auth0 4.33.0 → 4.35.0

package/dist/esm/management/__generated/models/index.d.ts

@@ -8,6 +8,30 @@ export interface ActionsDraftUpdate {
      */
     update_draft?: boolean;
 }
+/**
+ *
+ */
+export type AnomalyAllowlistFormat = string;
+/**
+ *
+ */
+export interface ArkoseCaptchaConfig {
+    /**
+     */
+    siteKey: string;
+    /**
+     */
+    secret: string;
+    /**
+     */
+    clientSubdomain?: string;
+    /**
+     */
+    verifySubdomain?: string;
+    /**
+     */
+    failOpen?: boolean;
+}
 /**
  *
  */
@@ -15,6 +39,325 @@ export declare const AssessorsTypeEnum: {
     readonly new_device: "new-device";
 };
 export type AssessorsTypeEnum = (typeof AssessorsTypeEnum)[keyof typeof AssessorsTypeEnum];
+/**
+ *
+ */
+export declare const AsyncApprovalNotificationsChannelsEnum: {
+    readonly guardian_push: "guardian-push";
+    readonly email: "email";
+};
+export type AsyncApprovalNotificationsChannelsEnum = (typeof AsyncApprovalNotificationsChannelsEnum)[keyof typeof AsyncApprovalNotificationsChannelsEnum];
+/**
+ *
+ */
+export interface AttackProtectionCaptchaArkoseResponseContent {
+    [key: string]: any | any;
+    /**
+     * The site key for the Arkose captcha provider.
+     *
+     */
+    site_key?: string;
+    /**
+     * Whether the captcha should fail open.
+     *
+     */
+    fail_open?: boolean;
+    /**
+     * The subdomain used for client requests to the Arkose captcha provider.
+     *
+     */
+    client_subdomain?: string;
+    /**
+     * The subdomain used for server-side verification requests to the Arkose captcha provider.
+     *
+     */
+    verify_subdomain?: string;
+}
+/**
+ *
+ */
+export interface AttackProtectionCaptchaAuthChallengeRequest {
+    /**
+     * Whether the auth challenge should fail open.
+     *
+     */
+    fail_open: boolean;
+}
+/**
+ *
+ */
+export interface AttackProtectionCaptchaAuthChallengeResponseContent {
+    [key: string]: any | any;
+    /**
+     * Whether the auth challenge should fail open.
+     *
+     */
+    fail_open?: boolean;
+}
+/**
+ *
+ */
+export interface AttackProtectionCaptchaFriendlyCaptchaResponseContent {
+    [key: string]: any | any;
+    /**
+     * The site key for the Friendly Captcha provider.
+     *
+     */
+    site_key?: string;
+}
+/**
+ *
+ */
+export interface AttackProtectionCaptchaHcaptchaResponseContent {
+    [key: string]: any | any;
+    /**
+     * The site key for the hCaptcha provider.
+     *
+     */
+    site_key?: string;
+}
+/**
+ * The id of the active provider for the CAPTCHA.
+ */
+export declare const AttackProtectionCaptchaProviderId: {
+    readonly arkose: "arkose";
+    readonly auth_challenge: "auth_challenge";
+    readonly friendly_captcha: "friendly_captcha";
+    readonly hcaptcha: "hcaptcha";
+    readonly recaptcha_v2: "recaptcha_v2";
+    readonly recaptcha_enterprise: "recaptcha_enterprise";
+    readonly simple_captcha: "simple_captcha";
+};
+export type AttackProtectionCaptchaProviderId = (typeof AttackProtectionCaptchaProviderId)[keyof typeof AttackProtectionCaptchaProviderId];
+/**
+ *
+ */
+export interface AttackProtectionCaptchaRecaptchaEnterpriseResponseContent {
+    [key: string]: any | any;
+    /**
+     * The site key for the reCAPTCHA Enterprise provider.
+     *
+     */
+    site_key?: string;
+    /**
+     * The project ID for the reCAPTCHA Enterprise provider.
+     *
+     */
+    project_id?: string;
+}
+/**
+ *
+ */
+export interface AttackProtectionCaptchaRecaptchaV2ResponseContent {
+    [key: string]: any | any;
+    /**
+     * The site key for the reCAPTCHA v2 provider.
