@pulumi/auth0 3.41.0-alpha.1777270152 → 3.41.0

package/organizationConnection.js

@@ -78,8 +78,11 @@ class OrganizationConnection extends pulumi.CustomResource {
             const state = argsOrState;
             resourceInputs["assignMembershipOnLogin"] = state?.assignMembershipOnLogin;
             resourceInputs["connectionId"] = state?.connectionId;
+            resourceInputs["isEnabled"] = state?.isEnabled;
             resourceInputs["isSignupEnabled"] = state?.isSignupEnabled;
             resourceInputs["name"] = state?.name;
+            resourceInputs["organizationAccessLevel"] = state?.organizationAccessLevel;
+            resourceInputs["organizationConnectionName"] = state?.organizationConnectionName;
             resourceInputs["organizationId"] = state?.organizationId;
             resourceInputs["showAsButton"] = state?.showAsButton;
             resourceInputs["strategy"] = state?.strategy;
@@ -94,10 +97,13 @@ class OrganizationConnection extends pulumi.CustomResource {
             }
             resourceInputs["assignMembershipOnLogin"] = args?.assignMembershipOnLogin;
             resourceInputs["connectionId"] = args?.connectionId;
+            resourceInputs["isEnabled"] = args?.isEnabled;
             resourceInputs["isSignupEnabled"] = args?.isSignupEnabled;
+            resourceInputs["organizationAccessLevel"] = args?.organizationAccessLevel;
             resourceInputs["organizationId"] = args?.organizationId;
             resourceInputs["showAsButton"] = args?.showAsButton;
             resourceInputs["name"] = undefined /*out*/;
+            resourceInputs["organizationConnectionName"] = undefined /*out*/;
             resourceInputs["strategy"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);

package/organizationConnection.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationConnection.js","sourceRoot":"","sources":["../organizationConnection.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAa,sBAAuB,SAAQ,MAAM,CAAC,cAAc;IAC7D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmC,EAAE,IAAmC;QACjI,OAAO,IAAI,sBAAsB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,sBAAsB,CAAC,YAAY,CAAC;IACvE,CAAC;IAuCD,YAAY,IAAY,EAAE,WAAsE,EAAE,IAAmC;QACjI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsD,CAAC;YACrE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqD,CAAC;YACnE,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;;AA/FL,wDAgGC;AAlFG,gBAAgB;AACO,mCAAY,GAAG,2DAA2D,CAAC"}
+{"version":3,"file":"organizationConnection.js","sourceRoot":"","sources":["../organizationConnection.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAa,sBAAuB,SAAQ,MAAM,CAAC,cAAc;IAC7D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmC,EAAE,IAAmC;QACjI,OAAO,IAAI,sBAAsB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,sBAAsB,CAAC,YAAY,CAAC;IACvE,CAAC;IAmDD,YAAY,IAAY,EAAE,WAAsE,EAAE,IAAmC;QACjI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsD,CAAC;YACrE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqD,CAAC;YACnE,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,4BAA4B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjE,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;;AAjHL,wDAkHC;AApGG,gBAAgB;AACO,mCAAY,GAAG,2DAA2D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pulumi/auth0",
-    "version": "3.41.0-alpha.1777270152",
+    "version": "3.41.0",
     "description": "A Pulumi package for creating and managing auth0 cloud resources.",
     "keywords": [
         "pulumi",
@@ -23,6 +23,6 @@
     "pulumi": {
         "resource": true,
         "name": "auth0",
-        "version": "3.41.0-alpha.1777270152"
+        "version": "3.41.0"
     }
 }

package/tenant.d.ts

@@ -86,6 +86,10 @@ export declare class Tenant extends pulumi.CustomResource {
      * URLs that Auth0 may redirect to after logout.
      */
     readonly allowedLogoutUrls: pulumi.Output<string[]>;
+    /**
+     * Whether the tenant supports Client ID Metadata Document (CIMD) for client registration.
+     */
+    readonly clientIdMetadataDocumentSupported: pulumi.Output<boolean>;
     /**
      * Whether to enable flexible factors for MFA in the PostLogin action.
      */
@@ -158,6 +162,10 @@ export declare class Tenant extends pulumi.CustomResource {
      * Enable pushed authorization requests.
