auth0 7.6.0 → 7.7.0

package/dist/cjs/management/api/types/types.d.ts

@@ -756,6 +756,18 @@ export declare const OauthScope: {
     /**
      * Delete Organization Client Associations */
     readonly DeleteOrganizationClients: "delete:organization_clients";
+    /**
+     * Create Universal Portals */
+    readonly CreatePortals: "create:portals";
+    /**
+     * Read Universal Portals */
+    readonly ReadPortals: "read:portals";
+    /**
+     * Update Universal Portals */
+    readonly UpdatePortals: "update:portals";
+    /**
+     * Delete Universal Portals */
+    readonly DeletePortals: "delete:portals";
     /**
      * Create Network ACL Keys */
     readonly CreateNetworkAclKeys: "create:network_acl_keys";
@@ -789,6 +801,17 @@ export declare namespace TooManyRequestsErrorBody {
     };
     type Error_ = (typeof Error_)[keyof typeof Error_];
 }
+export interface InternalServerErrorBody {
+    message: string;
+    statusCode: string;
+    error: InternalServerErrorBody.Error_;
+}
+export declare namespace InternalServerErrorBody {
+    const Error_: {
+        readonly InternalServerError: "Internal Server Error";
+    };
+    type Error_ = (typeof Error_)[keyof typeof Error_];
+}
 export interface Action {
     /** The unique ID of the action. */
     id?: string | undefined;
@@ -2158,6 +2181,7 @@ export interface Client {
     anonymous_sessions?: Management.AnonymousSessions | undefined;
     enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
+    oidc_support?: Management.ClientOidcSupport | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string | undefined;
@@ -2165,6 +2189,8 @@ export interface Client {
     external_metadata_type?: Management.ClientExternalMetadataTypeEnum | undefined;
     external_metadata_created_by?: Management.ClientExternalMetadataCreatedByEnum | undefined;
     external_metadata_status?: Management.ClientExternalMetadataStatusEnum | undefined;
+    /** ID of the agent associated with this client. */
+    agent_id?: string | undefined;
     /** An alternate client identifier to be used during authorization flows. Only supports CIMD-based client identifiers. */
     external_client_id?: string | undefined;
     /** URL for the JSON Web Key Set (JWKS) containing the public keys used for private_key_jwt authentication. Only present for CIMD clients using private_key_jwt authentication. */
@@ -2995,6 +3021,16 @@ export interface ClientOidcBackchannelLogoutSettings {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+/**
+ * OIDC support configuration for this client.
+ */
+export interface ClientOidcSupport {
+    is_allowed?: boolean | undefined;
+    allow_all_scopes?: boolean | undefined;
+    allowed_scopes?: Management.ClientOidcSupportAllowedScopesEnum[] | undefined;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}
 export declare const ClientOidcSupportAllowedScopesEnum: {
     readonly Profile: "profile";
     readonly Email: "email";
@@ -3089,6 +3125,32 @@ export interface ClientProfileClientConfiguration {
     organization_require_behavior?: Management.ClientProfileClientConfigurationOrganizationRequireBehavior | undefined;
     organization_discovery_methods?: Management.ClientProfileClientConfigurationOrganizationDiscoveryMethods | undefined;
     require_proof_of_possession?: Management.ClientProfileClientConfigurationRequireProofOfPossession | undefined;
+    oidc_support?: Management.ClientProfileClientConfigurationOidcSupport | undefined;
+}
+/**
+ * Default OIDC support applied to matched clients.
+ */
+export interface ClientProfileClientConfigurationOidcSupport {
+    default_value: Management.ClientProfileClientConfigurationOidcSupportDefaultValue;
+}
+/** Optional OIDC scope that matched clients may be granted. */
+export declare const ClientProfileClientConfigurationOidcSupportAllowedScopesEnum: {
+    readonly Profile: "profile";
+    readonly Email: "email";
+    readonly Address: "address";
+    readonly Phone: "phone";
+};
+export type ClientProfileClientConfigurationOidcSupportAllowedScopesEnum = (typeof ClientProfileClientConfigurationOidcSupportAllowedScopesEnum)[keyof typeof ClientProfileClientConfigurationOidcSupportAllowedScopesEnum];
+/**
+ * OIDC support settings applied to matched clients.
+ */
+export interface ClientProfileClientConfigurationOidcSupportDefaultValue {
+    /** Whether matched clients may use OIDC. */
+    is_allowed: boolean;
+    /** Whether matched clients may request all optional OIDC scopes. Cannot be combined with allowed_scopes. */
+    allow_all_scopes?: boolean | undefined;
+    /** Optional OIDC scopes that matched clients may request. */
+    allowed_scopes?: Management.ClientProfileClientConfigurationOidcSupportAllowedScopesEnum[] | undefined;
 }
 /** A method used to discover a user's organization. */
 export declare const ClientProfileClientConfigurationOrganizationDiscoveryMethodEnum: {
@@ -3298,6 +3360,7 @@ export interface ClientSearchResponse {
     anonymous_sessions?: Management.AnonymousSessions | undefined;
     enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
+    oidc_support?: Management.ClientOidcSupport | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string | undefined;
@@ -3305,6 +3368,8 @@ export interface ClientSearchResponse {
     external_metadata_type?: Management.ClientExternalMetadataTypeEnum | undefined;
     external_metadata_created_by?: Management.ClientExternalMetadataCreatedByEnum | undefined;
     external_metadata_status?: Management.ClientExternalMetadataStatusEnum | undefined;
+    /** ID of the agent associated with this client. */
+    agent_id?: string | undefined;
     /** An alternate client identifier to be used during authorization flows. Only supports CIMD-based client identifiers. */
     external_client_id?: string | undefined;
     /** URL for the JSON Web Key Set (JWKS) containing the public keys used for private_key_jwt authentication. Only present for CIMD clients using private_key_jwt authentication. */
@@ -3702,6 +3767,10 @@ export type ConnectionClientIdOidc = string;
  * OAuth 2.0 client identifier issued by the identity provider during application registration. This value identifies your Auth0 connection to the identity provider.
