auth0 6.2.0 → 6.4.0

package/dist/esm/management/api/types/types.mjs

@@ -732,19 +732,37 @@ export const OauthScope = {
     /**
      * Delete Organization Client Associations */
     DeleteOrganizationClients: "delete:organization_clients",
+    /**
+     * Create Organization Templates */
+    CreateOrganizationTemplates: "create:organization_templates",
+    /**
+     * Read Organization Templates */
+    ReadOrganizationTemplates: "read:organization_templates",
+    /**
+     * Update Organization Templates */
+    UpdateOrganizationTemplates: "update:organization_templates",
+    /**
+     * Create Network ACL Keys */
+    CreateNetworkAclKeys: "create:network_acl_keys",
+    /**
+     * Read Network ACL Keys */
+    ReadNetworkAclKeys: "read:network_acl_keys",
+    /**
+     * Delete Network ACL Keys */
+    DeleteNetworkAclKeys: "delete:network_acl_keys",
 };
-export var TooManyRequestsErrorBody;
-(function (TooManyRequestsErrorBody) {
-    TooManyRequestsErrorBody.Error_ = {
-        TooManyRequests: "Too Many Requests",
-    };
-})(TooManyRequestsErrorBody || (TooManyRequestsErrorBody = {}));
 export var NotFoundErrorBody;
 (function (NotFoundErrorBody) {
     NotFoundErrorBody.Error_ = {
         NotFound: "Not Found",
     };
 })(NotFoundErrorBody || (NotFoundErrorBody = {}));
+export var TooManyRequestsErrorBody;
+(function (TooManyRequestsErrorBody) {
+    TooManyRequestsErrorBody.Error_ = {
+        TooManyRequests: "Too Many Requests",
+    };
+})(TooManyRequestsErrorBody || (TooManyRequestsErrorBody = {}));
 /** How the action is being referred to: `action_id` or `action_name`. */
 export const ActionBindingRefTypeEnum = {
     BindingId: "binding_id",
@@ -790,6 +808,7 @@ export const ActionTriggerTypeEnum = {
     PasswordHashMigration: "password-hash-migration",
     LoginPostIdentifier: "login-post-identifier",
     SignupPostIdentifier: "signup-post-identifier",
+    PostCredentialValidation: "post-credential-validation",
 };
 /** The build status of this specific version. */
 export const ActionVersionBuildStatusEnum = {
@@ -868,6 +887,12 @@ export const AuthenticationTypeEnum = {
     Email: "email",
     Totp: "totp",
 };
+/** The type of integration used to connect to this B2B integration client. Must be one of `custom_auth_server`, `third_party`, or `application`. */
+export const B2BIntegrationConfigurationIntegrationTypeEnum = {
+    CustomAuthServer: "custom_auth_server",
+    ThirdParty: "third_party",
+    Application: "application",
+};
 export var BadRequestSchema;
 (function (BadRequestSchema) {
     BadRequestSchema.Error_ = {
@@ -1011,7 +1036,6 @@ export const ClientAppTypeEnum = {
     NonInteractive: "non_interactive",
     ResourceServer: "resource_server",
     ExpressConfiguration: "express_configuration",
-    B2BIntegration: "b2b_integration",
     Rms: "rms",
     Box: "box",
     Cloudbees: "cloudbees",
@@ -1097,6 +1121,15 @@ export const ClientMyOrganizationConfigurationAllowedStrategiesEnum = {
     Oidc: "oidc",
     Samlp: "samlp",
 };
+/** A valid third-party client access value for the My Organization Configuration. */
+export const ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum = {
+    Allow: "allow",
+    Block: "block",
+};
+/** The default third-party client access value for the My Organization Configuration. */
+export const ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum = {
+    Block: "block",
+};
 /** The deletion behavior for this client. */
 export const ClientMyOrganizationDeletionBehaviorEnum = {
     Allow: "allow",
@@ -1220,6 +1253,11 @@ export const ConnectionCrossAppAccessResourceAppStatusEnum = {
     Disabled: "disabled",
     Enabled: "enabled",
 };
+/** Controls whether connections created from this template can be deleted. */
+export const ConnectionDeletionBehaviorEnum = {
+    Allow: "allow",
+    AllowIfEmpty: "allow_if_empty",
+};
 /** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
 export const ConnectionDigestAlgorithmEnumSaml = {
     Sha1: "sha1",
@@ -1317,6 +1355,24 @@ export const ConnectionIdentityProviderEnum = {
     Wordpress: "wordpress",
     Yahoo: "yahoo",
     Yandex: "yandex",
+    NotionMcp: "notion-mcp",
+    AsanaMcp: "asana-mcp",
+    AtlassianMcp: "atlassian-mcp",
+    CloudflareMcp: "cloudflare-mcp",
+    DocusignMcp: "docusign-mcp",
+    FigmaMcp: "figma-mcp",
+    GitlabMcp: "gitlab-mcp",
+    GustoMcp: "gusto-mcp",
+    HerokuMcp: "heroku-mcp",
+    HubspotMcp: "hubspot-mcp",
+    IntercomMcp: "intercom-mcp",
+    LinearMcp: "linear-mcp",
+    PagerdutyMcp: "pagerduty-mcp",
+    SentryMcp: "sentry-mcp",
+    SlackMcp: "slack-mcp",
+    SupabaseMcp: "supabase-mcp",
+    VercelMcp: "vercel-mcp",
+    XeroMcp: "xero-mcp",
 };
 /** Signing key use, whether for encryption or signing */
 export const ConnectionKeyUseEnum = {
@@ -1358,6 +1414,16 @@ export const ConnectionPasswordPolicyEnum = {
     Good: "good",
     Excellent: "excellent",
 };
+/** The default Cross App Access resource app status. */
+export const ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum = {
+    Enabled: "enabled",
+    Disabled: "disabled",
+};
+/** A Cross App Access resource app status value. */
+export const ConnectionProfileCrossAppAccessResourceAppStatusValueEnum = {
+    Enabled: "enabled",
+    Disabled: "disabled",
+};
 /** Indicates if membership should be assigned on login. */
 export const ConnectionProfileOrganizationAssignMembershipOnLoginEnum = {
     None: "none",
@@ -1370,6 +1436,14 @@ export const ConnectionProfileOrganizationShowAsButtonEnum = {
     Optional: "optional",
     Required: "required",
 };
+/** A SCIM token scope. */
+export const ConnectionProfileProvisioningScimTokenScopeEnum = {
+    GetUsers: "get:users",
+    PostUsers: "post:users",
+    PatchUsers: "patch:users",
+    DeleteUsers: "delete:users",
+    PutUsers: "put:users",
+};
 /** Valid SAML protocol bindings */
 export const ConnectionProtocolBindingEnumSaml = {
     UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
@@ -1791,6 +1865,24 @@ export const ConnectionStrategyEnum = {
     Wordpress: "wordpress",
     Yahoo: "yahoo",
     Yandex: "yandex",
+    NotionMcp: "notion-mcp",
+    AsanaMcp: "asana-mcp",
+    AtlassianMcp: "atlassian-mcp",
+    CloudflareMcp: "cloudflare-mcp",
+    DocusignMcp: "docusign-mcp",
+    FigmaMcp: "figma-mcp",
+    GitlabMcp: "gitlab-mcp",
+    GustoMcp: "gusto-mcp",
+    HerokuMcp: "heroku-mcp",
+    HubspotMcp: "hubspot-mcp",
+    IntercomMcp: "intercom-mcp",
+    LinearMcp: "linear-mcp",
+    PagerdutyMcp: "pagerduty-mcp",
+    SentryMcp: "sentry-mcp",
+    SlackMcp: "slack-mcp",
+    SupabaseMcp: "supabase-mcp",
+    VercelMcp: "vercel-mcp",
+    XeroMcp: "xero-mcp",
     Auth0Adldap: "auth0-adldap",
 };
 /** SMS template syntax type. Set to 'md_with_macros' to enable macro processing in templates. */
@@ -2674,35 +2766,27 @@ export const EventStreamCloudEventConnectionCreatedObject7OptionsWaadProtocolEnu
 export const EventStreamCloudEventConnectionCreatedObject7StrategyEnum = {
     Waad: "waad",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventConnectionCreatedTypeEnum = {
-    ConnectionCreated: "connection.created",
-};
-/** The type of the event which has happened. */
-export const EventStreamCloudEventConnectionDeletedCloudEventTypeEnum = {
-    ConnectionDeleted: "connection.deleted",
-};
 /** Method used to map incoming claims when strategy=oidc. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsAttributeMapMappingModeEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsAttributeMapMappingModeEnum = {
     BindAll: "bind_all",
     UseMap: "use_map",
 };
 /** PKCE configuration. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsConnectionSettingsPkceEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsConnectionSettingsPkceEnum = {
     Auto: "auto",
     S256: "S256",
     Plain: "plain",
     Disabled: "disabled",
 };
 /** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsDpopSigningAlgEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsDpopSigningAlgEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Es512: "ES512",
     Ed25519: "Ed25519",
 };
 /** Algorithm allowed to verify the ID tokens. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Ps256: "PS256",
@@ -2712,23 +2796,23 @@ export const EventStreamCloudEventConnectionDeletedObject0OptionsIdTokenSignedRe
     Rs512: "RS512",
 };
