auth0 5.14.0 → 6.0.0

package/dist/esm/management/api/types/types.mjs

@@ -240,12 +240,6 @@ export const OauthScope = {
     /**
      * Read Events */
     ReadEvents: "read:events",
-    /**
-     * Read Federated Connections Tokens */
-    ReadFederatedConnectionsTokens: "read:federated_connections_tokens",
-    /**
-     * Delete Federated Connections Tokens */
-    DeleteFederatedConnectionsTokens: "delete:federated_connections_tokens",
     /**
      * Create Flows */
     CreateFlows: "create:flows",
@@ -715,6 +709,18 @@ export const OauthScope = {
      * Delete Vdcs Templates */
     DeleteVdcsTemplates: "delete:vdcs_templates",
 };
+export var NotFoundErrorBody;
+(function (NotFoundErrorBody) {
+    NotFoundErrorBody.Error_ = {
+        NotFound: "Not Found",
+    };
+})(NotFoundErrorBody || (NotFoundErrorBody = {}));
+export var TooManyRequestsErrorBody;
+(function (TooManyRequestsErrorBody) {
+    TooManyRequestsErrorBody.Error_ = {
+        TooManyRequests: "Too Many Requests",
+    };
+})(TooManyRequestsErrorBody || (TooManyRequestsErrorBody = {}));
 /** How the action is being referred to: `action_id` or `action_name`. */
 export const ActionBindingRefTypeEnum = {
     BindingId: "binding_id",
@@ -1108,10 +1114,9 @@ export const ClientSessionTransferAllowedAuthenticationMethodsEnum = {
     Cookie: "cookie",
     Query: "query",
 };
-/** Indicates the device binding enforcement for delegation (impersonation) access. If set to 'ip', device binding is enforced by IP. If set to 'asn', device binding is enforced by ASN. Default value is `ip`. */
+/** Indicates the device binding enforcement for delegation (impersonation) access. The only supported value is `ip`, which enforces device binding by IP, meaning consumption of the Session Transfer Token must be done from the same IP as the issuer. */
 export const ClientSessionTransferDelegationDeviceBindingEnum = {
     Ip: "ip",
-    Asn: "asn",
 };
 /** Indicates whether device binding security should be enforced for the app. If set to 'ip', the app will enforce device binding by IP, meaning that consumption of Session Transfer Token must be done from the same IP of the issuer. Likewise, if set to 'asn', device binding is enforced by ASN, meaning consumption of Session Transfer Token must be done from the same ASN as the issuer. If set to 'none', device binding is not enforced. Usually configured in the web application. Default value is `ip`. */
 export const ClientSessionTransferDeviceBindingEnum = {
@@ -2225,6 +2230,11 @@ export const DefaultMethodEmailIdentifierEnum = {
     Password: "password",
     EmailOtp: "email_otp",
 };
+/** Default authentication method for phone_number identifier */
+export const DefaultMethodPhoneNumberIdentifierEnum = {
+    Password: "password",
+    PhoneOtp: "phone_otp",
+};
 /** Type of credential. Must be `public_key`. */
 export const DeviceCredentialPublicKeyTypeEnum = {
     PublicKey: "public_key",
@@ -2329,177 +2339,1017 @@ export const EventStreamActionDestinationTypeEnum = {
 export const EventStreamCloudEventA0PurposeEnum = {
     Test: "test",
 };
-/** Machine-readable error code. */
-export const EventStreamCloudEventErrorCodeEnum = {
-    InvalidCursor: "invalid_cursor",
-    CursorExpired: "cursor_expired",
-    Timeout: "timeout",
-    PayloadTooLarge: "payload_too_large",
-    ProcessingError: "processing_error",
-    ConnectionTimeout: "connection_timeout",
-};
-/** Identifies this as an error message (injected from the SSE event field). */
-export const EventStreamCloudEventErrorMessageTypeEnum = {
-    Error: "error",
-};
 /** The type of the event which has happened. */
-export const EventStreamCloudEventGroupCreatedCloudEventTypeEnum = {
-    GroupCreated: "group.created",
+export const EventStreamCloudEventConnectionCreatedCloudEventTypeEnum = {
+    ConnectionCreated: "connection.created",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupCreatedObject0TypeEnum = {
-    Connection: "connection",
+/** Method used to map incoming claims when strategy=oidc. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsAttributeMapMappingModeEnum = {
+    BindAll: "bind_all",
+    UseMap: "use_map",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupCreatedObject1TypeEnum = {
-    Organization: "organization",
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupCreatedObject2TypeEnum = {
-    Tenant: "tenant",
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventGroupCreatedTypeEnum = {
-    GroupCreated: "group.created",
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
 };
-/** The type of the event which has happened. */
-export const EventStreamCloudEventGroupDeletedCloudEventTypeEnum = {
-    GroupDeleted: "group.deleted",
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupDeletedObject0TypeEnum = {
-    Connection: "connection",
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupDeletedObject1TypeEnum = {
-    Organization: "organization",
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupDeletedObject2TypeEnum = {