+     *
+     */
+    site_key?: string;
+}
+/**
+ *
+ */
+export interface AttackProtectionCaptchaSimpleCaptchaResponseContent {
+    [key: string]: any;
+}
+/**
+ *
+ */
+export interface AttackProtectionUpdateCaptchaArkose {
+    /**
+     * The site key for the Arkose captcha provider.
+     *
+     */
+    site_key: string;
+    /**
+     * The secret key for the Arkose captcha provider.
+     *
+     */
+    secret: string;
+    /**
+     * The subdomain used for client requests to the Arkose captcha provider.
+     *
+     */
+    client_subdomain?: string;
+    /**
+     * The subdomain used for server-side verification requests to the Arkose captcha provider.
+     *
+     */
+    verify_subdomain?: string;
+    /**
+     * Whether the captcha should fail open.
+     *
+     */
+    fail_open?: boolean;
+}
+/**
+ *
+ */
+export interface AttackProtectionUpdateCaptchaFriendlyCaptcha {
+    /**
+     * The site key for the Friendly Captcha provider.
+     *
+     */
+    site_key: string;
+    /**
+     * The secret key for the Friendly Captcha provider.
+     *
+     */
+    secret: string;
+}
+/**
+ *
+ */
+export interface AttackProtectionUpdateCaptchaHcaptcha {
+    /**
+     * The site key for the hCaptcha provider.
+     *
+     */
+    site_key: string;
+    /**
+     * The secret key for the hCaptcha provider.
+     *
+     */
+    secret: string;
+}
+/**
+ *
+ */
+export interface AttackProtectionUpdateCaptchaRecaptchaEnterprise {
+    /**
+     * The site key for the reCAPTCHA Enterprise provider.
+     *
+     */
+    site_key: string;
+    /**
+     * The API key for the reCAPTCHA Enterprise provider.
+     *
+     */
+    api_key: string;
+    /**
+     * The project ID for the reCAPTCHA Enterprise provider.
+     *
+     */
+    project_id: string;
+}
+/**
+ *
+ */
+export interface AttackProtectionUpdateCaptchaRecaptchaV2 {
+    /**
+     * The site key for the reCAPTCHA v2 provider.
+     *
+     */
+    site_key: string;
+    /**
+     * The secret key for the reCAPTCHA v2 provider.
+     *
+     */
+    secret: string;
+}
+/**
+ *
+ */
+export interface Auth0V2CaptchaConfig {
+    /**
+     */
+    failOpen?: boolean;
+}
+/**
+ * List of IP addresses or CIDR blocks to allowlist
+ */
+export interface BotDetectionAllowlist extends Array<BotDetectionIpAddressOrCidrBlock> {
+}
+/**
+ * The policy that defines how often to show CAPTCHA
+ */
+export declare const BotDetectionChallengePolicyPasswordFlowEnum: {
+    readonly never: "never";
+    readonly when_risky: "when_risky";
+    readonly always: "always";
+};
+export type BotDetectionChallengePolicyPasswordFlowEnum = (typeof BotDetectionChallengePolicyPasswordFlowEnum)[keyof typeof BotDetectionChallengePolicyPasswordFlowEnum];
+/**
+ * The policy that defines how often to show CAPTCHA
+ */
+export declare const BotDetectionChallengePolicyPasswordResetFlowEnum: {
+    readonly never: "never";
+    readonly when_risky: "when_risky";
+    readonly always: "always";
+};
+export type BotDetectionChallengePolicyPasswordResetFlowEnum = (typeof BotDetectionChallengePolicyPasswordResetFlowEnum)[keyof typeof BotDetectionChallengePolicyPasswordResetFlowEnum];
+/**
+ * The policy that defines how often to show CAPTCHA
+ */
+export declare const BotDetectionChallengePolicyPasswordlessFlowEnum: {
+    readonly never: "never";
+    readonly when_risky: "when_risky";
+    readonly always: "always";
+};
+export type BotDetectionChallengePolicyPasswordlessFlowEnum = (typeof BotDetectionChallengePolicyPasswordlessFlowEnum)[keyof typeof BotDetectionChallengePolicyPasswordlessFlowEnum];
+/**
+ * IP address (IPv4 or IPv6) or CIDR block
+ */
+export type BotDetectionIpAddressOrCidrBlock = string;
+/**
+ * The level of bot detection sensitivity
+ */
+export declare const BotDetectionLevelEnum: {
+    readonly low: "low";
+    readonly medium: "medium";
+    readonly high: "high";
+};
+export type BotDetectionLevelEnum = (typeof BotDetectionLevelEnum)[keyof typeof BotDetectionLevelEnum];
+/**
+ * The captcha assessment policy for userpass flow enabled for this tenant
+ */
+export declare const CaptchaEnforcementPolicyEnum: {
+    readonly high_risk: "high_risk";
+    readonly always_on: "always_on";
+    readonly off: "off";
+};
+export type CaptchaEnforcementPolicyEnum = (typeof CaptchaEnforcementPolicyEnum)[keyof typeof CaptchaEnforcementPolicyEnum];
+/**
+ * The selected captcha provider.