 /** The internal schema version of the connection options. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsSchemaVersionEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsSchemaVersionEnum = {
     Openid100: "openid-1.0.0",
     OidcV4: "oidc-v4",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointAuthMethodEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsTokenEndpointAuthMethodEnum = {
     ClientSecretPost: "client_secret_post",
     PrivateKeyJwt: "private_key_jwt",
 };
 /** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointAuthSigningAlgEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsTokenEndpointAuthSigningAlgEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Ps256: "PS256",
@@ -2738,40 +2822,40 @@ export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointAu
     Rs512: "RS512",
 };
 /** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
     Issuer: "issuer",
     TokenEndpoint: "token_endpoint",
 };
 /** OIDC communication channel type. 'back_channel' (confidential client) exchanges tokens server-side for stronger security; 'front_channel' handles responses in the browser. */
-export const EventStreamCloudEventConnectionDeletedObject0OptionsTypeEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0OptionsTypeEnum = {
     BackChannel: "back_channel",
     FrontChannel: "front_channel",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionDeletedObject0StrategyEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject0StrategyEnum = {
     Oidc: "oidc",
 };
 /** Method used to map incoming claims when strategy=okta. */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsAttributeMapMappingModeEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsAttributeMapMappingModeEnum = {
     BasicProfile: "basic_profile",
     UseMap: "use_map",
 };
 /** PKCE configuration. */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsConnectionSettingsPkceEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsConnectionSettingsPkceEnum = {
     Auto: "auto",
     S256: "S256",
     Plain: "plain",
     Disabled: "disabled",
 };
 /** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsDpopSigningAlgEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsDpopSigningAlgEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Es512: "ES512",
     Ed25519: "Ed25519",
 };
 /** Algorithm allowed to verify the ID tokens. */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Ps256: "PS256",
@@ -2781,23 +2865,23 @@ export const EventStreamCloudEventConnectionDeletedObject1OptionsIdTokenSignedRe
     Rs512: "RS512",
 };
 /** The internal schema version of the connection options. */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsSchemaVersionEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsSchemaVersionEnum = {
     Openid100: "openid-1.0.0",
     OidcV4: "oidc-v4",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointAuthMethodEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsTokenEndpointAuthMethodEnum = {
     ClientSecretPost: "client_secret_post",
     PrivateKeyJwt: "private_key_jwt",
 };
 /** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointAuthSigningAlgEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsTokenEndpointAuthSigningAlgEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Ps256: "PS256",
@@ -2807,182 +2891,182 @@ export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointAu
     Rs512: "RS512",
 };
 /** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
     Issuer: "issuer",
     TokenEndpoint: "token_endpoint",
 };
 /** Connection type */
-export const EventStreamCloudEventConnectionDeletedObject1OptionsTypeEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1OptionsTypeEnum = {
     BackChannel: "back_channel",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionDeletedObject1StrategyEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject1StrategyEnum = {
     Okta: "okta",
 };
 /** The algorithm profile to use for decrypting SAML assertions. */
-export const EventStreamCloudEventConnectionDeletedObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
     V20261: "v2026-1",
 };
 /** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
-export const EventStreamCloudEventConnectionDeletedObject2OptionsDigestAlgorithmEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject2OptionsDigestAlgorithmEnum = {
     Sha1: "sha1",
     Sha256: "sha256",
 };
 /** The response protocol used to communicate with the default application. */
-export const EventStreamCloudEventConnectionDeletedObject2OptionsIdpinitiatedClientProtocolEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject2OptionsIdpinitiatedClientProtocolEnum = {
     Oidc: "oidc",
     Samlp: "samlp",
     Wsfed: "wsfed",
 };
 /** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
-export const EventStreamCloudEventConnectionDeletedObject2OptionsProtocolBindingEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject2OptionsProtocolBindingEnum = {
     UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
     UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionDeletedObject2OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject2OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
-export const EventStreamCloudEventConnectionDeletedObject2OptionsSignatureAlgorithmEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject2OptionsSignatureAlgorithmEnum = {
     RsaSha1: "rsa-sha1",
     RsaSha256: "rsa-sha256",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionDeletedObject2StrategyEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject2StrategyEnum = {
     Samlp: "samlp",
 };
 /** The algorithm profile to use for decrypting SAML assertions. */
-export const EventStreamCloudEventConnectionDeletedObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
     V20261: "v2026-1",
 };
 /** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
-export const EventStreamCloudEventConnectionDeletedObject3OptionsDigestAlgorithmEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject3OptionsDigestAlgorithmEnum = {
     Sha1: "sha1",
     Sha256: "sha256",
 };
 /** The response protocol used to communicate with the default application. */
-export const EventStreamCloudEventConnectionDeletedObject3OptionsIdpinitiatedClientProtocolEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject3OptionsIdpinitiatedClientProtocolEnum = {
     Oidc: "oidc",
     Samlp: "samlp",
     Wsfed: "wsfed",
 };
 /** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
-export const EventStreamCloudEventConnectionDeletedObject3OptionsProtocolBindingEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject3OptionsProtocolBindingEnum = {
     UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
     UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionDeletedObject3OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject3OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
-export const EventStreamCloudEventConnectionDeletedObject3OptionsSignatureAlgorithmEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject3OptionsSignatureAlgorithmEnum = {
     RsaSha1: "rsa-sha1",
     RsaSha256: "rsa-sha256",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionDeletedObject3StrategyEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject3StrategyEnum = {
     Pingfederate: "pingfederate",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionDeletedObject4OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject4OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Choose how Auth0 sets the email_verified field in the user profile. */
-export const EventStreamCloudEventConnectionDeletedObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
     NeverSetEmailsAsVerified: "never_set_emails_as_verified",
     AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionDeletedObject4StrategyEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject4StrategyEnum = {
     Adfs: "adfs",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionDeletedObject5OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject5OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionDeletedObject5StrategyEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject5StrategyEnum = {
     Ad: "ad",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionDeletedObject6OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject6OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionDeletedObject6StrategyEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject6StrategyEnum = {