  */
 export type ConnectionClientIdPaypal = string;
+/**
+ * OIDC client identifier issued by the identity provider during application registration. Used to authenticate your Auth0 connection when exchanging SAML Assertions for Refresh Tokens.
+ */
+export type ConnectionClientIdSamlxaaRequestingApp = Management.ConnectionClientIdOidc;
 /**
  * The OAuth 2.0 client identifier
  */
@@ -3770,6 +3839,10 @@ export type ConnectionClientSecretOidc = string;
  * OAuth 2.0 client secret issued by the identity provider during application registration. Used to authenticate your Auth0 connection when exchanging authorization codes for tokens. May be null for public clients.
  */
 export type ConnectionClientSecretPaypal = string;
+/**
+ * OAuth 2.0 client secret issued by the identity provider during application registration. Used to authenticate your Auth0 connection when exchanging authorization codes for tokens. May be null for public clients.
+ */
+export type ConnectionClientSecretSamlxaaRequestingApp = string;
 /**
  * The OAuth 2.0 client secret
  */
@@ -4578,6 +4651,7 @@ export interface ConnectionOptionsAuth0 extends Management.ConnectionOptionsComm
     enabledDatabaseCustomization?: Management.ConnectionEnabledDatabaseCustomization | undefined;
     import_mode?: Management.ConnectionImportMode | undefined;
     mfa?: Management.ConnectionMfa | undefined;
+    otp_settings?: Management.ConnectionOtpSettings | undefined;
     passkey_options?: (Management.ConnectionPasskeyOptions | null) | undefined;
     passwordPolicy?: (Management.ConnectionPasswordPolicyEnum | null) | undefined;
     password_complexity_options?: (Management.ConnectionPasswordComplexityOptions | null) | undefined;
@@ -5482,6 +5556,8 @@ export type ConnectionOptionsProtocolEnumTwitter = (typeof ConnectionOptionsProt
  * Options for the 'samlp' connection
  */
 export interface ConnectionOptionsSaml extends Management.ConnectionOptionsCommonSaml, Management.ConnectionOptionsCommon {
+    client_id?: Management.ConnectionClientIdSamlxaaRequestingApp | undefined;
+    client_secret?: Management.ConnectionClientSecretSamlxaaRequestingApp | undefined;
     debug?: Management.ConnectionDebugSaml | undefined;
     deflate?: Management.ConnectionOptionsDeflateSaml | undefined;
     destinationUrl?: Management.ConnectionDestinationUrlSaml | undefined;
@@ -5499,6 +5575,9 @@ export interface ConnectionOptionsSaml extends Management.ConnectionOptionsCommo
     signingCert?: Management.ConnectionSigningCertSaml | undefined;
     signing_key?: Management.ConnectionSigningKeySaml | undefined;
     signOutEndpoint?: Management.ConnectionSignOutEndpointSaml | undefined;
+    token_endpoint_auth_method?: (Management.ConnectionTokenEndpointAuthMethodEnum | null) | undefined;
+    token_endpoint_auth_signing_alg?: (Management.ConnectionTokenEndpointAuthSigningAlgEnum | null) | undefined;
+    token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
     user_id_attribute?: Management.ConnectionUserIdAttributeSaml | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
@@ -5786,6 +5865,22 @@ export interface ConnectionOptionsYandex extends Management.ConnectionOptionsOAu
     /** Accepts any additional properties */
     [key: string]: any;
 }
+/**
+ * OTP settings for a delivery channel.
+ */
+export interface ConnectionOtpChannelSettings {
+    /** Number of digits in the generated one-time password. */
+    otp_length?: number | undefined;
+    /** Number of seconds before the one-time password expires. */
+    otp_expiry?: number | undefined;
+}
+/**
+ * One-time password settings, configurable per delivery channel.
+ */
+export interface ConnectionOtpSettings {
+    email?: Management.ConnectionOtpChannelSettings | undefined;
+    phone?: Management.ConnectionOtpChannelSettings | undefined;
+}
 /**
  * Passkey authentication enablement
  */
@@ -6130,6 +6225,7 @@ export interface ConnectionPropertiesOptions {
     /** Stores encrypted string only configurations for connections */
     configuration?: (Record<string, (string | null) | undefined> | null) | undefined;
     customScripts?: Management.ConnectionCustomScripts | undefined;
+    otp_settings?: Management.ConnectionOtpSettings | undefined;
     authentication_methods?: (Management.ConnectionAuthenticationMethods | null) | undefined;
     passkey_options?: (Management.ConnectionPasskeyOptions | null) | undefined;
     passwordPolicy?: (Management.ConnectionPasswordPolicyEnum | null) | undefined;
@@ -6775,6 +6871,7 @@ export declare namespace ConnectionResponseContentPlanningCenter {
  */
 export interface ConnectionResponseContentSaml extends Management.ConnectionPurposes, Management.ConnectionResponseCommon {
     strategy: ConnectionResponseContentSaml.Strategy;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     cross_app_access_resource_app?: (Management.ConnectionCrossAppAccessResourceApp | null) | undefined;
     options?: Management.ConnectionOptionsSaml | undefined;
     provisioning_ticket_url?: Management.ConnectionProvisioningTicketUrl | undefined;
@@ -7352,7 +7449,7 @@ export type ConnectionTokenEndpointAuthSigningAlgEnum = (typeof ConnectionTokenE
  * JSON array containing a list of the JWS signing algorithms (alg values) supported by the Token Endpoint for the signature on the JWT [JWT] used to authenticate the Client at the Token Endpoint for the private_key_jwt and client_secret_jwt authentication methods. Servers SHOULD support RS256. The value none MUST NOT be used.