      */
     readonly pushedAuthorizationRequestsSupported: pulumi.Output<boolean>;
+    /**
+     * Profile that determines how the protected resource identity is specified in OAuth endpoints. When set to `audience` (default), the `audience` parameter is used. When set to `compatibility`, the `resource` parameter is used as fallback if `audience` is not provided.
+     */
+    readonly resourceParameterProfile: pulumi.Output<string>;
     /**
      * Selected sandbox version for the extensibility environment, which allows you to use custom scripts to extend parts of Auth0's functionality.
      */
@@ -211,6 +219,10 @@ export interface TenantState {
      * URLs that Auth0 may redirect to after logout.
      */
     allowedLogoutUrls?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Whether the tenant supports Client ID Metadata Document (CIMD) for client registration.
+     */
+    clientIdMetadataDocumentSupported?: pulumi.Input<boolean>;
     /**
      * Whether to enable flexible factors for MFA in the PostLogin action.
      */
@@ -283,6 +295,10 @@ export interface TenantState {
      * Enable pushed authorization requests.
      */
     pushedAuthorizationRequestsSupported?: pulumi.Input<boolean>;
+    /**
+     * Profile that determines how the protected resource identity is specified in OAuth endpoints. When set to `audience` (default), the `audience` parameter is used. When set to `compatibility`, the `resource` parameter is used as fallback if `audience` is not provided.
+     */
+    resourceParameterProfile?: pulumi.Input<string>;
     /**
      * Selected sandbox version for the extensibility environment, which allows you to use custom scripts to extend parts of Auth0's functionality.
      */
@@ -328,6 +344,10 @@ export interface TenantArgs {
      * URLs that Auth0 may redirect to after logout.
      */
     allowedLogoutUrls?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Whether the tenant supports Client ID Metadata Document (CIMD) for client registration.
+     */
+    clientIdMetadataDocumentSupported?: pulumi.Input<boolean>;
     /**
      * Whether to enable flexible factors for MFA in the PostLogin action.
      */
@@ -400,6 +420,10 @@ export interface TenantArgs {
      * Enable pushed authorization requests.
      */
     pushedAuthorizationRequestsSupported?: pulumi.Input<boolean>;
+    /**
+     * Profile that determines how the protected resource identity is specified in OAuth endpoints. When set to `audience` (default), the `audience` parameter is used. When set to `compatibility`, the `resource` parameter is used as fallback if `audience` is not provided.
+     */
+    resourceParameterProfile?: pulumi.Input<string>;
     /**
      * Selected sandbox version for the extensibility environment, which allows you to use custom scripts to extend parts of Auth0's functionality.
      */

package/tenant.js

@@ -93,6 +93,7 @@ class Tenant extends pulumi.CustomResource {
             resourceInputs["acrValuesSupporteds"] = state?.acrValuesSupporteds;
             resourceInputs["allowOrganizationNameInAuthenticationApi"] = state?.allowOrganizationNameInAuthenticationApi;
             resourceInputs["allowedLogoutUrls"] = state?.allowedLogoutUrls;
+            resourceInputs["clientIdMetadataDocumentSupported"] = state?.clientIdMetadataDocumentSupported;
             resourceInputs["customizeMfaInPostloginAction"] = state?.customizeMfaInPostloginAction;
             resourceInputs["defaultAudience"] = state?.defaultAudience;
             resourceInputs["defaultDirectory"] = state?.defaultDirectory;
@@ -111,6 +112,7 @@ class Tenant extends pulumi.CustomResource {
             resourceInputs["phoneConsolidatedExperience"] = state?.phoneConsolidatedExperience;
             resourceInputs["pictureUrl"] = state?.pictureUrl;
             resourceInputs["pushedAuthorizationRequestsSupported"] = state?.pushedAuthorizationRequestsSupported;
+            resourceInputs["resourceParameterProfile"] = state?.resourceParameterProfile;
             resourceInputs["sandboxVersion"] = state?.sandboxVersion;
             resourceInputs["sessionCookie"] = state?.sessionCookie;
             resourceInputs["sessionLifetime"] = state?.sessionLifetime;
@@ -124,6 +126,7 @@ class Tenant extends pulumi.CustomResource {
             resourceInputs["acrValuesSupporteds"] = args?.acrValuesSupporteds;
             resourceInputs["allowOrganizationNameInAuthenticationApi"] = args?.allowOrganizationNameInAuthenticationApi;
