
- package/src/models/GetCloudAccountRoleResponseBody.ts +9 -0
- package/src/models/GetIdentityProviderResponseBody.ts +54 -65
- package/src/models/ListApplicationFederatedCredentialsForProviderRequest.ts +3 -3
- package/src/models/ListApplicationFederatedCredentialsForProviderResponseBody.ts +85 -15
- package/src/models/ListApplicationFederatedCredentialsRequest.ts +3 -3
- package/src/models/ListApplicationFederatedCredentialsResponseBody.ts +89 -19
- package/src/models/ListAuthorizationResourcesRequest.ts +5 -5
- package/src/models/ListAuthorizationResourcesResponseBody.ts +9 -9
- package/src/models/ListAuthorizationRulesRequest.ts +2 -2
- package/src/models/ListAuthorizationRulesResponseBody.ts +17 -12
- package/src/models/ListBrandsRequest.ts +1 -1
- package/src/models/ListBrandsResponseBody.ts +20 -0
- package/src/models/ListCloudAccountRolesRequest.ts +5 -5
- package/src/models/ListCloudAccountRolesResponseBody.ts +28 -19
- package/src/models/ListCloudAccountsRequest.ts +1 -1
- package/src/models/ListCloudAccountsResponseBody.ts +36 -11
- package/src/models/ListEiamInstancesRequest.ts +1 -1
- package/src/models/ListNetworkAccessEndpointsRequest.ts +6 -6
- package/src/models/ListNetworkAccessEndpointsResponseBody.ts +44 -7
- package/src/models/SetApplicationSsoConfigRequest.ts +64 -31
- package/src/models/UpdateApplicationFederatedCredentialRequest.ts +61 -6
- package/src/models/UpdateIdentityProviderRequest.ts +85 -51
- package/src/models/UpdateIdentityProviderResponseBody.ts +1 -1
|
@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
|
|
|
5
5
|
export class GetBrandResponseBodyBrand extends $dara.Model {
|
|
6
6
|
/**
|
|
7
7
|
* @remarks
|
|
8
|
-
*
|
|
8
|
+
* The brand ID.
|
|
9
9
|
*
|
|
10
10
|
* @example
|
|
11
11
|
* brand_xxxx
|
|
@@ -13,7 +13,7 @@ export class GetBrandResponseBodyBrand extends $dara.Model {
|
|
|
13
13
|
brandId?: string;
|
|
14
14
|
/**
|
|
15
15
|
* @remarks
|
|
16
|
-
*
|
|
16
|
+
* The brand name.
|
|
17
17
|
*
|
|
18
18
|
* @example
|
|
19
19
|
* Custom Brand
|
|
@@ -21,7 +21,7 @@ export class GetBrandResponseBodyBrand extends $dara.Model {
|
|
|
21
21
|
brandName?: string;
|
|
22
22
|
/**
|
|
23
23
|
* @remarks
|
|
24
|
-
*
|
|
24
|
+
* The brand type.
|
|
25
25
|
*
|
|
26
26
|
* @example
|
|
27
27
|
* user_custom
|
|
@@ -29,7 +29,7 @@ export class GetBrandResponseBodyBrand extends $dara.Model {
|
|
|
29
29
|
brandType?: string;
|
|
30
30
|
/**
|
|
31
31
|
* @remarks
|
|
32
|
-
*
|
|
32
|
+
* The instance ID.
|
|
33
33
|
*
|
|
34
34
|
* @example
|
|
35
35
|
* idaas_ue2jvisn35ea5lmthk267xxxxx
|
|
@@ -37,19 +37,37 @@ export class GetBrandResponseBodyBrand extends $dara.Model {
|
|
|
37
37
|
instanceId?: string;
|
|
38
38
|
/**
|
|
39
39
|
* @remarks
|
|
40
|
-
*
|
|
40
|
+
* The SMS gateway ID.
|
|
41
|
+
*
|
|
42
|
+
* @example
|
|
43
|
+
* smsgw_01l9f0kunrrjhxxx
|
|
44
|
+
*/
|
|
45
|
+
smsGatewayId?: string;
|
|
46
|
+
/**
|
|
47
|
+
* @remarks
|
|
48
|
+
* The brand status.
