@descope/pulumi-descope 0.0.2 → 0.0.4

package/types/output.d.ts

@@ -1,84 +1,207 @@
 import * as outputs from "../types/output";
 export interface ProjectApplications {
-    oidcs: outputs.ProjectApplicationsOidc[];
-    samls: outputs.ProjectApplicationsSaml[];
-}
-export interface ProjectApplicationsOidc {
+    /**
+     * Applications using OpenID Connect (OIDC) for authentication.
+     */
+    oidcApplications: outputs.ProjectApplicationsOidcApplication[];
+    /**
+     * Applications using SAML for authentication.
+     */
+    samlApplications: outputs.ProjectApplicationsSamlApplication[];
+}
+export interface ProjectApplicationsOidcApplication {
+    /**
+     * Claims associated with JWT tokens, typically used for user information.
+     */
     claims: string[];
+    /**
+     * A brief description of the application.
+     */
     description: string;
+    /**
+     * Indicates whether the resource or functionality is disabled.
+     */
     disabled: boolean;
+    /**
+     * An optional identifier for the application.
+     */
     id: string;
+    /**
+     * The URL of the custom login page for the application.
+     */
     loginPageUrl: string;
+    /**
+     * The URL of the logo associated with the application.
+     */
     logo: string;
+    /**
+     * The name of the application.
+     */
     name: string;
 }
-export interface ProjectApplicationsSaml {
+export interface ProjectApplicationsSamlApplication {
     acsAllowedCallbackUrls: string[];
-    attributeMappings: outputs.ProjectApplicationsSamlAttributeMapping[];
+    /**
+     * Map user attributes from the third party identity provider to custom attributes in Descope.
+     */
+    attributeMappings: outputs.ProjectApplicationsSamlApplicationAttributeMapping[];
     defaultRelayState: string;
+    /**
+     * A brief description of the application.
+     */
     description: string;
+    /**
+     * Indicates whether the application is disabled.
+     */
     disabled: boolean;
-    dynamicConfiguration: outputs.ProjectApplicationsSamlDynamicConfiguration;
+    dynamicConfiguration: outputs.ProjectApplicationsSamlApplicationDynamicConfiguration;
+    /**
+     * An optional identifier for the application.
+     */
     id: string;
+    /**
+     * The URL of the custom login page for the application.
+     */
     loginPageUrl: string;
+    /**
+     * The URL of the logo associated with the application.
+     */
     logo: string;
-    manualConfiguration: outputs.ProjectApplicationsSamlManualConfiguration;
+    manualConfiguration: outputs.ProjectApplicationsSamlApplicationManualConfiguration;
+    /**
+     * The name of the application.
+     */
     name: string;
     subjectNameIdFormat: string;
     subjectNameIdType: string;
 }
-export interface ProjectApplicationsSamlAttributeMapping {
+export interface ProjectApplicationsSamlApplicationAttributeMapping {
+    /**
+     * The name of the user attribute in the third party identity provider.
+     */
     name: string;
+    /**
+     * The name of the user custom attribute in Descope.
+     */
     value: string;
 }
-export interface ProjectApplicationsSamlDynamicConfiguration {
+export interface ProjectApplicationsSamlApplicationDynamicConfiguration {
     metadataUrl: string;
 }
-export interface ProjectApplicationsSamlManualConfiguration {
+export interface ProjectApplicationsSamlApplicationManualConfiguration {
     acsUrl: string;
     certificate: string;
     entityId: string;
 }
 export interface ProjectAttributes {
+    /**
+     * Custom attributes to store additional details about your tenants.
+     */
     tenants: outputs.ProjectAttributesTenant[];
+    /**
+     * Custom attributes to store additional details about your users.
+     */
     users: outputs.ProjectAttributesUser[];
 }
 export interface ProjectAttributesTenant {
+    /**
+     * The name of the tenant attribute.
+     */
     name: string;
+    /**
+     * A list of strings to define the set of options for select attributes.
+     */
     selectOptions: string[];
+    /**
+     * The type of the tenant attribute. Valid valus are `string`, `number`, `boolean`, `date`, `singleselect`, and `multiselect`.
+     */
     type: string;
 }
 export interface ProjectAttributesUser {
+    /**
+     * The name of the user attribute.
+     */
     name: string;
+    /**
+     * A list of strings to define the set of options for select attributes.
+     */
     selectOptions: string[];
+    /**
+     * The type of the user attribute. Valid valus are `string`, `number`, `boolean`, `date`, `singleselect`, and `multiselect`.
+     */
     type: string;
+    /**
+     * When provided, viewing and editing the attribute values in widgets will be restricted to users with the specified permissions.