-    Tenant: "tenant",
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventGroupDeletedTypeEnum = {
-    GroupDeleted: "group.deleted",
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
 };
-/** The type of the event which has happened. */
-export const EventStreamCloudEventGroupMemberAddedCloudEventTypeEnum = {
-    GroupMemberAdded: "group.member.added",
+/** OIDC communication channel type. 'back_channel' (confidential client) exchanges tokens server-side for stronger security; 'front_channel' handles responses in the browser. */
+export const EventStreamCloudEventConnectionCreatedObject0OptionsTypeEnum = {
+    BackChannel: "back_channel",
+    FrontChannel: "front_channel",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupMemberAddedObjectGroup0TypeEnum = {
-    Connection: "connection",
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionCreatedObject0StrategyEnum = {
+    Oidc: "oidc",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupMemberAddedObjectGroup1TypeEnum = {
-    Organization: "organization",
+/** Method used to map incoming claims when strategy=okta. */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsAttributeMapMappingModeEnum = {
+    BasicProfile: "basic_profile",
+    UseMap: "use_map",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupMemberAddedObjectGroup2TypeEnum = {
-    Tenant: "tenant",
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
 };
-/** Type discriminator for user members */
-export const EventStreamCloudEventGroupMemberAddedObjectMember0MemberTypeEnum = {
-    User: "user",
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
 };
-/** Type discriminator for connection members */
-export const EventStreamCloudEventGroupMemberAddedObjectMember1MemberTypeEnum = {
-    Connection: "connection",
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventGroupMemberAddedTypeEnum = {
-    GroupMemberAdded: "group.member.added",
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
 };
-/** The type of the event which has happened. */
-export const EventStreamCloudEventGroupMemberDeletedCloudEventTypeEnum = {
-    GroupMemberDeleted: "group.member.deleted",
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupMemberDeletedObjectGroup0TypeEnum = {
-    Connection: "connection",
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupMemberDeletedObjectGroup1TypeEnum = {
-    Organization: "organization",
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupMemberDeletedObjectGroup2TypeEnum = {
-    Tenant: "tenant",
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
 };
-/** Type discriminator for user members */
-export const EventStreamCloudEventGroupMemberDeletedObjectMember0MemberTypeEnum = {
-    User: "user",
+/** Connection type */
+export const EventStreamCloudEventConnectionCreatedObject1OptionsTypeEnum = {
+    BackChannel: "back_channel",
 };
-/** Type discriminator for connection members */
-export const EventStreamCloudEventGroupMemberDeletedObjectMember1MemberTypeEnum = {
-    Connection: "connection",
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionCreatedObject1StrategyEnum = {
+    Okta: "okta",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventGroupMemberDeletedTypeEnum = {
-    GroupMemberDeleted: "group.member.deleted",
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionCreatedObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
 };
-/** The type of the event which has happened. */
-export const EventStreamCloudEventGroupRoleAssignedCloudEventTypeEnum = {
-    GroupRoleAssigned: "group.role.assigned",
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionCreatedObject2OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupRoleAssignedObjectGroup0TypeEnum = {
-    Connection: "connection",
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionCreatedObject2OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupRoleAssignedObjectGroup1TypeEnum = {
-    Organization: "organization",
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionCreatedObject2OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupRoleAssignedObjectGroup2TypeEnum = {
-    Tenant: "tenant",
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionCreatedObject2OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventGroupRoleAssignedTypeEnum = {
-    GroupRoleAssigned: "group.role.assigned",
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionCreatedObject2OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
 };
-/** The type of the event which has happened. */
-export const EventStreamCloudEventGroupRoleDeletedCloudEventTypeEnum = {
-    GroupRoleDeleted: "group.role.deleted",
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionCreatedObject2StrategyEnum = {
+    Samlp: "samlp",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupRoleDeletedObjectGroup0TypeEnum = {
-    Connection: "connection",
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionCreatedObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupRoleDeletedObjectGroup1TypeEnum = {
