cloudflare 3.0.0-beta.1 → 3.0.0-beta.11

package/resources/zero-trust/identity-providers.d.ts

@@ -2434,382 +2434,2636 @@ export interface IdentityProviderDeleteResponse {
      */
     id?: string;
 }
-export interface IdentityProviderCreateParams {
-    /**
-     * Body param:
-     */
-    config: IdentityProviderCreateParams.Config;
-    /**
-     * Body param: The name of the identity provider, shown to users on the login page.
-     */
-    name: string;
-    /**
-     * Body param: The type of identity provider. To determine the value for a specific
-     * provider, refer to our
-     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-     */
-    type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
-    /**
-     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
-     * Zone ID.
-     */
-    account_id?: string;
-    /**
-     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
-     * Account ID.
-     */
-    zone_id?: string;
-    /**
-     * Body param:
-     */
-    scim_config?: IdentityProviderCreateParams.ScimConfig;
-}
+export type IdentityProviderCreateParams = IdentityProviderCreateParams.AccessAzureAd | IdentityProviderCreateParams.AccessCentrify | IdentityProviderCreateParams.AccessFacebook | IdentityProviderCreateParams.AccessGitHub | IdentityProviderCreateParams.AccessGoogle | IdentityProviderCreateParams.AccessGoogleApps | IdentityProviderCreateParams.AccessLinkedin | IdentityProviderCreateParams.AccessOidc | IdentityProviderCreateParams.AccessOkta | IdentityProviderCreateParams.AccessOnelogin | IdentityProviderCreateParams.AccessPingone | IdentityProviderCreateParams.AccessSaml | IdentityProviderCreateParams.AccessYandex | IdentityProviderCreateParams.AccessOnetimepin;
 export declare namespace IdentityProviderCreateParams {
-    interface Config {
-        /**
-         * Your companies TLD
-         */
-        apps_domain?: string;
-        /**
-         * A list of SAML attribute names that will be added to your signed JWT token and
-         * can be used in SAML policy rules.
-         */
-        attributes?: Array<string>;
+    interface AccessAzureAd {
         /**
-         * The authorization_endpoint URL of your IdP
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        auth_url?: string;
+        config: IdentityProviderCreateParams.AccessAzureAd.Config;
         /**
-         * Your okta authorization server id
+         * Body param: The name of the identity provider, shown to users on the login page.
          */
-        authorization_server_id?: string;
+        name: string;
         /**
-         * Your centrify account url
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        centrify_account?: string;
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
         /**
-         * Your centrify app id
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
          */
-        centrify_app_id?: string;
+        account_id?: string;
         /**
-         * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
          */
-        certs_url?: string;
+        zone_id?: string;
         /**
-         * Custom claims
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
          */
-        claims?: Array<string>;
+        scim_config?: IdentityProviderCreateParams.AccessAzureAd.ScimConfig;
+    }
+    namespace AccessAzureAd {
         /**
-         * Your OAuth Client ID
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        client_id?: string;
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * Should Cloudflare try to load authentication contexts from your account
+             */
+            conditional_access_enabled?: boolean;
+            /**
+             * Your Azure directory uuid
+             */
+            directory_id?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Indicates the type of user interaction that is required. prompt=login forces the
+             * user to enter their credentials on that request, negating single-sign on.
+             * prompt=none is the opposite. It ensures that the user isn't presented with any
+             * interactive prompt. If the request can't be completed silently by using
+             * single-sign on, the Microsoft identity platform returns an interaction_required
+             * error. prompt=select_account interrupts single sign-on providing account
+             * selection experience listing all the accounts either in session or any
+             * remembered account or an option to choose to use a different account altogether.
+             */
+            prompt?: 'login' | 'select_account' | 'none';
+            /**
+             * Should Cloudflare try to load groups from your account
+             */
+            support_groups?: boolean;
+        }
         /**
-         * Your OAuth Client Secret
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
          */
-        client_secret?: string;
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessCentrify {
         /**
-         * Should Cloudflare try to load authentication contexts from your account
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        conditional_access_enabled?: boolean;
+        config: IdentityProviderCreateParams.AccessCentrify.Config;
         /**
-         * Your Azure directory uuid
+         * Body param: The name of the identity provider, shown to users on the login page.
          */
-        directory_id?: string;
+        name: string;
         /**
-         * The attribute name for email in the SAML response.