+     */
     widgetAuthorization: outputs.ProjectAttributesUserWidgetAuthorization;
 }
 export interface ProjectAttributesUserWidgetAuthorization {
+    /**
+     * Editing the attribute value in widgets will be restricted to users with the specified permissions.
+     */
     editPermissions: string[];
+    /**
+     * Viewing the attribute value in widgets will be restricted to users with the specified permissions.
+     */
     viewPermissions: string[];
 }
 export interface ProjectAuthentication {
+    /**
+     * Make the authentication experience smoother for the user by generating their initial token in a way that does not require the end user to initiate the process, requiring only verification.
+     */
     embeddedLink: outputs.ProjectAuthenticationEmbeddedLink;
+    /**
+     * An enhanced and more secure version of Magic Link, enabling users to start the authentication process on one device and execute the verification on another.
+     */
     enchantedLink: outputs.ProjectAuthenticationEnchantedLink;
+    /**
+     * An authentication method where a user receives a unique link via email to log in.
+     */
     magicLink: outputs.ProjectAuthenticationMagicLink;
+    /**
+     * Authentication using Open Authorization, which allows users to authenticate with various external services.
+     */
     oauth: outputs.ProjectAuthenticationOauth;
+    /**
+     * A dynamically generated set of numbers, granting the user one-time access.
+     */
     otp: outputs.ProjectAuthenticationOtp;
+    /**
+     * Device-based passwordless authentication, using fingerprint, face scan, and more.
+     */
+    passkeys: outputs.ProjectAuthenticationPasskeys;
+    /**
+     * The classic username and password combination used for authentication.
+     */
     password: outputs.ProjectAuthenticationPassword;
+    /**
+     * Single Sign-On (SSO) authentication method that enables users to access multiple applications with a single set of credentials.
+     */
     sso: outputs.ProjectAuthenticationSso;
+    /**
+     * A one-time code generated for the user using a shared secret and time.
+     */
     totp: outputs.ProjectAuthenticationTotp;
-    webauthn: outputs.ProjectAuthenticationWebauthn;
 }
 export interface ProjectAuthenticationEmbeddedLink {
     enabled: boolean;
+    /**
+     * The amount of time that the embedded link will be valid for.
+     */
     expirationTime: number;
     expirationTimeUnit: string;
 }
 export interface ProjectAuthenticationEnchantedLink {
+    /**
+     * Settings related to sending emails as part of the enchanted link authentication.
+     */
     emailService: outputs.ProjectAuthenticationEnchantedLinkEmailService;
     enabled: boolean;
     expirationTime: number;
     expirationTimeUnit: string;
+    /**
+     * The URL to redirect users to after they log in using the enchanted link.
+     */
     redirectUrl: string;
 }
 export interface ProjectAuthenticationEnchantedLinkEmailService {
@@ -95,11 +218,20 @@ export interface ProjectAuthenticationEnchantedLinkEmailServiceTemplate {
     usePlainTextBody: boolean;
 }
 export interface ProjectAuthenticationMagicLink {
+    /**
+     * Settings related to sending emails as part of the magic link authentication.
+     */
     emailService: outputs.ProjectAuthenticationMagicLinkEmailService;
     enabled: boolean;
     expirationTime: number;
     expirationTimeUnit: string;
+    /**
+     * The URL to redirect users to after they log in using the magic link.
+     */
     redirectUrl: string;
+    /**
+     * Settings related to sending SMS messages as part of the magic link authentication.
+     */
     textService: outputs.ProjectAuthenticationMagicLinkTextService;
 }
 export interface ProjectAuthenticationMagicLinkEmailService {
@@ -126,30 +258,75 @@ export interface ProjectAuthenticationMagicLinkTextServiceTemplate {
     name: string;
 }
 export interface ProjectAuthenticationOauth {
+    /**
+     * Custom OAuth providers configured for this project.
+     */
     custom: {
         [key: string]: outputs.ProjectAuthenticationOauthCustom;
     };
     disabled: boolean;
+    /**
+     * Custom configurations for builtin OAuth providers such as Apple, Google, GitHub, Facebook, etc.
+     */
     system: outputs.ProjectAuthenticationOauthSystem;
 }
 export interface ProjectAuthenticationOauthCustom {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthCustomProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthCustomProviderTokenManagement {
@@ -157,34 +334,100 @@ export interface ProjectAuthenticationOauthCustomProviderTokenManagement {
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystem {
+    /**
+     * Apple's OAuth provider, allowing users to authenticate with their Apple Account.
+     */
     apple: outputs.ProjectAuthenticationOauthSystemApple;
+    /**
+     * Discord's OAuth provider, allowing users to authenticate with their Discord account.
+     */
     discord: outputs.ProjectAuthenticationOauthSystemDiscord;
+    /**
+     * Facebook's OAuth provider, allowing users to authenticate with their Facebook account.