-    Organization: "organization",
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionCreatedObject3OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupRoleDeletedObjectGroup2TypeEnum = {
-    Tenant: "tenant",
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionCreatedObject3OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventGroupRoleDeletedTypeEnum = {
-    GroupRoleDeleted: "group.role.deleted",
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionCreatedObject3OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
 };
-/** The type of the event which has happened. */
-export const EventStreamCloudEventGroupUpdatedCloudEventTypeEnum = {
-    GroupUpdated: "group.updated",
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionCreatedObject3OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupUpdatedObject0TypeEnum = {
-    Connection: "connection",
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionCreatedObject3OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupUpdatedObject1TypeEnum = {
-    Organization: "organization",
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionCreatedObject3StrategyEnum = {
+    Pingfederate: "pingfederate",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupUpdatedObject2TypeEnum = {
-    Tenant: "tenant",
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionCreatedObject4OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventGroupUpdatedTypeEnum = {
-    GroupUpdated: "group.updated",
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionCreatedObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
 };
-/** Identifies this as an offset-only heartbeat message (injected from the SSE event field). */
-export const EventStreamCloudEventOffsetOnlyMessageTypeEnum = {
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionCreatedObject4StrategyEnum = {
+    Adfs: "adfs",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionCreatedObject5OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionCreatedObject5StrategyEnum = {
+    Ad: "ad",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionCreatedObject6OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionCreatedObject6StrategyEnum = {
+    GoogleApps: "google-apps",
+};
+/** The Azure AD endpoint version for authentication. 'microsoft-identity-platform-v2.0' (recommended, default) supports modern OAuth 2.0 features. 'azure-active-directory-v1.0' is the legacy endpoint with protocol limitations. Selection affects available features. */
+export const EventStreamCloudEventConnectionCreatedObject7OptionsIdentityApiEnum = {
+    MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
+    AzureActiveDirectoryV10: "azure-active-directory-v1.0",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionCreatedObject7OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionCreatedObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The Azure AD claim to use as the unique user identifier. 'oid' (Object ID) is recommended for single-tenant connections and required for SCIM. 'sub' (Subject) is required for multi-tenant/common endpoint. Only applies with OpenID Connect protocol. */
+export const EventStreamCloudEventConnectionCreatedObject7OptionsUseridAttributeEnum = {
+    Oid: "oid",
+    Sub: "sub",
+};
+/** The authentication protocol for Azure AD v1 endpoints. 'openid-connect' (default, recommended) uses modern OAuth 2.0/OIDC. 'ws-federation' is a legacy SAML-based protocol for older integrations. Only available with Azure AD v1 API. */
+export const EventStreamCloudEventConnectionCreatedObject7OptionsWaadProtocolEnum = {
+    WsFederation: "ws-federation",
+    OpenidConnect: "openid-connect",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionCreatedObject7StrategyEnum = {
+    Waad: "waad",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventConnectionCreatedTypeEnum = {
+    ConnectionCreated: "connection.created",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventConnectionDeletedCloudEventTypeEnum = {
+    ConnectionDeleted: "connection.deleted",
+};
+/** Method used to map incoming claims when strategy=oidc. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsAttributeMapMappingModeEnum = {
+    BindAll: "bind_all",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** OIDC communication channel type. 'back_channel' (confidential client) exchanges tokens server-side for stronger security; 'front_channel' handles responses in the browser. */
+export const EventStreamCloudEventConnectionDeletedObject0OptionsTypeEnum = {
+    BackChannel: "back_channel",
+    FrontChannel: "front_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedObject0StrategyEnum = {
+    Oidc: "oidc",
+};
+/** Method used to map incoming claims when strategy=okta. */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsAttributeMapMappingModeEnum = {
+    BasicProfile: "basic_profile",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** Connection type */
