auth0 6.1.0 → 6.3.0

package/dist/esm/management/api/types/types.d.mts

@@ -12,6 +12,18 @@ export declare const OauthScope: {
     /**
      * Delete Actions */
     readonly DeleteActions: "delete:actions";
+    /**
+     * Create Agents */
+    readonly CreateAgents: "create:agents";
+    /**
+     * Read Agents */
+    readonly ReadAgents: "read:agents";
+    /**
+     * Update Agents */
+    readonly UpdateAgents: "update:agents";
+    /**
+     * Delete Agents */
+    readonly DeleteAgents: "delete:agents";
     /**
      * Read Anomaly Blocks */
     readonly ReadAnomalyBlocks: "read:anomaly_blocks";
@@ -708,6 +720,24 @@ export declare const OauthScope: {
     /**
      * Delete Vdcs Templates */
     readonly DeleteVdcsTemplates: "delete:vdcs_templates";
+    /**
+     * Create Organization Client Associations */
+    readonly CreateOrganizationClients: "create:organization_clients";
+    /**
+     * Read Organization Client Associations */
+    readonly ReadOrganizationClients: "read:organization_clients";
+    /**
+     * Update Organization Client Associations */
+    readonly UpdateOrganizationClients: "update:organization_clients";
+    /**
+     * Delete Organization Client Associations */
+    readonly DeleteOrganizationClients: "delete:organization_clients";
+    /**
+     * Create Network ACL Keys */
+    readonly CreateNetworkAclKeys: "create:network_acl_keys";
+    /**
+     * Read Network ACL Keys */
+    readonly ReadNetworkAclKeys: "read:network_acl_keys";
 };
 export type OauthScope = (typeof OauthScope)[keyof typeof OauthScope];
 export interface NotFoundErrorBody {
@@ -1159,6 +1189,7 @@ export type AculContextConfigurationItem = Management.AculContextEnum
 export declare const AculContextEnum: {
     readonly BrandingSettings: "branding.settings";
     readonly BrandingThemesDefault: "branding.themes.default";
+    readonly CountryCodes: "country_codes";
     readonly ClientLogoUri: "client.logo_uri";
     readonly ClientDescription: "client.description";
     readonly OrganizationDisplayName: "organization.display_name";
@@ -1259,6 +1290,23 @@ export interface AddOrganizationConnectionResponseContent {
     is_signup_enabled?: boolean | undefined;
     connection?: Management.OrganizationConnectionInformation | undefined;
 }
+/**
+ * Arbitrary key-value metadata for the agent
+ */
+export type AgentMetadata = Record<string, unknown>;
+export interface AgentResponseContent {
+    /** The agent ID */
+    agent_id: string;
+    /** The agent name */
+    name: string;
+    /** When the agent was created */
+    created_at: string;
+    /** When the agent was last updated */
+    updated_at: string;
+    /** External identifier for the agent, if set. Omitted when not set. */
+    external_agent_id?: string | undefined;
+    metadata: Management.AgentMetadata;
+}
 /**
  * IP address to check.
  */
@@ -2680,6 +2728,17 @@ export declare const ClientMyOrganizationConfigurationAllowedStrategiesEnum: {
     readonly Samlp: "samlp";
 };
 export type ClientMyOrganizationConfigurationAllowedStrategiesEnum = (typeof ClientMyOrganizationConfigurationAllowedStrategiesEnum)[keyof typeof ClientMyOrganizationConfigurationAllowedStrategiesEnum];
+/** A valid third-party client access value for the My Organization Configuration. */
+export declare const ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum: {
+    readonly Allow: "allow";
+    readonly Block: "block";
+};
+export type ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum = (typeof ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum)[keyof typeof ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum];
+/** The default third-party client access value for the My Organization Configuration. */
+export declare const ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum: {
+    readonly Block: "block";
+};
+export type ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum = (typeof ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum)[keyof typeof ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum];
 /** The deletion behavior for this client. */
 export declare const ClientMyOrganizationDeletionBehaviorEnum: {
     readonly Allow: "allow";
@@ -2696,6 +2755,7 @@ export interface ClientMyOrganizationPatchConfiguration {
     user_attribute_profile_id?: string | undefined;
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
+    third_party_client_access?: Management.ClientMyOrganizationThirdPartyClientAccessConfiguration | undefined;
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
@@ -2710,6 +2770,7 @@ export interface ClientMyOrganizationPostConfiguration {
     user_attribute_profile_id?: string | undefined;
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
+    third_party_client_access?: Management.ClientMyOrganizationThirdPartyClientAccessConfiguration | undefined;
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
@@ -2724,10 +2785,19 @@ export interface ClientMyOrganizationResponseConfiguration {
     user_attribute_profile_id?: string | undefined;
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
+    third_party_client_access?: Management.ClientMyOrganizationThirdPartyClientAccessConfiguration | undefined;
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
 }
+/**
+ * The third-party client access configuration for the My Organization Configuration.
