@goauthentik/api 2025.10.0-rc1-1759955726 → 2025.10.0-rc1-1760097716

package/src/models/OAuth2ProviderLogoutMethodEnum.ts

@@ -0,0 +1,54 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.10.0-rc1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+/**
+ * 
+ * @export
+ */
+export const OAuth2ProviderLogoutMethodEnum = {
+    Backchannel: 'backchannel',
+    Frontchannel: 'frontchannel',
+    UnknownDefaultOpenApi: '11184809'
+} as const;
+export type OAuth2ProviderLogoutMethodEnum = typeof OAuth2ProviderLogoutMethodEnum[keyof typeof OAuth2ProviderLogoutMethodEnum];
+
+
+export function instanceOfOAuth2ProviderLogoutMethodEnum(value: any): boolean {
+    for (const key in OAuth2ProviderLogoutMethodEnum) {
+        if (Object.prototype.hasOwnProperty.call(OAuth2ProviderLogoutMethodEnum, key)) {
+            if (OAuth2ProviderLogoutMethodEnum[key as keyof typeof OAuth2ProviderLogoutMethodEnum] === value) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+
+export function OAuth2ProviderLogoutMethodEnumFromJSON(json: any): OAuth2ProviderLogoutMethodEnum {
+    return OAuth2ProviderLogoutMethodEnumFromJSONTyped(json, false);
+}
+
+export function OAuth2ProviderLogoutMethodEnumFromJSONTyped(json: any, ignoreDiscriminator: boolean): OAuth2ProviderLogoutMethodEnum {
+    return json as OAuth2ProviderLogoutMethodEnum;
+}
+
+export function OAuth2ProviderLogoutMethodEnumToJSON(value?: OAuth2ProviderLogoutMethodEnum | null): any {
+    return value as any;
+}
+
+export function OAuth2ProviderLogoutMethodEnumToJSONTyped(value: any, ignoreDiscriminator: boolean): OAuth2ProviderLogoutMethodEnum {
+    return value as OAuth2ProviderLogoutMethodEnum;
+}
+

package/src/models/OAuth2ProviderRequest.ts

@@ -34,6 +34,13 @@ import {
     SubModeEnumToJSON,
     SubModeEnumToJSONTyped,
 } from './SubModeEnum';
+import type { OAuth2ProviderLogoutMethodEnum } from './OAuth2ProviderLogoutMethodEnum';
+import {
+    OAuth2ProviderLogoutMethodEnumFromJSON,
+    OAuth2ProviderLogoutMethodEnumFromJSONTyped,
+    OAuth2ProviderLogoutMethodEnumToJSON,
+    OAuth2ProviderLogoutMethodEnumToJSONTyped,
+} from './OAuth2ProviderLogoutMethodEnum';
 import type { IssuerModeEnum } from './IssuerModeEnum';
 import {
     IssuerModeEnumFromJSON,
@@ -149,7 +156,13 @@ export interface OAuth2ProviderRequest {
      * @type {string}
      * @memberof OAuth2ProviderRequest
      */
-    backchannelLogoutUri?: string;
+    logoutUri?: string;
+    /**
+     * Backchannel logs out with server to server calls. Frontchannel uses iframes in your browser
+     * @type {OAuth2ProviderLogoutMethodEnum}
+     * @memberof OAuth2ProviderRequest
+     */
+    logoutMethod?: OAuth2ProviderLogoutMethodEnum;
     /**
      * Configure what data should be used as unique User Identifier. For most cases, the default should be fine.
      * @type {SubModeEnum}
@@ -215,7 +228,8 @@ export function OAuth2ProviderRequestFromJSONTyped(json: any, ignoreDiscriminato
         'signingKey': json['signing_key'] == null ? undefined : json['signing_key'],
         'encryptionKey': json['encryption_key'] == null ? undefined : json['encryption_key'],
         'redirectUris': ((json['redirect_uris'] as Array<any>).map(RedirectURIRequestFromJSON)),
-        'backchannelLogoutUri': json['backchannel_logout_uri'] == null ? undefined : json['backchannel_logout_uri'],
+        'logoutUri': json['logout_uri'] == null ? undefined : json['logout_uri'],
+        'logoutMethod': json['logout_method'] == null ? undefined : OAuth2ProviderLogoutMethodEnumFromJSON(json['logout_method']),
         'subMode': json['sub_mode'] == null ? undefined : SubModeEnumFromJSON(json['sub_mode']),
         'issuerMode': json['issuer_mode'] == null ? undefined : IssuerModeEnumFromJSON(json['issuer_mode']),
         'jwtFederationSources': json['jwt_federation_sources'] == null ? undefined : json['jwt_federation_sources'],
@@ -250,7 +264,8 @@ export function OAuth2ProviderRequestToJSONTyped(value?: OAuth2ProviderRequest |
         'signing_key': value['signingKey'],
         'encryption_key': value['encryptionKey'],
         'redirect_uris': ((value['redirectUris'] as Array<any>).map(RedirectURIRequestToJSON)),
-        'backchannel_logout_uri': value['backchannelLogoutUri'],
+        'logout_uri': value['logoutUri'],
+        'logout_method': OAuth2ProviderLogoutMethodEnumToJSON(value['logoutMethod']),
         'sub_mode': SubModeEnumToJSON(value['subMode']),
         'issuer_mode': IssuerModeEnumToJSON(value['issuerMode']),
         'jwt_federation_sources': value['jwtFederationSources'],