+export const EventStreamCloudEventConnectionDeletedObject1OptionsTypeEnum = {
+    BackChannel: "back_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedObject1StrategyEnum = {
+    Okta: "okta",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionDeletedObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionDeletedObject2OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionDeletedObject2OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionDeletedObject2OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedObject2OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionDeletedObject2OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedObject2StrategyEnum = {
+    Samlp: "samlp",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionDeletedObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionDeletedObject3OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionDeletedObject3OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionDeletedObject3OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedObject3OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionDeletedObject3OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedObject3StrategyEnum = {
+    Pingfederate: "pingfederate",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedObject4OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionDeletedObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedObject4StrategyEnum = {
+    Adfs: "adfs",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedObject5OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedObject5StrategyEnum = {
+    Ad: "ad",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedObject6OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedObject6StrategyEnum = {
+    GoogleApps: "google-apps",
+};
+/** The Azure AD endpoint version for authentication. 'microsoft-identity-platform-v2.0' (recommended, default) supports modern OAuth 2.0 features. 'azure-active-directory-v1.0' is the legacy endpoint with protocol limitations. Selection affects available features. */
+export const EventStreamCloudEventConnectionDeletedObject7OptionsIdentityApiEnum = {
+    MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
+    AzureActiveDirectoryV10: "azure-active-directory-v1.0",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedObject7OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionDeletedObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The Azure AD claim to use as the unique user identifier. 'oid' (Object ID) is recommended for single-tenant connections and required for SCIM. 'sub' (Subject) is required for multi-tenant/common endpoint. Only applies with OpenID Connect protocol. */
+export const EventStreamCloudEventConnectionDeletedObject7OptionsUseridAttributeEnum = {
+    Oid: "oid",
+    Sub: "sub",
+};
+/** The authentication protocol for Azure AD v1 endpoints. 'openid-connect' (default, recommended) uses modern OAuth 2.0/OIDC. 'ws-federation' is a legacy SAML-based protocol for older integrations. Only available with Azure AD v1 API. */
+export const EventStreamCloudEventConnectionDeletedObject7OptionsWaadProtocolEnum = {
+    WsFederation: "ws-federation",
+    OpenidConnect: "openid-connect",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedObject7StrategyEnum = {
+    Waad: "waad",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventConnectionDeletedTypeEnum = {
+    ConnectionDeleted: "connection.deleted",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventConnectionUpdatedCloudEventTypeEnum = {
+    ConnectionUpdated: "connection.updated",
+};
+/** Method used to map incoming claims when strategy=oidc. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsAttributeMapMappingModeEnum = {
+    BindAll: "bind_all",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** OIDC communication channel type. 'back_channel' (confidential client) exchanges tokens server-side for stronger security; 'front_channel' handles responses in the browser. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsTypeEnum = {
+    BackChannel: "back_channel",
+    FrontChannel: "front_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject0StrategyEnum = {
+    Oidc: "oidc",
+};
+/** Method used to map incoming claims when strategy=okta. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsAttributeMapMappingModeEnum = {
+    BasicProfile: "basic_profile",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** Connection type */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsTypeEnum = {
+    BackChannel: "back_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject1StrategyEnum = {
+    Okta: "okta",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject2StrategyEnum = {
+    Samlp: "samlp",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject3StrategyEnum = {
+    Pingfederate: "pingfederate",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject4OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionUpdatedObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject4StrategyEnum = {