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        email_attribute_name?: string;
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
         /**
-         * The claim name for email in the id_token response.
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
          */
-        email_claim_name?: string;
+        account_id?: string;
         /**
-         * Add a list of attribute names that will be returned in the response header from
-         * the Access callback.
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
          */
-        header_attributes?: Array<Config.HeaderAttribute>;
+        zone_id?: string;
         /**
-         * X509 certificate to verify the signature in the SAML authentication response
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
          */
-        idp_public_certs?: Array<string>;
+        scim_config?: IdentityProviderCreateParams.AccessCentrify.ScimConfig;
+    }
+    namespace AccessCentrify {
         /**
-         * IdP Entity ID or Issuer URL
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        issuer_url?: string;
+        interface Config {
+            /**
+             * Your centrify account url
+             */
+            centrify_account?: string;
+            /**
+             * Your centrify app id
+             */
+            centrify_app_id?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
         /**
-         * Your okta account url
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
          */
-        okta_account?: string;
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessFacebook {
         /**
-         * Your OneLogin account url
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        onelogin_account?: string;
+        config: IdentityProviderCreateParams.AccessFacebook.Config;
         /**
-         * Your PingOne environment identifier
+         * Body param: The name of the identity provider, shown to users on the login page.
          */
-        ping_env_id?: string;
+        name: string;
         /**
-         * Indicates the type of user interaction that is required. prompt=login forces the
-         * user to enter their credentials on that request, negating single-sign on.
-         * prompt=none is the opposite. It ensures that the user isn't presented with any
-         * interactive prompt. If the request can't be completed silently by using
-         * single-sign on, the Microsoft identity platform returns an interaction_required
-         * error. prompt=select_account interrupts single sign-on providing account
-         * selection experience listing all the accounts either in session or any
-         * remembered account or an option to choose to use a different account altogether.
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        prompt?: 'login' | 'select_account' | 'none';
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
         /**
-         * OAuth scopes
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
          */
-        scopes?: Array<string>;
+        account_id?: string;
         /**
-         * Sign the SAML authentication request with Access credentials. To verify the
-         * signature, use the public key from the Access certs endpoints.
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
          */
-        sign_request?: boolean;
+        zone_id?: string;
         /**
-         * URL to send the SAML authentication requests to
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
          */
-        sso_target_url?: string;
+        scim_config?: IdentityProviderCreateParams.AccessFacebook.ScimConfig;
+    }
+    namespace AccessFacebook {
         /**
-         * Should Cloudflare try to load groups from your account
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        support_groups?: boolean;
+        interface Config {
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+        }
         /**
-         * The token_endpoint URL of your IdP
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
          */
-        token_url?: string;
-    }
-    namespace Config {
-        interface HeaderAttribute {
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
             /**
-             * attribute name from the IDP
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
              */
-            attribute_name?: string;
+            secret?: string;
             /**
-             * header that will be added on the request to the origin
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
              */
-            header_name?: string;
+            user_deprovision?: boolean;
         }
     }
-    interface ScimConfig {
+    interface AccessGitHub {
         /**
-         * A flag to enable or disable SCIM for the identity provider.
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        enabled?: boolean;
+        config: IdentityProviderCreateParams.AccessGitHub.Config;
         /**
-         * A flag to revoke a user's session in Access and force a reauthentication on the
-         * user's Gateway session when they have been added or removed from a group in the
-         * Identity Provider.
+         * Body param: The name of the identity provider, shown to users on the login page.
          */
-        group_member_deprovision?: boolean;
+        name: string;
         /**
-         * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-         * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-         * enabled.
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        seat_deprovision?: boolean;
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
         /**
-         * A read-only token generated when the SCIM integration is enabled for the first
-         * time. It is redacted on subsequent requests. If you lose this you will need to
-         * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
          */
-        secret?: string;
+        account_id?: string;
         /**
-         * A flag to enable revoking a user's session in Access and Gateway when they have
-         * been deprovisioned in the Identity Provider.
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
          */
-        user_deprovision?: boolean;
-    }
-}
-export interface IdentityProviderUpdateParams {
-    /**
-     * Body param:
-     */
-    config: IdentityProviderUpdateParams.Config;
-    /**
-     * Body param: The name of the identity provider, shown to users on the login page.
-     */
-    name: string;
-    /**
-     * Body param: The type of identity provider. To determine the value for a specific
-     * provider, refer to our
-     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-     */
-    type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
-    /**
-     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
-     * Zone ID.