             resourceInputs["allowedLogoutUrls"] = args?.allowedLogoutUrls;
+            resourceInputs["clientIdMetadataDocumentSupported"] = args?.clientIdMetadataDocumentSupported;
             resourceInputs["customizeMfaInPostloginAction"] = args?.customizeMfaInPostloginAction;
             resourceInputs["defaultAudience"] = args?.defaultAudience;
             resourceInputs["defaultDirectory"] = args?.defaultDirectory;
@@ -142,6 +145,7 @@ class Tenant extends pulumi.CustomResource {
             resourceInputs["phoneConsolidatedExperience"] = args?.phoneConsolidatedExperience;
             resourceInputs["pictureUrl"] = args?.pictureUrl;
             resourceInputs["pushedAuthorizationRequestsSupported"] = args?.pushedAuthorizationRequestsSupported;
+            resourceInputs["resourceParameterProfile"] = args?.resourceParameterProfile;
             resourceInputs["sandboxVersion"] = args?.sandboxVersion;
             resourceInputs["sessionCookie"] = args?.sessionCookie;
             resourceInputs["sessionLifetime"] = args?.sessionLifetime;

package/tenant.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../tenant.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA2HD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,0CAA0C,CAAC,GAAG,KAAK,EAAE,wCAAwC,CAAC;YAC7G,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,+BAA+B,CAAC,GAAG,KAAK,EAAE,6BAA6B,CAAC;YACvF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,EAAE,4BAA4B,CAAC;YACrF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,EAAE,2BAA2B,CAAC;YACnF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,sCAAsC,CAAC,GAAG,KAAK,EAAE,oCAAoC,CAAC;YACrG,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,gDAAgD,CAAC,GAAG,KAAK,EAAE,8CAA8C,CAAC;YACzH,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,0CAA0C,CAAC,GAAG,IAAI,EAAE,wCAAwC,CAAC;YAC5G,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,+BAA+B,CAAC,GAAG,IAAI,EAAE,6BAA6B,CAAC;YACtF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,EAAE,4BAA4B,CAAC;YACpF,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,EAAE,2BAA2B,CAAC;YAClF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,sCAAsC,CAAC,GAAG,IAAI,EAAE,oCAAoC,CAAC;YACpG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,gDAAgD,CAAC,GAAG,IAAI,EAAE,8CAA8C,CAAC;YACxH,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAvNL,wBAwNC;AA1MG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../tenant.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAmID,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,0CAA0C,CAAC,GAAG,KAAK,EAAE,wCAAwC,CAAC;YAC7G,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,mCAAmC,CAAC,GAAG,KAAK,EAAE,iCAAiC,CAAC;YAC/F,cAAc,CAAC,+BAA+B,CAAC,GAAG,KAAK,EAAE,6BAA6B,CAAC;YACvF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,EAAE,4BAA4B,CAAC;YACrF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,EAAE,2BAA2B,CAAC;YACnF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,sCAAsC,CAAC,GAAG,KAAK,EAAE,oCAAoC,CAAC;YACrG,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,gDAAgD,CAAC,GAAG,KAAK,EAAE,8CAA8C,CAAC;YACzH,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,0CAA0C,CAAC,GAAG,IAAI,EAAE,wCAAwC,CAAC;YAC5G,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,mCAAmC,CAAC,GAAG,IAAI,EAAE,iCAAiC,CAAC;YAC9F,cAAc,CAAC,+BAA+B,CAAC,GAAG,IAAI,EAAE,6BAA6B,CAAC;YACtF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,EAAE,4BAA4B,CAAC;YACpF,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,EAAE,2BAA2B,CAAC;YAClF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,sCAAsC,CAAC,GAAG,IAAI,EAAE,oCAAoC,CAAC;YACpG,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,gDAAgD,CAAC,GAAG,IAAI,EAAE,8CAA8C,CAAC;YACxH,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAnOL,wBAoOC;AAtNG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}

package/types/input.d.ts

@@ -1176,6 +1176,94 @@ export interface ClientAddonsZoom {
      */
     account?: pulumi.Input<string>;
 }
+export interface ClientCimdDefaultOrganization {
+    /**
+     * Definition of the flow that needs to be configured. Eg. client_credentials
+     */
+    flows: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The unique identifier of the organization
+     */
+    organizationId: pulumi.Input<string>;
+}
+export interface ClientCimdJwtConfiguration {
+    /**
+     * Algorithm used to sign JWTs. CIMD clients support `RS256`, `RS512`, and `PS256` (asymmetric only).