     GoogleApps: "google-apps",
 };
 /** The Azure AD endpoint version for authentication. 'microsoft-identity-platform-v2.0' (recommended, default) supports modern OAuth 2.0 features. 'azure-active-directory-v1.0' is the legacy endpoint with protocol limitations. Selection affects available features. */
-export const EventStreamCloudEventConnectionDeletedObject7OptionsIdentityApiEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject7OptionsIdentityApiEnum = {
     MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
     AzureActiveDirectoryV10: "azure-active-directory-v1.0",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionDeletedObject7OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject7OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Choose how Auth0 sets the email_verified field in the user profile. */
-export const EventStreamCloudEventConnectionDeletedObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
     NeverSetEmailsAsVerified: "never_set_emails_as_verified",
     AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
 };
 /** The Azure AD claim to use as the unique user identifier. 'oid' (Object ID) is recommended for single-tenant connections and required for SCIM. 'sub' (Subject) is required for multi-tenant/common endpoint. Only applies with OpenID Connect protocol. */
-export const EventStreamCloudEventConnectionDeletedObject7OptionsUseridAttributeEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject7OptionsUseridAttributeEnum = {
     Oid: "oid",
     Sub: "sub",
 };
 /** The authentication protocol for Azure AD v1 endpoints. 'openid-connect' (default, recommended) uses modern OAuth 2.0/OIDC. 'ws-federation' is a legacy SAML-based protocol for older integrations. Only available with Azure AD v1 API. */
-export const EventStreamCloudEventConnectionDeletedObject7OptionsWaadProtocolEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject7OptionsWaadProtocolEnum = {
     WsFederation: "ws-federation",
     OpenidConnect: "openid-connect",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionDeletedObject7StrategyEnum = {
+export const EventStreamCloudEventConnectionCreatedPreviousObject7StrategyEnum = {
     Waad: "waad",
 };
 /** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventConnectionDeletedTypeEnum = {
-    ConnectionDeleted: "connection.deleted",
+export const EventStreamCloudEventConnectionCreatedTypeEnum = {
+    ConnectionCreated: "connection.created",
 };
 /** The type of the event which has happened. */
-export const EventStreamCloudEventConnectionUpdatedCloudEventTypeEnum = {
-    ConnectionUpdated: "connection.updated",
+export const EventStreamCloudEventConnectionDeletedCloudEventTypeEnum = {
+    ConnectionDeleted: "connection.deleted",
 };
 /** Method used to map incoming claims when strategy=oidc. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsAttributeMapMappingModeEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsAttributeMapMappingModeEnum = {
     BindAll: "bind_all",
     UseMap: "use_map",
 };
 /** PKCE configuration. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsConnectionSettingsPkceEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsConnectionSettingsPkceEnum = {
     Auto: "auto",
     S256: "S256",
     Plain: "plain",
     Disabled: "disabled",
 };
 /** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsDpopSigningAlgEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsDpopSigningAlgEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Es512: "ES512",
     Ed25519: "Ed25519",
 };
 /** Algorithm allowed to verify the ID tokens. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Ps256: "PS256",
@@ -2992,23 +3076,23 @@ export const EventStreamCloudEventConnectionUpdatedObject0OptionsIdTokenSignedRe
     Rs512: "RS512",
 };
 /** The internal schema version of the connection options. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsSchemaVersionEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsSchemaVersionEnum = {
     Openid100: "openid-1.0.0",
     OidcV4: "oidc-v4",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointAuthMethodEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointAuthMethodEnum = {
     ClientSecretPost: "client_secret_post",
     PrivateKeyJwt: "private_key_jwt",
 };
 /** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointAuthSigningAlgEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointAuthSigningAlgEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Ps256: "PS256",
@@ -3018,40 +3102,40 @@ export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointAu
     Rs512: "RS512",
 };
 /** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
     Issuer: "issuer",
     TokenEndpoint: "token_endpoint",
 };
 /** OIDC communication channel type. 'back_channel' (confidential client) exchanges tokens server-side for stronger security; 'front_channel' handles responses in the browser. */
-export const EventStreamCloudEventConnectionUpdatedObject0OptionsTypeEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0OptionsTypeEnum = {
     BackChannel: "back_channel",
     FrontChannel: "front_channel",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionUpdatedObject0StrategyEnum = {
+export const EventStreamCloudEventConnectionDeletedObject0StrategyEnum = {
     Oidc: "oidc",
 };
 /** Method used to map incoming claims when strategy=okta. */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsAttributeMapMappingModeEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsAttributeMapMappingModeEnum = {
     BasicProfile: "basic_profile",
     UseMap: "use_map",
 };
 /** PKCE configuration. */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsConnectionSettingsPkceEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsConnectionSettingsPkceEnum = {
     Auto: "auto",
     S256: "S256",
     Plain: "plain",
     Disabled: "disabled",
 };
 /** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsDpopSigningAlgEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsDpopSigningAlgEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Es512: "ES512",
     Ed25519: "Ed25519",
 };
 /** Algorithm allowed to verify the ID tokens. */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Ps256: "PS256",
@@ -3061,23 +3145,23 @@ export const EventStreamCloudEventConnectionUpdatedObject1OptionsIdTokenSignedRe
     Rs512: "RS512",
 };
 /** The internal schema version of the connection options. */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsSchemaVersionEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsSchemaVersionEnum = {
     Openid100: "openid-1.0.0",
     OidcV4: "oidc-v4",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointAuthMethodEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointAuthMethodEnum = {
     ClientSecretPost: "client_secret_post",
     PrivateKeyJwt: "private_key_jwt",
 };
 /** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointAuthSigningAlgEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointAuthSigningAlgEnum = {
     Es256: "ES256",
     Es384: "ES384",
     Ps256: "PS256",
@@ -3087,185 +3171,1021 @@ export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointAu
     Rs512: "RS512",
 };
 /** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
     Issuer: "issuer",
     TokenEndpoint: "token_endpoint",
 };
 /** Connection type */
-export const EventStreamCloudEventConnectionUpdatedObject1OptionsTypeEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1OptionsTypeEnum = {
     BackChannel: "back_channel",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionUpdatedObject1StrategyEnum = {
+export const EventStreamCloudEventConnectionDeletedObject1StrategyEnum = {
     Okta: "okta",
 };
 /** The algorithm profile to use for decrypting SAML assertions. */
-export const EventStreamCloudEventConnectionUpdatedObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+export const EventStreamCloudEventConnectionDeletedObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
     V20261: "v2026-1",
 };
 /** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
-export const EventStreamCloudEventConnectionUpdatedObject2OptionsDigestAlgorithmEnum = {
+export const EventStreamCloudEventConnectionDeletedObject2OptionsDigestAlgorithmEnum = {