|
|
41
49
|
*
|
|
42
50
|
* @example
|
|
43
51
|
* enabled
|
|
44
52
|
*/
|
|
45
53
|
status?: string;
|
|
54
|
+
/**
|
|
55
|
+
* @remarks
|
|
56
|
+
* The enabling status of system notifications.
|
|
57
|
+
*
|
|
58
|
+
* @example
|
|
59
|
+
* enabled
|
|
60
|
+
*/
|
|
61
|
+
systemNotificationStatus?: string;
|
|
46
62
|
static names(): { [key: string]: string } {
|
|
47
63
|
return {
|
|
48
64
|
brandId: 'BrandId',
|
|
49
65
|
brandName: 'BrandName',
|
|
50
66
|
brandType: 'BrandType',
|
|
51
67
|
instanceId: 'InstanceId',
|
|
68
|
+
smsGatewayId: 'SmsGatewayId',
|
|
52
69
|
status: 'Status',
|
|
70
|
+
systemNotificationStatus: 'SystemNotificationStatus',
|
|
53
71
|
};
|
|
54
72
|
}
|
|
55
73
|
|
|
@@ -59,7 +77,9 @@ export class GetBrandResponseBodyBrand extends $dara.Model {
|
|
|
59
77
|
brandName: 'string',
|
|
60
78
|
brandType: 'string',
|
|
61
79
|
instanceId: 'string',
|
|
80
|
+
smsGatewayId: 'string',
|
|
62
81
|
status: 'string',
|
|
82
|
+
systemNotificationStatus: 'string',
|
|
63
83
|
};
|
|
64
84
|
}
|
|
65
85
|
|
|
@@ -75,12 +95,12 @@ export class GetBrandResponseBodyBrand extends $dara.Model {
|
|
|
75
95
|
export class GetBrandResponseBody extends $dara.Model {
|
|
76
96
|
/**
|
|
77
97
|
* @remarks
|
|
78
|
-
*
|
|
98
|
+
* The brand.
|
|
79
99
|
*/
|
|
80
100
|
brand?: GetBrandResponseBodyBrand;
|
|
81
101
|
/**
|
|
82
102
|
* @remarks
|
|
83
|
-
*
|
|
103
|
+
* The request ID.
|
|
84
104
|
*
|
|
85
105
|
* @example
|
|
86
106
|
* 0441BD79-92F3-53AA-8657-F8CE4A2B912A
|
|
@@ -13,7 +13,7 @@ export class GetCloudAccountResponseBodyCloudAccountCloudAccountHealthCheckResul
|
|
|
13
13
|
errorCode?: string;
|
|
14
14
|
/**
|
|
15
15
|
* @remarks
|
|
16
|
-
* The error
|
|
16
|
+
* The error message.
|
|
17
17
|
*
|
|
18
18
|
* @example
|
|
19
19
|
* There is no permission.
|
|
@@ -45,7 +45,7 @@ export class GetCloudAccountResponseBodyCloudAccountCloudAccountHealthCheckResul
|
|
|
45
45
|
export class GetCloudAccountResponseBodyCloudAccountCloudAccountHealthCheckResult extends $dara.Model {
|
|
46
46
|
/**
|
|
47
47
|
* @remarks
|
|
48
|
-
* The error reason. This field
|
|
48
|
+
* The error reason. This field returns a value when the health check status is unhealthy.
|
|
49
49
|
*/
|
|
50
50
|
errorReason?: GetCloudAccountResponseBodyCloudAccountCloudAccountHealthCheckResultErrorReason;
|
|
51
51
|
/**
|
|
@@ -159,11 +159,17 @@ export class GetCloudAccountResponseBodyCloudAccountPrivilegeHostingError extend
|
|
|
159
159
|
/**
|
|
160
160
|
* @remarks
|
|
161
161
|
* The failure error code.
|
|
162
|
+
*
|
|
163
|
+
* @example
|
|
164
|
+
* Error
|
|
162
165
|
*/
|
|
163
166
|
errorCode?: string;
|
|
164
167
|
/**
|
|
165
168
|
* @remarks
|
|
166
169
|
* The failure message.
|
|
170
|
+
*
|
|
171
|
+
* @example
|
|
172
|
+
* test message
|
|
167
173
|
*/
|
|
168
174
|
errorMessage?: string;
|
|
169
175
|
static names(): { [key: string]: string } {
|
|
@@ -232,7 +238,7 @@ export class GetCloudAccountResponseBodyCloudAccount extends $dara.Model {
|
|
|
232
238
|
cloudAccountName?: string;
|
|
233
239
|
/**
|
|
234
240
|
* @remarks
|
|
235
|
-
* The identity provider configuration.