  */
 export type ConnectionTokenEndpointAuthSigningAlgValuesSupported = string[];
-/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the OIDC issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
+/** Specifies the format of the aud (audience) claim included in the JWT used for client authentication at the token endpoint. Accepted values are: 'issuer' (the aud claim is set to the identity provider's issuer URL) or 'token_endpoint' (the aud claim is set to the token endpoint URL). */
 export declare const ConnectionTokenEndpointJwtcaAudFormatEnumOidc: {
     readonly Issuer: "issuer";
     readonly TokenEndpoint: "token_endpoint";
@@ -7601,6 +7698,16 @@ export interface ConnectionsOidcMetadata {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export interface ConsentSigningKey {
+    /** The key identifier of the consent signing key. */
+    kid: string;
+    /** A human-readable label for the device holding the corresponding private key. */
+    device_identifier: string;
+    /** The ISO 8601 timestamp at which the key was registered. */
+    created_at: string;
+    /** The ISO 8601 timestamp at which the key expires and can no longer be used to verify consent decisions. */
+    expires_at: string;
+}
 /**
  * Content Security Policy configuration with multi-policy support.
  */
@@ -7849,6 +7956,7 @@ export interface CreateClientResponseContent {
     anonymous_sessions?: Management.AnonymousSessions | undefined;
     enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
+    oidc_support?: Management.ClientOidcSupport | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string | undefined;
@@ -7856,6 +7964,8 @@ export interface CreateClientResponseContent {
     external_metadata_type?: Management.ClientExternalMetadataTypeEnum | undefined;
     external_metadata_created_by?: Management.ClientExternalMetadataCreatedByEnum | undefined;
     external_metadata_status?: Management.ClientExternalMetadataStatusEnum | undefined;
+    /** ID of the agent associated with this client. */
+    agent_id?: string | undefined;
     /** An alternate client identifier to be used during authorization flows. Only supports CIMD-based client identifiers. */
     external_client_id?: string | undefined;
     /** URL for the JSON Web Key Set (JWKS) containing the public keys used for private_key_jwt authentication. Only present for CIMD clients using private_key_jwt authentication. */
@@ -8382,6 +8492,7 @@ export declare namespace CreateConnectionRequestContentPlanningCenter {
  */
 export interface CreateConnectionRequestContentSaml extends Management.CreateConnectionCommon {
     strategy: CreateConnectionRequestContentSaml.Strategy;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     cross_app_access_resource_app?: (Management.ConnectionCrossAppAccessResourceApp | null) | undefined;
     options?: Management.ConnectionOptionsSaml | undefined;
     show_as_button?: Management.ConnectionShowAsButton | undefined;
@@ -9548,6 +9659,8 @@ export interface CreateResourceServerResponseContent {
     authorization_policy?: (Management.ResourceServerAuthorizationPolicy | null) | undefined;
     /** The client ID of the client that this resource server is linked to */
     client_id?: string | undefined;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsResponseEnum | undefined;
+    type?: (Management.ResourceServerTypeEnum | null) | undefined;
 }
 export interface CreateRoleResponseContent {
     /** ID for this role. */
@@ -28076,9 +28189,9 @@ export interface GetBruteForceSettingsResponseContent {
     /** List of trusted IP addresses that will not have attack protection enforced against them. */
     allowlist?: string[] | undefined;
     mode?: Management.BruteForceProtectionModeEnum | undefined;
+    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum | undefined;
     /** Maximum number of unsuccessful attempts. */
     max_attempts?: number | undefined;
-    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum | undefined;
 }
 export interface GetClientCredentialResponseContent {
     /** ID of the credential. Generated on creation. */
@@ -28223,6 +28336,7 @@ export interface GetClientResponseContent {
     anonymous_sessions?: Management.AnonymousSessions | undefined;
     enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
+    oidc_support?: Management.ClientOidcSupport | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string | undefined;
@@ -28230,6 +28344,8 @@ export interface GetClientResponseContent {
     external_metadata_type?: Management.ClientExternalMetadataTypeEnum | undefined;
     external_metadata_created_by?: Management.ClientExternalMetadataCreatedByEnum | undefined;
     external_metadata_status?: Management.ClientExternalMetadataStatusEnum | undefined;
+    /** ID of the agent associated with this client. */
+    agent_id?: string | undefined;
     /** An alternate client identifier to be used during authorization flows. Only supports CIMD-based client identifiers. */
     external_client_id?: string | undefined;
     /** URL for the JSON Web Key Set (JWKS) containing the public keys used for private_key_jwt authentication. Only present for CIMD clients using private_key_jwt authentication. */
@@ -29035,6 +29151,8 @@ export interface GetResourceServerResponseContent {
     authorization_policy?: (Management.ResourceServerAuthorizationPolicy | null) | undefined;
     /** The client ID of the client that this resource server is linked to */
     client_id?: string | undefined;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsResponseEnum | undefined;
+    type?: (Management.ResourceServerTypeEnum | null) | undefined;
 }
 export interface GetRiskAssessmentsSettingsNewDeviceResponseContent {