-     */
-    account_id?: string;
-    /**
-     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
-     * Account ID.
-     */
-    zone_id?: string;
-    /**
-     * Body param:
-     */
-    scim_config?: IdentityProviderUpdateParams.ScimConfig;
-}
-export declare namespace IdentityProviderUpdateParams {
-    interface Config {
+        zone_id?: string;
         /**
-         * Your companies TLD
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
          */
-        apps_domain?: string;
+        scim_config?: IdentityProviderCreateParams.AccessGitHub.ScimConfig;
+    }
+    namespace AccessGitHub {
         /**
-         * A list of SAML attribute names that will be added to your signed JWT token and
-         * can be used in SAML policy rules.
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        attributes?: Array<string>;
+        interface Config {
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+        }
         /**
-         * The authorization_endpoint URL of your IdP
-         */
-        auth_url?: string;
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessGoogle {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessGoogle.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessGoogle.ScimConfig;
+    }
+    namespace AccessGoogle {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessGoogleApps {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessGoogleApps.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessGoogleApps.ScimConfig;
+    }
+    namespace AccessGoogleApps {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your companies TLD
+             */
+            apps_domain?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessLinkedin {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessLinkedin.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessLinkedin.ScimConfig;
+    }
+    namespace AccessLinkedin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessOidc {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessOidc.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessOidc.ScimConfig;
+    }
+    namespace AccessOidc {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * The authorization_endpoint URL of your IdP
+             */
+            auth_url?: string;
+            /**
+             * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+             */
+            certs_url?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * OAuth scopes
+             */
+            scopes?: Array<string>;
+            /**
+             * The token_endpoint URL of your IdP
+             */
+            token_url?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessOkta {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessOkta.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessOkta.ScimConfig;
+    }
+    namespace AccessOkta {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your okta authorization server id
+             */
+            authorization_server_id?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your okta account url
+             */
+            okta_account?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessOnelogin {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessOnelogin.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessOnelogin.ScimConfig;
+    }
+    namespace AccessOnelogin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your OneLogin account url
+             */
+            onelogin_account?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessPingone {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessPingone.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessPingone.ScimConfig;
+    }
+    namespace AccessPingone {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your PingOne environment identifier
+             */
+            ping_env_id?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessSaml {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessSaml.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessSaml.ScimConfig;
+    }
+    namespace AccessSaml {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * A list of SAML attribute names that will be added to your signed JWT token and
+             * can be used in SAML policy rules.
+             */
+            attributes?: Array<string>;
+            /**
+             * The attribute name for email in the SAML response.
+             */
+            email_attribute_name?: string;
+            /**
+             * Add a list of attribute names that will be returned in the response header from
+             * the Access callback.
+             */
+            header_attributes?: Array<Config.HeaderAttribute>;
+            /**
+             * X509 certificate to verify the signature in the SAML authentication response
+             */
+            idp_public_certs?: Array<string>;
+            /**
+             * IdP Entity ID or Issuer URL
+             */
+            issuer_url?: string;
+            /**
+             * Sign the SAML authentication request with Access credentials. To verify the
+             * signature, use the public key from the Access certs endpoints.
+             */
+            sign_request?: boolean;
+            /**
+             * URL to send the SAML authentication requests to
+             */
+            sso_target_url?: string;
+        }
+        namespace Config {
+            interface HeaderAttribute {
+                /**
+                 * attribute name from the IDP
+                 */
+                attribute_name?: string;
+                /**
+                 * header that will be added on the request to the origin
+                 */
+                header_name?: string;
+            }
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessYandex {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderCreateParams.AccessYandex.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessYandex.ScimConfig;
+    }
+    namespace AccessYandex {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessOnetimepin {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: unknown;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderCreateParams.AccessOnetimepin.ScimConfig;
+    }
+    namespace AccessOnetimepin {
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+}
+export type IdentityProviderUpdateParams = IdentityProviderUpdateParams.AccessAzureAd | IdentityProviderUpdateParams.AccessCentrify | IdentityProviderUpdateParams.AccessFacebook | IdentityProviderUpdateParams.AccessGitHub | IdentityProviderUpdateParams.AccessGoogle | IdentityProviderUpdateParams.AccessGoogleApps | IdentityProviderUpdateParams.AccessLinkedin | IdentityProviderUpdateParams.AccessOidc | IdentityProviderUpdateParams.AccessOkta | IdentityProviderUpdateParams.AccessOnelogin | IdentityProviderUpdateParams.AccessPingone | IdentityProviderUpdateParams.AccessSaml | IdentityProviderUpdateParams.AccessYandex | IdentityProviderUpdateParams.AccessOnetimepin;
+export declare namespace IdentityProviderUpdateParams {
+    interface AccessAzureAd {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessAzureAd.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessAzureAd.ScimConfig;
+    }
+    namespace AccessAzureAd {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * Should Cloudflare try to load authentication contexts from your account
+             */
+            conditional_access_enabled?: boolean;
+            /**
+             * Your Azure directory uuid
+             */
+            directory_id?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Indicates the type of user interaction that is required. prompt=login forces the
+             * user to enter their credentials on that request, negating single-sign on.