|
|
241
|
+
* The identity provider configuration information.
|
|
236
242
|
*/
|
|
237
243
|
cloudAccountProviderConfig?: GetCloudAccountResponseBodyCloudAccountCloudAccountProviderConfig;
|
|
238
244
|
/**
|
|
@@ -243,10 +249,22 @@ export class GetCloudAccountResponseBodyCloudAccount extends $dara.Model {
|
|
|
243
249
|
* idaas-eiam-oidc-provider
|
|
244
250
|
*/
|
|
245
251
|
cloudAccountProviderName?: string;
|
|
252
|
+
/**
|
|
253
|
+
* @remarks
|
|
254
|
+
* The cloud account role creation type.
|
|
255
|
+
*
|
|
256
|
+
* @example
|
|
257
|
+
* test
|
|
258
|
+
*/
|
|
246
259
|
cloudAccountRoleCreationType?: string;
|
|
247
260
|
/**
|
|
248
261
|
* @remarks
|
|
249
|
-
* The cloud account site.
|
|
262
|
+
* The cloud account site. Valid values:
|
|
263
|
+
* - china_mainland: The Chinese mainland.
|
|
264
|
+
* - global: Global.
|
|
265
|
+
*
|
|
266
|
+
* @example
|
|
267
|
+
* china_mainland
|
|
250
268
|
*/
|
|
251
269
|
cloudAccountSite?: string;
|
|
252
270
|
/**
|
|
@@ -295,12 +313,26 @@ export class GetCloudAccountResponseBodyCloudAccount extends $dara.Model {
|
|
|
295
313
|
privilegeHostingError?: GetCloudAccountResponseBodyCloudAccountPrivilegeHostingError;
|
|
296
314
|
/**
|
|
297
315
|
* @remarks
|
|
298
|
-
* The
|
|
316
|
+
* The hosting state of the cloud account. The default value is hosting_unmanaged. Valid values:
|
|
317
|
+
* - hosting_unmanaged: Unmanaged. The cloud account has not initiated hosting and is in the initial state.
|
|
318
|
+
* - hosting_pending: Hosting in progress. The hosting task has been submitted and is being executed asynchronously. Wait for the hosting process to complete before the final state is reached.
|
|
319
|
+
* - hosting_completed: Hosting completed. The cloud account hosting process was executed successfully. The related permission templates and hosting bindings have taken effect.
|
|
320
|
+
* - hosting_failed: Hosting failed. The hosting process encountered an exception. View the failure reason and re-initiate hosting.
|
|
321
|
+
* - hosting_removing: Removal in progress. The removal task has been submitted and is being executed asynchronously. Wait for the removal process to complete before the final state is reached.
|
|
322
|
+
* - hosting_remove_failed: Removal failed. The removal process encountered an exception. View the failure reason and re-initiate removal.
|
|
323
|
+
*
|
|
324
|
+
* @example
|
|
325
|
+
* hosting_unmanaged
|
|
299
326
|
*/
|
|
300
327
|
privilegeHostingState?: string;
|
|
301
328
|
/**
|
|
302
329
|
* @remarks
|
|
303
|
-
* The privilege switch status
|
|
330
|
+
* The privilege switch status. Valid values:
|
|
331
|
+
* - enabled: Enabled. The resource is active and can be used normally.
|
|
332
|
+
* - disabled: Disabled. The resource is deactivated and no longer takes effect. You can re-enable it to restore functionality.
|
|
333
|
+
*
|
|
334
|
+
* @example
|
|
335
|
+
* enabled
|
|
304
336
|
*/
|
|
305
337
|
privilegeStatus?: string;
|
|
306
338
|
/**
|
|
@@ -105,6 +105,15 @@ export class GetCloudAccountRoleResponseBodyCloudAccountRole extends $dara.Model
|
|
|
105
105
|
* ca_01kmegjc11qa1txxxxx
|
|
106
106
|
*/
|
|
107
107
|
cloudAccountId?: string;
|
|
108
|
+
/**
|
|
109
|
+
* @remarks
|
|
110
|
+
* The creation source. Valid values:
|
|
111
|
+
* - system_init: system-created. The role is automatically generated by the platform as a preset and typically cannot be modified or deleted.