+ */
+export declare const CaptchaProviderEnum: {
+    readonly auth0: "auth0";
+    readonly auth0_v2: "auth0_v2";
+    readonly recaptcha_v2: "recaptcha_v2";
+    readonly recaptcha_enterprise: "recaptcha_enterprise";
+    readonly hcaptcha: "hcaptcha";
+    readonly friendly_captcha: "friendly_captcha";
+    readonly arkose: "arkose";
+};
+export type CaptchaProviderEnum = (typeof CaptchaProviderEnum)[keyof typeof CaptchaProviderEnum];
+/**
+ * Config for all captcha providers available for this tenant.
+ */
+export interface CaptchaProvidersConfig {
+    /**
+     */
+    auth0?: object;
+    /**
+     */
+    auth0_v2?: Auth0V2CaptchaConfig;
+    /**
+     */
+    recaptcha_v2?: RecaptchaV2CaptchaConfig;
+    /**
+     */
+    recaptcha_enterprise?: RecaptchaEnterpriseCaptchaConfig;
+    /**
+     */
+    hcaptcha?: HcaptchaCaptchaConfig;
+    /**
+     */
+    friendly_captcha?: FriendlyCaptchaConfig;
+    /**
+     */
+    arkose?: ArkoseCaptchaConfig;
+}
 /**
  * Certificate information. This object is relevant only for Custom Domains with Auth0-Managed Certificates.
  */
@@ -256,6 +599,11 @@ export interface Client {
      *
      */
     organization_require_behavior: ClientOrganizationRequireBehaviorEnum;
+    /**
+     * Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
+     *
+     */
+    organization_discovery_methods?: Array<ClientOrganizationDiscoveryEnum>;
     /**
      */
     client_authentication_methods: ClientClientAuthenticationMethods | null;
@@ -292,6 +640,11 @@ export interface Client {
      *
      */
     skip_non_verifiable_callback_uri_confirmation_prompt?: boolean;
+    /**
+     * Array of notification channels for contacting the user when their approval is required. Valid values are `guardian-push`, `email`.
+     *
+     */
+    async_approval_notification_channels?: Array<AsyncApprovalNotificationsChannelsEnum>;
 }
 export declare const ClientAppTypeEnum: {
     readonly native: "native";
@@ -1196,6 +1549,11 @@ export interface ClientCreate {
      *
      */
     organization_require_behavior?: ClientCreateOrganizationRequireBehaviorEnum;
+    /**
+     * Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
+     *
+     */
+    organization_discovery_methods?: Array<ClientOrganizationDiscoveryEnum>;
     /**
      */
     client_authentication_methods?: ClientCreateClientAuthenticationMethods;
@@ -1237,6 +1595,11 @@ export interface ClientCreate {
      *
      */
     skip_non_verifiable_callback_uri_confirmation_prompt?: boolean;
+    /**
+     * Array of notification channels for contacting the user when their approval is required. Valid values are `guardian-push`, `email`.