+     */
+    alg?: pulumi.Input<string>;
+    /**
+     * Number of seconds during which the JWT will be valid.
+     */
+    lifetimeInSeconds?: pulumi.Input<number>;
+    /**
+     * Indicates whether the client secret is Base64-encoded.
+     */
+    secretEncoded?: pulumi.Input<boolean>;
+}
+export interface ClientCimdRefreshToken {
+    /**
+     * Refresh token expiration type. Must be `expiring` for CIMD clients.
+     */
+    expirationType?: pulumi.Input<string>;
+    /**
+     * The time in seconds after which inactive refresh tokens will expire.
+     */
+    idleTokenLifetime?: pulumi.Input<number>;
+    /**
+     * Whether inactive refresh tokens should remain valid indefinitely. Must be `false` for CIMD clients.
+     */
+    infiniteIdleTokenLifetime?: pulumi.Input<boolean>;
+    /**
+     * Whether refresh tokens should remain valid indefinitely. If false, `tokenLifetime` should also be set.
+     */
+    infiniteTokenLifetime?: pulumi.Input<boolean>;
+    /**
+     * The amount of time in seconds in which a refresh token may be reused without triggering reuse detection.
+     */
+    leeway?: pulumi.Input<number>;
+    /**
+     * Refresh token rotation type.Valid values are `rotating` and `non-rotating`
+     */
+    rotationType?: pulumi.Input<string>;
+    /**
+     * The absolute lifetime of a refresh token in seconds.
+     */
+    tokenLifetime?: pulumi.Input<number>;
+}
+export interface ClientCimdTokenQuota {
+    /**
+     * The token quota configuration for client credentials.
+     */
+    clientCredentials: pulumi.Input<inputs.ClientCimdTokenQuotaClientCredentials>;
+}
+export interface ClientCimdTokenQuotaClientCredentials {
+    /**
+     * If enabled, the quota will be enforced and requests in excess of the quota will fail. If disabled, the quota will not be enforced, but notifications for requests exceeding the quota will be available in logs.
+     */
+    enforce?: pulumi.Input<boolean>;
+    /**
+     * Maximum number of issued tokens per day
+     */
+    perDay?: pulumi.Input<number>;
+    /**
+     * Maximum number of issued tokens per hour
+     */
+    perHour?: pulumi.Input<number>;
+}
+export interface ClientCimdValidation {
+    /**
+     * Whether the metadata document passed validation.
+     */
+    valid?: pulumi.Input<boolean>;
+    /**
+     * Array of validation violation messages, if any. Violations indicate issues that prevented the metadata document from being fully processed.
+     */
+    violations?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Array of warning messages, if any. Warnings indicate non-critical issues such as unsupported properties being ignored.
+     */
+    warnings?: pulumi.Input<pulumi.Input<string>[]>;
+}
 export interface ClientCredentialsPrivateKeyJwt {
     /**
      * Client credentials available for use when Private Key JWT is in use as the client authentication method. A maximum of 2 client credentials can be set.
@@ -1448,6 +1536,24 @@ export interface ClientMobileIos {
     appBundleIdentifier?: pulumi.Input<string>;
     teamId?: pulumi.Input<string>;
 }
+export interface ClientMyOrganizationConfiguration {
+    /**
+     * The list of connection strategies that are allowed when creating organizations for this client (e.g. "okta", "samlp").
+     */
+    allowedStrategies?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Controls the behavior when deleting connections associated with organizations for this client. Possible values: `allow`, `allowIfEmpty`.
+     */
+    connectionDeletionBehavior?: pulumi.Input<string>;
+    /**
+     * The ID of the connection profile to use when creating organizations for this client.
+     */
+    connectionProfileId?: pulumi.Input<string>;
+    /**
+     * The ID of the user attribute profile to use when creating organizations for this client.