+ */
+export interface ClientMyOrganizationThirdPartyClientAccessConfiguration {
+    default_value: Management.ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum;
+    /** The allowed third-party client access values for the My Organization Configuration. */
+    allowed_values: Management.ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum[];
+}
 /**
  * Configuration for OIDC backchannel logout initiators
  */
@@ -2969,6 +3039,20 @@ export interface ClientTokenVaultPrivilegedAccessWithPublicKey {
     ip_allowlist?: Management.TokenVaultPrivilegedAccessIpAllowlistEntry[] | undefined;
     grants?: Management.TokenVaultPrivilegedAccessGrant[] | undefined;
 }
+/**
+ * Conflict
+ */
+export interface ConflictSchema {
+    message: string;
+    statusCode: string;
+    error: ConflictSchema.Error_;
+}
+export declare namespace ConflictSchema {
+    const Error_: {
+        readonly Conflict: "Conflict";
+    };
+    type Error_ = (typeof Error_)[keyof typeof Error_];
+}
 export interface ConnectedAccount {
     /** The unique identifier for the connected account. */
     id: string;
@@ -3307,6 +3391,8 @@ export type ConnectionConfiguration = Record<string, string>;
 export interface ConnectionConnectedAccountsPurpose {
     active: boolean;
     cross_app_access?: boolean | undefined;
+    /** When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required). */
+    allow_missing_user_id?: boolean | undefined;
 }
 /**
  * Configure the purpose of a connection to be used for connected accounts and Token Vault.
@@ -3314,6 +3400,8 @@ export interface ConnectionConnectedAccountsPurpose {
 export interface ConnectionConnectedAccountsPurposeXaa {
     cross_app_access?: boolean | undefined;
     active: boolean;
+    /** When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required). */
+    allow_missing_user_id?: boolean | undefined;
 }
 /**
  * OAuth 2.0 PKCE (Proof Key for Code Exchange) settings. PKCE enhances security for public clients by preventing authorization code interception attacks. 'auto' (recommended) uses the strongest method supported by the IdP.
@@ -4289,6 +4377,7 @@ export interface ConnectionOptionsCommonOidc {
     token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
     upstream_params?: ((Management.ConnectionUpstreamParams | undefined) | null) | undefined;
     userinfo_endpoint?: Management.ConnectionUserinfoEndpoint | undefined;
+    useOauthSpecScope?: Management.ConnectionUseOauthSpecScope | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -5410,6 +5499,7 @@ export interface ConnectionProfile {
     enabled_features?: Management.ConnectionProfileEnabledFeatures | undefined;
     connection_config?: Management.ConnectionProfileConfig | undefined;
     strategy_overrides?: Management.ConnectionProfileStrategyOverrides | undefined;
+    cross_app_access_resource_app?: Management.ConnectionProfileCrossAppAccessResourceApp | undefined;
 }
 /**
  * `profile` is a boolean that controls whether basic profile information (name, picture, email) is requested from Bitbucket during authentication. When `true`, the connection requests access to the user's basic profile data.
@@ -5420,6 +5510,35 @@ export type ConnectionProfileBitbucket = boolean;
  */
 export interface ConnectionProfileConfig {
 }
+/**
+ * Controls whether organization admins may enable Cross App Access (XAA) on their Identity Providers.
+ */
+export interface ConnectionProfileCrossAppAccessResourceApp {
+    status: Management.ConnectionProfileCrossAppAccessResourceAppStatus;
+}
+/**
+ * The Cross App Access resource app status configuration.
+ */
+export interface ConnectionProfileCrossAppAccessResourceAppStatus {
+    default_value: Management.ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum;
+    allowed_values?: Management.ConnectionProfileCrossAppAccessResourceAppStatusAllowedValuesEnum | undefined;
+}
+/**
+ * The allowed Cross App Access resource app status values.
+ */
+export type ConnectionProfileCrossAppAccessResourceAppStatusAllowedValuesEnum = Management.ConnectionProfileCrossAppAccessResourceAppStatusValueEnum[];
+/** The default Cross App Access resource app status. */
+export declare const ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum: {
+    readonly Enabled: "enabled";
+    readonly Disabled: "disabled";
+};
+export type ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum = (typeof ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum)[keyof typeof ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum];
+/** A Cross App Access resource app status value. */
+export declare const ConnectionProfileCrossAppAccessResourceAppStatusValueEnum: {
+    readonly Enabled: "enabled";
+    readonly Disabled: "disabled";
+};
+export type ConnectionProfileCrossAppAccessResourceAppStatusValueEnum = (typeof ConnectionProfileCrossAppAccessResourceAppStatusValueEnum)[keyof typeof ConnectionProfileCrossAppAccessResourceAppStatusValueEnum];
 /**
  * Enabled features for the connection profile.