+     *
+     */
+    async_approval_notification_channels?: Array<AsyncApprovalNotificationsChannelsEnum>;
 }
 export declare const ClientCreateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -2439,6 +2802,14 @@ export declare const ClientOidcLogoutBackchannelLogoutInitiatorsSelectedInitiato
     readonly account_deactivated: "account-deactivated";
 };
 export type ClientOidcLogoutBackchannelLogoutInitiatorsSelectedInitiatorsEnum = (typeof ClientOidcLogoutBackchannelLogoutInitiatorsSelectedInitiatorsEnum)[keyof typeof ClientOidcLogoutBackchannelLogoutInitiatorsSelectedInitiatorsEnum];
+/**
+ * Method for discovering organizations during the `pre_login_prompt`. `email` allows users to find their organization by entering their email address and performing domain matching, while `organization_name` requires users to enter the organization name directly. These methods can be combined.
+ */
+export declare const ClientOrganizationDiscoveryEnum: {
+    readonly email: "email";
+    readonly organization_name: "organization_name";
+};
+export type ClientOrganizationDiscoveryEnum = (typeof ClientOrganizationDiscoveryEnum)[keyof typeof ClientOrganizationDiscoveryEnum];
 /**
  * Refresh token configuration
  */
@@ -2758,6 +3129,11 @@ export interface ClientUpdate {
      *
      */
     organization_require_behavior?: ClientUpdateOrganizationRequireBehaviorEnum;
+    /**
+     * Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
+     *
+     */
+    organization_discovery_methods?: Array<ClientOrganizationDiscoveryEnum>;
     /**
      */
     client_authentication_methods?: ClientUpdateClientAuthenticationMethods | null;
@@ -2786,6 +3162,11 @@ export interface ClientUpdate {
      *
      */
     skip_non_verifiable_callback_uri_confirmation_prompt?: boolean;
+    /**
+     * Array of notification channels for contacting the user when their approval is required. Valid values are `guardian-push`, `email`.
+     *
+     */
+    async_approval_notification_channels?: Array<AsyncApprovalNotificationsChannelsEnum>;
 }
 export declare const ClientUpdateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -3449,6 +3830,9 @@ export interface ConnectionCreateOptions {
      *
      */
     non_persistent_attrs?: Array<string>;
+    /**
+     */
+    attributes?: ConnectionCreateOptionsAttributes;
     /**
      */
     enable_script_context?: boolean;
@@ -3545,6 +3929,148 @@ export declare const ConnectionCreateOptionsSetUserRootAttributesEnum: {
     readonly first_login: "on_first_login";
 };
 export type ConnectionCreateOptionsSetUserRootAttributesEnum = (typeof ConnectionCreateOptionsSetUserRootAttributesEnum)[keyof typeof ConnectionCreateOptionsSetUserRootAttributesEnum];
+/**
+ * Attribute configuration
+ */
+export interface ConnectionCreateOptionsAttributes {
+    /**
+     */
+    email?: ConnectionCreateOptionsAttributesEmail;
+    /**
+     */
+    phone_number?: ConnectionCreateOptionsAttributesPhoneNumber;
+    /**
+     */
+    username?: ConnectionCreateOptionsAttributesUsername;
+}
+/**
+ * Configuration for the email attribute for users.
+ */
+export interface ConnectionCreateOptionsAttributesEmail {
+    /**
+     */
+    identifier?: ConnectionCreateOptionsAttributesEmailIdentifier;
+    /**
+     * Determines if the attribute is unique in a given connection
+     *
+     */
+    unique?: boolean;
+    /**
+     * Determines if property should be required for users
+     *
+     */
+    profile_required?: boolean;
+    /**
+     */
+    verification_method?: ConnectionCreateOptionsAttributesEmailVerificationMethodEnum;
+    /**
+     */
+    signup?: ConnectionCreateOptionsAttributesEmailSignup;
+}
+export declare const ConnectionCreateOptionsAttributesEmailVerificationMethodEnum: {
+    readonly link: "link";
+    readonly otp: "otp";
+};
+export type ConnectionCreateOptionsAttributesEmailVerificationMethodEnum = (typeof ConnectionCreateOptionsAttributesEmailVerificationMethodEnum)[keyof typeof ConnectionCreateOptionsAttributesEmailVerificationMethodEnum];
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesEmailIdentifier {
+    /**
+     * Determines if the attribute is used for identification
+     *
+     */
+    active?: boolean;
+}
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesEmailSignup {
+    /**
+     */
+    status?: ConnectionCreateOptionsAttributesEmailSignupStatusEnum;
+    /**
+     */
+    verification?: ConnectionCreateOptionsAttributesEmailSignupVerification;
+}
+export declare const ConnectionCreateOptionsAttributesEmailSignupStatusEnum: {
+    readonly required: "required";
+    readonly optional: "optional";
+    readonly inactive: "inactive";
+};
+export type ConnectionCreateOptionsAttributesEmailSignupStatusEnum = (typeof ConnectionCreateOptionsAttributesEmailSignupStatusEnum)[keyof typeof ConnectionCreateOptionsAttributesEmailSignupStatusEnum];
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesEmailSignupVerification {
+    /**
+     */
+    active?: boolean;
+}
+/**
+ * Configuration for the phone number attribute for users.