+     */
     facebook: outputs.ProjectAuthenticationOauthSystemFacebook;
+    /**
+     * GitHub's OAuth provider, allowing users to authenticate with their GitHub account.
+     */
     github: outputs.ProjectAuthenticationOauthSystemGithub;
+    /**
+     * GitLab's OAuth provider, allowing users to authenticate with their GitLab account.
+     */
     gitlab: outputs.ProjectAuthenticationOauthSystemGitlab;
+    /**
+     * Google's OAuth provider, allowing users to authenticate with their Google account.
+     */
     google: outputs.ProjectAuthenticationOauthSystemGoogle;
+    /**
+     * LinkedIn's OAuth provider, allowing users to authenticate with their LinkedIn account.
+     */
     linkedin: outputs.ProjectAuthenticationOauthSystemLinkedin;
+    /**
+     * Microsoft's OAuth provider, allowing users to authenticate with their Microsoft account.
+     */
     microsoft: outputs.ProjectAuthenticationOauthSystemMicrosoft;
+    /**
+     * Slack's OAuth provider, allowing users to authenticate with their Slack account.
+     */
     slack: outputs.ProjectAuthenticationOauthSystemSlack;
 }
 export interface ProjectAuthenticationOauthSystemApple {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemAppleProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemAppleProviderTokenManagement {
@@ -192,23 +435,62 @@ export interface ProjectAuthenticationOauthSystemAppleProviderTokenManagement {
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystemDiscord {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemDiscordProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemDiscordProviderTokenManagement {
@@ -216,23 +498,62 @@ export interface ProjectAuthenticationOauthSystemDiscordProviderTokenManagement
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystemFacebook {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemFacebookProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemFacebookProviderTokenManagement {
@@ -240,23 +561,62 @@ export interface ProjectAuthenticationOauthSystemFacebookProviderTokenManagement
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystemGithub {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemGithubProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemGithubProviderTokenManagement {
@@ -264,23 +624,62 @@ export interface ProjectAuthenticationOauthSystemGithubProviderTokenManagement {
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystemGitlab {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemGitlabProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemGitlabProviderTokenManagement {
@@ -288,23 +687,62 @@ export interface ProjectAuthenticationOauthSystemGitlabProviderTokenManagement {
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystemGoogle {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemGoogleProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemGoogleProviderTokenManagement {
@@ -312,23 +750,62 @@ export interface ProjectAuthenticationOauthSystemGoogleProviderTokenManagement {
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystemLinkedin {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemLinkedinProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemLinkedinProviderTokenManagement {
@@ -336,23 +813,62 @@ export interface ProjectAuthenticationOauthSystemLinkedinProviderTokenManagement
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystemMicrosoft {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemMicrosoftProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemMicrosoftProviderTokenManagement {
@@ -360,23 +876,62 @@ export interface ProjectAuthenticationOauthSystemMicrosoftProviderTokenManagemen
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOauthSystemSlack {
+    /**
+     * The URL that users are redirected to for authorization with the OAuth provider.
+     */
     authorizationEndpoint: string;
     claimMapping: {
         [key: string]: string;
     };
+    /**
+     * The client ID for the OAuth provider, used to identify the application to the provider.
+     */
     clientId: string;
+    /**
+     * The client secret for the OAuth provider, used to authenticate the application with the provider.
+     */
     clientSecret: string;
+    /**
+     * A brief description of the OAuth provider.
+     */
     description: string;
     disabled: boolean;
+    /**
+     * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
+     */
     grantType: string;
     issuer: string;
+    /**
+     * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
+     */
     jwksEndpoint: string;
+    /**
+     * The URL of the logo associated with the OAuth provider.
+     */
     logo: string;
+    /**
+     * Whether to merge existing user accounts with new ones created through OAuth authentication.
+     */
     mergeUserAccounts: boolean;
+    /**
+     * Custom prompts or consent screens that users may see during OAuth authentication.
+     */
     prompts: string[];
+    /**
+     * Settings related to token management for the OAuth provider.
+     */
     providerTokenManagement: outputs.ProjectAuthenticationOauthSystemSlackProviderTokenManagement;
+    /**
+     * Scopes of access that the application requests from the user's account on the OAuth provider.
+     */
     scopes: string[];
+    /**
+     * The URL where the application requests an access token from the OAuth provider.
+     */
     tokenEndpoint: string;
+    /**
+     * The URL where the application retrieves user information from the OAuth provider.
+     */
     userInfoEndpoint: string;
 }
 export interface ProjectAuthenticationOauthSystemSlackProviderTokenManagement {
@@ -384,12 +939,27 @@ export interface ProjectAuthenticationOauthSystemSlackProviderTokenManagement {
     redirectUrl: string;
 }
 export interface ProjectAuthenticationOtp {
+    /**
+     * The domain to embed in OTP messages.