package/src/models/PatchedOAuth2ProviderRequest.ts

@@ -34,6 +34,13 @@ import {
     SubModeEnumToJSON,
     SubModeEnumToJSONTyped,
 } from './SubModeEnum';
+import type { OAuth2ProviderLogoutMethodEnum } from './OAuth2ProviderLogoutMethodEnum';
+import {
+    OAuth2ProviderLogoutMethodEnumFromJSON,
+    OAuth2ProviderLogoutMethodEnumFromJSONTyped,
+    OAuth2ProviderLogoutMethodEnumToJSON,
+    OAuth2ProviderLogoutMethodEnumToJSONTyped,
+} from './OAuth2ProviderLogoutMethodEnum';
 import type { IssuerModeEnum } from './IssuerModeEnum';
 import {
     IssuerModeEnumFromJSON,
@@ -149,7 +156,13 @@ export interface PatchedOAuth2ProviderRequest {
      * @type {string}
      * @memberof PatchedOAuth2ProviderRequest
      */
-    backchannelLogoutUri?: string;
+    logoutUri?: string;
+    /**
+     * Backchannel logs out with server to server calls. Frontchannel uses iframes in your browser
+     * @type {OAuth2ProviderLogoutMethodEnum}
+     * @memberof PatchedOAuth2ProviderRequest
+     */
+    logoutMethod?: OAuth2ProviderLogoutMethodEnum;
     /**
      * Configure what data should be used as unique User Identifier. For most cases, the default should be fine.
      * @type {SubModeEnum}
@@ -211,7 +224,8 @@ export function PatchedOAuth2ProviderRequestFromJSONTyped(json: any, ignoreDiscr
         'signingKey': json['signing_key'] == null ? undefined : json['signing_key'],
         'encryptionKey': json['encryption_key'] == null ? undefined : json['encryption_key'],
         'redirectUris': json['redirect_uris'] == null ? undefined : ((json['redirect_uris'] as Array<any>).map(RedirectURIRequestFromJSON)),
-        'backchannelLogoutUri': json['backchannel_logout_uri'] == null ? undefined : json['backchannel_logout_uri'],
+        'logoutUri': json['logout_uri'] == null ? undefined : json['logout_uri'],
+        'logoutMethod': json['logout_method'] == null ? undefined : OAuth2ProviderLogoutMethodEnumFromJSON(json['logout_method']),
         'subMode': json['sub_mode'] == null ? undefined : SubModeEnumFromJSON(json['sub_mode']),
         'issuerMode': json['issuer_mode'] == null ? undefined : IssuerModeEnumFromJSON(json['issuer_mode']),
         'jwtFederationSources': json['jwt_federation_sources'] == null ? undefined : json['jwt_federation_sources'],
@@ -246,7 +260,8 @@ export function PatchedOAuth2ProviderRequestToJSONTyped(value?: PatchedOAuth2Pro
         'signing_key': value['signingKey'],
         'encryption_key': value['encryptionKey'],
         'redirect_uris': value['redirectUris'] == null ? undefined : ((value['redirectUris'] as Array<any>).map(RedirectURIRequestToJSON)),
-        'backchannel_logout_uri': value['backchannelLogoutUri'],
+        'logout_uri': value['logoutUri'],
+        'logout_method': OAuth2ProviderLogoutMethodEnumToJSON(value['logoutMethod']),
         'sub_mode': SubModeEnumToJSON(value['subMode']),
         'issuer_mode': IssuerModeEnumToJSON(value['issuerMode']),
         'jwt_federation_sources': value['jwtFederationSources'],