+ */
+export interface ConnectionCreateOptionsAttributesPhoneNumber {
+    /**
+     */
+    identifier?: ConnectionCreateOptionsAttributesEmailIdentifier;
+    /**
+     * Determines if property should be required for users
+     *
+     */
+    profile_required?: boolean;
+    /**
+     */
+    signup?: ConnectionCreateOptionsAttributesEmailSignup;
+}
+/**
+ * Configuration for the username attribute for users.
+ */
+export interface ConnectionCreateOptionsAttributesUsername {
+    /**
+     */
+    identifier?: ConnectionCreateOptionsAttributesEmailIdentifier;
+    /**
+     * Determines if property should be required for users
+     *
+     */
+    profile_required?: boolean;
+    /**
+     */
+    signup?: ConnectionCreateOptionsAttributesEmailSignup;
+    /**
+     */
+    validation?: ConnectionCreateOptionsAttributesUsernameValidation;
+}
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesUsernameValidation {
+    /**
+     * Minimum allowed length
+     *
+     */
+    min_length?: number;
+    /**
+     * Maximum allowed length
+     *
+     */
+    max_length?: number;
+    /**
+     */
+    allowed_types?: ConnectionCreateOptionsAttributesUsernameValidationAllowedTypes;
+}
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesUsernameValidationAllowedTypes {
+    /**
+     */
+    email?: boolean;
+    /**
+     */
+    phone_number?: boolean;
+}
 /**
  * Options for enabling authentication methods.
  */
@@ -3835,6 +4361,9 @@ export interface ConnectionUpdateOptions {
      *
      */
     non_persistent_attrs?: Array<string>;
+    /**
+     */
+    attributes?: ConnectionCreateOptionsAttributes;
     /**
      */
     enable_script_context?: boolean;
@@ -3931,6 +4460,47 @@ export declare const ConnectionUpdateOptionsSetUserRootAttributesEnum: {
     readonly first_login: "on_first_login";
 };
 export type ConnectionUpdateOptionsSetUserRootAttributesEnum = (typeof ConnectionUpdateOptionsSetUserRootAttributesEnum)[keyof typeof ConnectionUpdateOptionsSetUserRootAttributesEnum];
+/**
+ *
+ */
+export interface CreateOrganizationDiscoveryDomainRequestContent {
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status?: OrganizationDiscoveryDomainStatus;
+}
+/**
+ *
+ */
+export interface CreateOrganizationDiscoveryDomainResponseContent {
+    /**
+     * Organization discovery domain identifier.
+     *
+     */
+    id: string;
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status: OrganizationDiscoveryDomainStatus;
+    /**
+     * A unique token generated for the discovery domain. This must be placed in a DNS TXT record at the location specified by the verification_host field to prove domain ownership.
+     *
+     */
+    verification_txt: string;
+    /**
+     * The full domain where the TXT record should be added.