+     */
     domain: string;
+    /**
+     * Settings related to sending emails with OTP codes.
+     */
     emailService: outputs.ProjectAuthenticationOtpEmailService;
     enabled: boolean;
+    /**
+     * The amount of time that an OTP code will be valid for.
+     */
     expirationTime: number;
     expirationTimeUnit: string;
+    /**
+     * Settings related to sending SMS messages with OTP codes.
+     */
     textService: outputs.ProjectAuthenticationOtpTextService;
+    /**
+     * Settings related to voice calls with OTP codes.
+     */
     voiceService: outputs.ProjectAuthenticationOtpVoiceService;
 }
 export interface ProjectAuthenticationOtpEmailService {
@@ -425,19 +995,59 @@ export interface ProjectAuthenticationOtpVoiceServiceTemplate {
     id: string;
     name: string;
 }
+export interface ProjectAuthenticationPasskeys {
+    enabled: boolean;
+    /**
+     * Passkeys will be usable in the following domain and all its subdomains.
+     */
+    topLevelDomain: string;
+}
 export interface ProjectAuthenticationPassword {
+    /**
+     * Settings related to sending password reset emails as part of the password feature.
+     */
     emailService: outputs.ProjectAuthenticationPasswordEmailService;
     enabled: boolean;
+    /**
+     * Whether users are required to change their password periodically.
+     */
     expiration: boolean;
+    /**
+     * The number of weeks after which a user's password expires and they need to replace it.
+     */
     expirationWeeks: number;
+    /**
+     * Whether the user account should be locked after a specified number of failed login attempts.
+     */
     lock: boolean;
+    /**
+     * The number of failed login attempts allowed before an account is locked.
+     */
     lockAttempts: number;
+    /**
+     * Whether passwords must contain at least one lowercase letter.
+     */
     lowercase: boolean;
+    /**
+     * The minimum length of the password that users are required to use. The maximum length is always `64`.
+     */
     minLength: number;
+    /**
+     * Whether passwords must contain at least one non-alphanumeric character (e.g. `!`, `@`, `#`).
+     */
     nonAlphanumeric: boolean;
+    /**
+     * Whether passwords must contain at least one number.
+     */
     number: boolean;
+    /**
+     * Whether to forbid password reuse when users change their password.
+     */
     reuse: boolean;
     reuseAmount: number;
+    /**
+     * Whether passwords must contain at least one uppercase letter.
+     */
     uppercase: boolean;
 }
 export interface ProjectAuthenticationPasswordEmailService {
@@ -455,15 +1065,14 @@ export interface ProjectAuthenticationPasswordEmailServiceTemplate {
 }
 export interface ProjectAuthenticationSso {
     enabled: boolean;
+    /**
+     * Whether to merge existing user accounts with new ones created through SSO authentication.
+     */
     mergeUsers: boolean;
 }
 export interface ProjectAuthenticationTotp {
     enabled: boolean;
 }
-export interface ProjectAuthenticationWebauthn {
-    enabled: boolean;
-    topLevelDomain: string;
-}
 export interface ProjectAuthorization {
     permissions: outputs.ProjectAuthorizationPermission[];
     roles: outputs.ProjectAuthorizationRole[];
@@ -480,61 +1089,172 @@ export interface ProjectAuthorizationRole {
     permissions: string[];
 }
 export interface ProjectConnectors {
+    /**
+     * AbuseIPDB provides an API to identify if an IP address has been associated with malicious activities online.
+     */
     abuseipdbs: outputs.ProjectConnectorsAbuseipdb[];
+    /**
+     * Amplitude, an analytics product that allows you to collects events from web and mobile apps, unify those and use those to better understand your customers needs.
+     */
     amplitudes: outputs.ProjectConnectorsAmplitude[];
     auditWebhooks: outputs.ProjectConnectorsAuditWebhook[];
     awsS3s: outputs.ProjectConnectorsAwsS3[];
     awsTranslates: outputs.ProjectConnectorsAwsTranslate[];
+    /**
+     * An identity verification platform that allow customers to digitally verify their identity from anywhere.
+     */
     clears: outputs.ProjectConnectorsClear[];
+    /**
+     * Datadog, an observability service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform.
+     */
     datadogs: outputs.ProjectConnectorsDatadog[];
     devrevGrows: outputs.ProjectConnectorsDevrevGrow[];
+    /**
+     * Docebo is a cloud-based Learning Management System (LMS) designed to increase performance and learning engagement.
+     */
     docebos: outputs.ProjectConnectorsDocebo[];
+    fingerprintDescopes: outputs.ProjectConnectorsFingerprintDescope[];
+    /**
+     * Use the Fingerprint (formerly FingerprintJS) connector to add device intelligence and prevent fraud.