+     */
+    userAttributeProfileId?: pulumi.Input<string>;
+}
 export interface ClientNativeSocialLogin {
     apple?: pulumi.Input<inputs.ClientNativeSocialLoginApple>;
     facebook?: pulumi.Input<inputs.ClientNativeSocialLoginFacebook>;
@@ -1561,7 +1667,7 @@ export interface ClientSessionTransfer {
 }
 export interface ClientTokenExchange {
     /**
-     * List of allowed profile types for token exchange
+     * List of allowed profile types for token exchange. Supported values include: custom*authentication, on*behalf*of*token_exchange.
      */
     allowAnyProfileOfTypes: pulumi.Input<pulumi.Input<string>[]>;
 }
@@ -3343,12 +3449,24 @@ export interface OrganizationConnectionsEnabledConnection {
      * The ID of the connection to enable for the organization.
      */
     connectionId: pulumi.Input<string>;
+    /**
+     * Whether the connection is enabled for the organization.
+     */
+    isEnabled?: pulumi.Input<boolean>;
     /**
      * Determines whether organization sign-up should be enabled for this organization connection. Only applicable for database connections. Note: `isSignupEnabled` can only be `true` if `assignMembershipOnLogin` is `true`.
      */
     isSignupEnabled?: pulumi.Input<boolean>;
     /**
-     * Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections.
+     * The access level for this organization connection. Can be `none`, `readonly`, `limited`, or `full`.
+     */
+    organizationAccessLevel?: pulumi.Input<string>;
+    /**
+     * Name of the connection in the scope of this organization.
+     */
+    organizationConnectionName?: pulumi.Input<string>;
+    /**
+     * Determines whether a connection should be displayed on this organization's login prompt. Only applicable for enterprise connections.
      */
     showAsButton?: pulumi.Input<boolean>;
 }

package/types/output.d.ts

@@ -1175,6 +1175,94 @@ export interface ClientAddonsZoom {
      */
     account?: string;
 }
+export interface ClientCimdDefaultOrganization {
+    /**
+     * Definition of the flow that needs to be configured. Eg. client_credentials
+     */
+    flows: string[];
+    /**
+     * The unique identifier of the organization
+     */
+    organizationId: string;
+}
+export interface ClientCimdJwtConfiguration {
+    /**
+     * Algorithm used to sign JWTs. CIMD clients support `RS256`, `RS512`, and `PS256` (asymmetric only).
+     */
+    alg: string;
+    /**
+     * Number of seconds during which the JWT will be valid.
+     */
+    lifetimeInSeconds: number;
+    /**
+     * Indicates whether the client secret is Base64-encoded.
+     */
+    secretEncoded: boolean;
+}
+export interface ClientCimdRefreshToken {
+    /**
+     * Refresh token expiration type. Must be `expiring` for CIMD clients.
+     */
+    expirationType: string;
+    /**
+     * The time in seconds after which inactive refresh tokens will expire.
+     */
+    idleTokenLifetime: number;
+    /**
+     * Whether inactive refresh tokens should remain valid indefinitely. Must be `false` for CIMD clients.
+     */
+    infiniteIdleTokenLifetime: boolean;
+    /**
+     * Whether refresh tokens should remain valid indefinitely. If false, `tokenLifetime` should also be set.
+     */
+    infiniteTokenLifetime: boolean;
+    /**
+     * The amount of time in seconds in which a refresh token may be reused without triggering reuse detection.
+     */
+    leeway: number;
+    /**
+     * Refresh token rotation type.Valid values are `rotating` and `non-rotating`
+     */
+    rotationType: string;
+    /**
+     * The absolute lifetime of a refresh token in seconds.
+     */
+    tokenLifetime: number;
+}
+export interface ClientCimdTokenQuota {
+    /**
+     * The token quota configuration for client credentials.
+     */
+    clientCredentials: outputs.ClientCimdTokenQuotaClientCredentials;
+}
+export interface ClientCimdTokenQuotaClientCredentials {
+    /**
+     * If enabled, the quota will be enforced and requests in excess of the quota will fail. If disabled, the quota will not be enforced, but notifications for requests exceeding the quota will be available in logs.
