@salesforce/afv-skills 1.22.0 → 1.23.0

package/skills/getting-metadata-api-context/data/metadata_api/SecuritySettings.json

@@ -1,437 +0,0 @@
-{
-  "sections": [
-    "title",
-    "description",
-    "file_information",
-    "directory_location",
-    "fields",
-    "sub_types",
-    "wsdl_segment",
-    "declarative_metadata_sample_definition"
-  ],
-  "title": "SecuritySettings - Metadata API",
-  "description": "Represents an org’s security settings. For example, settings define trusted IP ranges for network access, password and login requirements, session expiration, and single sign-on settings.",
-  "file_information": ".settings",
-  "directory_location": "settings",
-  "fields_columns": [
-    "type",
-    "description"
-  ],
-  "fields": {
-    "canUsersGrantLoginAccess": {
-      "type": "boolean",
-      "description": "If true, users can grant login access to Support. If false, only an admin can grant login access. Users can’t grant login access to managed packages that are licensed to your entire Salesforce org. Only admins with the Manage Users permission enabled on their profiles can grant access to these publishers. Also, some managed packages don’t have login access. If a package isn’t listed on the Login Access Policies page, login access isn’t available for that package."
-    },
-    "enableAdminLoginAsAnyUser": {
-      "type": "boolean",
-      "description": "If true, the Administrators Can Log in as Any User field is enabled. The default isn’t enabled (false)."
-    },
-    "enableAuditFieldsInactiveOwner": {
-      "type": "boolean",
-      "description": "If true, this setting enables audit fields and updating the owner for records that are owned by inactive users. The default value is false. This field is available in API version 47.0 and later."
-    },
-    "enableAuraSecureEvalPref": {
-      "type": "boolean",
-      "description": "If true, this setting prevents the creation of function expressions in dynamically created Aura components. The default is false. This field is available in API version 47.0 and later."
-    },
-    "enableCoepHeader": {
-      "type": "boolean",
-      "description": "Indicates whether the Cross-Origin Embedder Policy (COEP) response header is applied to this org’s custom Visualforce pages (true) or not (false). If true, externally sourced embedded content loads only when the external origin allows it via CORS or CORP. The default value is false. Available in API version 55.0 and later."
-    },
-    "enableCoopHeader": {
-      "type": "boolean",
-      "description": "Indicates whether the Cross-Origin Opener Policy (COOP) response header is applied to this org’s custom Visualforce pages (true) or not (false). If true, each custom Visualforce page opens in a new browsing context group. The default value is false. Available in API version 55.0 and later."
-    },
-    "enableCrossOrgRedirects": {
-      "type": "boolean",
-      "description": "Indicates whether redirections to other Salesforce orgs are allowed (true) or blocked (false). In Summer ’24 and later, this field is always false. This setting applies to user redirections to another Salesforce org via a direct link, a post-action URL, or a post-login URL in Salesforce. An example of a direct link with a redirection is <a href=\"/?startURL=targetUrl\">linkText\">linkText</a>. Post-action URLs and post-login URLs use a protected URL redirect parameter, such as retURL, startURL, saveURL, cancelURL, and targetURL. Subsequent redirections can’t be verified because they occur outside Salesforce. To allow cross-org redirections, add the URLs for the Salesforce orgs that you own to RedirectWhitelistUrl. Available in API version 59.0 to 60.0."
-    },
-    "enablePermissionsPolicy": {
-      "type": "boolean",
-      "description": "Indicates whether the pages that Salesforce serves for this org include the Permissions-Policy HTTP header. This HTTP header controls access to browser features such as cameras and microphones. When this field is false, access to the browser features is always permitted. The default value is false. Available in API version 59.0 and later."
-    },
-    "enableRequireHttpsConnection": {
-      "type": "boolean",
-      "description": "Deprecated in API version 47.0 and later."
-    },
-    "grantCameraAccess": {
-      "type": "PermissionsPolicy (enumeration)",
-      "description": "When enablePermissionsPolicy is true, indicates when apps and websites loaded from Salesforce can access the user’s camera. Possible values are: Always—All apps and websites loaded from Salesforce can access the user’s camera. Never—No apps or websites, including scripts from Salesforce domains, can access the user’s camera. TrustedUrls—Only CspTrustedSite entries with canAccessCamera set to true can access the user’s camera. If enablePermissionsPolicy is false, this field has no effect. This field is available in API version 59.0 and later."
-    },
-    "grantMicrophoneAccess": {
-      "type": "Permissions Policy (enumeration)",
-      "description": "When enablePermissionsPolicy is true, indicates when apps and websites loaded from Salesforce can access the user’s microphone. Possible values are: Always—All apps and websites loaded from Salesforce can access the user’s microphone. Never—No apps or websites, including scripts from Salesforce domains, can access the user’s microphone. TrustedUrls—Only CspTrustedSite entries with canAccessMicrophone set to true can access the user’s microphone. If enablePermissionsPolicy is false, this field has no effect. This field is available in API version 59.0 and later."
-    },
-    "isTLSv12Required": {
-      "type": "boolean",
-      "description": "Indicates whether connections to or from your Salesforce org must use TLS 1.2 or higher (true) or not (false). This field has a default value of false. Removed in API version 51.0 and later."
-    },
-    "isTLSv12RequiredCommunities": {
-      "type": "boolean",
-      "description": "Indicates whether connections with your Salesforce sites and portals or Experience Cloud sites must use TLS 1.2 or higher (true) or not (false). This field has a default value of false. Removed in API version 51.0 and later."
-    },
-    "networkAccess": {
-      "type": "NetworkAccess",
-      "description": "The trusted IP address ranges from which users can always log in without requiring computer activation."
-    },
-    "passwordPolicies": {
-      "type": "PasswordPolicies",
-      "description": "The requirements for passwords and logins, and assistance with retrieving forgotten passwords."
-    },
-    "sendCspForUncommonClients": {
-      "type": "boolean",
-      "description": "In rare cases, Salesforce can’t identify whether the requesting app or specialized browser supports the Content-Security-Policy: frame-ancestors HTTP header directive. In those cases, this field indicates whether that directive is included in (true) or omitted from (false) the HTTP response header for pages that Salesforce serves for this org. The default value is false. When sendCspForUncommonClients is true, users who access Salesforce via an app or browser that doesn’t support the Content-Security-Policy: frame-ancestors HTTP header directive can experience errors if that lack of support is unclear. This field is available in API version 59.0 and later."
-    },
-    "sessionSettings": {
-      "type": "SessionSettings",
-      "description": "The settings for session expiration and security."
-    },
-    "singleSignOnSettings": {
-      "type": "SingleSignOnSettings",
-      "description": "The settings for single sign-on (SSO)."
-    }
-  },
-  "sub_types": {
-    "NetworkAccess": {
-      "ipRanges": {
-        "type": "IpRange[]",
-        "description": "The trusted IP address ranges from which users can always log in without requiring computer activation. To add an IP range, deploy all existing IP ranges, including the one you want to add. Otherwise, the existing IP ranges are replaced with the ones you deploy. To remove all the IP ranges, leave the networkAccess field blank (<networkAccess></networkAccess>)."