  */
@@ -5547,6 +5666,7 @@ export interface ConnectionPropertiesOptions {
     token_endpoint_auth_signing_alg?: (Management.ConnectionTokenEndpointAuthSigningAlgEnum | null) | undefined;
     token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
     id_token_session_expiry_supported?: Management.ConnectionIdTokenSessionExpirySupported | undefined;
+    useOauthSpecScope?: Management.ConnectionUseOauthSpecScope | undefined;
     discovery_url?: ((Management.ConnectionsDiscoveryUrl | undefined) | null) | undefined;
     oidc_metadata?: (Management.ConnectionsOidcMetadata | null) | undefined;
     /** Accepts any additional properties */
@@ -6798,6 +6918,10 @@ export interface ConnectionUpstreamValue {
  * When enabled (true), uses the Azure AD common endpoint for multi-tenant authentication. Allows users from any Azure AD organization to sign in. Requires userid_attribute set to 'sub' (not 'oid'). Cannot be used with SCIM provisioning. Defaults to false.
  */
 export type ConnectionUseCommonEndpointAzureAd = boolean;
+/**
+ * When true, uses space-delimited scopes (per OAuth 2.0 spec) instead of comma-delimited when calling the identity provider's authorization endpoint. Only relevant when using the connection_scope parameter. See https://auth0.com/docs/authenticate/identity-providers/adding-scopes-for-an-external-idp#pass-scopes-to-authorize-endpoint
+ */
+export type ConnectionUseOauthSpecScope = boolean;
 /**
  * The URL of the OAuth 1.0a user-authorization endpoint. This endpoint is used to redirect users to the provider's site to authorize the temporary request token obtained from the request-token endpoint during the OAuth 1.0a authentication flow.
  */
@@ -7204,6 +7328,7 @@ export interface CreateConnectionProfileResponseContent {
     enabled_features?: Management.ConnectionProfileEnabledFeatures | undefined;
     connection_config?: Management.ConnectionProfileConfig | undefined;
     strategy_overrides?: Management.ConnectionProfileStrategyOverrides | undefined;
+    cross_app_access_resource_app?: Management.ConnectionProfileCrossAppAccessResourceApp | undefined;
 }
 /**
  * Create a connection with strategy=ad
@@ -8551,6 +8676,19 @@ export interface CreateImportUsersResponseContent {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export interface CreateKeysNetworkAclsResponseContent {
+    /** Auth0-generated identifier for the key. Used to reference the key from a Network ACL and to identify it in Tenant Logs. */
+    id: string;
+    /** Customer-supplied label with no cryptographic meaning. */
+    name: string;
+    alg: Management.NetworkAclKeyAlgorithmEnum;
+    /** Fingerprint of the key material, determined by the algorithm specified. Currently only HMAC-SHA256 is supported. */
+    fingerprint: string;
+    /** Time when the key was created. */
+    created_at: string;
+    /** Time when the key was last updated. */
+    updated_at: string;
+}
 export interface CreateLogStreamDatadogRequestBody {
     /** log stream name */
     name?: string | undefined;
@@ -8673,6 +8811,13 @@ export interface CreateOrganizationAllConnectionResponseContent {
     connection_id: string;
     connection?: Management.OrganizationConnectionInformation | undefined;
 }
+export interface CreateOrganizationClientRequestItem {
+    /** The identifier of the client to associate. */
+    client_id: string;
+    /** Whether this client is used for member access to the organization. */
+    use_for_member_access: boolean;
+}
+export type CreateOrganizationClientsResponseContent = Management.OrganizationClient[];
 export interface CreateOrganizationDiscoveryDomainResponseContent {
     /** Organization discovery domain identifier. */
     id: string;
@@ -8721,6 +8866,9 @@ export interface CreateOrganizationResponseContent {
     metadata?: Management.OrganizationMetadata | undefined;
     token_quota?: Management.TokenQuota | undefined;
     third_party_client_access?: Management.OrganizationThirdPartyClientAccessEnum | undefined;
+    /** Whether app entitlement is active for this organization. */
+    is_app_entitlement_active?: boolean | undefined;
+    client?: Management.OrganizationClientAssociation | undefined;
     enabled_connections?: Management.OrganizationEnabledConnection[] | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
@@ -8810,6 +8958,9 @@ export interface CreateRoleResponseContent {
     name?: string | undefined;
     /** Description of this role. */
     description?: string | undefined;
+    type?: Management.RoleTypeEnum | undefined;
+    /** The id of the entity that owns this role, such as an organization id. */
+    owner_id?: string | undefined;
 }
 export interface CreateRuleResponseContent {
     /** Name of this rule. */
@@ -9729,8 +9880,7 @@ export interface EventStreamCloudEvent {
     type?: string | undefined;
     /** Timestamp at which the event was generated */
     time?: string | undefined;
-    /** Event contents encoded as a string. */
-    data?: string | undefined;
+    data?: Management.EventStreamCloudEventData | undefined;
 }
 /**
  * The purpose of this event. This field will typically appear only in special cases
@@ -13877,6 +14027,10 @@ export interface EventStreamCloudEventContextTenant {
     /** Machine-generated unique tenant identifier. */
     tenant_id: string;
 }
+/**
+ * Event contents.