+     */
+    enforce?: boolean;
+    /**
+     * Maximum number of issued tokens per day
+     */
+    perDay?: number;
+    /**
+     * Maximum number of issued tokens per hour
+     */
+    perHour?: number;
+}
+export interface ClientCimdValidation {
+    /**
+     * Whether the metadata document passed validation.
+     */
+    valid: boolean;
+    /**
+     * Array of validation violation messages, if any. Violations indicate issues that prevented the metadata document from being fully processed.
+     */
+    violations: string[];
+    /**
+     * Array of warning messages, if any. Warnings indicate non-critical issues such as unsupported properties being ignored.
+     */
+    warnings: string[];
+}
 export interface ClientCredentialsPrivateKeyJwt {
     /**
      * Client credentials available for use when Private Key JWT is in use as the client authentication method. A maximum of 2 client credentials can be set.
@@ -1447,6 +1535,24 @@ export interface ClientMobileIos {
     appBundleIdentifier?: string;
     teamId?: string;
 }
+export interface ClientMyOrganizationConfiguration {
+    /**
+     * The list of connection strategies that are allowed when creating organizations for this client (e.g. "okta", "samlp").
+     */
+    allowedStrategies?: string[];
+    /**
+     * Controls the behavior when deleting connections associated with organizations for this client. Possible values: `allow`, `allowIfEmpty`.
+     */
+    connectionDeletionBehavior?: string;
+    /**
+     * The ID of the connection profile to use when creating organizations for this client.
+     */
+    connectionProfileId?: string;
+    /**
+     * The ID of the user attribute profile to use when creating organizations for this client.
+     */
+    userAttributeProfileId?: string;
+}
 export interface ClientNativeSocialLogin {
     apple: outputs.ClientNativeSocialLoginApple;
     facebook: outputs.ClientNativeSocialLoginFacebook;
@@ -1560,7 +1666,7 @@ export interface ClientSessionTransfer {
 }
 export interface ClientTokenExchange {
     /**
-     * List of allowed profile types for token exchange
+     * List of allowed profile types for token exchange. Supported values include: custom*authentication, on*behalf*of*token_exchange.
      */
     allowAnyProfileOfTypes: string[];
 }
@@ -4322,6 +4428,24 @@ export interface GetClientMobileIo {
     appBundleIdentifier: string;
     teamId: string;
 }
+export interface GetClientMyOrganizationConfiguration {
+    /**
+     * The list of connection strategies that are allowed when creating organizations for this client (e.g. "okta", "samlp").
+     */
+    allowedStrategies: string[];
+    /**
+     * Controls the behavior when deleting connections associated with organizations for this client. Possible values: `allow`, `allowIfEmpty`.
+     */
+    connectionDeletionBehavior: string;
+    /**
+     * The ID of the connection profile to use when creating organizations for this client.
+     */
+    connectionProfileId: string;
+    /**
+     * The ID of the user attribute profile to use when creating organizations for this client.
+     */
+    userAttributeProfileId: string;
+}
 export interface GetClientNativeSocialLogin {
     apples: outputs.GetClientNativeSocialLoginApple[];
     facebooks: outputs.GetClientNativeSocialLoginFacebook[];
@@ -4479,7 +4603,7 @@ export interface GetClientSignedRequestObjectCredential {
 }
 export interface GetClientTokenExchange {
     /**
-     * List of allowed profile types for token exchange
+     * List of allowed profile types for token exchange. Supported values include: custom_authentication, on_behalf_of_token_exchange.
      */
     allowAnyProfileOfTypes: string[];
 }
@@ -4550,18 +4674,38 @@ export interface GetClientsClient {
      * Express Configuration settings for the client. Used with OIN Express Configuration.
      */
     expressConfigurations: outputs.GetClientsClientExpressConfiguration[];
+    /**
+     * The URL of the Client ID Metadata Document. Only present for CIMD-registered clients.
+     */
+    externalClientId: string;
+    /**
+     * Who created the external metadata client: `admin` (via Management API), `client` (self-registered), or `unknown`.
+     */
+    externalMetadataCreatedBy: string;
+    /**
+     * Type of external metadata. Value is `cimd` for CIMD-registered clients.
+     */
+    externalMetadataType: string;
     /**
      * Types of grants that this client is authorized to use.