     /** Length of time to remember devices for, in days. */
@@ -30120,6 +30238,9 @@ export interface ListOrganizationsPaginatedResponseContent {
 export interface ListPhoneTemplatesResponseContent {
     templates?: Management.PhoneTemplate[] | undefined;
 }
+export interface ListPortalsResponseContent {
+    portals: Management.PortalSummary[];
+}
 export interface ListRateLimitPoliciesPaginatedResponseContent {
     rate_limit_policies?: Management.RateLimitPolicy[] | undefined;
     /** A cursor to be used as the "from" query parameter for the next page of results. */
@@ -30228,6 +30349,10 @@ export interface ListUserConnectedAccountsResponseContent {
     /** The token to retrieve the next page of connected accounts (if there is one) */
     next?: string | undefined;
 }
+export interface ListUserConsentSigningKeysResponseContent {
+    /** The consent signing keys registered for the user. */
+    keys: Management.ConsentSigningKey[];
+}
 export interface ListUserEffectivePermissionRoleSourcesResponseContent {
     /** Roles with the specified permission assigned to the user, both directly and via groups. */
     roles: Management.UserEffectivePermissionRoleSourceResponseContent[];
@@ -31294,6 +31419,176 @@ export declare const OrganizationUsageEnum: {
     readonly Require: "require";
 };
 export type OrganizationUsageEnum = (typeof OrganizationUsageEnum)[keyof typeof OrganizationUsageEnum];
+export type PageComponent = Management.PageComponent.PageComponentAuth0Form | Management.PageComponent.PageComponentAuth0TypographyHeading | Management.PageComponent.PageComponentAuth0MediaImage | Management.PageComponent.PageComponentAuth0TypographyRichText | Management.PageComponent.PageComponentAuth0StructureSection | Management.PageComponent.PageComponentAuth0StructureSeparator | Management.PageComponent.PageComponentAuth0MyOrganizationDomainTable | Management.PageComponent.PageComponentAuth0MyOrganizationMemberManagement | Management.PageComponent.PageComponentAuth0MyOrganizationDetailsEdit | Management.PageComponent.PageComponentAuth0MyAccountPasskeyManagement | Management.PageComponent.PageComponentAuth0MyAccountMfaManagement;
+export declare namespace PageComponent {
+    interface PageComponentAuth0Form extends Management.PageComponentAuth0Form {
+        type: "page:component:auth0:form";
+    }
+    interface PageComponentAuth0TypographyHeading extends Management.PageComponentAuth0TypographyHeading {
+        type: "page:component:auth0:typography:heading";
+    }
+    interface PageComponentAuth0MediaImage extends Management.PageComponentAuth0MediaImage {
+        type: "page:component:auth0:media:image";
+    }
+    interface PageComponentAuth0TypographyRichText extends Management.PageComponentAuth0TypographyRichText {
+        type: "page:component:auth0:typography:rich_text";
+    }
+    interface PageComponentAuth0StructureSection extends Management.PageComponentAuth0StructureSection {
+        type: "page:component:auth0:structure:section";
+    }
+    interface PageComponentAuth0StructureSeparator extends Management.PageComponentAuth0StructureSeparator {
+        type: "page:component:auth0:structure:separator";
+    }
+    interface PageComponentAuth0MyOrganizationDomainTable extends Management.PageComponentAuth0MyOrganizationDomainTable {
+        type: "page:component:auth0:my_organization:domain_table";
+    }
+    interface PageComponentAuth0MyOrganizationMemberManagement extends Management.PageComponentAuth0MyOrganizationMemberManagement {
+        type: "page:component:auth0:my_organization:member_management";
+    }
+    interface PageComponentAuth0MyOrganizationDetailsEdit extends Management.PageComponentAuth0MyOrganizationDetailsEdit {
+        type: "page:component:auth0:my_organization:details_edit";
+    }
+    interface PageComponentAuth0MyAccountPasskeyManagement extends Management.PageComponentAuth0MyAccountPasskeyManagement {
+        type: "page:component:auth0:my_account:passkey_management";
+    }
+    interface PageComponentAuth0MyAccountMfaManagement extends Management.PageComponentAuth0MyAccountMfaManagement {
+        type: "page:component:auth0:my_account:mfa_management";
+    }
+}
+export interface PageComponentAuth0Form {
+    config: Management.PageComponentAuth0FormConfig;
+}
+export interface PageComponentAuth0FormConfig {
+    /** The identifier of the form you want to render. */
+    form_id: string;
+    /** Toast message displayed after successful form submission. */
+    completion_message: string;
+}
+export interface PageComponentAuth0MediaImage {
+    config: Management.PageComponentAuth0MediaImageConfig;
+}
+export interface PageComponentAuth0MediaImageConfig {
+    /** URL of the image to display. */
+    src: string;
+    position?: Management.Position | undefined;
+    /** Height of the image in pixels. Width scales automatically to preserve aspect ratio. */
+    height?: number | undefined;
+}
+/** Horizontal alignment of the image within its container. */
+export declare const Position: {
+    readonly Left: "left";
+    readonly Center: "center";
+    readonly Right: "right";
+};
+export type Position = (typeof Position)[keyof typeof Position];
+export interface PageComponentAuth0MyAccountMfaManagement {
+    config?: Management.PageComponentAuth0MyAccountMfaManagementConfig | undefined;
+}
+export interface PageComponentAuth0MyAccountMfaManagementConfig {
+}
+export interface PageComponentAuth0MyAccountPasskeyManagement {
+    config?: Management.PageComponentAuth0MyAccountPasskeyManagementConfig | undefined;
+}
+export interface PageComponentAuth0MyAccountPasskeyManagementConfig {
+}
+export interface PageComponentAuth0MyOrganizationDetailsEdit {