-      }
-    },
-    "IpRange": {
-      "description": {
-        "type": "string",
-        "description": "The description of the trusted IP range. Use this field to identify the range, such as which corporate network corresponds to this range. Available in API version 34.0 and later."
-      },
-      "end": {
-        "type": "string",
-        "description": "The IP address that defines the high end of a range of trusted addresses."
-      },
-      "start": {
-        "type": "string",
-        "description": "The IP address that defines the low end of a range of trusted addresses."
-      }
-    },
-    "PasswordPolicies": {
-      "apiOnlyUserHomePageURL": {
-        "type": "string",
-        "description": "The URL to which users with the API Only User permission are redirected instead of the login page."
-      },
-      "complexity": {
-        "type": "Complexity (enumeration of type string)",
-        "description": "The types of characters that must be used in a user’s password. Valid values are: NoRestriction—Has no requirements and is the least secure option. AlphaNumeric—The default setting. Requires at least one alphabetic character and one number. This value is the default value. SpecialCharacters—Requires at least one alphabetic character, one number, and one of the following characters: ! \"# $ % & ' ( ) * +, -. / : ; < = > ? @ [ \\ ] ^ _ ` { | } ~. UpperLowerCaseNumeric—Requires at least one number, one uppercase letter, and one lowercase letter. This value is available in API version 31.0 and later. UpperLowerCaseNumericSpecialCharacters—Requires at least one number, one uppercase letter, one lowercase letter, and one of the following characters: !\" # $ % & ' ( ) * +, -. / : ; < = > ? @ [ \\ ] ^ _ ` { | } ~. This value is available in API version 31.0 and later. Any3UpperLowerCaseNumericSpecialCharacters—Requires at least three of the following options: one number, one uppercase letter, one lowercase letter, and one special character (! \" # $ % & ' ( ) * +, -. / : ; < = > ? @ [ \\ ] ^ _ ` { | } ~). This value is available in API version 46.0 and later."
-      },
-      "enableSetPasswordInApi": {
-        "type": "boolean",
-        "description": "Deprecated in API version 51.0. Removed in API version 52.0."
-      },
-      "expiration": {
-        "type": "Expiration (enumeration of type string)",
-        "description": "The length of time until a user password expires and must be changed. Valid values are: Never ThirtyDays SixtyDays NinetyDays. This value is the default value. SixMonths OneYear"
-      },
-      "historyRestriction": {
-        "type": "string",
-        "description": "The number of previous passwords saved for users so that they must always reset a new, unique password. Valid values are 0 through 24 passwords remembered. The maximum value of 24 applies to API version 31.0 and later. In earlier versions, the maximum value is 16. The default value is 3."
-      },
-      "lockoutInterval": {
-        "type": "LockoutInterval (enumeration of type string)",
-        "description": "The duration of the login lockout. Valid values are: FifteenMinutes. This value is the default value. ThirtyMinutes SixtyMinutes Forever (must be reset by admin)"
-      },
-      "maxLoginAttempts": {
-        "type": "MaxLoginAttempts (enumeration of type string)",
-        "description": "The number of login failures allowed for a user before the user is locked out. Valid values are: NoLimit ThreeAttempts FiveAttempts TenAttempts. This value is the default value."
-      },
-      "minimumPasswordLength": {
-        "type": "string",
-        "description": "The minimum number of characters required for a password. The number can contain from 5 to 50 characters (default is 8). Available in API version 35.0 and later. Before API version 35.0, specify minimum password length with the enumeration minPasswordLength, with valid values FiveCharacters, EightCharacters (default), TenCharacters, TwelveCharacters (API version 31.0 and later), and FifteenCharacters (API version 34.0 and later)."
-      },
-      "minimumPasswordLifetime": {
-        "type": "boolean",
-        "description": "If Require a minimum 1 day password lifetime is enabled (true), passwords can’t be changed more than one time during a 24-hour period. The default is false. Available in API version 31.0 and later."
-      },
-      "obscureSecretAnswer": {
-        "type": "boolean",
-        "description": "If enabled (true), hide answers to security questions as the user types. The default is false. If your org uses the Microsoft Input Method Editor (IME) with the input mode set to Hiragana, when you type ASCII characters, they’re converted in to Japanese characters in normal text fields. However, the IME doesn’t work properly in fields with obscured text. If your org’s users can’t properly enter their passwords or other values after enabling this feature, disable the feature."
-      },
-      "passwordAssistanceMessage": {
-        "type": "string",
-        "description": "The text that appears in the Account Lockout email and at the bottom of the Confirm Identity screen for users resetting their passwords."
-      },
-      "passwordAssistanceURL": {
-        "type": "string",
-        "description": "The URL that users can click to retrieve forgotten passwords."
-      },
-      "questionRestriction": {
-        "type": "QuestionRestriction (enumeration of type string)",
-        "description": "The restriction on whether the answer to the password hint question can contain the password itself. Valid values are: None DoesNotContainPassword. This value is the default value."
-      }
-    },
-    "SessionSettings": {
-      "allowUserAuthenticationByCertificate": {
-        "type": "boolean",
-        "description": "If enabled (true), users can authenticate with a PEM-encoded X.509 digital certificate. Not enabled by default. Available in API version 47.0 and later."
-      },
-      "allowUserCertBasedAuthenticationWithOcspValidation": {
-        "type": "boolean",
-        "description": "If enabled (true), authentication certificates are validated using the Online Certificate Status Protocol (OCSP) or a Certificate Revocation List (CRL)."
-      },
-      "auraBoxcarReductionPref": {
-        "type": "boolean",
-        "description": "If true, dynamic boxcar optimization for the Aura framework is disabled. With dynamic boxcar optimization, a limited number of server-side Aura actions are grouped in a single network request, which improves the performance of Lightning components and apps. For more information, see Boxcar Grouping and Optimization in the Lightning Aura Components Developer Guide. The default value is false."
-      },
-      "canConfirmEmailChangeInLightningCommunities": {
-        "type": "boolean",
-        "description": "If Require email confirmations for email address changes is enabled (true), when users change their email address, they receive an email at the new address with a link. After they click the link, their new email address takes effect. For orgs created before Winter ’20, the field isn’t enabled by default. For new orgs, this field is always enabled. To disable the field (not recommended), contact Salesforce Customer Support. Available in API version 47.0 and later."
-      },
-      "canConfirmIdentityBySmsOnly": {
-        "type": "boolean",
-        "description": "Prevents identity verification by email for users who have registered other verification methods, such as SMS or Salesforce Authenticator. If no other verification methods are configured, users are verified by email. By default, this setting is disabled (false) for existing orgs. For new orgs, this setting is enabled (true) by default. Available in API version 48.0 and later."
-      },
-      "disableTimeoutWarning": {
-        "type": "boolean",
-        "description": "Indicates whether the session timeout warning popup is disabled (true) or enabled (false)."
-      },
-      "enableBuiltInAuthenticator": {
-        "type": "boolean",
-        "description": "Indicates whether users can verify their identity with a built-in authenticator that's already on their device (true), such as Touch ID or Windows Hello, or not (false). The default value is false."