      */
     grantTypes: string[];
     /**
-     * Indicates whether this client is a first-party client.Defaults to true from the API
+     * Indicates whether this client is a first-party client.
      */
     isFirstParty: boolean;
     /**
      * Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to `clientSecretPost` or `clientSecretBasic`. Setting this property when creating the resource, will default the authentication method to `clientSecretPost`. To change the authentication method to `clientSecretBasic` use the `auth0.ClientCredentials` resource.
      */
     isTokenEndpointIpHeaderTrusted: boolean;
+    /**
+     * URL for the JSON Web Key Set (JWKS) containing the public keys used for `privateKeyJwt` authentication. Only present for CIMD clients using `privateKeyJwt` authentication.
+     */
+    jwksUri: string;
+    /**
+     * Configuration for self-service organization features, controlling how organizations are created and managed for this client.
+     */
+    myOrganizationConfigurations: outputs.GetClientsClientMyOrganizationConfiguration[];
     /**
      * The name of the client. If not provided, `clientId` must be set.
      */
@@ -4640,6 +4784,24 @@ export interface GetClientsClientExpressConfigurationLinkedClient {
      */
     clientId: string;
 }
+export interface GetClientsClientMyOrganizationConfiguration {
+    /**
+     * The list of connection strategies that are allowed when creating organizations for this client (e.g. "okta", "samlp").
+     */
+    allowedStrategies: string[];
+    /**
+     * Controls the behavior when deleting connections associated with organizations for this client. Possible values: `allow`, `allowIfEmpty`.
+     */
+    connectionDeletionBehavior: string;
+    /**
+     * The ID of the connection profile to use when creating organizations for this client.
+     */
+    connectionProfileId: string;
+    /**
+     * The ID of the user attribute profile to use when creating organizations for this client.
+     */
+    userAttributeProfileId: string;
+}
 export interface GetClientsClientOidcLogout {
     /**
      * Configure OIDC logout initiators for the Client
@@ -4695,7 +4857,7 @@ export interface GetClientsClientSessionTransfer {
 }
 export interface GetClientsClientTokenExchange {
     /**
-     * List of allowed profile types for token exchange
+     * List of allowed profile types for token exchange. Supported values include: custom_authentication, on_behalf_of_token_exchange.
      */
     allowAnyProfileOfTypes: string[];
 }
@@ -6087,12 +6249,24 @@ export interface GetOrganizationConnection {
      * The ID of the enabled connection on the organization.
      */
     connectionId: string;
+    /**
+     * Whether the connection is enabled for the organization.
+     */
+    isEnabled: boolean;
     /**
      * Determines whether organization sign-up should be enabled for this organization connection. Only applicable for database connections. Note: `isSignupEnabled` can only be `true` if `assignMembershipOnLogin` is `true`.
      */
     isSignupEnabled: boolean;
     /**
-     * Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections.
+     * The access level for this organization connection. Can be `none`, `readonly`, `limited`, or `full`.
+     */
+    organizationAccessLevel: string;
+    /**
+     * Name of the connection in the scope of this organization.
+     */
+    organizationConnectionName: string;
+    /**
+     * Determines whether a connection should be displayed on this organization's login prompt. Only applicable for enterprise connections.
      */
     showAsButton: boolean;
 }
@@ -7213,12 +7387,24 @@ export interface OrganizationConnectionsEnabledConnection {
      * The ID of the connection to enable for the organization.
      */
     connectionId: string;
+    /**
+     * Whether the connection is enabled for the organization.
+     */
+    isEnabled?: boolean;
     /**
      * Determines whether organization sign-up should be enabled for this organization connection. Only applicable for database connections. Note: `isSignupEnabled` can only be `true` if `assignMembershipOnLogin` is `true`.
      */
     isSignupEnabled?: boolean;
     /**
-     * Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections.
+     * The access level for this organization connection. Can be `none`, `readonly`, `limited`, or `full`.
+     */
+    organizationAccessLevel: string;
+    /**
+     * Name of the connection in the scope of this organization.
+     */
+    organizationConnectionName?: string;
+    /**
+     * Determines whether a connection should be displayed on this organization's login prompt. Only applicable for enterprise connections.
      */
     showAsButton?: boolean;
 }