+    config?: Management.PageComponentAuth0MyOrganizationDetailsEditConfig | undefined;
+}
+export interface PageComponentAuth0MyOrganizationDetailsEditConfig {
+}
+export interface PageComponentAuth0MyOrganizationDomainTable {
+    config?: Management.PageComponentAuth0MyOrganizationDomainTableConfig | undefined;
+}
+export interface PageComponentAuth0MyOrganizationDomainTableConfig {
+}
+export interface PageComponentAuth0MyOrganizationMemberManagement {
+    config?: Management.PageComponentAuth0MyOrganizationMemberManagementConfig | undefined;
+}
+export interface PageComponentAuth0MyOrganizationMemberManagementConfig {
+}
+export interface PageComponentAuth0StructureSection {
+    config: Management.PageComponentAuth0StructureSectionConfig;
+}
+export interface PageComponentAuth0StructureSectionConfig {
+    /** Heading displayed at the top of the section. */
+    title?: string | undefined;
+    /** Optional description displayed below the title. */
+    description?: string | undefined;
+    variant: Management.PageComponentAuth0StructureSectionVariantEnum;
+    /** Components to render inside the section. */
+    children: Management.PageComponentNoChildren[];
+}
+/** Controls the section container style. */
+export declare const PageComponentAuth0StructureSectionVariantEnum: {
+    readonly Card: "card";
+    readonly None: "none";
+};
+export type PageComponentAuth0StructureSectionVariantEnum = (typeof PageComponentAuth0StructureSectionVariantEnum)[keyof typeof PageComponentAuth0StructureSectionVariantEnum];
+export interface PageComponentAuth0StructureSeparator {
+    config?: Management.PageComponentAuth0StructureSeparatorConfig | undefined;
+}
+export interface PageComponentAuth0StructureSeparatorConfig {
+    variant?: Management.PageComponentAuth0StructureSeparatorVariantEnum | undefined;
+    /** Optional label centered within the separator line (ignored when variant is "none"). */
+    text?: string | undefined;
+}
+/** Controls the line style. Defaults to "solid". */
+export declare const PageComponentAuth0StructureSeparatorVariantEnum: {
+    readonly Dashed: "dashed";
+    readonly None: "none";
+    readonly Solid: "solid";
+};
+export type PageComponentAuth0StructureSeparatorVariantEnum = (typeof PageComponentAuth0StructureSeparatorVariantEnum)[keyof typeof PageComponentAuth0StructureSeparatorVariantEnum];
+export interface PageComponentAuth0TypographyHeading {
+    config: Management.PageComponentAuth0TypographyHeadingConfig;
+}
+export interface PageComponentAuth0TypographyHeadingConfig {
+    /** Heading displayed. */
+    title: string;
+    /** Optional description displayed below the title. Supports basic HTML formatting: links, bold, italic, and underline. */
+    description?: string | undefined;
+}
+export interface PageComponentAuth0TypographyRichText {
+    config: Management.PageComponentAuth0TypographyRichTextConfig;
+}
+export interface PageComponentAuth0TypographyRichTextConfig {
+    /** HTML content to render. Supports headings, bold, italic, underline, links, text alignment, and lists. */
+    content: string;
+}
+export type PageComponentNoChildren = Management.PageComponentNoChildren.PageComponentAuth0Form | Management.PageComponentNoChildren.PageComponentAuth0TypographyHeading | Management.PageComponentNoChildren.PageComponentAuth0MediaImage | Management.PageComponentNoChildren.PageComponentAuth0TypographyRichText | Management.PageComponentNoChildren.PageComponentAuth0StructureSeparator | Management.PageComponentNoChildren.PageComponentAuth0MyOrganizationDomainTable | Management.PageComponentNoChildren.PageComponentAuth0MyOrganizationMemberManagement | Management.PageComponentNoChildren.PageComponentAuth0MyOrganizationDetailsEdit | Management.PageComponentNoChildren.PageComponentAuth0MyAccountPasskeyManagement | Management.PageComponentNoChildren.PageComponentAuth0MyAccountMfaManagement;
+export declare namespace PageComponentNoChildren {
+    interface PageComponentAuth0Form extends Management.PageComponentAuth0Form {
+        type: "page:component:auth0:form";
+    }
+    interface PageComponentAuth0TypographyHeading extends Management.PageComponentAuth0TypographyHeading {
+        type: "page:component:auth0:typography:heading";
+    }
+    interface PageComponentAuth0MediaImage extends Management.PageComponentAuth0MediaImage {
+        type: "page:component:auth0:media:image";
+    }
+    interface PageComponentAuth0TypographyRichText extends Management.PageComponentAuth0TypographyRichText {
+        type: "page:component:auth0:typography:rich_text";
+    }
+    interface PageComponentAuth0StructureSeparator extends Management.PageComponentAuth0StructureSeparator {
+        type: "page:component:auth0:structure:separator";
+    }
+    interface PageComponentAuth0MyOrganizationDomainTable extends Management.PageComponentAuth0MyOrganizationDomainTable {
+        type: "page:component:auth0:my_organization:domain_table";
+    }
+    interface PageComponentAuth0MyOrganizationMemberManagement extends Management.PageComponentAuth0MyOrganizationMemberManagement {
+        type: "page:component:auth0:my_organization:member_management";
+    }
+    interface PageComponentAuth0MyOrganizationDetailsEdit extends Management.PageComponentAuth0MyOrganizationDetailsEdit {
+        type: "page:component:auth0:my_organization:details_edit";
+    }
+    interface PageComponentAuth0MyAccountPasskeyManagement extends Management.PageComponentAuth0MyAccountPasskeyManagement {
+        type: "page:component:auth0:my_account:passkey_management";
+    }
+    interface PageComponentAuth0MyAccountMfaManagement extends Management.PageComponentAuth0MyAccountMfaManagement {