package/src/models/PatchedSAMLProviderRequest.ts

@@ -27,6 +27,13 @@ import {
     SignatureAlgorithmEnumToJSON,
     SignatureAlgorithmEnumToJSONTyped,
 } from './SignatureAlgorithmEnum';
+import type { SAMLProviderLogoutMethodEnum } from './SAMLProviderLogoutMethodEnum';
+import {
+    SAMLProviderLogoutMethodEnumFromJSON,
+    SAMLProviderLogoutMethodEnumFromJSONTyped,
+    SAMLProviderLogoutMethodEnumToJSON,
+    SAMLProviderLogoutMethodEnumToJSONTyped,
+} from './SAMLProviderLogoutMethodEnum';
 import type { SAMLNameIDPolicyEnum } from './SAMLNameIDPolicyEnum';
 import {
     SAMLNameIDPolicyEnumFromJSON,
@@ -34,13 +41,13 @@ import {
     SAMLNameIDPolicyEnumToJSON,
     SAMLNameIDPolicyEnumToJSONTyped,
 } from './SAMLNameIDPolicyEnum';
-import type { SpBindingEnum } from './SpBindingEnum';
+import type { SAMLBindingsEnum } from './SAMLBindingsEnum';
 import {
-    SpBindingEnumFromJSON,
-    SpBindingEnumFromJSONTyped,
-    SpBindingEnumToJSON,
-    SpBindingEnumToJSONTyped,
-} from './SpBindingEnum';
+    SAMLBindingsEnumFromJSON,
+    SAMLBindingsEnumFromJSONTyped,
+    SAMLBindingsEnumToJSON,
+    SAMLBindingsEnumToJSONTyped,
+} from './SAMLBindingsEnum';
 
