@pulumi/auth0 3.51.0-alpha.1786940924 → 3.51.0

package/organizationClient.js

@@ -0,0 +1,130 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationClient = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * With this resource, you can manage the association between an organization and an application (client), controlling that application's entitlement to the organization (EA only). This is distinct from `auth0.OrganizationClientGrant`, which associates an organization with a `clientGrant` (a client/audience/scopes triple used for client-credentials exchanges).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as auth0 from "@pulumi/auth0";
+ *
+ * const myOrganization = new auth0.Organization("my_organization", {
+ *     name: "my-organization",
+ *     displayName: "My Organization",
+ * });
+ * const myClient = new auth0.Client("my_client", {name: "My Application"});
+ * // Entitle the application to the organization (EA only). This is distinct
+ * // from `auth0_organization_client_grant`, which associates the organization
+ * // with a client_grant instead of an application.
+ * const myOrgClient = new auth0.OrganizationClient("my_org_client", {
+ *     organizationId: myOrganization.id,
+ *     clientId: myClient.id,
+ *     useForMemberAccess: true,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported by specifying the
+ * organization ID and client ID separated by "::" (note the double colon)
+ * <organizationID>::<clientID>
+ *
+ * Example:
+ *
+ * ```sh
+ * $ pulumi import auth0:index/organizationClient:OrganizationClient my_org_client "org_XXXXX::clientXXXXX"
+ * ```
+ */
+class OrganizationClient extends pulumi.CustomResource {
+    /**
+     * Get an existing OrganizationClient resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new OrganizationClient(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'auth0:index/organizationClient:OrganizationClient';
+    /**
+     * Returns true if the given object is an instance of OrganizationClient.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === OrganizationClient.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["appType"] = state?.appType;
+            resourceInputs["clientId"] = state?.clientId;
+            resourceInputs["grantTypes"] = state?.grantTypes;
+            resourceInputs["isFirstParty"] = state?.isFirstParty;
+            resourceInputs["logoUri"] = state?.logoUri;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["organizationId"] = state?.organizationId;
+            resourceInputs["organizationUsage"] = state?.organizationUsage;
+            resourceInputs["useForMemberAccess"] = state?.useForMemberAccess;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.clientId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'clientId'");
+            }
+            if (args?.organizationId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'organizationId'");
+            }
+            resourceInputs["clientId"] = args?.clientId;
+            resourceInputs["organizationId"] = args?.organizationId;
+            resourceInputs["useForMemberAccess"] = args?.useForMemberAccess;
+            resourceInputs["appType"] = undefined /*out*/;
+            resourceInputs["grantTypes"] = undefined /*out*/;
+            resourceInputs["isFirstParty"] = undefined /*out*/;
+            resourceInputs["logoUri"] = undefined /*out*/;
+            resourceInputs["name"] = undefined /*out*/;
+            resourceInputs["organizationUsage"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(OrganizationClient.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.OrganizationClient = OrganizationClient;
+//# sourceMappingURL=organizationClient.js.map

package/organizationClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationClient.js","sourceRoot":"","sources":["../organizationClient.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,mDAAmD,CAAC;IAE1F;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IA+CD,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;SACpE;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AA3GL,gDA4GC"}