+             * prompt=none is the opposite. It ensures that the user isn't presented with any
+             * interactive prompt. If the request can't be completed silently by using
+             * single-sign on, the Microsoft identity platform returns an interaction_required
+             * error. prompt=select_account interrupts single sign-on providing account
+             * selection experience listing all the accounts either in session or any
+             * remembered account or an option to choose to use a different account altogether.
+             */
+            prompt?: 'login' | 'select_account' | 'none';
+            /**
+             * Should Cloudflare try to load groups from your account
+             */
+            support_groups?: boolean;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessCentrify {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessCentrify.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessCentrify.ScimConfig;
+    }
+    namespace AccessCentrify {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your centrify account url
+             */
+            centrify_account?: string;
+            /**
+             * Your centrify app id
+             */
+            centrify_app_id?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessFacebook {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessFacebook.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessFacebook.ScimConfig;
+    }
+    namespace AccessFacebook {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessGitHub {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessGitHub.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessGitHub.ScimConfig;
+    }
+    namespace AccessGitHub {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessGoogle {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessGoogle.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessGoogle.ScimConfig;
+    }
+    namespace AccessGoogle {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessGoogleApps {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessGoogleApps.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessGoogleApps.ScimConfig;
+    }
+    namespace AccessGoogleApps {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your companies TLD
+             */
+            apps_domain?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessLinkedin {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessLinkedin.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessLinkedin.ScimConfig;
+    }
+    namespace AccessLinkedin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessOidc {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessOidc.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessOidc.ScimConfig;
+    }
+    namespace AccessOidc {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * The authorization_endpoint URL of your IdP
+             */
+            auth_url?: string;
+            /**
+             * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+             */
+            certs_url?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * OAuth scopes
+             */
+            scopes?: Array<string>;
+            /**
+             * The token_endpoint URL of your IdP
+             */
+            token_url?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessOkta {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessOkta.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessOkta.ScimConfig;
+    }
+    namespace AccessOkta {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your okta authorization server id
+             */
+            authorization_server_id?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your okta account url
+             */
+            okta_account?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessOnelogin {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessOnelogin.Config;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProviderUpdateParams.AccessOnelogin.ScimConfig;
+    }
+    namespace AccessOnelogin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your OneLogin account url
+             */
+            onelogin_account?: string;
+        }
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessPingone {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProviderUpdateParams.AccessPingone.Config;
         /**
-         * Your okta authorization server id
+         * Body param: The name of the identity provider, shown to users on the login page.
          */
-        authorization_server_id?: string;
+        name: string;
         /**
-         * Your centrify account url
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        centrify_account?: string;
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
         /**
-         * Your centrify app id
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
          */
-        centrify_app_id?: string;
+        account_id?: string;
         /**
-         * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
          */
-        certs_url?: string;
+        zone_id?: string;
         /**
-         * Custom claims
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
          */
-        claims?: Array<string>;
+        scim_config?: IdentityProviderUpdateParams.AccessPingone.ScimConfig;
+    }
+    namespace AccessPingone {
         /**
-         * Your OAuth Client ID
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        client_id?: string;
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your PingOne environment identifier
+             */
+            ping_env_id?: string;
+        }
         /**
-         * Your OAuth Client Secret
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
          */
-        client_secret?: string;
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessSaml {
         /**
-         * Should Cloudflare try to load authentication contexts from your account
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        conditional_access_enabled?: boolean;
+        config: IdentityProviderUpdateParams.AccessSaml.Config;
         /**
-         * Your Azure directory uuid
+         * Body param: The name of the identity provider, shown to users on the login page.