 /**
  * SAMLProvider Serializer
@@ -84,6 +91,12 @@ export interface PatchedSAMLProviderRequest {
      * @memberof PatchedSAMLProviderRequest
      */
     acsUrl?: string;
+    /**
+     * Single Logout Service URL where the logout response should be sent.
+     * @type {string}
+     * @memberof PatchedSAMLProviderRequest
+     */
+    slsUrl?: string;
     /**
      * Value of the audience restriction field of the assertion. When left empty, no audience restriction will be added.
      * @type {string}
@@ -168,12 +181,30 @@ export interface PatchedSAMLProviderRequest {
      * @memberof PatchedSAMLProviderRequest
      */
     signResponse?: boolean;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof PatchedSAMLProviderRequest
+     */
+    signLogoutRequest?: boolean;
     /**
      * This determines how authentik sends the response back to the Service Provider.
-     * @type {SpBindingEnum}
+     * @type {SAMLBindingsEnum}
+     * @memberof PatchedSAMLProviderRequest
+     */
+    spBinding?: SAMLBindingsEnum;
+    /**
+     * This determines how authentik sends the logout response back to the Service Provider.
+     * @type {SAMLBindingsEnum}
+     * @memberof PatchedSAMLProviderRequest
+     */
+    slsBinding?: SAMLBindingsEnum;
+    /**
+     * Method to use for logout. Front-channel iframe loads all logout URLs simultaneously in hidden iframes. Front-channel native uses your active browser tab to send post requests and redirect to providers. Back-channel sends logout requests directly from the server without user interaction (requires POST SLS binding).
+     * @type {SAMLProviderLogoutMethodEnum}
      * @memberof PatchedSAMLProviderRequest
      */
-    spBinding?: SpBindingEnum;
+    logoutMethod?: SAMLProviderLogoutMethodEnum;
     /**
      * Default relay_state value for IDP-initiated logins
      * @type {string}
@@ -213,6 +244,7 @@ export function PatchedSAMLProviderRequestFromJSONTyped(json: any, ignoreDiscrim
         'invalidationFlow': json['invalidation_flow'] == null ? undefined : json['invalidation_flow'],
         'propertyMappings': json['property_mappings'] == null ? undefined : json['property_mappings'],
         'acsUrl': json['acs_url'] == null ? undefined : json['acs_url'],
+        'slsUrl': json['sls_url'] == null ? undefined : json['sls_url'],
         'audience': json['audience'] == null ? undefined : json['audience'],
         'issuer': json['issuer'] == null ? undefined : json['issuer'],
         'assertionValidNotBefore': json['assertion_valid_not_before'] == null ? undefined : json['assertion_valid_not_before'],
@@ -227,7 +259,10 @@ export function PatchedSAMLProviderRequestFromJSONTyped(json: any, ignoreDiscrim
         'encryptionKp': json['encryption_kp'] == null ? undefined : json['encryption_kp'],
         'signAssertion': json['sign_assertion'] == null ? undefined : json['sign_assertion'],
         'signResponse': json['sign_response'] == null ? undefined : json['sign_response'],
-        'spBinding': json['sp_binding'] == null ? undefined : SpBindingEnumFromJSON(json['sp_binding']),
+        'signLogoutRequest': json['sign_logout_request'] == null ? undefined : json['sign_logout_request'],
+        'spBinding': json['sp_binding'] == null ? undefined : SAMLBindingsEnumFromJSON(json['sp_binding']),
+        'slsBinding': json['sls_binding'] == null ? undefined : SAMLBindingsEnumFromJSON(json['sls_binding']),
+        'logoutMethod': json['logout_method'] == null ? undefined : SAMLProviderLogoutMethodEnumFromJSON(json['logout_method']),
         'defaultRelayState': json['default_relay_state'] == null ? undefined : json['default_relay_state'],
         'defaultNameIdPolicy': json['default_name_id_policy'] == null ? undefined : SAMLNameIDPolicyEnumFromJSON(json['default_name_id_policy']),
     };
@@ -250,6 +285,7 @@ export function PatchedSAMLProviderRequestToJSONTyped(value?: PatchedSAMLProvide
         'invalidation_flow': value['invalidationFlow'],
         'property_mappings': value['propertyMappings'],
         'acs_url': value['acsUrl'],
+        'sls_url': value['slsUrl'],
         'audience': value['audience'],
         'issuer': value['issuer'],
         'assertion_valid_not_before': value['assertionValidNotBefore'],
@@ -264,7 +300,10 @@ export function PatchedSAMLProviderRequestToJSONTyped(value?: PatchedSAMLProvide
         'encryption_kp': value['encryptionKp'],
         'sign_assertion': value['signAssertion'],
         'sign_response': value['signResponse'],
-        'sp_binding': SpBindingEnumToJSON(value['spBinding']),
+        'sign_logout_request': value['signLogoutRequest'],
+        'sp_binding': SAMLBindingsEnumToJSON(value['spBinding']),
+        'sls_binding': SAMLBindingsEnumToJSON(value['slsBinding']),
+        'logout_method': SAMLProviderLogoutMethodEnumToJSON(value['logoutMethod']),
         'default_relay_state': value['defaultRelayState'],
         'default_name_id_policy': SAMLNameIDPolicyEnumToJSON(value['defaultNameIdPolicy']),
     };