-      },
-      "enableCSPOnEmail": {
-        "type": "boolean",
-        "description": "Indicates whether a content security policy is enabled for the email template. A content security policy helps prevent cross-site scripting attacks by listing allowed sources of images and other content."
-      },
-      "enableCSRFOnGet": {
-        "type": "boolean",
-        "description": "Indicates whether Cross-Site Request Forgery (CSRF) protection on GET requests on non-setup pages is enabled (true) or disabled (false)."
-      },
-      "enableCSRFOnPost": {
-        "type": "boolean",
-        "description": "Indicates whether Cross-Site Request Forgery (CSRF) protection on POST requests on non-setup pages is enabled (true) or disabled (false)."
-      },
-      "enableCacheAndAutocomplete": {
-        "type": "boolean",
-        "description": "Indicates whether the user’s browser is allowed to store usernames and auto-fill the User Name field on the login page (true) or not (false)."
-      },
-      "enableClickjackNonsetupSFDC": {
-        "type": "boolean",
-        "description": "Indicates whether clickjack protection for non-setup Salesforce pages is enabled (true) or disabled (false)."
-      },
-      "enableClickjackNonsetupUser": {
-        "type": "boolean",
-        "description": "Indicates whether clickjack protection for customer Visualforce pages with standard headers turned on is enabled (true) or disabled (false)."
-      },
-      "enableClickjackNonsetupUserHeaderless": {
-        "type": "boolean",
-        "description": "Indicates whether clickjack protection for customer Visualforce pages with standard headers turned off is enabled (true) or disabled (false). Available in API version 34.0 and later."
-      },
-      "enableClickjackSetup": {
-        "type": "boolean",
-        "description": "Indicates whether clickjack protection for setup pages is enabled (true) or disabled (false)."
-      },
-      "enableContentSniffingProtection": {
-        "type": "boolean",
-        "description": "Indicates whether the browser is prevented from inferring the MIME type from the document content and from executing malicious files (JavaScript, Style sheet) as dynamic content. This field is available in API version 39.0 and later. In API version 58.0 and later, enableContentSniffingProtection is always true."
-      },
-      "enableLightningLogin": {
-        "type": "boolean",
-        "description": "If enabled (true), users can use Lightning Login (Salesforce Authenticator) to log in instead of a password. Available in API Version 47.0 and later."
-      },
-      "enableLightningLoginOnlyWithUserPerm": {
-        "type": "boolean",
-        "description": "If enabled (true), only users with the Lightning Login User permission can log in with Salesforce Authenticator instead of a password. Available in API version 47.0 and later."
-      },
-      "enableMFADirectUILoginOptIn": {
-        "type": "boolean",
-        "description": "Requires all users in your Salesforce org to provide an additional verification method when logging in directly to the UI with their username and password. Users who are already enabled via the Multi-Factor Authentication for User Interface Logins user permission experience no change. The Waive Multi-Factor Authentication for Exempt Users user permission overrides this setting."
-      },
-      "enableOauthCorsPolicy": {
-        "type": "boolean",
-        "description": "If set to true, enables Cross-Origin Resource Sharing (CORS) for these OAuth endpoints: /services/oauth2/token /services/oauth2/revoke /services/oauth2/introspect Default setting is false. Available in API version 50.0 and later."
-      },
-      "enablePostForSessions": {
-        "type": "boolean",
-        "description": "Indicates whether cross-domain session information is exchanged using a POST request instead of a GET request, such as when a user is using a Visualforce page. In this context, POST requests are more secure than GET requests. Available in API version 31.0 and later."
-      },
-      "enableSMSIdentity": {
-        "type": "boolean",
-        "description": "If enabled (true), the default, users can receive a one-time password in a text message (SMS) to verify their identity. Users must verify their mobile phone number before they can receive SMS messages."
-      },
-      "enableU2F": {
-        "type": "boolean",
-        "description": "If enabled (true), users can use a physical U2F-compatible security key for multi-factor authentication (MFA) and identity verification. The default is false. Available in API version 47.0 and later."
-      },
-      "enableUpgradeInsecureRequests": {
-        "type": "boolean",
-        "description": "Indicates whether HTTPS is required for connecting to third-party domains. This setting is enabled by default on accounts created after the Summer ’17 release. This field is available in API version 42.0 to 60.0."
-      },
-      "enableXssProtection": {
-        "type": "boolean",
-        "description": "Indicates whether the HTTP X-XSS-Protection response header is enabled to protect against reflected cross-site scripting attacks. This field is available in API version 39.0 to 59.0. The HTTP X-XSS-Protection response header is deprecated. To help prevent cross-site scripting (XSS) and other code injection attacks, use the CSPTrustedSite metadata type."
-      },
-      "enforceIpRangesEveryRequest": {
-        "type": "boolean",
-        "description": "If true, the IP addresses in Login IP Ranges are enforced when a user accesses Salesforce (on every page request), including access from a client app. If false, the IP addresses in Login IP Ranges are enforced only when a user logs in. This field affects all user profiles with login IP restrictions. Available in API version 34.0 and later."
-      },
-      "enforceUserDeviceRevoked": {
-        "type": "boolean",
-        "description": "If enabled, and a UserDevice’s status is set to revoked, that device can’t log in from a Salesforce app. Logins from browsers aren’t affected. This field is available in API version 50.0 and later."
-      },
-      "forceLogoutOnSessionTimeout": {
-        "type": "boolean",
-        "description": "If enabled (true), the default, when sessions time out for inactive users, current sessions become invalid. The browser refreshes and returns to the login page. To access the org, the user must log in again. Available in API version 31.0 and later."
-      },
-      "forceRelogin": {
-        "type": "boolean",
-        "description": "If true, an admin who is logged in as another user must log in again to their original session, after logging out as the secondary user. If false, the admin isn’t required to log in again."
-      },
-      "hasRetainedLoginHints": {
-        "type": "boolean",
-        "description": "If you enable Remember me until logout (true), usernames (login hints) are cached until the user logs out. If a session times out, usernames appear on the Switcher as inactive. If false (default), usernames aren't cached for SSO sessions."
-      },
-      "hasUserSwitching": {
-        "type": "boolean",
-        "description": "If Enable user switching is true (default), users can log in to other orgs by selecting their profile picture and using the Switcher. You must also enable the Enable caching and autocomplete on login page setting. If false, the Switcher isn’t enabled and your org doesn’t appear in Switchers on other orgs."
-      },
-      "hstsOnForcecomSites": {
-        "type": "boolean",
-        "description": "Indicates whether Visualforce, Salesforce sites, or Experience Cloud sites must use HTTPS. Available in API version 41.0 and later."
-      },
-      "identityConfirmationOnEmailChange": {
-        "type": "boolean",
-        "description": "Indicates whether a user’s identity is confirmed when changing their email address, instead of requiring a relogin. This field is available in API version 42.0 and later."
-      },
-      "identityConfirmationOnTwoFactorRegistrationEnabled": {
-        "type": "boolean",
-        "description": "Indicates whether users are required to confirm their identities when adding a verification method such as Salesforce Authenticator for multi-factor authentication (MFA), instead of requiring a relogin. (Multi-factor authentication was formerly called two-factor authentication.) This field is available in API version 40.0 and later."