+     */
+    fingerprints: outputs.ProjectConnectorsFingerprint[];
+    /**
+     * Use the Forter connector for account fraud prevention.
+     */
     forters: outputs.ProjectConnectorsForter[];
     googleCloudTranslations: outputs.ProjectConnectorsGoogleCloudTranslation[];
+    /**
+     * API to check if password appeared previously exposed in data breaches.
+     */
     hibps: outputs.ProjectConnectorsHibp[];
+    httpStaticIps: outputs.ProjectConnectorsHttpStaticIp[];
+    /**
+     * A general purpose HTTP client
+     */
     https: outputs.ProjectConnectorsHttp[];
+    /**
+     * HubSpot is a CRM platform with software, integrations, and resources needed to connect marketing, sales, content management, and customer service.
+     */
     hubspots: outputs.ProjectConnectorsHubspot[];
+    /**
+     * Intercom is a Conversational Relationship Platform (CRP).
+     */
     intercoms: outputs.ProjectConnectorsIntercom[];
+    /**
+     * Use this connector to send audit events and troubleshooting logs to New Relic.
+     */
     newrelics: outputs.ProjectConnectorsNewrelic[];
     recaptchaEnterprises: outputs.ProjectConnectorsRecaptchaEnterprise[];
+    /**
+     * reCAPTCHA is a free google service that protects your site from spam and abuse. It uses advanced risk analysis techniques to tell humans and bots apart.
+     */
     recaptchas: outputs.ProjectConnectorsRecaptcha[];
+    /**
+     * AWS Rekognition, cloud-based AI service that offers computer vision capabilities for analyzing and processing images. Useful for registration and verification processes, and can be used to detect fraud and prevent identity theft.
+     */
     rekognitions: outputs.ProjectConnectorsRekognition[];
+    /**
+     * Salesforce is a leading cloud-based Customer Relationship Management (CRM) platform that helps businesses streamline their sales, service, and marketing operations.
+     */
     salesforces: outputs.ProjectConnectorsSalesforce[];
+    /**
+     * Segment, an analytics product that allows you to collects events from web and mobile apps, unify those and use those to better understand your customers needs.
+     */
     segments: outputs.ProjectConnectorsSegment[];
     sendgrids: outputs.ProjectConnectorsSendgrid[];
     smtps: outputs.ProjectConnectorsSmtp[];
+    /**
+     * Sumo Logic, fast troubleshooting and investigation with AI/ML-powered log analytics
+     */
     sumologics: outputs.ProjectConnectorsSumologic[];
+    /**
+     * Telesign Phone number intelligence API provides risk score for phone numbers.
+     */
     telesigns: outputs.ProjectConnectorsTelesign[];
+    /**
+     * API security for a cloud-first, API-driven world.
+     */
     traceables: outputs.ProjectConnectorsTraceable[];
     twilioCores: outputs.ProjectConnectorsTwilioCore[];
     twilioVerifies: outputs.ProjectConnectorsTwilioVerify[];
+    /**
+     * AI-powered identity verification solution for identity fraud prevention, Know Your Customer compliance, and fast conversions of valuable customers.
+     */
     veriffs: outputs.ProjectConnectorsVeriff[];
 }
 export interface ProjectConnectorsAbuseipdb {
+    /**
+     * The unique AbuseIPDB API key.
+     */
     apiKey: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
 }
 export interface ProjectConnectorsAmplitude {
+    /**
+     * The Amplitude API Key generated for the Descope service.
+     */
     apiKey: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The server URL of the Amplitude API, when using different api or a custom domain in Amplitude.
+     */
     serverUrl: string;
+    /**
+     * `EU` or `US`. Sets the Amplitude server zone. Set this to `EU` for Amplitude projects created in `EU` data center. Default is `US`.
+     */
     serverZone: string;
 }
 export interface ProjectConnectorsAuditWebhook {
+    /**
+     * Specify which events will be sent to the external audit service (including tenant selection).
+     */
     auditFilters: string;
+    /**
+     * Authentication Information
+     */
     authentication: outputs.ProjectConnectorsAuditWebhookAuthentication;
+    /**
+     * The base URL to fetch
+     */
     baseUrl: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
+    /**
+     * The headers to send with the request
+     */
     headers: {
         [key: string]: string;
     };
+    /**
+     * HMAC is a method for message signing with a symmetrical key. This secret will be used to sign the payload, and the resulting signature will be sent in the `x-descope-webhook-s256` header. The receiving service should use this secret to verify the integrity and authenticity of the payload by checking the provided signature
+     */
     hmacSecret: string;
     id: string;
+    /**
+     * Will ignore certificate errors raised by the client
+     */
     insecure: boolean;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
 }
 export interface ProjectConnectorsAuditWebhookAuthentication {
@@ -551,90 +1271,291 @@ export interface ProjectConnectorsAuditWebhookAuthenticationBasic {
     username: string;
 }
 export interface ProjectConnectorsAwsS3 {
+    /**
+     * The unique AWS access key ID.