+ */
+export type EventStreamCloudEventData = Record<string, unknown>;
 /** Machine-readable error code. */
 export declare const EventStreamCloudEventErrorCodeEnum: {
     readonly InvalidCursor: "invalid_cursor";
@@ -16882,6 +17036,8 @@ export interface EventStreamDeliveryAttempt {
     timestamp: string;
     /** Delivery error message, if applicable */
     error_message?: string | undefined;
+    /** Duration of the delivery attempt in milliseconds */
+    duration?: number | undefined;
 }
 /** Type of event */
 export declare const EventStreamDeliveryEventTypeEnum: {
@@ -17884,7 +18040,7 @@ export declare namespace FlowActionFlowMapValue {
 export interface FlowActionFlowMapValueParams {
     input: Management.FlowActionFlowMapValueParamsInput;
     cases?: Management.FlowActionFlowMapValueParamsCases | undefined;
-    fallback?: Management.FlowActionFlowMapValueParamsFallback | undefined;
+    fallback?: (Management.FlowActionFlowMapValueParamsFallback | null) | undefined;
 }
 export type FlowActionFlowMapValueParamsCases = Record<string, unknown>;
 export type FlowActionFlowMapValueParamsFallback = string | number | Management.FlowActionFlowMapValueParamsFallbackObject | unknown[];
@@ -20264,6 +20420,10 @@ export interface GetAculResponseContent {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export interface GetAllKeysNetworkAclsResponseContent {
+    /** The tenant's Network ACL Keys. */
+    keys: Management.NetworkAclKey[];
+}
 export interface GetAttackProtectionCaptchaResponseContent {
     active_provider_id?: string | undefined;
     arkose?: Management.AttackProtectionCaptchaArkoseResponseContent | undefined;
@@ -20530,6 +20690,7 @@ export interface GetConnectionProfileResponseContent {
     enabled_features?: Management.ConnectionProfileEnabledFeatures | undefined;
     connection_config?: Management.ConnectionProfileConfig | undefined;
     strategy_overrides?: Management.ConnectionProfileStrategyOverrides | undefined;
+    cross_app_access_resource_app?: Management.ConnectionProfileCrossAppAccessResourceApp | undefined;
 }
 export interface GetConnectionProfileTemplateResponseContent {
     /** The id of the template. */
@@ -21059,9 +21220,19 @@ export interface GetOrganizationByNameResponseContent {
     metadata?: Management.OrganizationMetadata | undefined;
     token_quota?: Management.TokenQuota | undefined;
     third_party_client_access?: Management.OrganizationThirdPartyClientAccessEnum | undefined;
+    /** Whether app entitlement is active for this organization. */
+    is_app_entitlement_active?: boolean | undefined;
+    client?: Management.OrganizationClientAssociation | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export interface GetOrganizationClientResponseContent {
+    /** The identifier of the client associated with the organization. */
+    client_id: string;
+    /** Whether this client is used for member access to the organization. */
+    use_for_member_access: boolean;
+    client: Management.OrganizationClientMetadata;
+}
 export interface GetOrganizationConnectionResponseContent {
     /** ID of the connection. */
     connection_id?: string | undefined;
@@ -21134,6 +21305,9 @@ export interface GetOrganizationResponseContent {
     metadata?: Management.OrganizationMetadata | undefined;
     token_quota?: Management.TokenQuota | undefined;
     third_party_client_access?: Management.OrganizationThirdPartyClientAccessEnum | undefined;
+    /** Whether app entitlement is active for this organization. */
+    is_app_entitlement_active?: boolean | undefined;
+    client?: Management.OrganizationClientAssociation | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -21174,9 +21348,9 @@ export interface GetRefreshTokenResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.RefreshTokenDate | undefined;
-    idle_expires_at?: Management.RefreshTokenDate | undefined;
-    expires_at?: Management.RefreshTokenDate | undefined;
+    created_at?: (Management.RefreshTokenDate | null) | undefined;
+    idle_expires_at?: (Management.RefreshTokenDate | null) | undefined;
+    expires_at?: (Management.RefreshTokenDate | null) | undefined;
     device?: Management.RefreshTokenDevice | undefined;
     /** ID of the client application granted with this refresh token */
     client_id?: string | undefined;
@@ -21186,7 +21360,7 @@ export interface GetRefreshTokenResponseContent {
     /** A list of the resource server IDs associated to this refresh-token and their granted scopes */
     resource_servers?: Management.RefreshTokenResourceServer[] | undefined;
     refresh_token_metadata?: ((Management.RefreshTokenMetadata | undefined) | null) | undefined;
-    last_exchanged_at?: Management.RefreshTokenDate | undefined;
+    last_exchanged_at?: (Management.RefreshTokenDate | null) | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -21250,6 +21424,9 @@ export interface GetRoleResponseContent {
     name?: string | undefined;
     /** Description of this role. */
     description?: string | undefined;
+    type?: Management.RoleTypeEnum | undefined;
+    /** The id of the entity that owns this role, such as an organization id. */
+    owner_id?: string | undefined;
 }
 export interface GetRuleResponseContent {
     /** Name of this rule. */
@@ -21315,12 +21492,12 @@ export interface GetSessionResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.SessionDate | undefined;
-    updated_at?: Management.SessionDate | undefined;
-    authenticated_at?: Management.SessionDate | undefined;
-    idle_expires_at?: Management.SessionDate | undefined;
-    expires_at?: Management.SessionDate | undefined;
-    last_interacted_at?: Management.SessionDate | undefined;
+    created_at?: (Management.SessionDate | null) | undefined;
+    updated_at?: (Management.SessionDate | null) | undefined;
+    authenticated_at?: (Management.SessionDate | null) | undefined;