+     *
+     */
+    verification_host: string;
+}
 /**
  * Phone provider configuration schema
  */
@@ -4635,6 +5205,17 @@ export declare const FactorNameEnum: {
     readonly recovery_code: "recovery-code";
 };
 export type FactorNameEnum = (typeof FactorNameEnum)[keyof typeof FactorNameEnum];
+/**
+ *
+ */
+export interface FriendlyCaptchaConfig {
+    /**
+     */
+    siteKey?: string;
+    /**
+     */
+    secret?: string;
+}
 /**
  *
  */
@@ -5264,6 +5845,36 @@ export interface GetApns200Response {
      */
     enabled: boolean;
 }
+/**
+ *
+ */
+export interface GetAttackProtectionCaptchaResponseContent {
+    [key: string]: any | any;
+    /**
+     */
+    active_provider_id?: string;
+    /**
+     */
+    arkose?: AttackProtectionCaptchaArkoseResponseContent;
+    /**
+     */
+    auth_challenge?: AttackProtectionCaptchaAuthChallengeResponseContent;
+    /**
+     */
+    hcaptcha?: AttackProtectionCaptchaHcaptchaResponseContent;
+    /**
+     */
+    friendly_captcha?: AttackProtectionCaptchaFriendlyCaptchaResponseContent;
+    /**
+     */
+    recaptcha_enterprise?: AttackProtectionCaptchaRecaptchaEnterpriseResponseContent;
+    /**
+     */
+    recaptcha_v2?: AttackProtectionCaptchaRecaptchaV2ResponseContent;
+    /**
+     */
+    simple_captcha?: AttackProtectionCaptchaSimpleCaptchaResponseContent;
+}
 /**
  *
  */
@@ -5477,6 +6088,31 @@ export interface GetBindings200ResponseBindingsInner {
      */
     updated_at: string;
 }
+/**
+ *
+ */
+export interface GetBotDetectionSettingsResponseContent {
+    /**
+     */
+    bot_detection_level: BotDetectionLevelEnum;
+    /**
+     */
+    challenge_password_policy: BotDetectionChallengePolicyPasswordFlowEnum;
+    /**
+     */
+    challenge_passwordless_policy: BotDetectionChallengePolicyPasswordlessFlowEnum;
+    /**
+     */
+    challenge_password_reset_policy: BotDetectionChallengePolicyPasswordResetFlowEnum;
+    /**
+     */
+    allowlist: BotDetectionAllowlist;
+    /**
+     * Whether monitoring mode is enabled (logs but does not block)
+     *
+     */
+    monitoring_mode_enabled: boolean;
+}
 /**
  *
  */
@@ -7989,12 +8625,40 @@ export interface GetOrganizationClientGrants200ResponseOneOfInner {
      * The audience (API identifier) of this client grant
      *
      */
-    audience: string;
+    audience: string;
+    /**
+     * Scopes allowed for this client grant.
+     *
+     */
+    scope: Array<string>;
+}
+/**
+ *
+ */
+export interface GetOrganizationDiscoveryDomainResponseContent {
+    /**
+     * Organization discovery domain identifier.
+     *
+     */
+    id: string;
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status: OrganizationDiscoveryDomainStatus;
+    /**
+     * A unique token generated for the discovery domain. This must be placed in a DNS TXT record at the location specified by the verification_host field to prove domain ownership.
+     *
+     */
+    verification_txt: string;
     /**
-     * Scopes allowed for this client grant.
+     * The full domain where the TXT record should be added.
      *
      */
-    scope: Array<string>;
+    verification_host: string;
 }
 /**
  *
@@ -9636,6 +10300,17 @@ export type GetUsers200ResponseOneOfInnerLastLogin = string | {
 export type GetUsers200ResponseOneOfInnerUpdatedAt = string | {
     [key: string]: any;
 };
+/**
+ *
+ */
+export interface HcaptchaCaptchaConfig {
+    /**
+     */
+    siteKey?: string;
+    /**
+     */
+    secret?: string;
+}
 /**
  *
  */
@@ -9791,6 +10466,17 @@ export declare const JobFormatEnum: {
     readonly csv: "csv";
 };
 export type JobFormatEnum = (typeof JobFormatEnum)[keyof typeof JobFormatEnum];
+/**
+ *
+ */
+export interface ListOrganizationDiscoveryDomainsResponseContent {
+    /**
+     */
+    next?: string;
+    /**
+     */
+    domains: Array<OrganizationDiscoveryDomain>;
+}
 /**
  *
  */
@@ -10017,6 +10703,42 @@ export interface OrganizationBrandingColors {
      */
     page_background: string;
 }
+/**
+ *
+ */
+export interface OrganizationDiscoveryDomain {
+    /**
+     * Organization discovery domain identifier.