+     */
     accessKeyId: string;
+    auditEnabled: boolean;
     auditFilters: string;
+    /**
+     * The AWS S3 bucket. This bucket should already exist for the connector to work.
+     */
     bucket: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The AWS S3 region, e.g. `us-east-1`.
+     */
     region: string;
+    /**
+     * The secret AWS access key.
+     */
     secretAccessKey: string;
+    troubleshootLogEnabled: boolean;
 }
 export interface ProjectConnectorsAwsTranslate {
+    /**
+     * AWS access key ID.
+     */
     accessKeyId: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The AWS region to which this client will send requests. (e.g. us-east-1.)
+     */
     region: string;
+    /**
+     * AWS secret access key.
+     */
     secretAccessKey: string;
+    /**
+     * (Optional) A security or session token to use with these credentials. Usually present for temporary credentials.
+     */
     sessionToken: string;
 }
 export interface ProjectConnectorsClear {
+    /**
+     * Your CLEAR API key.
+     */
     apiKey: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * Your CLEAR project ID.
+     */
     projectId: string;
 }
 export interface ProjectConnectorsDatadog {
+    /**
+     * The unique Datadog organization key.
+     */
     apiKey: string;
     auditEnabled: boolean;
     auditFilters: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The Datadog site to send logs to. Default is `datadoghq.com`. European, free tier and other customers should set their site accordingly.
+     */
     site: string;
     troubleshootLogEnabled: boolean;
 }
 export interface ProjectConnectorsDevrevGrow {
+    /**
+     * Authentication to DevRev APIs requires a personal access token (PAT).
+     */
     apiKey: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
 }
 export interface ProjectConnectorsDocebo {
+    /**
+     * The Docebo api base url.
+     */
     baseUrl: string;
+    /**
+     * The Docebo OAuth 2.0 app client ID.
+     */
     clientId: string;
+    /**
+     * The Docebo OAuth 2.0 app client secret.
+     */
     clientSecret: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The Docebo user's password.
+     */
     password: string;
+    /**
+     * The Docebo username.
+     */
     username: string;
 }
+export interface ProjectConnectorsFingerprint {
+    /**
+     * The Cloudflare integration Endpoint URL.
+     */
+    cloudflareEndpointUrl: string;
+    /**
+     * The Cloudflare integration Script URL.
+     */
+    cloudflareScriptUrl: string;
+    /**
+     * A description of what your connector is used for.
+     */
+    description: string;
+    id: string;
+    /**
+     * A custom name for your connector.
+     */
+    name: string;
+    /**
+     * The Fingerprint public API key.
+     */
+    publicApiKey: string;
+    /**
+     * The Fingerprint secret API key.
+     */
+    secretApiKey: string;
+    /**
+     * Enable to configure the relevant Cloudflare integration parameters if Cloudflare integration is set in your Fingerprint account.
+     */
+    useCloudflareIntegration: boolean;
+}
+export interface ProjectConnectorsFingerprintDescope {
+    /**
+     * The custom domain to fetch
+     */
+    customDomain: string;
+    /**
+     * A description of what your connector is used for.
+     */
+    description: string;
+    id: string;
+    /**
+     * A custom name for your connector.
+     */
+    name: string;
+}
 export interface ProjectConnectorsForter {
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * Override the user IP address.
+     */
     overrideIpAddress: string;
+    /**
+     * Override the user email.
+     */
     overrideUserEmail: string;
+    /**
+     * Override the user's IP address or email so that Forter can provide a specific decision or recommendation. Contact the Forter team for further details. Note: Overriding the user IP address or email is intended for testing purpose and should not be utilized in production environments.
+     */
     overrides: boolean;
+    /**
+     * The Forter secret key.
+     */
     secretKey: string;
+    /**
+     * The Forter site ID.
+     */
     siteId: string;
 }
 export interface ProjectConnectorsGoogleCloudTranslation {
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The Google Cloud project ID where the Google Cloud Translation is managed.
+     */
     projectId: string;
+    /**
+     * Service Account JSON associated with the current project.