|
|
112
|
+
* - user_custom: user-created. The role is manually created by a user and can be edited and managed throughout its lifecycle.
|
|
113
|
+
*
|
|
114
|
+
* @example
|
|
115
|
+
* user_custom
|
|
116
|
+
*/
|
|
108
117
|
cloudAccountRoleCreationType?: string;
|
|
109
118
|
/**
|
|
110
119
|
* @remarks
|
|
@@ -29,7 +29,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailDingtalkAppCon
|
|
|
29
29
|
corpId?: string;
|
|
30
30
|
/**
|
|
31
31
|
* @remarks
|
|
32
|
-
* The DingTalk QR code
|
|
32
|
+
* The DingTalk QR code login version.
|
|
33
33
|
*
|
|
34
34
|
* @example
|
|
35
35
|
* old_version
|
|
@@ -40,7 +40,6 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailDingtalkAppCon
|
|
|
40
40
|
* The DingTalk version. Valid values:
|
|
41
41
|
*
|
|
42
42
|
* - public_dingtalk: Standard DingTalk.
|
|
43
|
-
*
|
|
44
43
|
* - private_dingtalk: Dedicated DingTalk.
|
|
45
44
|
*
|
|
46
45
|
* @example
|
|
@@ -289,7 +288,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailEndpointMetada
|
|
|
289
288
|
export class GetIdentityProviderResponseBodyIdentityProviderDetailLarkConfig extends $dara.Model {
|
|
290
289
|
/**
|
|
291
290
|
* @remarks
|
|
292
|
-
* The
|
|
291
|
+
* The CorpId of the Lark custom application.
|
|
293
292
|
*
|
|
294
293
|
* @example
|
|
295
294
|
* cli_a7a99f53a317100c
|
|
@@ -297,7 +296,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailLarkConfig ext
|
|
|
297
296
|
appId?: string;
|
|
298
297
|
/**
|
|
299
298
|
* @remarks
|
|
300
|
-
* The AppSecret of the Lark
|
|
299
|
+
* The AppSecret of the Lark custom application.
|
|
301
300
|
*
|
|
302
301
|
* @example
|
|
303
302
|
* ***
|
|
@@ -305,7 +304,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailLarkConfig ext
|
|
|
305
304
|
appSecret?: string;
|
|
306
305
|
/**
|
|
307
306
|
* @remarks
|
|
308
|
-
* The EncryptKey of the Lark
|
|
307
|
+
* The EncryptKey of the Lark custom application.
|
|
309
308
|
*
|
|
310
309
|
* @example
|
|
311
310
|
* VkdWw91mdkrjVFr3ObNwefap21dfbZbK
|
|
@@ -321,7 +320,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailLarkConfig ext
|
|
|
321
320
|
enterpriseNumber?: string;
|
|
322
321
|
/**
|
|
323
322
|
* @remarks
|
|
324
|
-
* The VerificationToken of the Lark
|
|
323
|
+
* The VerificationToken of the Lark custom application.
|
|
325
324
|
*
|
|
326
325
|
* @example
|
|
327
326
|
* VkdWw91mdkrjVFr3ObNwefap21dfbZbK
|
|
@@ -375,11 +374,10 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailLdapConfig ext
|
|
|
375
374
|
administratorUsername?: string;
|
|
376
375
|
/**
|
|
377
376
|
* @remarks
|
|
378
|
-
*
|
|
379
|
-
*
|
|
380
|
-
* - disabled: Disabled.
|
|
377
|
+
* Indicates whether certificate fingerprint verification is enabled. Valid values:
|
|
381
378
|
*
|
|
382
|
-
* -
|
|
379
|
+
* - disabled
|
|
380
|
+
* - enabled
|
|
383
381
|
*
|
|
384
382
|
* @example
|
|
385
383
|
* enabled
|
|
@@ -416,11 +414,11 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailLdapConfig ext
|
|
|
416
414
|
ldapServerPort?: number;
|
|
417
415
|
/**
|
|
418
416
|
* @remarks
|
|
419
|
-
*
|
|
417
|
+
* Indicates whether StartTLS is enabled. Valid values:
|
|
420
418
|
*
|
|
421
|
-
* - disabled:
|
|
419
|
+
* - disabled: StartTLS is disabled.