+        type: "page:component:auth0:my_account:mfa_management";
+    }
+}
+export type PageSlug = string;
 /** Name of the prompt. */
 export declare const PartialGroupsEnum: {
     readonly Login: "login";
@@ -31498,6 +31793,68 @@ export declare const PhoneTemplateNotificationTypeEnum: {
     readonly PasswordBreach: "password_breach";
 };
 export type PhoneTemplateNotificationTypeEnum = (typeof PhoneTemplateNotificationTypeEnum)[keyof typeof PhoneTemplateNotificationTypeEnum];
+export interface Portal {
+    id: Management.PortalId;
+    name: Management.PortalName;
+    navigation?: Management.PortalNavigation | undefined;
+    pages?: Management.PortalPagesByType | undefined;
+    slug: Management.PortalSlug;
+    client?: Management.PortalClientSecretPost | undefined;
+    custom_code?: Management.PortalCustomCode | undefined;
+    created_at: Management.PortalDateTime;
+    updated_at: Management.PortalDateTime;
+}
+export interface PortalClientSecretPost {
+    token_endpoint_auth_method: PortalClientSecretPost.TokenEndpointAuthMethod;
+    client_id: string;
+}
+export declare namespace PortalClientSecretPost {
+    const TokenEndpointAuthMethod: {
+        readonly ClientSecretPost: "client_secret_post";
+    };
+    type TokenEndpointAuthMethod = (typeof TokenEndpointAuthMethod)[keyof typeof TokenEndpointAuthMethod];
+}
+export interface PortalClientSecretPostRequest {
+    token_endpoint_auth_method: PortalClientSecretPostRequest.TokenEndpointAuthMethod;
+    client_id: string;
+    client_secret: string;
+}
+export declare namespace PortalClientSecretPostRequest {
+    const TokenEndpointAuthMethod: {
+        readonly ClientSecretPost: "client_secret_post";
+    };
+    type TokenEndpointAuthMethod = (typeof TokenEndpointAuthMethod)[keyof typeof TokenEndpointAuthMethod];
+}
+export interface PortalCustomCode {
+    /** Custom code injected into the <head> of the portal. Only injected when the portal is accessed via a custom domain; it is not injected on canonical domains. */
+    head?: string | undefined;
+}
+export type PortalCustomCodeNullable = (Management.PortalCustomCode | null) | undefined;
+export type PortalDateTime = string;
+export type PortalId = string;
+export type PortalName = string;
+export interface PortalNavigation {
+    sidebar?: Management.Sidebar | undefined;
+}
+export type PortalNavigationNullable = (Management.PortalNavigation | null) | undefined;
+export interface PortalPage {
+    title: string;
+    slug: Management.PageSlug;
+    components?: Management.PageComponent[] | undefined;
+}
+export interface PortalPagesByType {
+    default?: Management.PageSlug | undefined;
+    standard?: Management.PortalPage[] | undefined;
+}
+export type PortalPagesByTypeNullable = (Management.PortalPagesByType | null) | undefined;
+export type PortalSlug = string;
+export interface PortalSummary {
+    id: Management.PortalId;
+    name: Management.PortalName;
+    slug: Management.PortalSlug;
+    created_at: Management.PortalDateTime;
+    updated_at: Management.PortalDateTime;
+}
 export interface PostClientCredentialResponseContent {
     /** ID of the credential. Generated on creation. */
     id?: string | undefined;
@@ -31911,6 +32268,8 @@ export interface ResourceServer {
     authorization_policy?: (Management.ResourceServerAuthorizationPolicy | null) | undefined;
     /** The client ID of the client that this resource server is linked to */
     client_id?: string | undefined;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsResponseEnum | undefined;
+    type?: (Management.ResourceServerTypeEnum | null) | undefined;
 }
 /**
  * Custom configuration for access tokens
@@ -31934,6 +32293,18 @@ export interface ResourceServerAccessTokenCustomClaimsMappingRule {
     /** Restricted dot-path expression read from the anonymous-session context (e.g. `anonymous_session.metadata.country`). */
     expression: string;
 }
+/** Controls whether access tokens issued for this API include agent subject claims. With <code>auth0-v1</code>, access tokens include additional claims that identify whether the subject is a <code>user</code>, <code>service</code>, or <code>ai_agent</code>. The <code>sub</code> claim can reference an agent ID, and the <code>@clients</code> suffix is no longer appended to client IDs. With <code>off</code>, these claims are not included and the <code>@clients</code> suffix is still appended. When not set, the API behaves as <code>off</code>. */
+export declare const ResourceServerAgentSubjectClaimsResponseEnum: {
+    readonly Off: "off";
+    readonly Auth0V1: "auth0-v1";
+};
+export type ResourceServerAgentSubjectClaimsResponseEnum = (typeof ResourceServerAgentSubjectClaimsResponseEnum)[keyof typeof ResourceServerAgentSubjectClaimsResponseEnum];
+/** Controls whether access tokens issued for this API include agent subject claims. With <code>auth0-v1</code>, access tokens include additional claims that identify whether the subject is a <code>user</code>, <code>service</code>, or <code>ai_agent</code>. The <code>sub</code> claim can reference an agent ID, and the <code>@clients</code> suffix is no longer appended to client IDs. With <code>off</code>, these claims are not included and the <code>@clients</code> suffix is still appended. When not set, the API behaves as <code>off</code>. */
+export declare const ResourceServerAgentSubjectClaimsSchemaEnum: {
+    readonly Off: "off";
+    readonly Auth0V1: "auth0-v1";
+};
+export type ResourceServerAgentSubjectClaimsSchemaEnum = (typeof ResourceServerAgentSubjectClaimsSchemaEnum)[keyof typeof ResourceServerAgentSubjectClaimsSchemaEnum];
 /**
  * Authorization policy for the resource server.