+    idle_expires_at?: (Management.SessionDate | null) | undefined;
+    expires_at?: (Management.SessionDate | null) | undefined;
+    last_interacted_at?: (Management.SessionDate | null) | undefined;
     device?: Management.SessionDeviceMetadata | undefined;
     /** List of client details for the session */
     clients?: Management.SessionClientMetadata[] | undefined;
@@ -21685,6 +21862,7 @@ export interface GuardianFactor {
     /** Whether trial limits have been exceeded. */
     trial_expired?: boolean | undefined;
     name?: Management.GuardianFactorNameEnum | undefined;
+    settings?: Management.GuardianFactorSettings | undefined;
 }
 /** Factor name. Can be `sms`, `push-notification`, `email`, `duo` `otp` `webauthn-roaming`, `webauthn-platform`, or `recovery-code`. */
 export declare const GuardianFactorNameEnum: {
@@ -21703,6 +21881,17 @@ export declare const GuardianFactorPhoneFactorMessageTypeEnum: {
     readonly Voice: "voice";
 };
 export type GuardianFactorPhoneFactorMessageTypeEnum = (typeof GuardianFactorPhoneFactorMessageTypeEnum)[keyof typeof GuardianFactorPhoneFactorMessageTypeEnum];
+/**
+ * Factor-specific settings. Only returned when include_settings=true.
+ */
+export interface GuardianFactorSettings {
+    /** The length of the OTP code. */
+    otp_length?: number | undefined;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time?: number | undefined;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}
 export declare const GuardianFactorsProviderPushNotificationProviderDataEnum: {
     readonly Guardian: "guardian";
     readonly Sns: "sns";
@@ -22036,6 +22225,11 @@ export interface ListAculsResponseContentItem {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export interface ListAgentsResponseContent {
+    agents: Management.AgentResponseContent[];
+    /** A cursor to be used as the "from" query parameter for the next page of results. Omitted when there are no further results. */
+    next?: string | undefined;
+}
 export interface ListBrandingPhoneProvidersResponseContent {
     providers?: Management.PhoneProviderSchemaMasked[] | undefined;
 }
@@ -22098,6 +22292,12 @@ export interface ListEncryptionKeyOffsetPaginatedResponseContent {
     /** Encryption keys. */
     keys?: Management.EncryptionKey[] | undefined;
 }
+export interface ListEventStreamDeliveriesResponseContent {
+    /** List of event stream deliveries */
+    deliveries: Management.EventStreamDelivery[];
+    /** The cursor to be used as the "from" query parameter for the next page of results. */
+    next?: string | undefined;
+}
 export interface ListEventStreamsResponseContent {
     eventStreams?: Management.EventStreamResponseContent[] | undefined;
     /** Opaque identifier for use with the <i>from</i> query parameter for the next page of results. */
@@ -22177,6 +22377,12 @@ export interface ListOrganizationClientGrantsOffsetPaginatedResponseContent {
     total?: number | undefined;
     client_grants?: Management.OrganizationClientGrant[] | undefined;
 }
+export interface ListOrganizationClientsResponseContent {
+    /** The list of clients associated with the organization. */
+    clients: Management.OrganizationClient[];
+    /** An opaque token that, when present, can be passed as the `from` query parameter to retrieve the next page of results. */
+    next?: string | undefined;
+}
 export interface ListOrganizationConnectionsOffsetPaginatedResponseContent {
     start?: number | undefined;
     limit?: number | undefined;
@@ -22224,6 +22430,14 @@ export interface ListOrganizationMembersPaginatedResponseContent {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+/**
+ * Checkpoint paginated list of groups assigned to a role within an organization.
+ */
+export interface ListOrganizationRoleGroupsResponseContent {
+    groups: Management.RoleGroup[];
+    /** A cursor to be used as the "from" query parameter for the next page of results. */
+    next?: string | undefined;
+}
 export interface ListOrganizationRoleMembersResponseContent {
     /** List of members assigned to the role within the organization. */
     members: Management.RoleMember[];
@@ -23038,6 +23252,24 @@ export type NetworkAclActionLogEnum = boolean;
  * Indicates the rule will redirect requests that either match or not_match specific criteria
  */
 export type NetworkAclActionRedirectEnum = boolean;
+export interface NetworkAclKey {
+    /** Generated identifier for the key. Used to reference the key from a Network ACL and to identify it in Tenant Logs. */
+    id: string;
+    /** User supplied label for the key. */
+    name: string;
+    alg: Management.NetworkAclKeyAlgorithmEnum;
+    /** Fingerprint of the key material, determined by the algorithm specified. Currently only HMAC-SHA256 is supported. */
+    fingerprint: string;
+    /** Time when the key was created. */
+    created_at: string;
+    /** Time when the key was last updated. */
+    updated_at: string;
+}
+/** Signing algorithm used to verify the signature. Currently only HMAC-SHA256 is supported. */
+export declare const NetworkAclKeyAlgorithmEnum: {
+    readonly HmacSha256: "hmac-sha256";
+};
+export type NetworkAclKeyAlgorithmEnum = (typeof NetworkAclKeyAlgorithmEnum)[keyof typeof NetworkAclKeyAlgorithmEnum];
 export interface NetworkAclMatch {
     asns?: number[] | undefined;
     auth0_managed?: string[] | undefined;
@@ -23056,8 +23288,13 @@ export interface NetworkAclRule {
     action: Management.NetworkAclAction;
     match?: Management.NetworkAclMatch | undefined;
     not_match?: Management.NetworkAclMatch | undefined;
+    match_all?: Management.NetworkAclRuleMatchAllEnum | undefined;
     scope: Management.NetworkAclRuleScopeEnum;
 }
+/**
+ * When true, the rule unconditionally matches all traffic regardless of any other signals. Mutually exclusive with `match` and `not_match`.