+     *
+     */
+    id: string;
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status: OrganizationDiscoveryDomainStatus;
+    /**
+     * A unique token generated for the discovery domain. This must be placed in a DNS TXT record at the location specified by the verification_host field to prove domain ownership.
+     *
+     */
+    verification_txt: string;
+    /**
+     * The full domain where the TXT record should be added.
+     *
+     */
+    verification_host: string;
+}
+/**
+ * The verification status of the discovery domain.
+ */
+export declare const OrganizationDiscoveryDomainStatus: {
+    readonly pending: "pending";
+    readonly verified: "verified";
+};
+export type OrganizationDiscoveryDomainStatus = (typeof OrganizationDiscoveryDomainStatus)[keyof typeof OrganizationDiscoveryDomainStatus];
 /**
  * Metadata associated with the organization, in the form of an object with string values (max 255 chars). Maximum of 25 metadata properties allowed.
  */
@@ -15991,6 +16713,31 @@ export interface PutUniversalLoginRequestOneOf {
      */
     template: string;
 }
+/**
+ *
+ */
+export interface RecaptchaEnterpriseCaptchaConfig {
+    /**
+     */
+    siteKey?: string;
+    /**
+     */
+    apiKey?: string;
+    /**
+     */
+    projectId?: string;
+}
+/**
+ *
+ */
+export interface RecaptchaV2CaptchaConfig {
+    /**
+     */
+    siteKey?: string;
+    /**
+     */
+    secret?: string;
+}
 /**
  *
  */
@@ -17967,6 +18714,193 @@ export interface TwilioFactorProvider {
      */
     sid: string | null;
 }
+/**
+ *
+ */
+export interface UpdateAttackProtectionCaptchaRequestContent {
+    /**
+     */
+    active_provider_id?: AttackProtectionCaptchaProviderId;
+    /**
+     */
+    arkose?: AttackProtectionUpdateCaptchaArkose;
+    /**
+     */
+    auth_challenge?: AttackProtectionCaptchaAuthChallengeRequest;
+    /**
+     */
+    hcaptcha?: AttackProtectionUpdateCaptchaHcaptcha;
+    /**
+     */
+    friendly_captcha?: AttackProtectionUpdateCaptchaFriendlyCaptcha;
+    /**
+     */
+    recaptcha_enterprise?: AttackProtectionUpdateCaptchaRecaptchaEnterprise;
+    /**
+     */
+    recaptcha_v2?: AttackProtectionUpdateCaptchaRecaptchaV2;
+    /**
+     */
+    simple_captcha?: AttackProtectionCaptchaSimpleCaptchaResponseContent;
+}
+/**
+ *
+ */
+export interface UpdateAttackProtectionCaptchaResponseContent {
+    [key: string]: any | any;
+    /**
+     */
+    active_provider_id?: string;
+    /**
+     */
+    arkose?: AttackProtectionCaptchaArkoseResponseContent;
+    /**
+     */
+    auth_challenge?: AttackProtectionCaptchaAuthChallengeResponseContent;
+    /**
+     */
+    hcaptcha?: AttackProtectionCaptchaHcaptchaResponseContent;
+    /**
+     */
+    friendly_captcha?: AttackProtectionCaptchaFriendlyCaptchaResponseContent;
+    /**
+     */
+    recaptcha_enterprise?: AttackProtectionCaptchaRecaptchaEnterpriseResponseContent;
+    /**
+     */
+    recaptcha_v2?: AttackProtectionCaptchaRecaptchaV2ResponseContent;
+    /**
+     */
+    simple_captcha?: AttackProtectionCaptchaSimpleCaptchaResponseContent;
+}
+/**
+ *
+ */
+export interface UpdateBotDetectionSettingsRequestContent {
+    /**
+     */
+    bot_detection_level?: BotDetectionLevelEnum;
+    /**
+     */
+    challenge_password_policy?: BotDetectionChallengePolicyPasswordFlowEnum;
+    /**
+     */
+    challenge_passwordless_policy?: BotDetectionChallengePolicyPasswordlessFlowEnum;
+    /**
+     */
+    challenge_password_reset_policy?: BotDetectionChallengePolicyPasswordResetFlowEnum;
+    /**
+     */
+    allowlist?: BotDetectionAllowlist;
+    /**
+     * Whether monitoring mode is enabled (logs but does not block)
+     *
+     */
+    monitoring_mode_enabled?: boolean;
+}
+/**
+ *
+ */