|
|
422
420
|
*
|
|
423
|
-
* - enabled:
|
|
421
|
+
* - enabled: StartTLS is enabled.
|
|
424
422
|
*
|
|
425
423
|
* @example
|
|
426
424
|
* enabled
|
|
@@ -613,7 +611,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailOidcConfig ext
|
|
|
613
611
|
grantType?: string;
|
|
614
612
|
/**
|
|
615
613
|
* @remarks
|
|
616
|
-
* The PKCE
|
|
614
|
+
* The PKCE challenge method. Valid values:
|
|
617
615
|
*
|
|
618
616
|
* - S256: SHA-256.
|
|
619
617
|
*
|
|
@@ -625,7 +623,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailOidcConfig ext
|
|
|
625
623
|
pkceChallengeMethod?: string;
|
|
626
624
|
/**
|
|
627
625
|
* @remarks
|
|
628
|
-
*
|
|
626
|
+
* Indicates whether PKCE is used in the authorization code grant mode.
|
|
629
627
|
*
|
|
630
628
|
* @example
|
|
631
629
|
* true
|
|
@@ -674,7 +672,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailOidcConfig ext
|
|
|
674
672
|
export class GetIdentityProviderResponseBodyIdentityProviderDetailSamlConfigCertificatesCertificateMetadata extends $dara.Model {
|
|
675
673
|
/**
|
|
676
674
|
* @remarks
|
|
677
|
-
* The
|
|
675
|
+
* The date after which the certificate is not valid.
|
|
678
676
|
*
|
|
679
677
|
* @example
|
|
680
678
|
* 1704067200000
|
|
@@ -682,7 +680,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailSamlConfigCert
|
|
|
682
680
|
notAfter?: number;
|
|
683
681
|
/**
|
|
684
682
|
* @remarks
|
|
685
|
-
* The
|
|
683
|
+
* The date before which the certificate is not valid.
|
|
686
684
|
*
|
|
687
685
|
* @example
|
|
688
686
|
* 1672531200000
|
|
@@ -791,13 +789,21 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailSamlConfig ext
|
|
|
791
789
|
maxClockSkew?: number;
|
|
792
790
|
/**
|
|
793
791
|
* @remarks
|
|
794
|
-
*
|
|
792
|
+
* Indicates whether request signing is required.
|
|
795
793
|
*
|
|
796
794
|
* @example
|
|
797
795
|
* true
|
|
798
796
|
*/
|
|
799
797
|
requireRequestSigned?: boolean;
|
|
798
|
+
/**
|
|
799
|
+
* @remarks
|
|
800
|
+
* Indicates whether the external IdP is required to sign the Assertion.
|
|
801
|
+
*/
|
|
800
802
|
wantAssertionsSigned?: boolean;
|
|
803
|
+
/**
|
|
804
|
+
* @remarks
|
|
805
|
+
* Indicates whether the external IdP is required to sign the Response.
|
|
806
|
+
*/
|
|
801
807
|
wantResponseSigned?: boolean;
|
|
802
808
|
static names(): { [key: string]: string } {
|
|
803
809
|
return {
|
|
@@ -840,12 +846,12 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailSamlConfig ext
|
|
|
840
846
|
export class GetIdentityProviderResponseBodyIdentityProviderDetailUdPullConfigUdSyncScopeConfig extends $dara.Model {
|
|
841
847
|
/**
|
|
842
848
|
* @remarks
|
|
843
|
-
* The list of
|
|
849
|
+
* The list of source nodes for synchronization.
|
|
844
850
|
*/
|
|
845
851
|
sourceScopes?: string[];
|
|
846
852
|
/**
|
|
847
853
|
* @remarks
|
|
848
|
-
* The
|
|
854
|
+
* The target node for synchronization.
|
|
849
855
|
*
|
|
850
856
|
* @example
|
|
851
857
|
* ou_123xxxx
|
|
@@ -880,11 +886,11 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailUdPullConfigUd
|
|
|
880
886
|
export class GetIdentityProviderResponseBodyIdentityProviderDetailUdPullConfig extends $dara.Model {
|
|
881
887
|
/**
|
|
882
888
|
* @remarks
|
|
883
|
-
*
|
|
889
|
+
* Indicates whether group synchronization is enabled. Valid values:
|
|
884
890
|
*
|
|
885
|
-
* - disabled:
|
|
891
|
+
* - disabled: Group synchronization is disabled.