+ */
+export type NetworkAclRuleMatchAllEnum = boolean;
 /** Identifies the origin of the request as the Management API (management), Authentication API (authentication), Dynamic Client Registration API (dynamic_client_registration), or any (tenant) */
 export declare const NetworkAclRuleScopeEnum: {
     readonly Management: "management";
@@ -23079,6 +23316,20 @@ export interface NetworkAclsResponseContent {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+/**
+ * Not Found
+ */
+export interface NotFoundSchema {
+    message: string;
+    statusCode: string;
+    error: NotFoundSchema.Error_;
+}
+export declare namespace NotFoundSchema {
+    const Error_: {
+        readonly NotFound: "Not Found";
+    };
+    type Error_ = (typeof Error_)[keyof typeof Error_];
+}
 export interface Organization {
     /** Organization identifier. */
     id?: string | undefined;
@@ -23090,6 +23341,9 @@ export interface Organization {
     metadata?: Management.OrganizationMetadata | undefined;
     token_quota?: Management.TokenQuota | undefined;
     third_party_client_access?: Management.OrganizationThirdPartyClientAccessEnum | undefined;
+    /** Whether app entitlement is active for this organization. */
+    is_app_entitlement_active?: boolean | undefined;
+    client?: Management.OrganizationClientAssociation | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -23142,6 +23396,20 @@ export interface OrganizationBrandingColors {
     /** HEX Color for background. */
     page_background: string;
 }
+export interface OrganizationClient {
+    /** The identifier of the client associated with the organization. */
+    client_id: string;
+    /** Whether this client is used for member access to the organization. */
+    use_for_member_access: boolean;
+    client: Management.OrganizationClientMetadata;
+}
+/**
+ * The organization's association with the client passed in the <code>include_client_association_for</code> query parameter.
+ */
+export interface OrganizationClientAssociation {
+    /** Whether this client is used for member access to the organization. */
+    use_for_member_access?: boolean | undefined;
+}
 export interface OrganizationClientGrant {
     /** ID of the client grant. */
     id?: string | undefined;
@@ -23155,6 +23423,29 @@ export interface OrganizationClientGrant {
     /** If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations. */
     allow_any_organization?: boolean | undefined;
 }
+/**
+ * Metadata about the associated client.
+ */
+export interface OrganizationClientMetadata {
+    /** The name of the client. */
+    name?: string | undefined;
+    /** The type of the client application. */
+    app_type?: string | undefined;
+    /** The URI of the client logo. */
+    logo_uri?: (string | null) | undefined;
+    /** Whether this client is a first-party client (true) or not (false). */
+    is_first_party?: boolean | undefined;
+    /** The grant types enabled for the client. */
+    grant_types?: string[] | undefined;
+    organization_usage?: Management.OrganizationClientMetadataOrganizationUsageEnum | undefined;
+}
+/** Whether organizations may be used with the client. */
+export declare const OrganizationClientMetadataOrganizationUsageEnum: {
+    readonly Deny: "deny";
+    readonly Allow: "allow";
+    readonly Require: "require";
+};
+export type OrganizationClientMetadataOrganizationUsageEnum = (typeof OrganizationClientMetadataOrganizationUsageEnum)[keyof typeof OrganizationClientMetadataOrganizationUsageEnum];
 export interface OrganizationConnection {
     /** ID of the connection. */
     connection_id?: string | undefined;
@@ -23807,9 +24098,9 @@ export interface RefreshTokenResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.RefreshTokenDate | undefined;
-    idle_expires_at?: Management.RefreshTokenDate | undefined;
-    expires_at?: Management.RefreshTokenDate | undefined;
+    created_at?: (Management.RefreshTokenDate | null) | undefined;
+    idle_expires_at?: (Management.RefreshTokenDate | null) | undefined;
+    expires_at?: (Management.RefreshTokenDate | null) | undefined;
     device?: Management.RefreshTokenDevice | undefined;
     /** ID of the client application granted with this refresh token */
     client_id?: string | undefined;
@@ -23819,7 +24110,7 @@ export interface RefreshTokenResponseContent {
     /** A list of the resource server IDs associated to this refresh-token and their granted scopes */
     resource_servers?: Management.RefreshTokenResourceServer[] | undefined;
     refresh_token_metadata?: ((Management.RefreshTokenMetadata | undefined) | null) | undefined;
-    last_exchanged_at?: Management.RefreshTokenDate | undefined;
+    last_exchanged_at?: (Management.RefreshTokenDate | null) | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -24033,6 +24324,32 @@ export interface Role {
     name?: string | undefined;
     /** Description of this role. */
     description?: string | undefined;
+    type?: Management.RoleTypeEnum | undefined;
+    /** The id of the entity that owns this role, such as an organization id. */
+    owner_id?: string | undefined;
+}
+/**
+ * A group assigned to a role in the context of an organization.