+    Adfs: "adfs",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject5OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject5StrategyEnum = {
+    Ad: "ad",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject6OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject6StrategyEnum = {
+    GoogleApps: "google-apps",
+};
+/** The Azure AD endpoint version for authentication. 'microsoft-identity-platform-v2.0' (recommended, default) supports modern OAuth 2.0 features. 'azure-active-directory-v1.0' is the legacy endpoint with protocol limitations. Selection affects available features. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsIdentityApiEnum = {
+    MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
+    AzureActiveDirectoryV10: "azure-active-directory-v1.0",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The Azure AD claim to use as the unique user identifier. 'oid' (Object ID) is recommended for single-tenant connections and required for SCIM. 'sub' (Subject) is required for multi-tenant/common endpoint. Only applies with OpenID Connect protocol. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsUseridAttributeEnum = {
+    Oid: "oid",
+    Sub: "sub",
+};
+/** The authentication protocol for Azure AD v1 endpoints. 'openid-connect' (default, recommended) uses modern OAuth 2.0/OIDC. 'ws-federation' is a legacy SAML-based protocol for older integrations. Only available with Azure AD v1 API. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsWaadProtocolEnum = {
+    WsFederation: "ws-federation",
+    OpenidConnect: "openid-connect",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject7StrategyEnum = {
+    Waad: "waad",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventConnectionUpdatedTypeEnum = {
+    ConnectionUpdated: "connection.updated",
+};
+/** Machine-readable error code. */
+export const EventStreamCloudEventErrorCodeEnum = {
+    InvalidCursor: "invalid_cursor",
+    CursorExpired: "cursor_expired",
+    Timeout: "timeout",
+    PayloadTooLarge: "payload_too_large",
+    ProcessingError: "processing_error",
+    ConnectionTimeout: "connection_timeout",
+};
+/** Identifies this as an error message (injected from the SSE event field). */
+export const EventStreamCloudEventErrorMessageTypeEnum = {
+    Error: "error",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventGroupCreatedCloudEventTypeEnum = {
+    GroupCreated: "group.created",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedObject0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedObject1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedObject2TypeEnum = {
+    Tenant: "tenant",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventGroupCreatedTypeEnum = {
+    GroupCreated: "group.created",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventGroupDeletedCloudEventTypeEnum = {
+    GroupDeleted: "group.deleted",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupDeletedObject0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupDeletedObject1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupDeletedObject2TypeEnum = {
+    Tenant: "tenant",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventGroupDeletedTypeEnum = {
+    GroupDeleted: "group.deleted",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventGroupMemberAddedCloudEventTypeEnum = {
+    GroupMemberAdded: "group.member.added",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberAddedObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberAddedObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberAddedObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
+/** Type discriminator for user members */
+export const EventStreamCloudEventGroupMemberAddedObjectMember0MemberTypeEnum = {
+    User: "user",
+};
+/** Type discriminator for connection members */
+export const EventStreamCloudEventGroupMemberAddedObjectMember1MemberTypeEnum = {
+    Connection: "connection",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventGroupMemberAddedTypeEnum = {
+    GroupMemberAdded: "group.member.added",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventGroupMemberDeletedCloudEventTypeEnum = {
+    GroupMemberDeleted: "group.member.deleted",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberDeletedObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberDeletedObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberDeletedObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
+/** Type discriminator for user members */
+export const EventStreamCloudEventGroupMemberDeletedObjectMember0MemberTypeEnum = {
+    User: "user",
+};
+/** Type discriminator for connection members */
+export const EventStreamCloudEventGroupMemberDeletedObjectMember1MemberTypeEnum = {
+    Connection: "connection",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventGroupMemberDeletedTypeEnum = {
+    GroupMemberDeleted: "group.member.deleted",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventGroupRoleAssignedCloudEventTypeEnum = {
+    GroupRoleAssigned: "group.role.assigned",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleAssignedObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleAssignedObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleAssignedObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventGroupRoleAssignedTypeEnum = {
+    GroupRoleAssigned: "group.role.assigned",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventGroupRoleDeletedCloudEventTypeEnum = {
+    GroupRoleDeleted: "group.role.deleted",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleDeletedObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleDeletedObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleDeletedObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventGroupRoleDeletedTypeEnum = {
+    GroupRoleDeleted: "group.role.deleted",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventGroupUpdatedCloudEventTypeEnum = {
+    GroupUpdated: "group.updated",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupUpdatedObject0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupUpdatedObject1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupUpdatedObject2TypeEnum = {
+    Tenant: "tenant",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventGroupUpdatedTypeEnum = {
+    GroupUpdated: "group.updated",
+};
+/** Identifies this as an offset-only heartbeat message (injected from the SSE event field). */
+export const EventStreamCloudEventOffsetOnlyMessageTypeEnum = {
     OffsetOnly: "offset-only",
 };
 /** The type of the event which has happened. */
@@ -2622,6 +3472,10 @@ export const EventStreamCloudEventOrgUpdatedCloudEventTypeEnum = {
 export const EventStreamCloudEventOrgUpdatedTypeEnum = {
     OrganizationUpdated: "organization.updated",
 };
+/** The version of the CloudEvents specification which the event uses. */
+export const EventStreamCloudEventSpecVersionEnum = {
+    One0: "1.0",
+};
 /** The type of the event which has happened. */
 export const EventStreamCloudEventUserCreatedCloudEventTypeEnum = {
     UserCreated: "user.created",
@@ -2855,6 +3709,9 @@ export const EventStreamCloudEventUserUpdatedTypeEnum = {
 };
 /** Type of event */
 export const EventStreamDeliveryEventTypeEnum = {
+    ConnectionCreated: "connection.created",
+    ConnectionDeleted: "connection.deleted",
+    ConnectionUpdated: "connection.updated",
     GroupCreated: "group.created",
     GroupDeleted: "group.deleted",
     GroupMemberAdded: "group.member.added",
@@ -2925,6 +3782,9 @@ export const EventStreamEventBridgeDestinationTypeEnum = {
     Eventbridge: "eventbridge",
 };
 export const EventStreamEventTypeEnum = {
+    ConnectionCreated: "connection.created",
+    ConnectionDeleted: "connection.deleted",
+    ConnectionUpdated: "connection.updated",
     GroupCreated: "group.created",
     GroupDeleted: "group.deleted",
     GroupMemberAdded: "group.member.added",
@@ -2954,6 +3814,9 @@ export const EventStreamStatusEnum = {
     Disabled: "disabled",
 };
 export const EventStreamSubscribeEventsEventTypeEnum = {
+    ConnectionCreated: "connection.created",
+    ConnectionDeleted: "connection.deleted",
+    ConnectionUpdated: "connection.updated",
     GroupCreated: "group.created",
     GroupDeleted: "group.deleted",
     GroupMemberAdded: "group.member.added",
@@ -2979,6 +3842,9 @@ export const EventStreamSubscribeEventsEventTypeEnum = {
 };
 /** The type of event this test event represents. */
 export const EventStreamTestEventTypeEnum = {
+    ConnectionCreated: "connection.created",
+    ConnectionDeleted: "connection.deleted",
+    ConnectionUpdated: "connection.updated",
     GroupCreated: "group.created",
     GroupDeleted: "group.deleted",
     GroupMemberAdded: "group.member.added",
@@ -4290,6 +5156,11 @@ export const OrganizationMemberEffectiveRoleSource = {
     Direct: "direct",
     Groups: "groups",
 };
+/** Controls whether this organization can be used in user flows with third-party clients. Defaults to `block`. */
+export const OrganizationThirdPartyClientAccessEnum = {
+    Block: "block",
+    Allow: "allow",
+};
 /** Defines whether organizations can be used with client credentials exchanges for this grant. */
 export const OrganizationUsageEnum = {
     Deny: "deny",
@@ -4307,6 +5178,7 @@ export const PartialGroupsEnum = {
     SignupPassword: "signup-password",
     CustomizedConsent: "customized-consent",
     Passkeys: "passkeys",
+    Confirmation: "confirmation",
 };
 export const PasswordCharacterTypeEnum = {
     Uppercase: "uppercase",
@@ -4356,7 +5228,7 @@ export const PhoneProviderNameEnum = {
 /** The type of backoff strategy to use. */
 export const PhoneProviderProtectionBackoffStrategyEnum = {
     Exponential: "exponential",
-    None: "none",
+    Default: "default",
 };
 export const PhoneTemplateNotificationTypeEnum = {
     OtpVerify: "otp_verify",