package/organizationClients.d.ts

@@ -0,0 +1,105 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * With this resource, you can manage all of the client (application) associations of an organization, controlling those applications' entitlement to the organization (EA only). This resource is authoritative: it manages the full set of associations, so it must not be used together with the `auth0.OrganizationClient` resource on the same organization. An organization accepts up to 100 associated clients.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as auth0 from "@pulumi/auth0";
+ *
+ * const myOrganization = new auth0.Organization("my_organization", {
+ *     name: "my-organization",
+ *     displayName: "My Organization",
+ * });
+ * const myClient = new auth0.Client("my_client", {name: "My Application"});
+ * const myOtherClient = new auth0.Client("my_other_client", {name: "My Other Application"});
+ * // Entitle both applications to the organization in one authoritative resource (EA only).
+ * // Use this instead of auth0_organization_client when you want Terraform to own the full
+ * // set of associations; do not use both resources on the same organization.
+ * const myOrgClients = new auth0.OrganizationClients("my_org_clients", {
+ *     organizationId: myOrganization.id,
+ *     clients: [
+ *         {
+ *             clientId: myClient.id,
+ *             useForMemberAccess: true,
+ *         },
+ *         {
+ *             clientId: myOtherClient.id,
+ *         },
+ *     ],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported by specifying the organization ID.
+ *
+ * Example:
+ *
+ * ```sh
+ * $ pulumi import auth0:index/organizationClients:OrganizationClients my_org_clients "org_XXXXX"
+ * ```
+ */
+export declare class OrganizationClients extends pulumi.CustomResource {
+    /**
+     * Get an existing OrganizationClients resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: OrganizationClientsState, opts?: pulumi.CustomResourceOptions): OrganizationClients;
+    /**
+     * Returns true if the given object is an instance of OrganizationClients.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is OrganizationClients;
+    /**
+     * The clients (applications) associated with the organization.
+     */
+    readonly clients: pulumi.Output<outputs.OrganizationClientsClient[]>;
+    /**
+     * The ID of the organization to associate the clients (applications) with.
+     */
+    readonly organizationId: pulumi.Output<string>;
+    /**
+     * Create a OrganizationClients resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: OrganizationClientsArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering OrganizationClients resources.
+ */
+export interface OrganizationClientsState {
+    /**
+     * The clients (applications) associated with the organization.
+     */
+    clients?: pulumi.Input<pulumi.Input<inputs.OrganizationClientsClient>[] | undefined>;
+    /**
+     * The ID of the organization to associate the clients (applications) with.
+     */
+    organizationId?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a OrganizationClients resource.
+ */
+export interface OrganizationClientsArgs {
+    /**
+     * The clients (applications) associated with the organization.
+     */
+    clients: pulumi.Input<pulumi.Input<inputs.OrganizationClientsClient>[]>;
+    /**
+     * The ID of the organization to associate the clients (applications) with.
+     */
+    organizationId: pulumi.Input<string>;
+}
+//# sourceMappingURL=organizationClients.d.ts.map

package/organizationClients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationClients.d.ts","sourceRoot":"","sources":["../organizationClients.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,qBAAa,mBAAoB,SAAQ,MAAM,CAAC,cAAc;IAC1D;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,mBAAmB;IAOxJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,mBAAmB;IAO9D;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACpF;;OAEG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE9D;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAsB/F;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACrC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACrF;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;IACxE;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACxC"}

package/organizationClients.js

@@ -0,0 +1,122 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationClients = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * With this resource, you can manage all of the client (application) associations of an organization, controlling those applications' entitlement to the organization (EA only). This resource is authoritative: it manages the full set of associations, so it must not be used together with the `auth0.OrganizationClient` resource on the same organization. An organization accepts up to 100 associated clients.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as auth0 from "@pulumi/auth0";
+ *
+ * const myOrganization = new auth0.Organization("my_organization", {
+ *     name: "my-organization",
+ *     displayName: "My Organization",
+ * });
+ * const myClient = new auth0.Client("my_client", {name: "My Application"});
+ * const myOtherClient = new auth0.Client("my_other_client", {name: "My Other Application"});
+ * // Entitle both applications to the organization in one authoritative resource (EA only).
+ * // Use this instead of auth0_organization_client when you want Terraform to own the full
+ * // set of associations; do not use both resources on the same organization.
+ * const myOrgClients = new auth0.OrganizationClients("my_org_clients", {
+ *     organizationId: myOrganization.id,
+ *     clients: [
+ *         {
+ *             clientId: myClient.id,
+ *             useForMemberAccess: true,
+ *         },
+ *         {
+ *             clientId: myOtherClient.id,
+ *         },
+ *     ],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported by specifying the organization ID.
+ *
+ * Example:
+ *
+ * ```sh
+ * $ pulumi import auth0:index/organizationClients:OrganizationClients my_org_clients "org_XXXXX"
+ * ```
+ */
+class OrganizationClients extends pulumi.CustomResource {
+    /**
+     * Get an existing OrganizationClients resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new OrganizationClients(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'auth0:index/organizationClients:OrganizationClients';
+    /**
+     * Returns true if the given object is an instance of OrganizationClients.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === OrganizationClients.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["clients"] = state?.clients;
+            resourceInputs["organizationId"] = state?.organizationId;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.clients === undefined && !opts.urn) {
+                throw new Error("Missing required property 'clients'");
+            }
+            if (args?.organizationId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'organizationId'");
+            }
+            resourceInputs["clients"] = args?.clients;
+            resourceInputs["organizationId"] = args?.organizationId;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(OrganizationClients.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.OrganizationClients = OrganizationClients;
+//# sourceMappingURL=organizationClients.js.map