-      },
-      "lockSessionsToDomain": {
-        "type": "boolean",
-        "description": "Indicates whether the current UI session for a user is associated with a specific domain. This check helps prevent unauthorized use of the session ID in another domain. The value is true by default for orgs created with the Spring ’15 release or later. Available in API version 33.0 and later."
-      },
-      "lockSessionsToIp": {
-        "type": "boolean",
-        "description": "Indicates whether user sessions are locked to the IP address from which the user logged in (true) or not (false)."
-      },
-      "lockerServiceAPIVersion": {
-        "type": "string",
-        "description": "The API version that Lightning Locker enforces for security of custom Lightning components. The default value matches the Salesforce API version of the current release. Only valid Salesforce API versions between 46.0 and the current release can be specified. The version must be specified as a string in the format \"nn.0\", such as \"48.0\". This setting has no effect on the lockerServiceNext setting, which enables Lightning Web Security. This field is available in API version 47.0 and later."
-      },
-      "lockerServiceCSP": {
-        "type": "boolean",
-        "description": "If true, a stricter Content Security Policy is enabled to disallow the unsafe-inline source for the script-src CSP directive. Script tags can’t be used to load JavaScript, and event handlers can’t use inline JavaScript. Lightning Locker and Lightning Web Security depend on this setting to be enabled to protect Lightning components."
-      },
-      "lockerServiceNext": {
-        "type": "boolean",
-        "description": "If true, Lightning Web Security is used instead of Lightning Locker to protect Lightning web components. Lightning Locker continues to protect Aura components. If false, Lightning Locker protects Lightning web components and Aura components. Available in API version 53.0 and later."
-      },
-      "lockerServiceNextControl": {
-        "type": "boolean",
-        "description": "Reserved for internal use."
-      },
-      "lockerTrustedMode": {
-        "type": "boolean",
-        "description": "Reserved for internal use."
-      },
-      "lockerTrustedResources": {
-        "type": "string",
-        "description": "Reserved for internal use."
-      },
-      "logoutURL": {
-        "type": "string",
-        "description": "The URL to which users are redirected when they log out of Salesforce. If no value is specified, the default is https://MyDomainName.my.salesforce.com. Available in API version 34.0 and later."
-      },
-      "redirectBlockModeEnabled": {
-        "type": "boolean",
-        "description": "If true, users can’t access untrusted URLs outside the Salesforce domains via links in URL or Long Text Area fields. When a user who accesses Salesforce via Salesforce Classic clicks the link, a message informs the user that they can’t access the page because the external site isn’t trusted. The default is false. To specify the URLs that you trust, use the RedirectWhitelistUrl Metadata type. The redirectBlockModeEnabled and redirectionWarning fields are mutually exclusive. Only one of those fields can be true. Available in API 56.0 and later."
-      },
-      "redirectionWarning": {
-        "type": "boolean",
-        "description": "If true, users who accesses Salesforce via Salesforce Classic see an alert when they click a link in a URL or Long Text Area field that redirects them to an untrusted URL outside the Salesforce domains. The default is true in orgs created in Spring ’18 and later and false in orgs created in Winter ’18 and earlier. To specify the URLs that you trust, use the RedirectWhitelistUrl Metadata type. The redirectBlockModeEnabled and redirectionWarning fields are mutually exclusive. Only one of those fields can be true. Available in API version 42.0 and later."
-      },
-      "referrerPolicy": {
-        "type": "boolean",
-        "description": "If true, pages served by Salesforce for this org include the referrer-policy HTTP header with the directive defined by referrerPolicyDirective. If false, that HTTP header isn’t included and requests can always see the full URL of the Salesforce page. The default is true. Available in API version 42.0 and later. In API version 42.0–57.0, if referrerPolicy is true, pages served by Salesforce for this org include the referrer-policy HTTP header with the origin-when-cross-origin directive."
-      },
-      "referrerPolicyDirective": {
-        "type": "ReferrerPolicy (enumeration of type string)",
-        "description": "The HTTP referrer policy directive for pages served by Salesforce. The default is strict-origin-when-cross-origin. If referrerPolicy is false, this value has no effect. Available in API version 58.0 and later. Valid current values are: no-referrer—Never include the referrer. origin—Always send the origin only. same-origin—Omit the referrer for cross-origin requests. strict-origin—For requests with the same protocol level (HTTPS to HTTPS), send the origin only. Omit the referrer when the target website is on a downgraded protocol. An example of a downgraded protocol is a request made from an HTTPS URL to an HTTP site. strict-origin-when-cross-origin—For same-origin requests, send the full referrer URL. For cross-origin requests with the same protocol level (HTTPS to HTTPS), send the origin only. Omit the referrer when the target website is on a downgraded protocol. This is the default. These policies are deprecated. Although the values are valid, they aren’t recommended. no-referrer-when-downgrade—Omit the referrer when the target website is on a downgraded protocol. For example, when making a request to an HTTP site from an HTTPS URL. This referrerPolicyDirective isn’t recommended because this policy exposes the full URL of the page to cross-origin requests to the same or a higher protocol level. For example, requests from HTTPS to HTTPS and requests from HTTP to either HTTP or HTTPS. origin-when-cross-origin—Send the origin only for cross-domain requests or when the target website is on a downgraded protocol. An example of a downgraded protocol is a request made from an HTTPS URL to an HTTP site. This referrerPolicyDirective isn’t recommended because multiple browsers no longer support it. Use strict-origin-when-cross-origin instead. unsafe-url—Always include the full referrer URL.This referrerPolicyDirective isn’t recommended because this policy exposes the full URL of the page to requests from insecure origins. For more information on HTTP referrer policy directives, including examples, see the Referrer-Policy entry in the MDN Docs HTTP Guide."
-      },
-      "requireHttpOnly": {
-        "type": "boolean",
-        "description": "Sets the HttpOnly attribute on session cookies, making them inaccessible via JavaScript. If true, session ID cookie access is restricted. If false, access isn’t restricted. If you have a custom or packaged application that uses JavaScript to access session ID cookies, your application breaks if requireHttpOnly is set to true. The application can't access the cookie. This field is available in API version 40.0 and later."
-      },
-      "requireHttps": {
-        "type": "boolean",
-        "description": "Determines whether HTTPS is required to log in to or access Salesforce. This option is enabled by default for security reasons and can’t be disabled. To change to HTTP, contact Salesforce Customer Support. This field is available in API version 40.0 to 60.0."
-      },
-      "securityCentralKillSession": {
-        "type": "boolean",
-        "description": "Deprecated in API version 36.0 to 50.0. Removed in API version 51.0 and later."
-      },
-      "sessionTimeout": {
-        "type": "SessionTimeout (enumeration of type string)",
-        "description": "The length of time after which users without activity are prompted to log out or continue working. Valid values are: FifteenMinutes ThirtyMinutes SixtyMinutes NinetyMinutes—Available in API version 58.0 and later. TwoHours FourHours EightHours TwelveHours TwentyFourHours—Available in API version 38.0 and later."