package/src/models/SAMLBindingsEnum.ts

@@ -0,0 +1,54 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.10.0-rc1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+/**
+ * 
+ * @export
+ */
+export const SAMLBindingsEnum = {
+    Redirect: 'redirect',
+    Post: 'post',
+    UnknownDefaultOpenApi: '11184809'
+} as const;
+export type SAMLBindingsEnum = typeof SAMLBindingsEnum[keyof typeof SAMLBindingsEnum];
+
+
+export function instanceOfSAMLBindingsEnum(value: any): boolean {
+    for (const key in SAMLBindingsEnum) {
+        if (Object.prototype.hasOwnProperty.call(SAMLBindingsEnum, key)) {
+            if (SAMLBindingsEnum[key as keyof typeof SAMLBindingsEnum] === value) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+
+export function SAMLBindingsEnumFromJSON(json: any): SAMLBindingsEnum {
+    return SAMLBindingsEnumFromJSONTyped(json, false);
+}
+
+export function SAMLBindingsEnumFromJSONTyped(json: any, ignoreDiscriminator: boolean): SAMLBindingsEnum {
+    return json as SAMLBindingsEnum;
+}
+
+export function SAMLBindingsEnumToJSON(value?: SAMLBindingsEnum | null): any {
+    return value as any;
+}
+
+export function SAMLBindingsEnumToJSONTyped(value: any, ignoreDiscriminator: boolean): SAMLBindingsEnum {
+    return value as SAMLBindingsEnum;
+}
+

package/src/models/SAMLProvider.ts

@@ -27,6 +27,13 @@ import {
     SignatureAlgorithmEnumToJSON,
     SignatureAlgorithmEnumToJSONTyped,
 } from './SignatureAlgorithmEnum';
+import type { SAMLProviderLogoutMethodEnum } from './SAMLProviderLogoutMethodEnum';
+import {
+    SAMLProviderLogoutMethodEnumFromJSON,
+    SAMLProviderLogoutMethodEnumFromJSONTyped,
+    SAMLProviderLogoutMethodEnumToJSON,
+    SAMLProviderLogoutMethodEnumToJSONTyped,
+} from './SAMLProviderLogoutMethodEnum';
 import type { SAMLNameIDPolicyEnum } from './SAMLNameIDPolicyEnum';
 import {
     SAMLNameIDPolicyEnumFromJSON,
@@ -34,13 +41,13 @@ import {
     SAMLNameIDPolicyEnumToJSON,
     SAMLNameIDPolicyEnumToJSONTyped,
 } from './SAMLNameIDPolicyEnum';
-import type { SpBindingEnum } from './SpBindingEnum';
+import type { SAMLBindingsEnum } from './SAMLBindingsEnum';
 import {
-    SpBindingEnumFromJSON,
-    SpBindingEnumFromJSONTyped,
-    SpBindingEnumToJSON,
-    SpBindingEnumToJSONTyped,
-} from './SpBindingEnum';
+    SAMLBindingsEnumFromJSON,
+    SAMLBindingsEnumFromJSONTyped,
+    SAMLBindingsEnumToJSON,
+    SAMLBindingsEnumToJSONTyped,
+} from './SAMLBindingsEnum';
 