     Sha1: "sha1",
     Sha256: "sha256",
 };
 /** The response protocol used to communicate with the default application. */
-export const EventStreamCloudEventConnectionUpdatedObject2OptionsIdpinitiatedClientProtocolEnum = {
+export const EventStreamCloudEventConnectionDeletedObject2OptionsIdpinitiatedClientProtocolEnum = {
     Oidc: "oidc",
     Samlp: "samlp",
     Wsfed: "wsfed",
 };
 /** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
-export const EventStreamCloudEventConnectionUpdatedObject2OptionsProtocolBindingEnum = {
+export const EventStreamCloudEventConnectionDeletedObject2OptionsProtocolBindingEnum = {
     UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
     UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionUpdatedObject2OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionDeletedObject2OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
-export const EventStreamCloudEventConnectionUpdatedObject2OptionsSignatureAlgorithmEnum = {
+export const EventStreamCloudEventConnectionDeletedObject2OptionsSignatureAlgorithmEnum = {
     RsaSha1: "rsa-sha1",
     RsaSha256: "rsa-sha256",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionUpdatedObject2StrategyEnum = {
+export const EventStreamCloudEventConnectionDeletedObject2StrategyEnum = {
     Samlp: "samlp",
 };
 /** The algorithm profile to use for decrypting SAML assertions. */
-export const EventStreamCloudEventConnectionUpdatedObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+export const EventStreamCloudEventConnectionDeletedObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
     V20261: "v2026-1",
 };
 /** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
-export const EventStreamCloudEventConnectionUpdatedObject3OptionsDigestAlgorithmEnum = {
+export const EventStreamCloudEventConnectionDeletedObject3OptionsDigestAlgorithmEnum = {
     Sha1: "sha1",
     Sha256: "sha256",
 };
 /** The response protocol used to communicate with the default application. */
-export const EventStreamCloudEventConnectionUpdatedObject3OptionsIdpinitiatedClientProtocolEnum = {
+export const EventStreamCloudEventConnectionDeletedObject3OptionsIdpinitiatedClientProtocolEnum = {
     Oidc: "oidc",
     Samlp: "samlp",
     Wsfed: "wsfed",
 };
 /** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
-export const EventStreamCloudEventConnectionUpdatedObject3OptionsProtocolBindingEnum = {
+export const EventStreamCloudEventConnectionDeletedObject3OptionsProtocolBindingEnum = {
     UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
     UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionUpdatedObject3OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionDeletedObject3OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
-export const EventStreamCloudEventConnectionUpdatedObject3OptionsSignatureAlgorithmEnum = {
+export const EventStreamCloudEventConnectionDeletedObject3OptionsSignatureAlgorithmEnum = {
     RsaSha1: "rsa-sha1",
     RsaSha256: "rsa-sha256",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionUpdatedObject3StrategyEnum = {
+export const EventStreamCloudEventConnectionDeletedObject3StrategyEnum = {
     Pingfederate: "pingfederate",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionUpdatedObject4OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionDeletedObject4OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Choose how Auth0 sets the email_verified field in the user profile. */
-export const EventStreamCloudEventConnectionUpdatedObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
+export const EventStreamCloudEventConnectionDeletedObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
     NeverSetEmailsAsVerified: "never_set_emails_as_verified",
     AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionUpdatedObject4StrategyEnum = {
+export const EventStreamCloudEventConnectionDeletedObject4StrategyEnum = {
     Adfs: "adfs",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionUpdatedObject5OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionDeletedObject5OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionUpdatedObject5StrategyEnum = {
+export const EventStreamCloudEventConnectionDeletedObject5StrategyEnum = {
     Ad: "ad",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionUpdatedObject6OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionDeletedObject6OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionUpdatedObject6StrategyEnum = {
+export const EventStreamCloudEventConnectionDeletedObject6StrategyEnum = {
     GoogleApps: "google-apps",
 };
 /** The Azure AD endpoint version for authentication. 'microsoft-identity-platform-v2.0' (recommended, default) supports modern OAuth 2.0 features. 'azure-active-directory-v1.0' is the legacy endpoint with protocol limitations. Selection affects available features. */
-export const EventStreamCloudEventConnectionUpdatedObject7OptionsIdentityApiEnum = {
+export const EventStreamCloudEventConnectionDeletedObject7OptionsIdentityApiEnum = {
     MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
     AzureActiveDirectoryV10: "azure-active-directory-v1.0",
 };
 /** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
-export const EventStreamCloudEventConnectionUpdatedObject7OptionsSetUserRootAttributesEnum = {
+export const EventStreamCloudEventConnectionDeletedObject7OptionsSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
 /** Choose how Auth0 sets the email_verified field in the user profile. */
-export const EventStreamCloudEventConnectionUpdatedObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
+export const EventStreamCloudEventConnectionDeletedObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
     NeverSetEmailsAsVerified: "never_set_emails_as_verified",
     AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
 };
 /** The Azure AD claim to use as the unique user identifier. 'oid' (Object ID) is recommended for single-tenant connections and required for SCIM. 'sub' (Subject) is required for multi-tenant/common endpoint. Only applies with OpenID Connect protocol. */
-export const EventStreamCloudEventConnectionUpdatedObject7OptionsUseridAttributeEnum = {
+export const EventStreamCloudEventConnectionDeletedObject7OptionsUseridAttributeEnum = {
     Oid: "oid",
     Sub: "sub",
 };
 /** The authentication protocol for Azure AD v1 endpoints. 'openid-connect' (default, recommended) uses modern OAuth 2.0/OIDC. 'ws-federation' is a legacy SAML-based protocol for older integrations. Only available with Azure AD v1 API. */
-export const EventStreamCloudEventConnectionUpdatedObject7OptionsWaadProtocolEnum = {
+export const EventStreamCloudEventConnectionDeletedObject7OptionsWaadProtocolEnum = {
     WsFederation: "ws-federation",
     OpenidConnect: "openid-connect",
 };
 /** The connection strategy. */
-export const EventStreamCloudEventConnectionUpdatedObject7StrategyEnum = {
+export const EventStreamCloudEventConnectionDeletedObject7StrategyEnum = {
     Waad: "waad",
 };
-/** The event type (injected from the SSE event field). */
-export const EventStreamCloudEventConnectionUpdatedTypeEnum = {
-    ConnectionUpdated: "connection.updated",
+/** Method used to map incoming claims when strategy=oidc. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsAttributeMapMappingModeEnum = {
+    BindAll: "bind_all",
+    UseMap: "use_map",
 };
-/** Machine-readable error code. */
-export const EventStreamCloudEventErrorCodeEnum = {
-    InvalidCursor: "invalid_cursor",
-    CursorExpired: "cursor_expired",
-    Timeout: "timeout",
-    PayloadTooLarge: "payload_too_large",
-    ProcessingError: "processing_error",
-    ConnectionTimeout: "connection_timeout",
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
 };
-/** Identifies this as an error message (injected from the SSE event field). */
-export const EventStreamCloudEventErrorMessageTypeEnum = {
-    Error: "error",
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
 };
-/** The type of the event which has happened. */
-export const EventStreamCloudEventGroupCreatedCloudEventTypeEnum = {
-    GroupCreated: "group.created",
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupCreatedObject0TypeEnum = {
-    Connection: "connection",
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupCreatedObject1TypeEnum = {
-    Organization: "organization",
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