-      },
-      "sidToken3rdPartyAuraApp": {
-        "type": "boolean",
-        "description": "If true, a Lightning app replaces the authentication cookie with a session token when the Lightning app is in a third-party context, such as Lightning Out. Browsers are restricting the use of third-party cookies. This org setting is an alternative for the authentication cookie to requiring that users disable browser settings, such as Safari’s Prevent cross-site tracking setting. This field is available in API version 59.0 and later."
-      },
-      "skipSFAWhenMFADirectUILogin": {
-        "type": "boolean",
-        "description": "Indicates which screen users see first when they're prompted to register a verification method for multi-factor authentication (MFA). If true, users see a list of all supported verification methods. If false, users see only the Salesforce Authenticator option. To see a list of all supported verification methods, users must navigate to a new page."
-      },
-      "terminateUserSessionsWhenAdminResetsPassword": {
-        "type": "boolean",
-        "description": "Indicates what happens to a user's UI sessions when an admin resets that user's password. If true, all of the user's UI sessions are terminated. If false, no UI sessions are terminated."
-      },
-      "untrustedRedirect": {
-        "type": "untrustedRedirect (enumeration of type string)",
-        "description": "The redirection behavior when a user who accesses Salesforce via Lightning Experience clicks a hyperlink in a URL field with a target URL that isn’t trusted. Valid values are: AlwaysAllowed NeverAllowed WithUserPermission To specify the URLs that you trust, use the RedirectWhitelistUrl Metadata type. Available in API version 64.0 and later. Secure redirections to untrusted URLs in Lightning Experience is a pilot or beta service that is subject to the Beta Services Terms at Agreements - Salesforce.com or a written Unified Pilot Agreement if executed by Customer, and applicable terms in the Product Terms Directory. Use of this pilot or beta service is at the Customer's sole discretion."
-      },
-      "useLocalStorageForLogoutUrl": {
-        "type": "boolean",
-        "description": "Redirects all expired tabs in your browser to your custom logout URL (true). By default, this option is enabled for all new orgs and is available in API version 52.0 and later. For orgs created prior to the Summer ’21 release, the default setting is false. Before enabling this setting, review these considerations. This setting uses the browser’s local storage to store the custom logout URL. Verify that this setting doesn’t interfere with your custom login integrations."
-      },
-      "vfInlineScriptInjection": {
-        "type": "VfInlineScriptInjection (enumeraion of type string)",
-        "description": "Reserved for future use. The default value is allow. Available in API version 67.0 and later."
-      },
-      "welcomeEmailTemplateId": {
-        "type": "string",
-        "description": "Custom email template for the welcome email that new internal users receive when they're registered. This field supports only Classic email templates. Available in API version 63.0 and later."
-      }
-    },
-    "SingleSignOnSettings": {
-      "enableCaseInsensitiveFederationID": {
-        "type": "boolean",
-        "description": "If you enable Make Federation ID case-insensitive (true), the Federation ID field on a user object isn’t case-sensitive. If disabled (false), the Federation ID field remains case-sensitive. The default is false."
-      },
-      "enableForceDelegatedCallout": {
-        "type": "boolean",
-        "description": "If you enable Force Delegated Authentication Callout (true), a callout to the SSO endpoint occurs regardless of login restriction failures. If disabled (false), the default, and if a user’s first login attempt fails due to login restrictions within the Salesforce org, a call isn’t made to the SSO endpoint."
-      },
-      "enableMultipleSamlConfigs": {
-        "type": "boolean",
-        "description": "If true (default), you can configure multiple SAML providers. After enabling the setting, it can’t be disabled."
-      },
-      "enableSamlJitProvisn’tioning": {
-        "type": "boolean",
-        "description": "If you enable User Provisioning Enabled (true), you can provision users through a SAML assertion (called just-in-time provisioning). Requires EnableSamlLogin to be true and enableMultipleSamlConfigs to be false. The default is enabled (false)."
-      },
-      "enableSamlLogin": {
-        "type": "boolean",
-        "description": "If you enable SAML Enabled (true), users can SSO into Salesforce from providers via SAML. The default isn’t enabled (false)."
-      },
-      "isLoginWithSalesforceCredentialsDisabled": {
-        "type": "boolean",
-        "description": "If Disable login with Salesforce credentials is true, users are redirected to third-party identity providers for authentication. The default is enabled (false). If you enabled this feature prior to the Summer ’20 release and want to disable it prior to July 27, 2020, contact Customer Support."
-      }
-    }
-  },
-  "wsdl_segment": "```xml\n<xsd:simpleType name=\"Complexity\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"NoRestriction\"/>\n    <xsd:enumeration value=\"AlphaNumeric\"/>\n    <xsd:enumeration value=\"SpecialCharacters\"/>\n    <xsd:enumeration value=\"UpperLowerCaseNumeric\"/>\n    <xsd:enumeration value=\"UpperLowerCaseNumericSpecialCharacters\"/>\n    <xsd:enumeration value=\"Any3UpperLowerCaseNumericSpecialCharacters\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:simpleType name=\"Expiration\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"ThirtyDays\"/>\n    <xsd:enumeration value=\"SixtyDays\"/>\n    <xsd:enumeration value=\"NinetyDays\"/>\n    <xsd:enumeration value=\"SixMonths\"/>\n    <xsd:enumeration value=\"OneYear\"/>\n    <xsd:enumeration value=\"Never\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:complexType name=\"IpRange\">\n  <xsd:sequence>\n    <xsd:element name=\"description\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"end\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"start\" minOccurs=\"0\" type=\"xsd:string\"/>\n  </xsd:sequence>\n</xsd:complexType>\n<xsd:simpleType name=\"LockoutInterval\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"FifteenMinutes\"/>\n    <xsd:enumeration value=\"ThirtyMinutes\"/>\n    <xsd:enumeration value=\"SixtyMinutes\"/>\n    <xsd:enumeration value=\"Forever\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:simpleType name=\"MaxLoginAttempts\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"ThreeAttempts\"/>\n    <xsd:enumeration value=\"FiveAttempts\"/>\n    <xsd:enumeration value=\"TenAttempts\"/>\n    <xsd:enumeration value=\"NoLimit\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:complexType name=\"NetworkAccess\">\n  <xsd:sequence>\n    <xsd:element name=\"ipRanges\" minOccurs=\"0\" maxOccurs=\"unbounded\" type=\"tns:IpRange\"/>\n  </xsd:sequence>\n</xsd:complexType>\n<xsd:complexType name=\"PasswordPolicies\">\n  <xsd:sequence>\n    <xsd:element name=\"apiOnlyUserHomePageURL\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"complexity\" minOccurs=\"0\" type=\"tns:Complexity\"/>\n    <xsd:element name=\"expiration\" minOccurs=\"0\" type=\"tns:Expiration\"/>\n    <xsd:element name=\"historyRestriction\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"lockoutInterval\" minOccurs=\"0\" type=\"tns:LockoutInterval\"/>\n    <xsd:element name=\"maxLoginAttempts\" minOccurs=\"0\" type=\"tns:MaxLoginAttempts\"/>\n    <xsd:element name=\"minimumPasswordLength\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"minimumPasswordLifetime\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"obscureSecretAnswer\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"passwordAssistanceMessage\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"passwordAssistanceURL\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"questionRestriction\" minOccurs=\"0\" type=\"tns:QuestionRestriction\"/>\n  </xsd:sequence>\n</xsd:complexType>\n<xsd:simpleType name=\"QuestionRestriction\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"None\"/>\n    <xsd:enumeration value=\"DoesNotContainPassword\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:complexType name=\"SecuritySettings\">\n  <xsd:complexContent>\n    <xsd:extension base=\"tns:Metadata\">\n      <xsd:sequence>\n        <xsd:element name=\"canUsersGrantLoginAccess\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"enableAdminLoginAsAnyUser\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"enableAuditFieldsInactiveOwner\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"enableAuraSecureEvalPref\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"enableCoepHeader\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"enableCoopHeader\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"enableCrossOrgRedirects\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"enablePermissionsPolicy\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"enableRequireHttpsConnection\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"networkAccess\" minOccurs=\"0\" type=\"tns:NetworkAccess\"/>\n        <xsd:element name=\"passwordPolicies\" minOccurs=\"0\" type=\"tns:PasswordPolicies\"/>\n        <xsd:element name=\"redirectBlockModeEnabled\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"sendCspForUncommonClients\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n        <xsd:element name=\"sessionSettings\" minOccurs=\"0\" type=\"tns:SessionSettings\"/>\n        <xsd:element name=\"singleSignOnSettings\" minOccurs=\"0\" type=\"tns:SingleSignOnSettings\"/>\n      </xsd:sequence>\n    </xsd:extension>\n  </xsd:complexContent>\n</xsd:complexType>\n<xsd:complexType name=\"SessionSettings\">\n  <xsd:sequence>\n    <xsd:element name=\"allowUserAuthenticationByCertificate\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"allowUserCertBasedAuthenticationWithOcspValidation\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"auraBoxcarReductionPref\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"canConfirmEmailChangeInLightningCommunities\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"canConfirmIdentityBySmsOnly\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"disableTimeoutWarning\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableBuiltInAuthenticator\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableCSPOnEmail\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableCSRFOnGet\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableCSRFOnPost\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableCacheAndAutocomplete\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableClickjackNonsetupSFDC\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableClickjackNonsetupUser\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableClickjackNonsetupUserHeaderless\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableClickjackSetup\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableCoepHeader\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableContentSniffingProtection\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableCoopHeader\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableLightningLogin\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableLightningLoginOnlyWithUserPerm\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableMFADirectUILoginOptIn\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableOauthCorsPolicy\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enablePermissionsPolicy\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enablePostForSessions\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableSMSIdentity\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableU2F\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enforceIpRangesEveryRequest\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enforceUserDeviceRevoked\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"forceLogoutOnSessionTimeout\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"forceRelogin\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"grantCameraAccess\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"grantMicrophoneAccess\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"hasRetainedLoginHints\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"hasUserSwitching\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"hstsOnForcecomSites\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"identityConfirmationOnEmailChange\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"identityConfirmationOnTwoFactorRegistrationEnabled\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"lockSessionsToDomain\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"lockSessionsToIp\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"lockerServiceAPIVersion\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"lockerServiceCSP\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"lockerServiceNext\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"lockerServiceNextControl\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"lockerTrustedMode\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"lockerTrustedResources\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"logoutURL\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"redirectBlockModeEnabled\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"redirectionWarning\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"referrerPolicy\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"referrerPolicyDirective\" minOccurs=\"0\" type=\"xsd:string\"/>\n    <xsd:element name=\"requireHttpOnly\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"sendCspForUncommonClients\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"sessionTimeout\" minOccurs=\"0\" type=\"tns:SessionTimeout\"/>\n    <xsd:element name=\"sidToken3rdPartyAuraApp\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"skipSFAWhenMFADirectUILogin\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"terminateUserSessionsWhenAdminResetsPassword\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"unescapedHtmlSanitization\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"untrustedRedirect\" minOccurs=\"0\" type=\"tns:UntrustedRedirectEnum\"/>\n    <xsd:element name=\"useEAPIRateLimitForConnectAPI\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"useLocalStorageForLogoutUrl\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"vfInlineScriptInjection\" minOccurs=\"0\" type=\"tns:VfInlineScriptInjection\"/>\n    <xsd:element name=\"welcomeEmailTemplateId\" minOccurs=\"0\" type=\"xsd:string\"/>\n  </xsd:sequence>\n</xsd:complexType>\n<xsd:simpleType name=\"SessionTimeout\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"TwentyFourHours\"/>\n    <xsd:enumeration value=\"TwelveHours\"/>\n    <xsd:enumeration value=\"EightHours\"/>\n    <xsd:enumeration value=\"FourHours\"/>\n    <xsd:enumeration value=\"TwoHours\"/>\n    <xsd:enumeration value=\"NinetyMinutes\"/>\n    <xsd:enumeration value=\"SixtyMinutes\"/>\n    <xsd:enumeration value=\"ThirtyMinutes\"/>\n    <xsd:enumeration value=\"FifteenMinutes\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:complexType name=\"SingleSignOnSettings\">\n  <xsd:sequence>\n    <xsd:element name=\"enableCaseInsensitiveFederationID\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableForceDelegatedCallout\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableMultipleSamlConfigs\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableSamlJitProvisioning\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"enableSamlLogin\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n    <xsd:element name=\"isLoginWithSalesforceCredentialsDisabled\" minOccurs=\"0\" type=\"xsd:boolean\"/>\n  </xsd:sequence>\n</xsd:complexType>\n<xsd:simpleType name=\"UntrustedRedirectEnum\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"AlwaysAllowed\"/>\n    <xsd:enumeration value=\"AllowWithUserPermission\"/>\n    <xsd:enumeration value=\"NeverAllowed\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:simpleType name=\"VfInlineScriptInjection\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"Allow\"/>\n    <xsd:enumeration value=\"ReportOnly\"/>\n    <xsd:enumeration value=\"NeverAllow\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n```",
-  "declarative_metadata_sample_definition": [
-    {
-      "description": "Here’s a sample security.settings metadata file.",
-      "code": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<SecuritySettings xmlns=\"http://soap.sforce.com/2006/04/metadata\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">\n    <canUsersGrantLoginAccess>true</canUsersGrantLoginAccess>\n    <enableAdminLoginAsAnyUser xsi:nil=\"true\"/>\n    <enableAuditFieldsInactiveOwner xsi:nil=\"true\"/>\n    <enableAuraSecureEvalPref xsi:nil=\"true\"/>\n    <enableCoopHeader>true</enableCoopHeader>\n    <enableCoepHeader>false</enableCoepHeader>\n    <enableCrossOrgRedirects>false</enableCrossOrgRedirects>\n    <enablePermissionsPolicy>true</enablePermissionsPolicy>\n    <grantCameraAccess>TrustedUrls</grantCameraAccess>\n    <grantMicrophoneAccess>TrustedUrls</grantMicrophoneAccess>\n    <networkAccess/>\n    <passwordPolicies>\n        <complexity>NoRestriction</complexity>\n        <expiration>Never</expiration>\n        <historyRestriction>0</historyRestriction>\n        <lockoutInterval>FifteenMinutes</lockoutInterval>\n        <maxLoginAttempts>TenAttempts</maxLoginAttempts>\n        <minimumPasswordLength>5</minimumPasswordLength>\n        <minimumPasswordLifetime>false</minimumPasswordLifetime>\n        <obscureSecretAnswer>false</obscureSecretAnswer>\n        <questionRestriction>DoesNotContainPassword</questionRestriction>\n    </passwordPolicies>\n    <redirectBlockModeEnabled>false</redirectBlockModeEnabled>\n    <sendCspForUncommonClients>false</sendCspForUncommonClients>\n    <sessionSettings>\n        <allowUserAuthenticationByCertificate>false</allowUserAuthenticationByCertificate>\n        <disableTimeoutWarning>false</disableTimeoutWarning>\n        <enableBuiltInAuthenticator>false</enableBuiltInAuthenticator>\n        <enableCSPOnEmail>true</enableCSPOnEmail>\n        <enableCSRFOnGet>true</enableCSRFOnGet>\n        <enableCSRFOnPost>true</enableCSRFOnPost>\n        <enableCacheAndAutocomplete>true</enableCacheAndAutocomplete>\n        <enableClickjackNonsetupSFDC>true</enableClickjackNonsetupSFDC>\n        <enableClickjackNonsetupUser>false</enableClickjackNonsetupUser>\n        <enableClickjackNonsetupUserHeaderless>false</enableClickjackNonsetupUserHeaderless>\n        <enableClickjackSetup>true</enableClickjackSetup>\n        <enableContentSniffingProtection>true</enableContentSniffingProtection>\n        <enableLightningLogin>true</enableLightningLogin>\n        <enableLightningLoginOnlyWithUserPerm>false</enableLightningLoginOnlyWithUserPerm>\n        <useLocalStorageForLogoutUrl>false</useLocalStorageForLogoutUrl>\n        <enableOauthCorsPolicy>false</enableOauthCorsPolicy>\n        <enablePostForSessions>false</enablePostForSessions>\n        <enableSMSIdentity>true</enableSMSIdentity>\n        <enableU2F>false</enableU2F>\n        <enforceIpRangesEveryRequest>false</enforceIpRangesEveryRequest>\n        <enforceUserDeviceRevoked>false</enforceUserDeviceRevoked>\n        <forceLogoutOnSessionTimeout>true</forceLogoutOnSessionTimeout>\n        <forceRelogin>true</forceRelogin>\n        <hasRetainedLoginHints>false</hasRetainedLoginHints>\n        <hasUserSwitching>true</hasUserSwitching>\n        <hstsOnForcecomSites>false</hstsOnForcecomSites>\n        <identityConfirmationOnEmailChange>true</identityConfirmationOnEmailChange>\n        <identityConfirmationOnTwoFactorRegistrationEnabled>true</identityConfirmationOnTwoFactorRegistrationEnabled>\n        <lockSessionsToDomain>true</lockSessionsToDomain>\n        <lockSessionsToIp>false</lockSessionsToIp>\n        <lockerServiceAPIVersion>56.0</lockerServiceAPIVersion>\n        <lockerServiceCSP>true</lockerServiceCSP>\n        <lockerServiceNext>true</lockerServiceNext>\n        <logoutURL>https://mycompany.com</logoutUrl>\n        <redirectionWarning>true</redirectionWarning>\n        <referrerPolicy>true</referrerPolicy>\n        <referrerPolicyDirective>strict-origin-when-cross-origin</referrerPolicyDirective>\n        <requireHttpOnly>true</requireHttpOnly>\n        <sessionTimeout>TwoHours</sessionTimeout>\n        <untrustedRedirect>WithUserPermission</untrustedRedirect>\n        <useLocalStorageForLogoutUrl>true</useLocalStorageForLogoutUrl>\n        <vfInlineScriptInjection>allow</vfInlineScriptInjection>\n        <welcomeEmailTemplateId>X000000000000</welcomeEmailTemplateId>\n    </sessionSettings>\n    <singleSignOnSettings>\n        <enableCaseInsensitiveFederationID>false</enableCaseInsensitiveFederationID>\n        <enableForceDelegatedCallout>false</enableForceDelegatedCallout>\n        <enableMultipleSamlConfigs>true</enableMultipleSamlConfigs>\n        <enableSamlJitProvisioning>false</enableSamlJitProvisioning>\n        <enableSamlLogin>false</enableSamlLogin>\n        <isLoginWithSalesforceCredentialsDisabled>true</isLoginWithSalesforceCredentialsDisabled>\n    </singleSignOnSettings>\n</SecuritySettings>"
-    }
-  ]
-}

package/skills/getting-metadata-api-context/data/metadata_api/ServiceAISetupDefinition.json

@@ -1,48 +0,0 @@
-{
-  "sections": [
-    "title",
-    "description",
-    "file_information",
-    "directory_location",
-    "fields",
-    "wsdl_segment",
-    "declarative_metadata_sample_definition"
-  ],
-  "title": "ServiceAISetupDefinition - Metadata API",
-  "description": "Represents settings for an Einstein for Service feature such as Einstein Article Recommendations. This type extends the Metadata metadata type and inherits its fullName field.",
-  "file_information": ".serviceAISetupDescription",
-  "directory_location": "serviceAISetupDescriptions",
-  "fields_columns": [
-    "type",
-    "description"
-  ],
-  "fields": {