  */
@@ -32012,6 +32383,8 @@ export interface ResourceServerSearchResponse {
     authorization_policy?: (Management.ResourceServerAuthorizationPolicy | null) | undefined;
     /** The client ID of the client that this resource server is linked to */
     client_id?: string | undefined;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsResponseEnum | undefined;
+    type?: (Management.ResourceServerTypeEnum | null) | undefined;
 }
 /** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
 export declare const ResourceServerSortFieldEnum: {
@@ -32112,6 +32485,11 @@ export interface ResourceServerTokenEncryptionKey {
     /** PEM-formatted public key. Must be JSON escaped. */
     pem: string;
 }
+/** The type of the resource server. */
+export declare const ResourceServerTypeEnum: {
+    readonly UniversalCommerceProtocolServer: "universal_commerce_protocol_server";
+};
+export type ResourceServerTypeEnum = (typeof ResourceServerTypeEnum)[keyof typeof ResourceServerTypeEnum];
 /**
  * PEM-encoded certificate
  */
@@ -32314,6 +32692,7 @@ export interface RotateClientSecretResponseContent {
     anonymous_sessions?: Management.AnonymousSessions | undefined;
     enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
+    oidc_support?: Management.ClientOidcSupport | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string | undefined;
@@ -32321,6 +32700,8 @@ export interface RotateClientSecretResponseContent {
     external_metadata_type?: Management.ClientExternalMetadataTypeEnum | undefined;
     external_metadata_created_by?: Management.ClientExternalMetadataCreatedByEnum | undefined;
     external_metadata_status?: Management.ClientExternalMetadataStatusEnum | undefined;
+    /** ID of the agent associated with this client. */
+    agent_id?: string | undefined;
     /** An alternate client identifier to be used during authorization flows. Only supports CIMD-based client identifiers. */
     external_client_id?: string | undefined;
     /** URL for the JSON Web Key Set (JWKS) containing the public keys used for private_key_jwt authentication. Only present for CIMD clients using private_key_jwt authentication. */
@@ -32640,6 +33021,7 @@ export interface SegmentRule {
 export interface SegmentStartsWithExpression {
     starts_with: string[];
 }
+/** Filter by status. Exact match. */
 export declare const SegmentStatusEnum: {
     readonly Active: "active";
     readonly Archived: "archived";
@@ -33152,6 +33534,74 @@ export type SetUserAuthenticationMethodsRequestContent = Management.SetUserAuthe
  * An object containing custom dictionaries for a group of screens.
  */
 export type SetsCustomTextsByLanguageRequestContent = Record<string, unknown>;
+export interface Sidebar {
+    components?: Management.SidebarComponent[] | undefined;
+}
+export type SidebarComponent = Management.SidebarComponent.SidebarComponentAuth0ExternalLink | Management.SidebarComponent.SidebarComponentAuth0InternalLink | Management.SidebarComponent.SidebarComponentAuth0ExternalLinkV2 | Management.SidebarComponent.SidebarComponentAuth0InternalLinkV2;
+export declare namespace SidebarComponent {
+    interface SidebarComponentAuth0ExternalLink extends Management.SidebarComponentAuth0ExternalLink {
+        type: "sidebar:component:auth0:external_link";
+    }
+    interface SidebarComponentAuth0InternalLink extends Management.SidebarComponentAuth0InternalLink {
+        type: "sidebar:component:auth0:internal_link";
+    }
+    interface SidebarComponentAuth0ExternalLinkV2 extends Management.SidebarComponentAuth0ExternalLinkV2 {
+        type: "sidebar:component:auth0:external_link:v2";
+    }
+    interface SidebarComponentAuth0InternalLinkV2 extends Management.SidebarComponentAuth0InternalLinkV2 {
+        type: "sidebar:component:auth0:internal_link:v2";
+    }
+}
+/**
+ * Deprecated. Use "sidebar:component:auth0:external_link:v2" instead.