 /**
  * SAMLProvider Serializer
@@ -138,6 +145,12 @@ export interface SAMLProvider {
      * @memberof SAMLProvider
      */
     acsUrl: string;
+    /**
+     * Single Logout Service URL where the logout response should be sent.
+     * @type {string}
+     * @memberof SAMLProvider
+     */
+    slsUrl?: string;
     /**
      * Value of the audience restriction field of the assertion. When left empty, no audience restriction will be added.
      * @type {string}
@@ -222,12 +235,30 @@ export interface SAMLProvider {
      * @memberof SAMLProvider
      */
     signResponse?: boolean;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof SAMLProvider
+     */
+    signLogoutRequest?: boolean;
     /**
      * This determines how authentik sends the response back to the Service Provider.
-     * @type {SpBindingEnum}
+     * @type {SAMLBindingsEnum}
+     * @memberof SAMLProvider
+     */
+    spBinding?: SAMLBindingsEnum;
+    /**
+     * This determines how authentik sends the logout response back to the Service Provider.
+     * @type {SAMLBindingsEnum}
+     * @memberof SAMLProvider
+     */
+    slsBinding?: SAMLBindingsEnum;
+    /**
+     * Method to use for logout. Front-channel iframe loads all logout URLs simultaneously in hidden iframes. Front-channel native uses your active browser tab to send post requests and redirect to providers. Back-channel sends logout requests directly from the server without user interaction (requires POST SLS binding).
+     * @type {SAMLProviderLogoutMethodEnum}
      * @memberof SAMLProvider
      */
-    spBinding?: SpBindingEnum;
+    logoutMethod?: SAMLProviderLogoutMethodEnum;
     /**
      * Default relay_state value for IDP-initiated logins
      * @type {string}
@@ -331,6 +362,7 @@ export function SAMLProviderFromJSONTyped(json: any, ignoreDiscriminator: boolea
         'verboseNamePlural': json['verbose_name_plural'],
         'metaModelName': json['meta_model_name'],
         'acsUrl': json['acs_url'],
+        'slsUrl': json['sls_url'] == null ? undefined : json['sls_url'],
         'audience': json['audience'] == null ? undefined : json['audience'],
         'issuer': json['issuer'] == null ? undefined : json['issuer'],
         'assertionValidNotBefore': json['assertion_valid_not_before'] == null ? undefined : json['assertion_valid_not_before'],
@@ -345,7 +377,10 @@ export function SAMLProviderFromJSONTyped(json: any, ignoreDiscriminator: boolea
         'encryptionKp': json['encryption_kp'] == null ? undefined : json['encryption_kp'],
         'signAssertion': json['sign_assertion'] == null ? undefined : json['sign_assertion'],
         'signResponse': json['sign_response'] == null ? undefined : json['sign_response'],
-        'spBinding': json['sp_binding'] == null ? undefined : SpBindingEnumFromJSON(json['sp_binding']),
+        'signLogoutRequest': json['sign_logout_request'] == null ? undefined : json['sign_logout_request'],
+        'spBinding': json['sp_binding'] == null ? undefined : SAMLBindingsEnumFromJSON(json['sp_binding']),
+        'slsBinding': json['sls_binding'] == null ? undefined : SAMLBindingsEnumFromJSON(json['sls_binding']),
+        'logoutMethod': json['logout_method'] == null ? undefined : SAMLProviderLogoutMethodEnumFromJSON(json['logout_method']),
         'defaultRelayState': json['default_relay_state'] == null ? undefined : json['default_relay_state'],
         'defaultNameIdPolicy': json['default_name_id_policy'] == null ? undefined : SAMLNameIDPolicyEnumFromJSON(json['default_name_id_policy']),
         'urlDownloadMetadata': json['url_download_metadata'],
@@ -374,6 +409,7 @@ export function SAMLProviderToJSONTyped(value?: Omit<SAMLProvider, 'pk'|'compone
         'invalidation_flow': value['invalidationFlow'],
         'property_mappings': value['propertyMappings'],
         'acs_url': value['acsUrl'],
+        'sls_url': value['slsUrl'],
         'audience': value['audience'],
         'issuer': value['issuer'],
         'assertion_valid_not_before': value['assertionValidNotBefore'],
@@ -388,7 +424,10 @@ export function SAMLProviderToJSONTyped(value?: Omit<SAMLProvider, 'pk'|'compone
         'encryption_kp': value['encryptionKp'],
         'sign_assertion': value['signAssertion'],
         'sign_response': value['signResponse'],
-        'sp_binding': SpBindingEnumToJSON(value['spBinding']),
+        'sign_logout_request': value['signLogoutRequest'],
+        'sp_binding': SAMLBindingsEnumToJSON(value['spBinding']),
+        'sls_binding': SAMLBindingsEnumToJSON(value['slsBinding']),
+        'logout_method': SAMLProviderLogoutMethodEnumToJSON(value['logoutMethod']),
         'default_relay_state': value['defaultRelayState'],
         'default_name_id_policy': SAMLNameIDPolicyEnumToJSON(value['defaultNameIdPolicy']),
     };