package/organizationClients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationClients.js","sourceRoot":"","sources":["../organizationClients.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAa,mBAAoB,SAAQ,MAAM,CAAC,cAAc;IAC1D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgC,EAAE,IAAmC;QAC9H,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,qDAAqD,CAAC;IAE5F;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,mBAAmB,CAAC,YAAY,CAAC;IACpE,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAgE,EAAE,IAAmC;QAC3H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmD,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;SAC5D;aAAM;YACH,MAAM,IAAI,GAAG,WAAkD,CAAC;YAChE,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;;AAjEL,kDAkEC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pulumi/auth0",
-    "version": "3.51.0-alpha.1786940924",
+    "version": "3.51.0",
     "description": "A Pulumi package for creating and managing auth0 cloud resources.",
     "keywords": [
         "pulumi",
@@ -23,6 +23,6 @@
     "pulumi": {
         "resource": true,
         "name": "auth0",
-        "version": "3.51.0-alpha.1786940924"
+        "version": "3.51.0"
     }
 }

package/role.d.ts

@@ -12,6 +12,18 @@ import * as pulumi from "@pulumi/pulumi";
  *     name: "My Role - (Managed by Terraform)",
  *     description: "Role Description...",
  * });
+ * const myOrganization = new auth0.Organization("my_organization", {
+ *     name: "my-organization",
+ *     displayName: "My Organization",
+ * });
+ * // A role scoped to a single organization. Changing type or owner_id afterwards
+ * // replaces the role, as neither can be updated. (EA only)
+ * const myOrganizationRole = new auth0.Role("my_organization_role", {
+ *     name: "My Organization Role - (Managed by Terraform)",
+ *     description: "Organization Role Description...",
+ *     type: "organization",
+ *     ownerId: myOrganization.id,
+ * });
  * ```
  *
  * ## Import
@@ -48,6 +60,14 @@ export declare class Role extends pulumi.CustomResource {
      * The name of the role.
      */
     readonly name: pulumi.Output<string>;
+    /**
+     * The ID of the organization owning the role. Only applicable when `type` is `organization`, and required in that case. The Management API only accepts this field on creation, so changing it forces a new role to be created. (EA only)
+     */
+    readonly ownerId: pulumi.Output<string>;
+    /**
+     * The type of the role. Defaults to `tenant`, for a role available across the whole tenant. Set to `organization` to scope the role to a single organization, in which case `ownerId` must also be set. The Management API only accepts this field on creation, so changing it forces a new role to be created. (EA only)
+     */
+    readonly type: pulumi.Output<string>;
     /**
      * Create a Role resource with the given unique name, arguments, and options.
      *
@@ -69,6 +89,14 @@ export interface RoleState {
      * The name of the role.
      */
     name?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the organization owning the role. Only applicable when `type` is `organization`, and required in that case. The Management API only accepts this field on creation, so changing it forces a new role to be created. (EA only)
+     */
+    ownerId?: pulumi.Input<string | undefined>;
+    /**
+     * The type of the role. Defaults to `tenant`, for a role available across the whole tenant. Set to `organization` to scope the role to a single organization, in which case `ownerId` must also be set. The Management API only accepts this field on creation, so changing it forces a new role to be created. (EA only)
+     */
+    type?: pulumi.Input<string | undefined>;
 }
 /**
  * The set of arguments for constructing a Role resource.
@@ -82,5 +110,13 @@ export interface RoleArgs {
      * The name of the role.
      */