 };
-/** The type of the group. */
-export const EventStreamCloudEventGroupCreatedObject2TypeEnum = {
-    Tenant: "tenant",
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** OIDC communication channel type. 'back_channel' (confidential client) exchanges tokens server-side for stronger security; 'front_channel' handles responses in the browser. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0OptionsTypeEnum = {
+    BackChannel: "back_channel",
+    FrontChannel: "front_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject0StrategyEnum = {
+    Oidc: "oidc",
+};
+/** Method used to map incoming claims when strategy=okta. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsAttributeMapMappingModeEnum = {
+    BasicProfile: "basic_profile",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** Connection type */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1OptionsTypeEnum = {
+    BackChannel: "back_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject1StrategyEnum = {
+    Okta: "okta",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject2OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject2OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject2OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject2OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject2OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject2StrategyEnum = {
+    Samlp: "samlp",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject3OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject3OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject3OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject3OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject3OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject3StrategyEnum = {
+    Pingfederate: "pingfederate",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject4OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject4StrategyEnum = {
+    Adfs: "adfs",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject5OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject5StrategyEnum = {
+    Ad: "ad",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject6OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject6StrategyEnum = {
+    GoogleApps: "google-apps",
+};
+/** The Azure AD endpoint version for authentication. 'microsoft-identity-platform-v2.0' (recommended, default) supports modern OAuth 2.0 features. 'azure-active-directory-v1.0' is the legacy endpoint with protocol limitations. Selection affects available features. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject7OptionsIdentityApiEnum = {
+    MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
+    AzureActiveDirectoryV10: "azure-active-directory-v1.0",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject7OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The Azure AD claim to use as the unique user identifier. 'oid' (Object ID) is recommended for single-tenant connections and required for SCIM. 'sub' (Subject) is required for multi-tenant/common endpoint. Only applies with OpenID Connect protocol. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject7OptionsUseridAttributeEnum = {
+    Oid: "oid",
+    Sub: "sub",
+};
+/** The authentication protocol for Azure AD v1 endpoints. 'openid-connect' (default, recommended) uses modern OAuth 2.0/OIDC. 'ws-federation' is a legacy SAML-based protocol for older integrations. Only available with Azure AD v1 API. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject7OptionsWaadProtocolEnum = {
+    WsFederation: "ws-federation",
+    OpenidConnect: "openid-connect",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionDeletedPreviousObject7StrategyEnum = {
+    Waad: "waad",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventConnectionDeletedTypeEnum = {
+    ConnectionDeleted: "connection.deleted",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventConnectionUpdatedCloudEventTypeEnum = {
+    ConnectionUpdated: "connection.updated",
+};
+/** Method used to map incoming claims when strategy=oidc. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsAttributeMapMappingModeEnum = {
+    BindAll: "bind_all",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** OIDC communication channel type. 'back_channel' (confidential client) exchanges tokens server-side for stronger security; 'front_channel' handles responses in the browser. */
+export const EventStreamCloudEventConnectionUpdatedObject0OptionsTypeEnum = {
+    BackChannel: "back_channel",
+    FrontChannel: "front_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject0StrategyEnum = {
+    Oidc: "oidc",
+};
+/** Method used to map incoming claims when strategy=okta. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsAttributeMapMappingModeEnum = {
+    BasicProfile: "basic_profile",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** Connection type */
+export const EventStreamCloudEventConnectionUpdatedObject1OptionsTypeEnum = {
+    BackChannel: "back_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject1StrategyEnum = {
+    Okta: "okta",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionUpdatedObject2OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject2StrategyEnum = {
+    Samlp: "samlp",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionUpdatedObject3OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject3StrategyEnum = {
+    Pingfederate: "pingfederate",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject4OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionUpdatedObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject4StrategyEnum = {
+    Adfs: "adfs",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject5OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject5StrategyEnum = {
+    Ad: "ad",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject6OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject6StrategyEnum = {
+    GoogleApps: "google-apps",
+};
+/** The Azure AD endpoint version for authentication. 'microsoft-identity-platform-v2.0' (recommended, default) supports modern OAuth 2.0 features. 'azure-active-directory-v1.0' is the legacy endpoint with protocol limitations. Selection affects available features. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsIdentityApiEnum = {
+    MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
+    AzureActiveDirectoryV10: "azure-active-directory-v1.0",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The Azure AD claim to use as the unique user identifier. 'oid' (Object ID) is recommended for single-tenant connections and required for SCIM. 'sub' (Subject) is required for multi-tenant/common endpoint. Only applies with OpenID Connect protocol. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsUseridAttributeEnum = {
+    Oid: "oid",
+    Sub: "sub",
+};
+/** The authentication protocol for Azure AD v1 endpoints. 'openid-connect' (default, recommended) uses modern OAuth 2.0/OIDC. 'ws-federation' is a legacy SAML-based protocol for older integrations. Only available with Azure AD v1 API. */
+export const EventStreamCloudEventConnectionUpdatedObject7OptionsWaadProtocolEnum = {
+    WsFederation: "ws-federation",
+    OpenidConnect: "openid-connect",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedObject7StrategyEnum = {
+    Waad: "waad",
+};
+/** Method used to map incoming claims when strategy=oidc. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsAttributeMapMappingModeEnum = {
+    BindAll: "bind_all",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** OIDC communication channel type. 'back_channel' (confidential client) exchanges tokens server-side for stronger security; 'front_channel' handles responses in the browser. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0OptionsTypeEnum = {
+    BackChannel: "back_channel",
+    FrontChannel: "front_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject0StrategyEnum = {
+    Oidc: "oidc",
+};
+/** Method used to map incoming claims when strategy=okta. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsAttributeMapMappingModeEnum = {
+    BasicProfile: "basic_profile",
+    UseMap: "use_map",
+};
+/** PKCE configuration. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm used for DPoP proof JWT signing. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