|
|
886
892
|
*
|
|
887
|
-
* - enabled:
|
|
893
|
+
* - enabled: Group synchronization is enabled.
|
|
888
894
|
*
|
|
889
895
|
* @example
|
|
890
896
|
* disabled
|
|
@@ -892,11 +898,11 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailUdPullConfig e
|
|
|
892
898
|
groupSyncStatus?: string;
|
|
893
899
|
/**
|
|
894
900
|
* @remarks
|
|
895
|
-
* The incremental callback status
|
|
901
|
+
* The incremental callback status, which indicates whether incremental callback data from the IdP is processed. Valid values:
|
|
896
902
|
*
|
|
897
|
-
* - disabled:
|
|
903
|
+
* - disabled: Incremental callback processing is disabled.
|
|
898
904
|
*
|
|
899
|
-
* - enabled:
|
|
905
|
+
* - enabled: Incremental callback processing is enabled.
|
|
900
906
|
*
|
|
901
907
|
* @example
|
|
902
908
|
* disabled
|
|
@@ -938,12 +944,12 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailUdPullConfig e
|
|
|
938
944
|
export class GetIdentityProviderResponseBodyIdentityProviderDetailUdPushConfigUdSyncScopeConfigs extends $dara.Model {
|
|
939
945
|
/**
|
|
940
946
|
* @remarks
|
|
941
|
-
* The list of
|
|
947
|
+
* The list of source nodes for synchronization.
|
|
942
948
|
*/
|
|
943
949
|
sourceScopes?: string[];
|
|
944
950
|
/**
|
|
945
951
|
* @remarks
|
|
946
|
-
* The
|
|
952
|
+
* The target node for synchronization.
|
|
947
953
|
*
|
|
948
954
|
* @example
|
|
949
955
|
* ou_123xxxx
|
|
@@ -1034,7 +1040,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailWeComConfig ex
|
|
|
1034
1040
|
authorizeCallbackDomain?: string;
|
|
1035
1041
|
/**
|
|
1036
1042
|
* @remarks
|
|
1037
|
-
* The
|
|
1043
|
+
* The corpId of the WeCom self-built application.
|
|
1038
1044
|
*
|
|
1039
1045
|
* @example
|
|
1040
1046
|
* 3562012953454577801
|
|
@@ -1042,7 +1048,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailWeComConfig ex
|
|
|
1042
1048
|
corpId?: string;
|
|
1043
1049
|
/**
|
|
1044
1050
|
* @remarks
|
|
1045
|
-
* The
|
|
1051
|
+
* The corpSecret of the WeCom self-built application.
|
|
1046
1052
|
*
|
|
1047
1053
|
* @example
|
|
1048
1054
|
* weaseiszjskejskaj12sjeszojxxxx
|
|
@@ -1088,11 +1094,10 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetailWeComConfig ex
|
|
|
1088
1094
|
export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara.Model {
|
|
1089
1095
|
/**
|
|
1090
1096
|
* @remarks
|
|
1091
|
-
* The advanced configuration
|
|
1092
|
-
*
|
|
1093
|
-
* - disabled: Disabled.
|
|
1097
|
+
* The advanced configuration capability. Valid values:
|
|
1094
1098
|
*
|
|
1095
|
-
* -
|
|
1099
|
+
* - disabled
|
|
1100
|
+
* - enabled
|
|
1096
1101
|
*
|
|
1097
1102
|
* @example
|
|
1098
1103
|
* disabled
|
|
@@ -1103,19 +1108,12 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1103
1108
|
* The authentication source product, such as Okta, Google, or Azure AD. Valid values:
|
|
1104
1109
|
*
|
|
1105
1110
|
* - urn:alibaba:idaas:idp:alibaba:dingtalk: DingTalk.
|
|
1106
|
-
*
|
|
1107
1111
|
* - urn:alibaba:idaas:idp:unknown:ldap: LDAP.
|
|
1108
|
-
*
|
|
1109
1112
|
* - urn:alibaba:idaas:idp:alibaba:idaas: Alibaba Cloud IDaaS.
|
|
1110
|
-
*
|
|
1111
1113
|
* - urn:alibaba:idaas:idp:tencent:wecom: WeCom.