+export interface UpdateBotDetectionSettingsResponseContent {
+    /**
+     */
+    bot_detection_level?: BotDetectionLevelEnum;
+    /**
+     */
+    challenge_password_policy?: BotDetectionChallengePolicyPasswordFlowEnum;
+    /**
+     */
+    challenge_passwordless_policy?: BotDetectionChallengePolicyPasswordlessFlowEnum;
+    /**
+     */
+    challenge_password_reset_policy?: BotDetectionChallengePolicyPasswordResetFlowEnum;
+    /**
+     */
+    allowlist?: BotDetectionAllowlist;
+    /**
+     * Whether monitoring mode is enabled (logs but does not block)
+     *
+     */
+    monitoring_mode_enabled?: boolean;
+}
+/**
+ *
+ */
+export interface UpdateCaptchaRequestContent {
+    /**
+     */
+    siteKey?: string;
+    /**
+     */
+    secret?: string;
+    /**
+     */
+    apiKey?: string;
+    /**
+     */
+    projectId?: string;
+}
+/**
+ *
+ */
+export interface UpdateCaptchaResponseContent {
+    /**
+     */
+    policy?: CaptchaEnforcementPolicyEnum;
+    /**
+     */
+    passwordless_policy?: CaptchaEnforcementPolicyEnum;
+    /**
+     */
+    password_reset_policy?: CaptchaEnforcementPolicyEnum;
+    /**
+     */
+    selected?: CaptchaProviderEnum;
+    /**
+     */
+    providers?: CaptchaProvidersConfig;
+    /**
+     * List of trusted IP addresses that will not have attack protection enforced against them.
+     *
+     */
+    allowlist?: Array<AnomalyAllowlistFormat>;
+}
+/**
+ *
+ */
+export interface UpdateOrganizationDiscoveryDomainRequestContent {
+    /**
+     */
+    status?: OrganizationDiscoveryDomainStatus;
+}
+/**
+ *
+ */
+export interface UpdateOrganizationDiscoveryDomainResponseContent {
+    /**
+     * Organization discovery domain identifier.
+     *
+     */
+    id: string;
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status: OrganizationDiscoveryDomainStatus;
+    /**
+     * A unique token generated for the discovery domain. This must be placed in a DNS TXT record at the location specified by the verification_host field to prove domain ownership.
+     *
+     */
+    verification_txt: string;
+    /**
+     * The full domain where the TXT record should be added.
+     *
+     */
+    verification_host: string;
+}
 /**
  *
  */
@@ -20904,6 +21838,21 @@ export interface DeleteClientGrantsByGrantIdRequest {
      */
     grant_id: string;
 }
+/**
+ *
+ */
+export interface DeleteDiscoveryDomainsByDiscoveryDomainIdRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+    /**
+     * ID of the discovery domain.
+     *
+     */
+    discovery_domain_id: string;
+}
 /**
  *
  */
@@ -20969,6 +21918,41 @@ export interface DeleteOrganizationsByIdRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface GetDiscoveryDomainsRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+    /**
+     * Optional Id from which to start selection.
+     *
+     */
+    from?: string;
+    /**
+     * Number of results per page. Defaults to 50.
+     *
+     */
+    take?: number;
+}
+/**
+ *
+ */
+export interface GetDiscoveryDomainsByDiscoveryDomainIdRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+    /**
+     * ID of the discovery domain.
+     *
+     */
+    discovery_domain_id: string;
+}
 /**
  *
  */
@@ -21244,6 +22228,21 @@ export interface GetOrganizationsByIdRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface PatchDiscoveryDomainsByDiscoveryDomainIdRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+    /**
+     * ID of the discovery domain to update.
+     *
+     */
+    discovery_domain_id: string;
+}
 /**
  *
  */
@@ -21269,6 +22268,16 @@ export interface PatchOrganizationsByIdOperationRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface PostDiscoveryDomainsRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+}
 /**
  *
  */