+    Ed25519: "Ed25519",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsIdTokenSignedResponseAlgsItemEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** The internal schema version of the connection options. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsSchemaVersionEnum = {
+    Openid100: "openid-1.0.0",
+    OidcV4: "oidc-v4",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Authentication method used at the identity provider's token endpoint. 'client_secret_post' sends credentials in the request body; 'private_key_jwt' uses a signed JWT assertion for enhanced security. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. Applicable when strategy=oidc or okta. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Es384: "ES384",
+    Ps256: "PS256",
+    Ps384: "PS384",
+    Rs256: "RS256",
+    Rs384: "RS384",
+    Rs512: "RS512",
+};
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsTokenEndpointJwtcaAudFormatEnum = {
+    Issuer: "issuer",
+    TokenEndpoint: "token_endpoint",
+};
+/** Connection type */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1OptionsTypeEnum = {
+    BackChannel: "back_channel",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject1StrategyEnum = {
+    Okta: "okta",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject2OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject2OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject2OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject2OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject2OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject2OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject2StrategyEnum = {
+    Samlp: "samlp",
+};
+/** The algorithm profile to use for decrypting SAML assertions. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject3OptionsAssertionDecryptionSettingsAlgorithmProfileEnum = {
+    V20261: "v2026-1",
+};
+/** Algorithm used for computing digest values when signing SAML requests and logout requests. Defaults to 'sha256'. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject3OptionsDigestAlgorithmEnum = {
+    Sha1: "sha1",
+    Sha256: "sha256",
+};
+/** The response protocol used to communicate with the default application. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject3OptionsIdpinitiatedClientProtocolEnum = {
+    Oidc: "oidc",
+    Samlp: "samlp",
+    Wsfed: "wsfed",
+};
+/** SAML protocol binding mechanism for sending authentication requests to the identity provider. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject3OptionsProtocolBindingEnum = {
+    UrnOasisNamesTcSaml20BindingsHttpPost: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
+    UrnOasisNamesTcSaml20BindingsHttpRedirect: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject3OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Algorithm used to sign SAML authentication requests and logout requests using the connection's signing key. Common values: 'rsa-sha256' (RSA signature with SHA-256 digest) or 'rsa-sha1'. Defaults to 'rsa-sha256'. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject3OptionsSignatureAlgorithmEnum = {
+    RsaSha1: "rsa-sha1",
+    RsaSha256: "rsa-sha256",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject3StrategyEnum = {
+    Pingfederate: "pingfederate",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject4OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject4OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject4StrategyEnum = {
+    Adfs: "adfs",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject5OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject5StrategyEnum = {
+    Ad: "ad",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject6OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject6StrategyEnum = {
+    GoogleApps: "google-apps",
+};
+/** The Azure AD endpoint version for authentication. 'microsoft-identity-platform-v2.0' (recommended, default) supports modern OAuth 2.0 features. 'azure-active-directory-v1.0' is the legacy endpoint with protocol limitations. Selection affects available features. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject7OptionsIdentityApiEnum = {
+    MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
+    AzureActiveDirectoryV10: "azure-active-directory-v1.0",
+};
+/** Controls how user profile root attributes (name, nickname, picture, etc.) are synchronized from the identity provider. 'on_each_login': updates on every authentication (default); 'on_first_login': sets attributes only during initial login, allowing independent updates afterward; 'never_on_login': never syncs from IdP, preserving locally-set values. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject7OptionsSetUserRootAttributesEnum = {
+    OnEachLogin: "on_each_login",
+    OnFirstLogin: "on_first_login",
+    NeverOnLogin: "never_on_login",
+};
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject7OptionsShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
+/** The Azure AD claim to use as the unique user identifier. 'oid' (Object ID) is recommended for single-tenant connections and required for SCIM. 'sub' (Subject) is required for multi-tenant/common endpoint. Only applies with OpenID Connect protocol. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject7OptionsUseridAttributeEnum = {
+    Oid: "oid",
+    Sub: "sub",
+};
+/** The authentication protocol for Azure AD v1 endpoints. 'openid-connect' (default, recommended) uses modern OAuth 2.0/OIDC. 'ws-federation' is a legacy SAML-based protocol for older integrations. Only available with Azure AD v1 API. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject7OptionsWaadProtocolEnum = {
+    WsFederation: "ws-federation",
+    OpenidConnect: "openid-connect",
+};
+/** The connection strategy. */
+export const EventStreamCloudEventConnectionUpdatedPreviousObject7StrategyEnum = {
+    Waad: "waad",
+};
+/** The event type (injected from the SSE event field). */
+export const EventStreamCloudEventConnectionUpdatedTypeEnum = {
+    ConnectionUpdated: "connection.updated",
+};
+/** Machine-readable error code. */
+export const EventStreamCloudEventErrorCodeEnum = {
+    InvalidCursor: "invalid_cursor",
+    CursorExpired: "cursor_expired",
+    Timeout: "timeout",
+    PayloadTooLarge: "payload_too_large",
+    ProcessingError: "processing_error",
+    ConnectionTimeout: "connection_timeout",
+};
+/** Identifies this as an error message (injected from the SSE event field). */
+export const EventStreamCloudEventErrorMessageTypeEnum = {
+    Error: "error",
+};
+/** The type of the event which has happened. */
+export const EventStreamCloudEventGroupCreatedCloudEventTypeEnum = {
+    GroupCreated: "group.created",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedObject0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedObject1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedObject2TypeEnum = {
+    Tenant: "tenant",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedPreviousObject0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedPreviousObject1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupCreatedPreviousObject2TypeEnum = {
+    Tenant: "tenant",
 };
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventGroupCreatedTypeEnum = {
@@ -3287,6 +4207,18 @@ export const EventStreamCloudEventGroupDeletedObject1TypeEnum = {
 export const EventStreamCloudEventGroupDeletedObject2TypeEnum = {
     Tenant: "tenant",
 };
+/** The type of the group. */
+export const EventStreamCloudEventGroupDeletedPreviousObject0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupDeletedPreviousObject1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupDeletedPreviousObject2TypeEnum = {
+    Tenant: "tenant",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventGroupDeletedTypeEnum = {
     GroupDeleted: "group.deleted",
@@ -3315,6 +4247,26 @@ export const EventStreamCloudEventGroupMemberAddedObjectMember0MemberTypeEnum =
 export const EventStreamCloudEventGroupMemberAddedObjectMember1MemberTypeEnum = {
     Connection: "connection",
 };
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberAddedPreviousObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberAddedPreviousObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberAddedPreviousObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
+/** Type discriminator for user members */