|
|
1112
|
-
*
|
|
1113
1114
|
* - urn:alibaba:idaas:idp:bytedance:lark: Lark.
|
|
1114
|
-
*
|
|
1115
1115
|
* - urn:alibaba:idaas:idp:microsoft:ad: Active Directory.
|
|
1116
|
-
*
|
|
1117
1116
|
* - urn:alibaba:idaas:idp:microsoft:aad: Azure Active Directory.
|
|
1118
|
-
*
|
|
1119
1117
|
* - urn:alibaba:idaas:idp:alibaba:sase: Alibaba Cloud SASE.
|
|
1120
1118
|
*
|
|
1121
1119
|
* @example
|
|
@@ -1124,10 +1122,9 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1124
1122
|
authnSourceSupplier?: string;
|
|
1125
1123
|
/**
|
|
1126
1124
|
* @remarks
|
|
1127
|
-
* The authentication
|
|
1125
|
+
* The authentication type, OIDC or SAML. Valid values:
|
|
1128
1126
|
*
|
|
1129
1127
|
* - urn:alibaba:idaas:authntype:oidc: OIDC.
|
|
1130
|
-
*
|
|
1131
1128
|
* - urn:alibaba:idaas:authntype:saml2: SAML.
|
|
1132
1129
|
*
|
|
1133
1130
|
* @example
|
|
@@ -1136,11 +1133,10 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1136
1133
|
authnSourceType?: string;
|
|
1137
1134
|
/**
|
|
1138
1135
|
* @remarks
|
|
1139
|
-
*
|
|
1140
|
-
*
|
|
1141
|
-
* - disabled: Disabled.
|
|
1136
|
+
* Indicates whether the corresponding IdP supports authentication. Valid values:
|
|
1142
1137
|
*
|
|
1143
|
-
* -
|
|
1138
|
+
* - disabled
|
|
1139
|
+
* - enabled
|
|
1144
1140
|
*
|
|
1145
1141
|
* @example
|
|
1146
1142
|
* disabled
|
|
@@ -1156,7 +1152,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1156
1152
|
createTime?: number;
|
|
1157
1153
|
/**
|
|
1158
1154
|
* @remarks
|
|
1159
|
-
* The
|
|
1155
|
+
* The identity provider description.
|
|
1160
1156
|
*
|
|
1161
1157
|
* @example
|
|
1162
1158
|
* for poc test
|
|
@@ -1169,7 +1165,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1169
1165
|
dingtalkAppConfig?: GetIdentityProviderResponseBodyIdentityProviderDetailDingtalkAppConfig;
|
|
1170
1166
|
/**
|
|
1171
1167
|
* @remarks
|
|
1172
|
-
* The DingTalk
|
|
1168
|
+
* The DingTalk provisioning configuration. This value is returned only for the DingTalk type.
|
|
1173
1169
|
*/
|
|
1174
1170
|
dingtalkProvisioningConfig?: GetIdentityProviderResponseBodyIdentityProviderDetailDingtalkProvisioningConfig;
|
|
1175
1171
|
/**
|
|
@@ -1195,7 +1191,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1195
1191
|
identityProviderId?: string;
|
|
1196
1192
|
/**
|
|
1197
1193
|
* @remarks
|
|
1198
|
-
* The
|
|
1194
|
+
* The identity provider name.
|
|
1199
1195
|
*
|
|
1200
1196
|
* @example
|
|
1201
1197
|
* test
|
|
@@ -1203,22 +1199,15 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1203
1199
|
identityProviderName?: string;
|
|
1204
1200
|
/**
|
|
1205
1201
|
* @remarks
|
|
1206
|
-
* The synchronization type
|
|
1202
|
+
* The identity provider synchronization type. Valid values:
|
|
1207
1203
|
*
|
|
1208
1204
|
* - urn:alibaba:idaas:idp:alibaba:dingtalk:pull: Inbound DingTalk.
|
|
1209
|
-
*
|
|
1210
1205
|
* - urn:alibaba:idaas:idp:alibaba:dingtalk:push: Outbound DingTalk.
|
|
1211
|
-
*
|
|
1212
1206
|
* - urn:alibaba:idaas:idp:tencent:wecom:pull: Inbound WeCom.
|
|
1213
|
-
*
|
|
1214
1207
|
* - urn:alibaba:idaas:idp:bytedance:lark:pull: Inbound Lark.