-    "appSourceType": {
-      "type": "ApplicationSourceType (enumeration of type string)",
-      "description": "The target application for the configuration. Valid values are: REPLY_RECOMMENDATION—Einstein Reply Recommendations ARTICLE_RECOMMENDATION—Einstein Article Recommendations UTTERANCE_RECOMMENDATION—Einstein Bot utterances FAQ—Einstein Bot frequently asked questions",
-      "required": true
-    },
-    "name": {
-      "type": "string",
-      "description": "A reference to the configuration.",
-      "required": true
-    },
-    "setupStatus": {
-      "type": "ServiceAISetupDefStatus (enumeration of type string)",
-      "description": "The status of the configuration. Valid values are: FIELDS_SELECTED TRAINING READY_TO_ACTIVATE SERVING RETIRED ARCHIVED READY_FOR_REVIEW",
-      "required": true
-    },
-    "supportedLanguages": {
-      "type": "string",
-      "description": "Required when appSourceType is ARTICLE_RECOMMENDATION. Language codes for selected and supported languages.",
-      "required": true
-    }
-  },
-  "wsdl_segment": "```xml\n<xsd:simpleType name=\"ApplicationSourceType\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"REPLY_RECOMMENDATION\"/>\n    <xsd:enumeration value=\"ARTICLE_RECOMMENDATION\"/>\n    <xsd:enumeration value=\"UTTERANCE_RECOMMENDATION\"/>\n    <xsd:enumeration value=\"FAQ\"/>\n    <xsd:enumeration value=\"EAR_FOR_CONVERSATION\"/>\n    <xsd:enumeration value=\"USE_CASE_EXPLORER\"/>\n    <xsd:enumeration value=\"EAR_FOR_VOICE\"/>\n    <xsd:enumeration value=\"COPILOT_UTTERANCE_ANALYSIS\"/>\n    <xsd:enumeration value=\"COPILOT_UTTERANCE_ANALYSIS_AGGREGATION\"/>\n    <xsd:enumeration value=\"COPILOT_UTTERANCE_ANALYSIS_PROCESSING\"/>\n    <xsd:enumeration value=\"AGENTFORCE_INTERACTION_EXPLORER_MOMENT_GENERATION\"/>\n    <xsd:enumeration value=\"AGENTFORCE_INTERACTION_EXPLORER_CLUSTERING\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:complexType name=\"Metadata\">\n  <xsd:sequence>\n    <xsd:element name=\"fullName\" minOccurs=\"0\" type=\"xsd:string\"/>\n  </xsd:sequence>\n</xsd:complexType>\n<xsd:simpleType name=\"ServiceAISetupDefStatus\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"FIELDS_SELECTED\"/>\n    <xsd:enumeration value=\"TRAINING\"/>\n    <xsd:enumeration value=\"READY_TO_ACTIVATE\"/>\n    <xsd:enumeration value=\"SERVING\"/>\n    <xsd:enumeration value=\"RETIRED\"/>\n    <xsd:enumeration value=\"ARCHIVED\"/>\n    <xsd:enumeration value=\"READY_FOR_REVIEW\"/>\n    <xsd:enumeration value=\"TRAINING_FAILURE\"/>\n    <xsd:enumeration value=\"INVALID_TRAINING_FIELDS\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n<xsd:complexType name=\"ServiceAISetupDefinition\">\n  <xsd:complexContent>\n    <xsd:extension base=\"tns:Metadata\">\n      <xsd:sequence>\n        <xsd:element name=\"appSourceType\" type=\"tns:ApplicationSourceType\"/>\n        <xsd:element name=\"name\" type=\"xsd:string\"/>\n        <xsd:element name=\"setupStatus\" type=\"tns:ServiceAISetupDefStatus\"/>\n        <xsd:element name=\"supportedLanguages\" minOccurs=\"0\" type=\"xsd:string\"/>\n      </xsd:sequence>\n    </xsd:extension>\n  </xsd:complexContent>\n</xsd:complexType>\n```",
-  "declarative_metadata_sample_definition": [
-    {
-      "description": "Here’s an example of a ServiceAISetupDefinition component.",
-      "code": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ServiceAISetupDefinition xmlns=\"http://soap.sforce.com/2006/04/metadata\">\n    <appSourceType>ARTICLE_RECOMMENDATION</appSourceType>\n    <name>SA1601228426202</name>\n    <setupStatus>ARCHIVED</setupStatus>\n    <supportedLanguages>en,de,fr,it,es,pt,nl</supportedLanguages>\n</ServiceAISetupDefinition>"
-    }
-  ]
-}

package/skills/getting-metadata-api-context/data/metadata_api/ServiceAISetupField.json

@@ -1,58 +0,0 @@
-{
-  "sections": [
-    "title",
-    "description",
-    "file_information",
-    "directory_location",
-    "fields",
-    "wsdl_segment",
-    "declarative_metadata_sample_definition"
-  ],
-  "title": "ServiceAISetupField - Metadata API",
-  "description": "Represents a field on cases or knowledge articles that Einstein uses to identify relevant articles in Einstein Article Recommendations. This type extends the Metadata metadata type and inherits its fullName field.",
-  "file_information": ".serviceAiSetupField",
-  "directory_location": "serviceAiSetupFields",
-  "fields_columns": [
-    "type",
-    "description"
-  ],
-  "fields": {
-    "entity": {
-      "type": "string",
-      "description": "The Case or KnowledgeArticle object for the field.",
-      "required": true
-    },
-    "field": {
-      "type": "string",
-      "description": "The API name of the field.",
-      "required": true
-    },
-    "fieldMappingType": {
-      "type": "ServiceAISetupFieldType (enumeration of type string)",
-      "description": "The field type. Valid values are: CASE_DESC CASE_SUBJ ARTICLE_TITLE ARTICLE_CONTENT ARTICLE_SUMMARY",
-      "required": true
-    },
-    "fieldPosition": {
-      "type": "int",
-      "description": "A positive number used to rank the field’s importance. The value 1 is most important; higher numbers indicate less important fields. Einstein considers fields in the order of importance.",
-      "required": true
-    },
-    "name": {
-      "type": "string",
-      "description": "A reference to the field.",
-      "required": true
-    },
-    "setupDefinition": {
-      "type": "string",
-      "description": "A reference to the parent ServiceAISetupDefinition.",
-      "required": true
-    }
-  },
-  "wsdl_segment": "```xml\n<xsd:complexType name=\"Metadata\">\n  <xsd:sequence>\n    <xsd:element name=\"fullName\" minOccurs=\"0\" type=\"xsd:string\"/>\n  </xsd:sequence>\n</xsd:complexType>\n<xsd:complexType name=\"ServiceAISetupField\">\n  <xsd:complexContent>\n    <xsd:extension base=\"tns:Metadata\">\n      <xsd:sequence>\n        <xsd:element name=\"entity\" type=\"xsd:string\"/>\n        <xsd:element name=\"field\" type=\"xsd:string\"/>\n        <xsd:element name=\"fieldMappingType\" type=\"tns:ServiceAISetupFieldType\"/>\n        <xsd:element name=\"fieldPosition\" type=\"xsd:int\"/>\n        <xsd:element name=\"name\" type=\"xsd:string\"/>\n        <xsd:element name=\"setupDefinition\" type=\"xsd:string\"/>\n      </xsd:sequence>\n    </xsd:extension>\n  </xsd:complexContent>\n</xsd:complexType>\n<xsd:simpleType name=\"ServiceAISetupFieldType\">\n  <xsd:restriction base=\"xsd:string\">\n    <xsd:enumeration value=\"CASE_DESC\"/>\n    <xsd:enumeration value=\"CASE_SUBJ\"/>\n    <xsd:enumeration value=\"ARTICLE_TITLE\"/>\n    <xsd:enumeration value=\"ARTICLE_CONTENT\"/>\n    <xsd:enumeration value=\"ARTICLE_SUMMARY\"/>\n    <xsd:enumeration value=\"ARTICLE_ANSWER\"/>\n    <xsd:enumeration value=\"ARTICLE_QUESTION\"/>\n  </xsd:restriction>\n</xsd:simpleType>\n```",
-  "declarative_metadata_sample_definition": [
-    {
-      "description": "The following is an example of a ServiceAISetupField component.",
-      "code": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ServiceAISetupField xmlns=\"http://soap.sforce.com/2006/04/metadata\">\n    <entity>Case</entity>\n    <field>Subject</field>\n    <fieldMappingType>CASE_SUBJ</fieldMappingType>\n    <fieldPosition>1</fieldPosition>\n    <name>SF16039900475920</name>\n    <setupDefinition>4hQRM0000004CDK</setupDefinition>\n</ServiceAISetupField>"
-    }
-  ]
-}