+export const EventStreamCloudEventGroupMemberAddedPreviousObjectMember0MemberTypeEnum = {
+    User: "user",
+};
+/** Type discriminator for connection members */
+export const EventStreamCloudEventGroupMemberAddedPreviousObjectMember1MemberTypeEnum = {
+    Connection: "connection",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventGroupMemberAddedTypeEnum = {
     GroupMemberAdded: "group.member.added",
@@ -3343,6 +4295,26 @@ export const EventStreamCloudEventGroupMemberDeletedObjectMember0MemberTypeEnum
 export const EventStreamCloudEventGroupMemberDeletedObjectMember1MemberTypeEnum = {
     Connection: "connection",
 };
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberDeletedPreviousObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberDeletedPreviousObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupMemberDeletedPreviousObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
+/** Type discriminator for user members */
+export const EventStreamCloudEventGroupMemberDeletedPreviousObjectMember0MemberTypeEnum = {
+    User: "user",
+};
+/** Type discriminator for connection members */
+export const EventStreamCloudEventGroupMemberDeletedPreviousObjectMember1MemberTypeEnum = {
+    Connection: "connection",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventGroupMemberDeletedTypeEnum = {
     GroupMemberDeleted: "group.member.deleted",
@@ -3363,6 +4335,18 @@ export const EventStreamCloudEventGroupRoleAssignedObjectGroup1TypeEnum = {
 export const EventStreamCloudEventGroupRoleAssignedObjectGroup2TypeEnum = {
     Tenant: "tenant",
 };
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleAssignedPreviousObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleAssignedPreviousObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleAssignedPreviousObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventGroupRoleAssignedTypeEnum = {
     GroupRoleAssigned: "group.role.assigned",
@@ -3383,6 +4367,18 @@ export const EventStreamCloudEventGroupRoleDeletedObjectGroup1TypeEnum = {
 export const EventStreamCloudEventGroupRoleDeletedObjectGroup2TypeEnum = {
     Tenant: "tenant",
 };
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleDeletedPreviousObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleDeletedPreviousObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupRoleDeletedPreviousObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventGroupRoleDeletedTypeEnum = {
     GroupRoleDeleted: "group.role.deleted",
@@ -3400,7 +4396,19 @@ export const EventStreamCloudEventGroupUpdatedObject1TypeEnum = {
     Organization: "organization",
 };
 /** The type of the group. */
-export const EventStreamCloudEventGroupUpdatedObject2TypeEnum = {
+export const EventStreamCloudEventGroupUpdatedObject2TypeEnum = {
+    Tenant: "tenant",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupUpdatedPreviousObject0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupUpdatedPreviousObject1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventGroupUpdatedPreviousObject2TypeEnum = {
     Tenant: "tenant",
 };
 /** The event type (injected from the SSE event field). */
@@ -3415,6 +4423,30 @@ export const EventStreamCloudEventOffsetOnlyMessageTypeEnum = {
 export const EventStreamCloudEventOrgConnectionAddedCloudEventTypeEnum = {
     OrganizationConnectionAdded: "organization.connection.added",
 };
+export const EventStreamCloudEventOrgConnectionAddedObjectOrganizationAccessLevel0Enum = {
+    None: "none",
+};
+export const EventStreamCloudEventOrgConnectionAddedObjectOrganizationAccessLevel1Enum = {
+    Readonly: "readonly",
+};
+export const EventStreamCloudEventOrgConnectionAddedObjectOrganizationAccessLevel2Enum = {
+    Limited: "limited",
+};
+export const EventStreamCloudEventOrgConnectionAddedObjectOrganizationAccessLevel3Enum = {
+    Full: "full",
+};
+export const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationAccessLevel0Enum = {
+    None: "none",
+};
+export const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationAccessLevel1Enum = {
+    Readonly: "readonly",
+};
+export const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationAccessLevel2Enum = {
+    Limited: "limited",
+};
+export const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationAccessLevel3Enum = {
+    Full: "full",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventOrgConnectionAddedTypeEnum = {
     OrganizationConnectionAdded: "organization.connection.added",
@@ -3431,6 +4463,30 @@ export const EventStreamCloudEventOrgConnectionRemovedTypeEnum = {
 export const EventStreamCloudEventOrgConnectionUpdatedCloudEventTypeEnum = {
     OrganizationConnectionUpdated: "organization.connection.updated",
 };
+export const EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationAccessLevel0Enum = {
+    None: "none",
+};
+export const EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationAccessLevel1Enum = {
+    Readonly: "readonly",
+};
+export const EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationAccessLevel2Enum = {
+    Limited: "limited",
+};
+export const EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationAccessLevel3Enum = {
+    Full: "full",
+};
+export const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationAccessLevel0Enum = {
+    None: "none",
+};
+export const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationAccessLevel1Enum = {
+    Readonly: "readonly",
+};
+export const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationAccessLevel2Enum = {
+    Limited: "limited",
+};
+export const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationAccessLevel3Enum = {
+    Full: "full",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventOrgConnectionUpdatedTypeEnum = {
     OrganizationConnectionUpdated: "organization.connection.updated",
@@ -3467,6 +4523,18 @@ export const EventStreamCloudEventOrgGroupRoleAssignedObjectGroup1TypeEnum = {
 export const EventStreamCloudEventOrgGroupRoleAssignedObjectGroup2TypeEnum = {
     Tenant: "tenant",
 };
+/** The type of the group. */
+export const EventStreamCloudEventOrgGroupRoleAssignedPreviousObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventOrgGroupRoleAssignedPreviousObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventOrgGroupRoleAssignedPreviousObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventOrgGroupRoleAssignedTypeEnum = {
     OrganizationGroupRoleAssigned: "organization.group.role.assigned",
@@ -3487,6 +4555,18 @@ export const EventStreamCloudEventOrgGroupRoleDeletedObjectGroup1TypeEnum = {
 export const EventStreamCloudEventOrgGroupRoleDeletedObjectGroup2TypeEnum = {
     Tenant: "tenant",
 };
+/** The type of the group. */
+export const EventStreamCloudEventOrgGroupRoleDeletedPreviousObjectGroup0TypeEnum = {
+    Connection: "connection",
+};
+/** The type of the group. */
+export const EventStreamCloudEventOrgGroupRoleDeletedPreviousObjectGroup1TypeEnum = {
+    Organization: "organization",
+};
+/** The type of the group. */
+export const EventStreamCloudEventOrgGroupRoleDeletedPreviousObjectGroup2TypeEnum = {
+    Tenant: "tenant",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventOrgGroupRoleDeletedTypeEnum = {
     OrganizationGroupRoleDeleted: "organization.group.role.deleted",
@@ -3608,6 +4688,75 @@ export const EventStreamCloudEventUserCreatedObjectIdentitiesItemSocialProviderE
     Yahoo: "yahoo",
     Yandex: "yandex",
 };
+/** List of custom identity providers. */
+export const EventStreamCloudEventUserCreatedPreviousObjectIdentitiesItemCustomProviderEnum = {
+    Custom: "custom",
+};
+/** List of database identity providers. */
+export const EventStreamCloudEventUserCreatedPreviousObjectIdentitiesItemDatabaseProviderEnum = {
+    Auth0: "auth0",
+};
+/** List of enterprise identity providers. */
+export const EventStreamCloudEventUserCreatedPreviousObjectIdentitiesItemEnterpriseProviderEnum = {
+    Ad: "ad",
+    Adfs: "adfs",
+    GoogleApps: "google-apps",
+    Ip: "ip",
+    Office365: "office365",
+    Oidc: "oidc",
+    Okta: "okta",
+    Pingfederate: "pingfederate",
+    Samlp: "samlp",
+    Sharepoint: "sharepoint",
+    Waad: "waad",
+};
+/** List of passwordless identity providers. */
+export const EventStreamCloudEventUserCreatedPreviousObjectIdentitiesItemPasswordlessProviderEnum = {
+    Email: "email",
+    Sms: "sms",
+};
+/** List of social identity providers. */