|
|
1215
|
-
*
|
|
1216
1208
|
* - urn:alibaba:idaas:idp:microsoft:ad:pull: Inbound AD.
|
|
1217
|
-
*
|
|
1218
1209
|
* - urn:alibaba:idaas:idp:unknown:ldap:pull: Inbound LDAP.
|
|
1219
|
-
*
|
|
1220
1210
|
* - urn:alibaba:idaas:idp:standard:oidc: Standard OIDC.
|
|
1221
|
-
*
|
|
1222
1211
|
* - urn:alibaba:idaas:idp:alibaba:sase: SASE custom OIDC.
|
|
1223
1212
|
*
|
|
1224
1213
|
* @example
|
|
@@ -1248,7 +1237,7 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1248
1237
|
lastStatusCheckJobResult?: string;
|
|
1249
1238
|
/**
|
|
1250
1239
|
* @remarks
|
|
1251
|
-
* The AD/LDAP identity provider
|
|
1240
|
+
* The AD/LDAP identity provider information.
|
|
1252
1241
|
*/
|
|
1253
1242
|
ldapConfig?: GetIdentityProviderResponseBodyIdentityProviderDetailLdapConfig;
|
|
1254
1243
|
/**
|
|
@@ -1292,11 +1281,11 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1292
1281
|
udPullConfig?: GetIdentityProviderResponseBodyIdentityProviderDetailUdPullConfig;
|
|
1293
1282
|
/**
|
|
1294
1283
|
* @remarks
|
|
1295
|
-
*
|
|
1284
|
+
* Indicates whether inbound synchronization is supported. Valid values:
|
|
1296
1285
|
*
|
|
1297
|
-
* - disabled:
|
|
1286
|
+
* - disabled: Inbound synchronization is disabled.
|
|
1298
1287
|
*
|
|
1299
|
-
* - enabled:
|
|
1288
|
+
* - enabled: Inbound synchronization is enabled.
|
|
1300
1289
|
*
|
|
1301
1290
|
* @example
|
|
1302
1291
|
* disabled
|
|
@@ -1309,11 +1298,11 @@ export class GetIdentityProviderResponseBodyIdentityProviderDetail extends $dara
|
|
|
1309
1298
|
udPushConfig?: GetIdentityProviderResponseBodyIdentityProviderDetailUdPushConfig;
|
|
1310
1299
|
/**
|
|
1311
1300
|
* @remarks
|
|
1312
|
-
*
|
|
1301
|
+
* Indicates whether outbound synchronization is enabled. Valid values:
|
|
1313
1302
|
*
|
|
1314
|
-
* - disabled:
|
|
1303
|
+
* - disabled: Outbound synchronization is disabled.
|
|
1315
1304
|
*
|
|
1316
|
-
* - enabled:
|
|
1305
|
+
* - enabled: Outbound synchronization is enabled.
|
|
1317
1306
|
*
|
|
1318
1307
|
* @example
|
|
1319
1308
|
* disabled
|
|
@@ -23,7 +23,7 @@ export class ListApplicationFederatedCredentialsForProviderRequest extends $dara
|
|
|
23
23
|
instanceId?: string;
|
|
24
24
|
/**
|
|
25
25
|
* @remarks
|
|
26
|
-
* The maximum number of entries
|
|
26
|
+
* The maximum number of entries per page for a paged query.
|
|
27
27
|
*
|
|
28
28
|
* @example
|
|
29
29
|
* 20
|
|
@@ -31,7 +31,7 @@ export class ListApplicationFederatedCredentialsForProviderRequest extends $dara
|
|
|
31
31
|
maxResults?: number;
|
|
32
32
|
/**
|
|
33
33
|
* @remarks
|
|
34
|
-
* The pagination token.
|
|
34
|
+
* The pagination token for the next page.
|
|
35
35
|
*
|
|
36
36
|
* @example
|
|
37
37
|
* NTxxxxxexample
|
|
@@ -39,7 +39,7 @@ export class ListApplicationFederatedCredentialsForProviderRequest extends $dara
|
|
|
39
39
|
nextToken?: string;
|
|
40
40
|
/**
|
|
41
41
|
* @remarks
|
|
42
|
-
* The token
|
|
42
|
+
* The pagination token for the previous page.
|
|
43
43
|
*
|
|
44
44
|
* @example
|
|
45
45
|
* PTxxxxxexample
|