     name?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the organization owning the role. Only applicable when `type` is `organization`, and required in that case. The Management API only accepts this field on creation, so changing it forces a new role to be created. (EA only)
+     */
+    ownerId?: pulumi.Input<string | undefined>;
+    /**
+     * The type of the role. Defaults to `tenant`, for a role available across the whole tenant. Set to `organization` to scope the role to a single organization, in which case `ownerId` must also be set. The Management API only accepts this field on creation, so changing it forces a new role to be created. (EA only)
+     */
+    type?: pulumi.Input<string | undefined>;
 }
 //# sourceMappingURL=role.d.ts.map

package/role.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role.d.ts","sourceRoot":"","sources":["../role.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,IAAI;IAO1H;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,IAAI;IAO/C;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAgBjF;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACtB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACrB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3C"}
+{"version":3,"file":"role.d.ts","sourceRoot":"","sources":["../role.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,qBAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,IAAI;IAO1H;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,IAAI;IAO/C;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAoBjF;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACtB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACrB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3C"}

package/role.js

@@ -41,6 +41,18 @@ const utilities = __importStar(require("./utilities"));
  *     name: "My Role - (Managed by Terraform)",
  *     description: "Role Description...",
  * });
+ * const myOrganization = new auth0.Organization("my_organization", {
+ *     name: "my-organization",
+ *     displayName: "My Organization",
+ * });
+ * // A role scoped to a single organization. Changing type or owner_id afterwards
+ * // replaces the role, as neither can be updated. (EA only)
+ * const myOrganizationRole = new auth0.Role("my_organization_role", {
+ *     name: "My Organization Role - (Managed by Terraform)",
+ *     description: "Organization Role Description...",
+ *     type: "organization",
+ *     ownerId: myOrganization.id,
+ * });
  * ```
  *
  * ## Import
@@ -85,11 +97,15 @@ class Role extends pulumi.CustomResource {
             const state = argsOrState;
             resourceInputs["description"] = state?.description;
             resourceInputs["name"] = state?.name;
+            resourceInputs["ownerId"] = state?.ownerId;
+            resourceInputs["type"] = state?.type;
         }
         else {
             const args = argsOrState;
             resourceInputs["description"] = (args?.description) ?? "Managed by Pulumi";
             resourceInputs["name"] = args?.name;
+            resourceInputs["ownerId"] = args?.ownerId;
+            resourceInputs["type"] = args?.type;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
         super(Role.__pulumiType, name, resourceInputs, opts);

package/role.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.js","sourceRoot":"","sources":["../role.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,uBAAuB,CAAC;IAE9D;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;SACxC;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,mBAAmB,CAAC;YAC3E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;SACvC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AA3DL,oBA4DC"}
+{"version":3,"file":"role.js","sourceRoot":"","sources":["../role.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,uBAAuB,CAAC;IAE9D;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IA2BD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;SACxC;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,mBAAmB,CAAC;YAC3E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;SACvC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAvEL,oBAwEC"}