package/src/models/SAMLProviderLogoutMethodEnum.ts

@@ -0,0 +1,55 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.10.0-rc1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+/**
+ * 
+ * @export
+ */
+export const SAMLProviderLogoutMethodEnum = {
+    FrontchannelIframe: 'frontchannel_iframe',
+    FrontchannelNative: 'frontchannel_native',
+    Backchannel: 'backchannel',
+    UnknownDefaultOpenApi: '11184809'
+} as const;
+export type SAMLProviderLogoutMethodEnum = typeof SAMLProviderLogoutMethodEnum[keyof typeof SAMLProviderLogoutMethodEnum];
+
+
+export function instanceOfSAMLProviderLogoutMethodEnum(value: any): boolean {
+    for (const key in SAMLProviderLogoutMethodEnum) {
+        if (Object.prototype.hasOwnProperty.call(SAMLProviderLogoutMethodEnum, key)) {
+            if (SAMLProviderLogoutMethodEnum[key as keyof typeof SAMLProviderLogoutMethodEnum] === value) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+
+export function SAMLProviderLogoutMethodEnumFromJSON(json: any): SAMLProviderLogoutMethodEnum {
+    return SAMLProviderLogoutMethodEnumFromJSONTyped(json, false);
+}
+
+export function SAMLProviderLogoutMethodEnumFromJSONTyped(json: any, ignoreDiscriminator: boolean): SAMLProviderLogoutMethodEnum {
+    return json as SAMLProviderLogoutMethodEnum;
+}
+
+export function SAMLProviderLogoutMethodEnumToJSON(value?: SAMLProviderLogoutMethodEnum | null): any {
+    return value as any;
+}
+
+export function SAMLProviderLogoutMethodEnumToJSONTyped(value: any, ignoreDiscriminator: boolean): SAMLProviderLogoutMethodEnum {
+    return value as SAMLProviderLogoutMethodEnum;
+}
+

package/src/models/SAMLProviderRequest.ts

@@ -27,6 +27,13 @@ import {
     SignatureAlgorithmEnumToJSON,
     SignatureAlgorithmEnumToJSONTyped,
 } from './SignatureAlgorithmEnum';
+import type { SAMLProviderLogoutMethodEnum } from './SAMLProviderLogoutMethodEnum';
+import {
+    SAMLProviderLogoutMethodEnumFromJSON,
+    SAMLProviderLogoutMethodEnumFromJSONTyped,
+    SAMLProviderLogoutMethodEnumToJSON,
+    SAMLProviderLogoutMethodEnumToJSONTyped,
+} from './SAMLProviderLogoutMethodEnum';
 import type { SAMLNameIDPolicyEnum } from './SAMLNameIDPolicyEnum';
 import {
     SAMLNameIDPolicyEnumFromJSON,
@@ -34,13 +41,13 @@ import {
     SAMLNameIDPolicyEnumToJSON,
     SAMLNameIDPolicyEnumToJSONTyped,
 } from './SAMLNameIDPolicyEnum';
-import type { SpBindingEnum } from './SpBindingEnum';
+import type { SAMLBindingsEnum } from './SAMLBindingsEnum';
 import {
-    SpBindingEnumFromJSON,
-    SpBindingEnumFromJSONTyped,
-    SpBindingEnumToJSON,
-    SpBindingEnumToJSONTyped,
-} from './SpBindingEnum';
+    SAMLBindingsEnumFromJSON,
+    SAMLBindingsEnumFromJSONTyped,
+    SAMLBindingsEnumToJSON,
+    SAMLBindingsEnumToJSONTyped,
+} from './SAMLBindingsEnum';
 