+     */
     serviceAccountJson: string;
 }
 export interface ProjectConnectorsHibp {
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
 }
 export interface ProjectConnectorsHttp {
+    /**
+     * Authentication Information
+     */
     authentication: outputs.ProjectConnectorsHttpAuthentication;
+    /**
+     * The base URL to fetch
+     */
     baseUrl: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
+    /**
+     * The headers to send with the request
+     */
     headers: {
         [key: string]: string;
     };
+    /**
+     * HMAC is a method for message signing with a symmetrical key. This secret will be used to sign the base64 encoded payload, and the resulting signature will be sent in the `x-descope-webhook-s256` header. The receiving service should use this secret to verify the integrity and authenticity of the payload by checking the provided signature
+     */
     hmacSecret: string;
     id: string;
+    /**
+     * The connector response context will also include the headers. The context will have a "body" attribute and a "headers" attribute. See more details in the help guide
+     */
     includeHeadersInContext: boolean;
+    /**
+     * Will ignore certificate errors raised by the client
+     */
     insecure: boolean;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
 }
 export interface ProjectConnectorsHttpAuthentication {
@@ -650,75 +1571,253 @@ export interface ProjectConnectorsHttpAuthenticationBasic {
     password: string;
     username: string;
 }
+export interface ProjectConnectorsHttpStaticIp {
+    /**
+     * Authentication Information
+     */
+    authentication: outputs.ProjectConnectorsHttpStaticIpAuthentication;
+    /**
+     * The base URL to fetch
+     */
+    baseUrl: string;
+    /**
+     * A description of what your connector is used for.
+     */
+    description: string;
+    /**
+     * The headers to send with the request
+     */
+    headers: {
+        [key: string]: string;
+    };
+    /**
+     * HMAC is a method for message signing with a symmetrical key. This secret will be used to sign the base64 encoded payload, and the resulting signature will be sent in the `x-descope-webhook-s256` header. The receiving service should use this secret to verify the integrity and authenticity of the payload by checking the provided signature
+     */
+    hmacSecret: string;
+    id: string;
+    /**
+     * The connector response context will also include the headers. The context will have a "body" attribute and a "headers" attribute. See more details in the help guide
+     */
+    includeHeadersInContext: boolean;
+    /**
+     * Will ignore certificate errors raised by the client
+     */
+    insecure: boolean;
+    /**
+     * A custom name for your connector.
+     */
+    name: string;
+}
+export interface ProjectConnectorsHttpStaticIpAuthentication {
+    apiKey: outputs.ProjectConnectorsHttpStaticIpAuthenticationApiKey;
+    basic: outputs.ProjectConnectorsHttpStaticIpAuthenticationBasic;
+    bearerToken: string;
+}
+export interface ProjectConnectorsHttpStaticIpAuthenticationApiKey {
+    key: string;
+    token: string;
+}
+export interface ProjectConnectorsHttpStaticIpAuthenticationBasic {
+    password: string;
+    username: string;
+}
 export interface ProjectConnectorsHubspot {
+    /**
+     * The HubSpot private API access token generated for the Descope service.
+     */
     accessToken: string;
+    /**
+     * The base URL of the HubSpot API, when using a custom domain in HubSpot, default value is https://api.hubapi.com .
+     */
     baseUrl: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
 }
 export interface ProjectConnectorsIntercom {
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * Regional Hosting - US, EU, or AU. default: US
+     */
     region: string;
+    /**
+     * The Intercom access token.
+     */
     token: string;
 }
 export interface ProjectConnectorsNewrelic {
+    /**
+     * Ingest License Key of the account you want to report data to.
+     */
     apiKey: string;
     auditEnabled: boolean;
     auditFilters: string;
+    /**
+     * The New Relic data center the account belongs to. Possible values are: `US`, `EU`, `FedRAMP`. Default is `US`.
+     */
     dataCenter: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * Specify a custom prefix for all log fields. The default prefix is `descope.`.
+     */
+    logsPrefix: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * Enable this option to use a custom prefix for log fields.
+     */
+    overrideLogsPrefix: boolean;
     troubleshootLogEnabled: boolean;
 }
 export interface ProjectConnectorsRecaptcha {
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The secret key authorizes communication between Descope backend and the reCAPTCHA server to verify the user's response.
+     */
     secretKey: string;
+    /**
+     * The site key is used to invoke reCAPTCHA service on your site or mobile application.
+     */
     siteKey: string;
 }
 export interface ProjectConnectorsRecaptchaEnterprise {
+    /**
+     * API key associated with the current project.
+     */
     apiKey: string;
+    /**
+     * When configured, the Recaptcha action will return the score without assessing the request. The score ranges between 0 and 1, where 1 is a human interaction and 0 is a bot.
+     */
     assessmentScore: number;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * Override the default assessment model. Note: Overriding assessment is intended for automated testing and should not be utilized in production environments.
+     */
     overrideAssessment: boolean;
+    /**
+     * The Google Cloud project ID where the reCAPTCHA Enterprise is managed.
+     */
     projectId: string;
+    /**
+     * The site key is used to invoke reCAPTCHA Enterprise service on your site or mobile application.