package/types/input.d.ts

@@ -1475,6 +1475,72 @@ export interface ClientCredentialsTlsClientAuthCredential {
      */
     updatedAt?: pulumi.Input<string | undefined>;
 }
+export interface ClientCredentialsTokenVaultPrivilegedAccess {
+    /**
+     * Credentials the privileged worker may authenticate with. A maximum of 2 client credentials can be set.
+     */
+    credentials: pulumi.Input<pulumi.Input<inputs.ClientCredentialsTokenVaultPrivilegedAccessCredential>[]>;
+    /**
+     * Pins the connections, and the scopes within them, that the privileged worker may request tokens for. A maximum of 5 grants can be set, with a maximum of 20 scopes in total across all of them. Omit every `grants` block to clear the grants already configured.
+     */
+    grants?: pulumi.Input<pulumi.Input<inputs.ClientCredentialsTokenVaultPrivilegedAccessGrant>[] | undefined>;
+    /**
+     * Permitted IPv4 or IPv6 addresses, or CIDR ranges, from which the privileged worker may request tokens. A maximum of 10 entries can be set. Set to `[]` to clear the entries already configured.
+     */
+    ipAllowlists: pulumi.Input<pulumi.Input<string>[]>;
+}
+export interface ClientCredentialsTokenVaultPrivilegedAccessCredential {
+    /**
+     * Algorithm which will be used with the credential. Can be one of `RS256`, `RS384`, `PS256`. If not specified, `RS256` will be used.
+     */
+    algorithm?: pulumi.Input<string | undefined>;
+    /**
+     * The ISO 8601 formatted date the credential was created.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * Credential type. Supported types: `publicKey`.
+     */
+    credentialType: pulumi.Input<string>;
+    /**
+     * The ISO 8601 formatted date representing the expiration of the credential. It is not possible to set this to never expire after it has been set. Recreate the certificate if needed.
+     */
+    expiresAt?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the client credential.
+     */
+    id?: pulumi.Input<string | undefined>;
+    /**
+     * The key identifier of the credential, generated on creation.
+     */
+    keyId?: pulumi.Input<string | undefined>;
+    /**
+     * Friendly name for a credential.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Parse expiry from x509 certificate. If true, attempts to parse the expiry date from the provided PEM. If also the `expiresAt` is set the credential expiry will be set to the explicit `expiresAt` value.
+     */
+    parseExpiryFromCert?: pulumi.Input<boolean | undefined>;
+    /**
+     * PEM-formatted public key (SPKI and PKCS1) or X509 certificate. Must be JSON escaped.
+     */
+    pem: pulumi.Input<string>;
+    /**
+     * The ISO 8601 formatted date the credential was updated.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+}
+export interface ClientCredentialsTokenVaultPrivilegedAccessGrant {
+    /**
+     * Name of the connection the grant applies to. The connection does not need to exist when the grant is configured; it is validated at runtime.
+     */
+    connection: pulumi.Input<string>;
+    /**
+     * Scopes the privileged worker may request on the connection.
+     */
+    scopes: pulumi.Input<pulumi.Input<string>[]>;
+}
 export interface ClientDefaultOrganization {
     /**
      * If set, the `defaultOrganization` will be removed.
@@ -1787,6 +1853,24 @@ export interface ConnectionDirectoryMapping {
      */
     idp: pulumi.Input<string>;
 }
+export interface ConnectionDirectorySynchronizedGroupsGroup {
+    /**
+     * Number of direct members in the Google Workspace Directory group.
+     */
+    directMembersCount?: pulumi.Input<number | undefined>;
+    /**
+     * Google Workspace Directory group email.
+     */
+    email?: pulumi.Input<string | undefined>;
+    /**
+     * Google Workspace Directory group ID.
+     */
+    id: pulumi.Input<string>;
+    /**
+     * Google Workspace Directory group name.
+     */
+    name?: pulumi.Input<string | undefined>;
+}
 export interface ConnectionOptions {
     /**
      * URL used to exchange a user-authorized request token for an access token.
@@ -2249,7 +2333,7 @@ export interface ConnectionOptions {
      */
     useKerberos?: pulumi.Input<boolean | undefined>;
     /**
-     * Determines the `scopes` format: `true` makes it a space-separated string (per OAuth2 specification); `false` makes it an array.
+     * Enabling this when using the connectionScope parameter, uses space as a delimiter for scopes when calling the IdP's API.
      */
     useOauthSpecScope?: pulumi.Input<boolean | undefined>;
     /**
@@ -3708,6 +3792,16 @@ export interface OrganizationBranding {
      */
     logoUrl?: pulumi.Input<string | undefined>;
 }
+export interface OrganizationClientsClient {
+    /**
+     * The ID of the client (application) to associate with the organization.
+     */
+    clientId: pulumi.Input<string>;
+    /**
+     * Whether this client is used for member access to the organization.
+     */
+    useForMemberAccess?: pulumi.Input<boolean | undefined>;
+}
 export interface OrganizationConnectionsEnabledConnection {
     /**
      * When `true`, all users that log in with this connection will be automatically granted membership in the organization. When `false`, users must be granted membership in the organization before logging in with this connection.