 /**
  * SAMLProvider Serializer
@@ -84,6 +91,12 @@ export interface SAMLProviderRequest {
      * @memberof SAMLProviderRequest
      */
     acsUrl: string;
+    /**
+     * Single Logout Service URL where the logout response should be sent.
+     * @type {string}
+     * @memberof SAMLProviderRequest
+     */
+    slsUrl?: string;
     /**
      * Value of the audience restriction field of the assertion. When left empty, no audience restriction will be added.
      * @type {string}
@@ -168,12 +181,30 @@ export interface SAMLProviderRequest {
      * @memberof SAMLProviderRequest
      */
     signResponse?: boolean;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof SAMLProviderRequest
+     */
+    signLogoutRequest?: boolean;
     /**
      * This determines how authentik sends the response back to the Service Provider.
-     * @type {SpBindingEnum}
+     * @type {SAMLBindingsEnum}
+     * @memberof SAMLProviderRequest
+     */
+    spBinding?: SAMLBindingsEnum;
+    /**
+     * This determines how authentik sends the logout response back to the Service Provider.
+     * @type {SAMLBindingsEnum}
+     * @memberof SAMLProviderRequest
+     */
+    slsBinding?: SAMLBindingsEnum;
+    /**
+     * Method to use for logout. Front-channel iframe loads all logout URLs simultaneously in hidden iframes. Front-channel native uses your active browser tab to send post requests and redirect to providers. Back-channel sends logout requests directly from the server without user interaction (requires POST SLS binding).
+     * @type {SAMLProviderLogoutMethodEnum}
      * @memberof SAMLProviderRequest
      */
-    spBinding?: SpBindingEnum;
+    logoutMethod?: SAMLProviderLogoutMethodEnum;
     /**
      * Default relay_state value for IDP-initiated logins
      * @type {string}
@@ -217,6 +248,7 @@ export function SAMLProviderRequestFromJSONTyped(json: any, ignoreDiscriminator:
         'invalidationFlow': json['invalidation_flow'],
         'propertyMappings': json['property_mappings'] == null ? undefined : json['property_mappings'],
         'acsUrl': json['acs_url'],
+        'slsUrl': json['sls_url'] == null ? undefined : json['sls_url'],
         'audience': json['audience'] == null ? undefined : json['audience'],
         'issuer': json['issuer'] == null ? undefined : json['issuer'],
         'assertionValidNotBefore': json['assertion_valid_not_before'] == null ? undefined : json['assertion_valid_not_before'],
@@ -231,7 +263,10 @@ export function SAMLProviderRequestFromJSONTyped(json: any, ignoreDiscriminator:
         'encryptionKp': json['encryption_kp'] == null ? undefined : json['encryption_kp'],
         'signAssertion': json['sign_assertion'] == null ? undefined : json['sign_assertion'],
         'signResponse': json['sign_response'] == null ? undefined : json['sign_response'],
-        'spBinding': json['sp_binding'] == null ? undefined : SpBindingEnumFromJSON(json['sp_binding']),
+        'signLogoutRequest': json['sign_logout_request'] == null ? undefined : json['sign_logout_request'],
+        'spBinding': json['sp_binding'] == null ? undefined : SAMLBindingsEnumFromJSON(json['sp_binding']),
+        'slsBinding': json['sls_binding'] == null ? undefined : SAMLBindingsEnumFromJSON(json['sls_binding']),
+        'logoutMethod': json['logout_method'] == null ? undefined : SAMLProviderLogoutMethodEnumFromJSON(json['logout_method']),
         'defaultRelayState': json['default_relay_state'] == null ? undefined : json['default_relay_state'],
         'defaultNameIdPolicy': json['default_name_id_policy'] == null ? undefined : SAMLNameIDPolicyEnumFromJSON(json['default_name_id_policy']),
     };
@@ -254,6 +289,7 @@ export function SAMLProviderRequestToJSONTyped(value?: SAMLProviderRequest | nul
         'invalidation_flow': value['invalidationFlow'],
         'property_mappings': value['propertyMappings'],
         'acs_url': value['acsUrl'],
+        'sls_url': value['slsUrl'],
         'audience': value['audience'],
         'issuer': value['issuer'],
         'assertion_valid_not_before': value['assertionValidNotBefore'],
@@ -268,7 +304,10 @@ export function SAMLProviderRequestToJSONTyped(value?: SAMLProviderRequest | nul
         'encryption_kp': value['encryptionKp'],
         'sign_assertion': value['signAssertion'],
         'sign_response': value['signResponse'],
-        'sp_binding': SpBindingEnumToJSON(value['spBinding']),
+        'sign_logout_request': value['signLogoutRequest'],
+        'sp_binding': SAMLBindingsEnumToJSON(value['spBinding']),
+        'sls_binding': SAMLBindingsEnumToJSON(value['slsBinding']),
+        'logout_method': SAMLProviderLogoutMethodEnumToJSON(value['logoutMethod']),
         'default_relay_state': value['defaultRelayState'],
         'default_name_id_policy': SAMLNameIDPolicyEnumToJSON(value['defaultNameIdPolicy']),
     };