+ */
+export interface RoleGroup {
+    /** Unique identifier for the group (service-generated). */
+    id: string;
+    /** Name of the group. Must be unique within its connection. Must contain between 1 and 128 printable ASCII characters. */
+    name: string;
+    /** External identifier for the group, often used for SCIM synchronization. Max length of 256 characters. */
+    external_id?: string | undefined;
+    /** Identifier for the connection this group belongs to (if a connection group). */
+    connection_id?: string | undefined;
+    /** Identifier for the organization this group belongs to (if an organization group). */
+    organization_id?: (string | null) | undefined;
+    /** Identifier for the tenant this group belongs to. */
+    tenant_name?: string | undefined;
+    /** Description of the group. */
+    description?: (string | null) | undefined;
+    /** Timestamp of when the group was created. */
+    created_at?: string | undefined;
+    /** Timestamp of when the group was last updated. */
+    updated_at?: string | undefined;
 }
 export interface RoleMember {
     /** ID of this user. */
@@ -24044,6 +24361,12 @@ export interface RoleMember {
     /** Email address of this user. */
     email?: string | undefined;
 }
+/** The type of the role */
+export declare const RoleTypeEnum: {
+    readonly Tenant: "tenant";
+    readonly Organization: "organization";
+};
+export type RoleTypeEnum = (typeof RoleTypeEnum)[keyof typeof RoleTypeEnum];
 export interface RoleUser {
     /** ID of this user. */
     user_id?: string | undefined;
@@ -24509,6 +24832,8 @@ export interface SelfServiceProfileSsoTicketEnabledOrganization {
 export interface SelfServiceProfileSsoTicketGoogleWorkspaceConfig {
     /** Whether to enable Google Workspace Directory Sync for users during the self-service flow. */
     sync_users: boolean;
+    /** Whether to enable Google Workspace Directory Sync for groups during the self-service flow. */
+    sync_groups?: boolean | undefined;
 }
 /** The protocol used to connect to the the default application */
 export declare const SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum: {
@@ -24581,7 +24906,7 @@ export interface SessionActorMetadata {
 export interface SessionAuthenticationSignal {
     /** One of: "federated", "passkey", "pwd", "sms", "email", "mfa", "mock" or a custom method denoted by a URL */
     name?: string | undefined;
-    timestamp?: Management.SessionDate | undefined;
+    timestamp?: (Management.SessionDate | null) | undefined;
     /** A specific MFA factor. Only present when "name" is set to "mfa" */
     type?: string | undefined;
     /** Accepts any additional properties */
@@ -24668,12 +24993,12 @@ export interface SessionResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.SessionDate | undefined;
-    updated_at?: Management.SessionDate | undefined;
-    authenticated_at?: Management.SessionDate | undefined;
-    idle_expires_at?: Management.SessionDate | undefined;
-    expires_at?: Management.SessionDate | undefined;
-    last_interacted_at?: Management.SessionDate | undefined;
+    created_at?: (Management.SessionDate | null) | undefined;
+    updated_at?: (Management.SessionDate | null) | undefined;
+    authenticated_at?: (Management.SessionDate | null) | undefined;
+    idle_expires_at?: (Management.SessionDate | null) | undefined;
+    expires_at?: (Management.SessionDate | null) | undefined;
+    last_interacted_at?: (Management.SessionDate | null) | undefined;
     device?: Management.SessionDeviceMetadata | undefined;
     /** List of client details for the session */
     clients?: Management.SessionClientMetadata[] | undefined;
@@ -25052,6 +25377,16 @@ export type SynchronizeGroupsEnum = (typeof SynchronizeGroupsEnum)[keyof typeof
 export interface SynchronizedGroupPayload {
     /** Google Workspace Directory group ID. */
     id: string;
+    /** Google Workspace Directory group name. */
+    name?: string | undefined;
+    /** Google Workspace Directory group email. */
+    email?: string | undefined;
+    /** Number of direct members in the Google Workspace Directory group. */
+    direct_members_count?: number | undefined;
+}
+export interface SynchronizedGroupSelectionId {
+    /** Google Workspace Directory group ID. */
+    id: string;
 }
 /**
  * Settings related to OIDC RP-initiated Logout
@@ -25799,6 +26134,7 @@ export interface UpdateConnectionOptions {
     token_endpoint_auth_signing_alg?: (Management.ConnectionTokenEndpointAuthSigningAlgEnum | null) | undefined;
     token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
     id_token_session_expiry_supported?: Management.ConnectionIdTokenSessionExpirySupported | undefined;
+    useOauthSpecScope?: Management.ConnectionUseOauthSpecScope | undefined;
     discovery_url?: ((Management.ConnectionsDiscoveryUrl | undefined) | null) | undefined;