+ */
+export interface SidebarComponentAuth0ExternalLink {
+    config: Management.SidebarComponentAuth0ExternalLinkConfig;
+}
+export interface SidebarComponentAuth0ExternalLinkConfig {
+    /** Text shown for the link. */
+    label: string;
+    /** External URL to navigate to. */
+    url: string;
+    /** Name of the icon displayed next to the link label. */
+    icon?: string | undefined;
+}
+export interface SidebarComponentAuth0ExternalLinkV2 {
+    config: Management.SidebarComponentAuth0ExternalLinkV2Config;
+}
+export interface SidebarComponentAuth0ExternalLinkV2Config {
+    /** Text shown for the link. */
+    label: string;
+    /** External URL to navigate to. */
+    href: string;
+    /** Name of the icon displayed next to the link label. */
+    icon?: string | undefined;
+}
+/**
+ * Deprecated. Use "sidebar:component:auth0:internal_link:v2" instead.
+ */
+export interface SidebarComponentAuth0InternalLink {
+    config: Management.SidebarComponentAuth0InternalLinkConfig;
+}
+export interface SidebarComponentAuth0InternalLinkConfig {
+    /** Text shown for the link. */
+    label: string;
+    /** Slug of the internal portal page to navigate to. */
+    to: string;
+    /** Name of the icon displayed next to the link label. */
+    icon?: string | undefined;
+}
+export interface SidebarComponentAuth0InternalLinkV2 {
+    config: Management.SidebarComponentAuth0InternalLinkV2Config;
+}
+export interface SidebarComponentAuth0InternalLinkV2Config {
+    /** Text shown for the link. */
+    label: string;
+    /** Slug of the internal portal page to navigate to. */
+    page_slug: string;
+    /** Name of the icon displayed next to the link label. */
+    icon?: string | undefined;
+}
 /** Algorithm used to sign JWTs. Can be `HS256` (default) or `RS256`. `PS256` available via addon. */
 export declare const SigningAlgorithmEnum: {
     readonly Hs256: "HS256";
@@ -33469,7 +33919,7 @@ export interface TenantSettingsFlags {
     revoke_refresh_token_grant?: boolean | undefined;
     /** Enables beta access to log streaming changes */
     dashboard_log_streams_next?: boolean | undefined;
-    /** Enables new insights activity page view */
+    /** Deprecated. This flag has no effect and is retained only for backward compatibility */
     dashboard_insights_view?: boolean | undefined;
     /** Disables SAML fields map fix for bad mappings with repeated attributes */
     disable_fields_map_fix?: boolean | undefined;
@@ -33949,9 +34399,9 @@ export interface UpdateBruteForceSettingsResponseContent {
     /** List of trusted IP addresses that will not have attack protection enforced against them. */
     allowlist?: string[] | undefined;
     mode?: Management.BruteForceProtectionModeEnum | undefined;
+    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum | undefined;
     /** Maximum number of unsuccessful attempts. */
     max_attempts?: number | undefined;
-    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum | undefined;
 }
 export interface UpdateClientGrantResponseContent {
     /** ID of the client grant. */
@@ -34074,6 +34524,7 @@ export interface UpdateClientResponseContent {
     anonymous_sessions?: Management.AnonymousSessions | undefined;
     enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
+    oidc_support?: Management.ClientOidcSupport | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string | undefined;
@@ -34081,6 +34532,8 @@ export interface UpdateClientResponseContent {
     external_metadata_type?: Management.ClientExternalMetadataTypeEnum | undefined;
     external_metadata_created_by?: Management.ClientExternalMetadataCreatedByEnum | undefined;
     external_metadata_status?: Management.ClientExternalMetadataStatusEnum | undefined;
+    /** ID of the agent associated with this client. */
+    agent_id?: string | undefined;
     /** An alternate client identifier to be used during authorization flows. Only supports CIMD-based client identifiers. */
     external_client_id?: string | undefined;
     /** URL for the JSON Web Key Set (JWKS) containing the public keys used for private_key_jwt authentication. Only present for CIMD clients using private_key_jwt authentication. */
@@ -34107,6 +34560,7 @@ export interface UpdateConnectionOptions {
     /** Stores encrypted string only configurations for connections */
     configuration?: (Record<string, (string | null) | undefined> | null) | undefined;
     customScripts?: Management.ConnectionCustomScripts | undefined;
+    otp_settings?: Management.ConnectionOtpSettings | undefined;
     authentication_methods?: (Management.ConnectionAuthenticationMethods | null) | undefined;
     passkey_options?: (Management.ConnectionPasskeyOptions | null) | undefined;
     passwordPolicy?: (Management.ConnectionPasswordPolicyEnum | null) | undefined;
@@ -34397,6 +34851,7 @@ export interface UpdateConnectionRequestContentPlanningCenter extends Management
  */
 export interface UpdateConnectionRequestContentSaml extends Management.ConnectionCommon {
     options?: Management.ConnectionOptionsSaml | undefined;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     cross_app_access_resource_app?: (Management.ConnectionCrossAppAccessResourceApp | null) | undefined;
     show_as_button?: Management.ConnectionShowAsButton | undefined;
 }
@@ -34943,6 +35398,8 @@ export interface UpdateResourceServerResponseContent {
     authorization_policy?: (Management.ResourceServerAuthorizationPolicy | null) | undefined;
     /** The client ID of the client that this resource server is linked to */
     client_id?: string | undefined;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsResponseEnum | undefined;
+    type?: (Management.ResourceServerTypeEnum | null) | undefined;
 }
 export interface UpdateRiskAssessmentsSettingsNewDeviceResponseContent {
     /** Length of time to remember devices for, in days. */