+     */
     siteKey: string;
 }
 export interface ProjectConnectorsRekognition {
+    /**
+     * The AWS access key ID
+     */
     accessKeyId: string;
+    /**
+     * The collection to store registered users in. Should match `[a-zA-Z0-9_.-]+` pattern. Changing this will cause losing existing users.
+     */
     collectionId: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The AWS secret access key
+     */
     secretAccessKey: string;
 }
 export interface ProjectConnectorsSalesforce {
+    /**
+     * The Salesforce API base URL.
+     */
     baseUrl: string;
+    /**
+     * The consumer key of the connected app.
+     */
     clientId: string;
+    /**
+     * The consumer secret of the connected app.
+     */
     clientSecret: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * REST API Version.
+     */
     version: string;
 }
 export interface ProjectConnectorsSegment {
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
+    /**
+     * The base URL of the Segment API, when using a custom domain in Segment.
+     */
     host: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The Segment Write Key generated for the Descope service.
+     */
     writeKey: string;
 }
 export interface ProjectConnectorsSendgrid {
     authentication: outputs.ProjectConnectorsSendgridAuthentication;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
     sender: outputs.ProjectConnectorsSendgridSender;
 }
@@ -731,8 +1830,14 @@ export interface ProjectConnectorsSendgridSender {
 }
 export interface ProjectConnectorsSmtp {
     authentication: outputs.ProjectConnectorsSmtpAuthentication;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
     sender: outputs.ProjectConnectorsSmtpSender;
     server: outputs.ProjectConnectorsSmtpServer;
@@ -753,31 +1858,70 @@ export interface ProjectConnectorsSmtpServer {
 export interface ProjectConnectorsSumologic {
     auditEnabled: boolean;
     auditFilters: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
+    /**
+     * The URL associated with an HTTP Hosted collector
+     */
     httpSourceUrl: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
     troubleshootLogEnabled: boolean;
 }
 export interface ProjectConnectorsTelesign {
+    /**
+     * The unique Telesign API key
+     */
     apiKey: string;
+    /**
+     * The unique Telesign account Customer ID
+     */
     customerId: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
 }
 export interface ProjectConnectorsTraceable {
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
+    /**
+     * EU(Europe) Region deployment of Traceable platform.
+     */
     euRegion: boolean;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The Traceable secret key.
+     */
     secretKey: string;
 }
 export interface ProjectConnectorsTwilioCore {
     accountSid: string;
     authentication: outputs.ProjectConnectorsTwilioCoreAuthentication;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
     senders: outputs.ProjectConnectorsTwilioCoreSenders;
 }
@@ -800,8 +1944,14 @@ export interface ProjectConnectorsTwilioCoreSendersVoice {
 export interface ProjectConnectorsTwilioVerify {
     accountSid: string;
     authentication: outputs.ProjectConnectorsTwilioVerifyAuthentication;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
     sender: string;
     serviceSid: string;
@@ -812,31 +1962,54 @@ export interface ProjectConnectorsTwilioVerifyAuthentication {
     authToken: string;
 }
 export interface ProjectConnectorsVeriff {
+    /**
+     * The Veriff Public API Key, you can find under Veriff Station - Integrations.
+     */
     apiKey: string;
+    /**
+     * The base URL of the Veriff API, default value is https://stationapi.veriff.com.
+     */
     baseUrl: string;
+    /**
+     * A description of what your connector is used for.
+     */
     description: string;
     id: string;
+    /**
+     * A custom name for your connector.
+     */
     name: string;
+    /**
+     * The Veriff Shared secret key, you can find under Veriff Station - Integrations.
+     */
     secretKey: string;
 }
 export interface ProjectFlows {
     data: string;
 }
 export interface ProjectJwtTemplates {
-    templates: outputs.ProjectJwtTemplatesTemplate[];
+    accessKeyTemplates: outputs.ProjectJwtTemplatesAccessKeyTemplate[];
+    userTemplates: outputs.ProjectJwtTemplatesUserTemplate[];
 }
-export interface ProjectJwtTemplatesTemplate {
+export interface ProjectJwtTemplatesAccessKeyTemplate {
+    authSchema: string;
+    conformanceIssuer: boolean;
+    description: string;
+    id: string;
+    name: string;
+    template: string;
+}
+export interface ProjectJwtTemplatesUserTemplate {
     authSchema: string;
     conformanceIssuer: boolean;
     description: string;
     id: string;
     name: string;
     template: string;
-    type: string;
 }
 export interface ProjectProjectSettings {
     accessKeyJwtTemplate: string;
-    cookiePolicy: number;
+    cookiePolicy: string;
     domain: string;
     enableInactivity: boolean;
     inactivityTime: string;