     oidc_metadata?: (Management.ConnectionsOidcMetadata | null) | undefined;
     /** Accepts any additional properties */
@@ -25812,6 +26148,7 @@ export interface UpdateConnectionProfileResponseContent {
     enabled_features?: Management.ConnectionProfileEnabledFeatures | undefined;
     connection_config?: Management.ConnectionProfileConfig | undefined;
     strategy_overrides?: Management.ConnectionProfileStrategyOverrides | undefined;
+    cross_app_access_resource_app?: Management.ConnectionProfileCrossAppAccessResourceApp | undefined;
 }
 /**
  * Update a connection with strategy=ad
@@ -26425,6 +26762,13 @@ export interface UpdateOrganizationAllConnectionResponseContent {
     connection_id: string;
     connection?: Management.OrganizationConnectionInformation | undefined;
 }
+export interface UpdateOrganizationClientResponseContent {
+    /** The identifier of the client associated with the organization. */
+    client_id: string;
+    /** Whether this client is used for member access to the organization. */
+    use_for_member_access: boolean;
+    client?: Management.OrganizationClientMetadata | undefined;
+}
 export interface UpdateOrganizationConnectionResponseContent {
     /** ID of the connection. */
     connection_id?: string | undefined;
@@ -26460,6 +26804,9 @@ export interface UpdateOrganizationResponseContent {
     metadata?: Management.OrganizationMetadata | undefined;
     token_quota?: Management.TokenQuota | undefined;
     third_party_client_access?: Management.OrganizationThirdPartyClientAccessEnum | undefined;
+    /** Whether app entitlement is active for this organization. */
+    is_app_entitlement_active?: boolean | undefined;
+    client?: Management.OrganizationClientAssociation | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -26491,9 +26838,9 @@ export interface UpdateRefreshTokenResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.RefreshTokenDate | undefined;
-    idle_expires_at?: Management.RefreshTokenDate | undefined;
-    expires_at?: Management.RefreshTokenDate | undefined;
+    created_at?: (Management.RefreshTokenDate | null) | undefined;
+    idle_expires_at?: (Management.RefreshTokenDate | null) | undefined;
+    expires_at?: (Management.RefreshTokenDate | null) | undefined;
     device?: Management.RefreshTokenDevice | undefined;
     /** ID of the client application granted with this refresh token */
     client_id?: string | undefined;
@@ -26503,7 +26850,7 @@ export interface UpdateRefreshTokenResponseContent {
     /** A list of the resource server IDs associated to this refresh-token and their granted scopes */
     resource_servers?: Management.RefreshTokenResourceServer[] | undefined;
     refresh_token_metadata?: ((Management.RefreshTokenMetadata | undefined) | null) | undefined;
-    last_exchanged_at?: Management.RefreshTokenDate | undefined;
+    last_exchanged_at?: (Management.RefreshTokenDate | null) | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -26560,6 +26907,9 @@ export interface UpdateRoleResponseContent {
     name?: string | undefined;
     /** Description of this role. */
     description?: string | undefined;
+    type?: Management.RoleTypeEnum | undefined;
+    /** The id of the entity that owns this role, such as an organization id. */
+    owner_id?: string | undefined;
 }
 export interface UpdateRuleResponseContent {
     /** Name of this rule. */
@@ -26617,12 +26967,12 @@ export interface UpdateSessionResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.SessionDate | undefined;
-    updated_at?: Management.SessionDate | undefined;
-    authenticated_at?: Management.SessionDate | undefined;
-    idle_expires_at?: Management.SessionDate | undefined;
-    expires_at?: Management.SessionDate | undefined;
-    last_interacted_at?: Management.SessionDate | undefined;
+    created_at?: (Management.SessionDate | null) | undefined;
+    updated_at?: (Management.SessionDate | null) | undefined;
+    authenticated_at?: (Management.SessionDate | null) | undefined;
+    idle_expires_at?: (Management.SessionDate | null) | undefined;
+    expires_at?: (Management.SessionDate | null) | undefined;
+    last_interacted_at?: (Management.SessionDate | null) | undefined;
     device?: Management.SessionDeviceMetadata | undefined;
     /** List of client details for the session */
     clients?: Management.SessionClientMetadata[] | undefined;
@@ -27059,6 +27409,9 @@ export interface UserEffectivePermissionRoleSourceResponseContent {
     name?: string | undefined;
     /** Description of this role. */
     description?: string | undefined;
+    type?: Management.RoleTypeEnum | undefined;
+    /** The id of the entity that owns this role, such as an organization id. */
+    owner_id?: string | undefined;
     /** List of sources where this role is coming from. */
     sources?: Management.UserEffectivePermissionRoleSourceEnum[] | undefined;
 }