+export const EventStreamCloudEventUserCreatedPreviousObjectIdentitiesItemSocialProviderEnum = {
+    Amazon: "amazon",
+    Apple: "apple",
+    Dropbox: "dropbox",
+    Bitbucket: "bitbucket",
+    Auth0Oidc: "auth0-oidc",
+    Baidu: "baidu",
+    Bitly: "bitly",
+    Box: "box",
+    Daccount: "daccount",
+    Dwolla: "dwolla",
+    EvernoteSandbox: "evernote-sandbox",
+    Evernote: "evernote",
+    Exact: "exact",
+    Facebook: "facebook",
+    Fitbit: "fitbit",
+    Github: "github",
+    GoogleOauth2: "google-oauth2",
+    Instagram: "instagram",
+    Line: "line",
+    Linkedin: "linkedin",
+    Oauth1: "oauth1",
+    Oauth2: "oauth2",
+    Paypal: "paypal",
+    PaypalSandbox: "paypal-sandbox",
+    Planningcenter: "planningcenter",
+    SalesforceCommunity: "salesforce-community",
+    SalesforceSandbox: "salesforce-sandbox",
+    Salesforce: "salesforce",
+    Shopify: "shopify",
+    Soundcloud: "soundcloud",
+    Thirtysevensignals: "thirtysevensignals",
+    Twitter: "twitter",
+    Untapped: "untapped",
+    Vkontakte: "vkontakte",
+    Weibo: "weibo",
+    Windowslive: "windowslive",
+    Wordpress: "wordpress",
+    Yahoo: "yahoo",
+    Yandex: "yandex",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventUserCreatedTypeEnum = {
     UserCreated: "user.created",
@@ -3685,6 +4834,75 @@ export const EventStreamCloudEventUserDeletedObjectIdentitiesItemSocialProviderE
     Yahoo: "yahoo",
     Yandex: "yandex",
 };
+/** List of custom identity providers. */
+export const EventStreamCloudEventUserDeletedPreviousObjectIdentitiesItemCustomProviderEnum = {
+    Custom: "custom",
+};
+/** List of database identity providers. */
+export const EventStreamCloudEventUserDeletedPreviousObjectIdentitiesItemDatabaseProviderEnum = {
+    Auth0: "auth0",
+};
+/** List of enterprise identity providers. */
+export const EventStreamCloudEventUserDeletedPreviousObjectIdentitiesItemEnterpriseProviderEnum = {
+    Ad: "ad",
+    Adfs: "adfs",
+    GoogleApps: "google-apps",
+    Ip: "ip",
+    Office365: "office365",
+    Oidc: "oidc",
+    Okta: "okta",
+    Pingfederate: "pingfederate",
+    Samlp: "samlp",
+    Sharepoint: "sharepoint",
+    Waad: "waad",
+};
+/** List of passwordless identity providers. */
+export const EventStreamCloudEventUserDeletedPreviousObjectIdentitiesItemPasswordlessProviderEnum = {
+    Email: "email",
+    Sms: "sms",
+};
+/** List of social identity providers. */
+export const EventStreamCloudEventUserDeletedPreviousObjectIdentitiesItemSocialProviderEnum = {
+    Amazon: "amazon",
+    Apple: "apple",
+    Dropbox: "dropbox",
+    Bitbucket: "bitbucket",
+    Auth0Oidc: "auth0-oidc",
+    Baidu: "baidu",
+    Bitly: "bitly",
+    Box: "box",
+    Daccount: "daccount",
+    Dwolla: "dwolla",
+    EvernoteSandbox: "evernote-sandbox",
+    Evernote: "evernote",
+    Exact: "exact",
+    Facebook: "facebook",
+    Fitbit: "fitbit",
+    Github: "github",
+    GoogleOauth2: "google-oauth2",
+    Instagram: "instagram",
+    Line: "line",
+    Linkedin: "linkedin",
+    Oauth1: "oauth1",
+    Oauth2: "oauth2",
+    Paypal: "paypal",
+    PaypalSandbox: "paypal-sandbox",
+    Planningcenter: "planningcenter",
+    SalesforceCommunity: "salesforce-community",
+    SalesforceSandbox: "salesforce-sandbox",
+    Salesforce: "salesforce",
+    Shopify: "shopify",
+    Soundcloud: "soundcloud",
+    Thirtysevensignals: "thirtysevensignals",
+    Twitter: "twitter",
+    Untapped: "untapped",
+    Vkontakte: "vkontakte",
+    Weibo: "weibo",
+    Windowslive: "windowslive",
+    Wordpress: "wordpress",
+    Yahoo: "yahoo",
+    Yandex: "yandex",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventUserDeletedTypeEnum = {
     UserDeleted: "user.deleted",
@@ -3762,6 +4980,75 @@ export const EventStreamCloudEventUserUpdatedObjectIdentitiesItemSocialProviderE
     Yahoo: "yahoo",
     Yandex: "yandex",
 };
+/** List of custom identity providers. */
+export const EventStreamCloudEventUserUpdatedPreviousObjectIdentitiesItemCustomProviderEnum = {
+    Custom: "custom",
+};
+/** List of database identity providers. */
+export const EventStreamCloudEventUserUpdatedPreviousObjectIdentitiesItemDatabaseProviderEnum = {
+    Auth0: "auth0",
+};
+/** List of enterprise identity providers. */
+export const EventStreamCloudEventUserUpdatedPreviousObjectIdentitiesItemEnterpriseProviderEnum = {
+    Ad: "ad",
+    Adfs: "adfs",
+    GoogleApps: "google-apps",
+    Ip: "ip",
+    Office365: "office365",
+    Oidc: "oidc",
+    Okta: "okta",
+    Pingfederate: "pingfederate",
+    Samlp: "samlp",
+    Sharepoint: "sharepoint",
+    Waad: "waad",
+};
+/** List of passwordless identity providers. */
+export const EventStreamCloudEventUserUpdatedPreviousObjectIdentitiesItemPasswordlessProviderEnum = {
+    Email: "email",
+    Sms: "sms",
+};
+/** List of social identity providers. */
+export const EventStreamCloudEventUserUpdatedPreviousObjectIdentitiesItemSocialProviderEnum = {
+    Amazon: "amazon",
+    Apple: "apple",
+    Dropbox: "dropbox",
+    Bitbucket: "bitbucket",
+    Auth0Oidc: "auth0-oidc",
+    Baidu: "baidu",
+    Bitly: "bitly",
+    Box: "box",
+    Daccount: "daccount",
+    Dwolla: "dwolla",
+    EvernoteSandbox: "evernote-sandbox",
+    Evernote: "evernote",
+    Exact: "exact",
+    Facebook: "facebook",
+    Fitbit: "fitbit",
+    Github: "github",
+    GoogleOauth2: "google-oauth2",
+    Instagram: "instagram",
+    Line: "line",
+    Linkedin: "linkedin",
+    Oauth1: "oauth1",
+    Oauth2: "oauth2",
+    Paypal: "paypal",
+    PaypalSandbox: "paypal-sandbox",
+    Planningcenter: "planningcenter",
+    SalesforceCommunity: "salesforce-community",
+    SalesforceSandbox: "salesforce-sandbox",
+    Salesforce: "salesforce",
+    Shopify: "shopify",
+    Soundcloud: "soundcloud",
+    Thirtysevensignals: "thirtysevensignals",
+    Twitter: "twitter",
+    Untapped: "untapped",
+    Vkontakte: "vkontakte",
+    Weibo: "weibo",
+    Windowslive: "windowslive",
+    Wordpress: "wordpress",
+    Yahoo: "yahoo",
+    Yandex: "yandex",
+};
 /** The event type (injected from the SSE event field). */
 export const EventStreamCloudEventUserUpdatedTypeEnum = {
     UserUpdated: "user.updated",
@@ -5185,6 +6472,10 @@ export const MfaPolicyEnum = {
     AllApplications: "all-applications",
     ConfidenceScore: "confidence-score",
 };
+/** Signing algorithm used to verify the signature. Currently only HMAC-SHA256 is supported. */
+export const NetworkAclKeyAlgorithmEnum = {
+    HmacSha256: "hmac-sha256",
+};
 /** Identifies the origin of the request as the Management API (management), Authentication API (authentication), Dynamic Client Registration API (dynamic_client_registration), or any (tenant) */
 export const NetworkAclRuleScopeEnum = {
     Management: "management",
@@ -5218,6 +6509,11 @@ export const OrganizationClientMetadataOrganizationUsageEnum = {
     Allow: "allow",
     Require: "require",
 };
+/** Controls whether organizations using this template can be deleted. */
+export const OrganizationDeletionBehaviorEnum = {
+    Allow: "allow",
+    AllowIfEmpty: "allow_if_empty",
+};
 /** The verification status of the discovery domain. */
 export const OrganizationDiscoveryDomainStatus = {
     Pending: "pending",
@@ -5227,6 +6523,22 @@ export const OrganizationMemberEffectiveRoleSource = {
     Direct: "direct",
     Groups: "groups",
 };
+/** An allowed enterprise connection strategy. */
+export const OrganizationTemplateAllowedStrategyEnum = {
+    Adfs: "adfs",
+    GoogleApps: "google-apps",
+    Oidc: "oidc",
+    Okta: "okta",
+    Pingfederate: "pingfederate",
+    Samlp: "samlp",
+    Waad: "waad",
+};
+/** The role visibility level. */
+export const OrganizationTemplateRoleVisibilityEnum = {
+    Write: "write",
+    ReadOnly: "read_only",
+    Hidden: "hidden",
+};
 /** Controls whether this organization can be used in user flows with third-party clients. Defaults to `block`. */
 export const OrganizationThirdPartyClientAccessEnum = {
     Block: "block",
@@ -5570,6 +6882,7 @@ export const ScreenGroupNameEnum = {
     ResetPasswordMfaWebauthnRoamingChallenge: "reset-password-mfa-webauthn-roaming-challenge",
     CustomForm: "custom-form",
     Consent: "consent",
+    ConsentTenantScopes: "consent-tenant-scopes",
     CustomizedConsent: "customized-consent",
     Logout: "logout",
     LogoutComplete: "logout-complete",