          */
-        directory_id?: string;
+        name: string;
         /**
-         * The attribute name for email in the SAML response.
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        email_attribute_name?: string;
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
         /**
-         * The claim name for email in the id_token response.
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
          */
-        email_claim_name?: string;
+        account_id?: string;
         /**
-         * Add a list of attribute names that will be returned in the response header from
-         * the Access callback.
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
          */
-        header_attributes?: Array<Config.HeaderAttribute>;
+        zone_id?: string;
         /**
-         * X509 certificate to verify the signature in the SAML authentication response
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
          */
-        idp_public_certs?: Array<string>;
+        scim_config?: IdentityProviderUpdateParams.AccessSaml.ScimConfig;
+    }
+    namespace AccessSaml {
         /**
-         * IdP Entity ID or Issuer URL
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        issuer_url?: string;
+        interface Config {
+            /**
+             * A list of SAML attribute names that will be added to your signed JWT token and
+             * can be used in SAML policy rules.
+             */
+            attributes?: Array<string>;
+            /**
+             * The attribute name for email in the SAML response.
+             */
+            email_attribute_name?: string;
+            /**
+             * Add a list of attribute names that will be returned in the response header from
+             * the Access callback.
+             */
+            header_attributes?: Array<Config.HeaderAttribute>;
+            /**
+             * X509 certificate to verify the signature in the SAML authentication response
+             */
+            idp_public_certs?: Array<string>;
+            /**
+             * IdP Entity ID or Issuer URL
+             */
+            issuer_url?: string;
+            /**
+             * Sign the SAML authentication request with Access credentials. To verify the
+             * signature, use the public key from the Access certs endpoints.
+             */
+            sign_request?: boolean;
+            /**
+             * URL to send the SAML authentication requests to
+             */
+            sso_target_url?: string;
+        }
+        namespace Config {
+            interface HeaderAttribute {
+                /**
+                 * attribute name from the IDP
+                 */
+                attribute_name?: string;
+                /**
+                 * header that will be added on the request to the origin
+                 */
+                header_name?: string;
+            }
+        }
         /**
-         * Your okta account url
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
          */
-        okta_account?: string;
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
+    }
+    interface AccessYandex {
         /**
-         * Your OneLogin account url
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        onelogin_account?: string;
+        config: IdentityProviderUpdateParams.AccessYandex.Config;
         /**
-         * Your PingOne environment identifier
+         * Body param: The name of the identity provider, shown to users on the login page.
          */
-        ping_env_id?: string;
+        name: string;
         /**
-         * Indicates the type of user interaction that is required. prompt=login forces the
-         * user to enter their credentials on that request, negating single-sign on.
-         * prompt=none is the opposite. It ensures that the user isn't presented with any
-         * interactive prompt. If the request can't be completed silently by using
-         * single-sign on, the Microsoft identity platform returns an interaction_required
-         * error. prompt=select_account interrupts single sign-on providing account
-         * selection experience listing all the accounts either in session or any
-         * remembered account or an option to choose to use a different account altogether.
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        prompt?: 'login' | 'select_account' | 'none';
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
         /**
-         * OAuth scopes
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
          */
-        scopes?: Array<string>;
+        account_id?: string;
         /**
-         * Sign the SAML authentication request with Access credentials. To verify the
-         * signature, use the public key from the Access certs endpoints.
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
          */
-        sign_request?: boolean;
+        zone_id?: string;
         /**
-         * URL to send the SAML authentication requests to
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
          */
-        sso_target_url?: string;
+        scim_config?: IdentityProviderUpdateParams.AccessYandex.ScimConfig;
+    }
+    namespace AccessYandex {
         /**
-         * Should Cloudflare try to load groups from your account
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        support_groups?: boolean;
+        interface Config {
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+        }
         /**
-         * The token_endpoint URL of your IdP
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
          */
-        token_url?: string;
-    }
-    namespace Config {
-        interface HeaderAttribute {
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
             /**
-             * attribute name from the IDP
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
              */
-            attribute_name?: string;
+            secret?: string;
             /**
-             * header that will be added on the request to the origin
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
              */
-            header_name?: string;
+            user_deprovision?: boolean;
         }
     }
-    interface ScimConfig {
+    interface AccessOnetimepin {
+        /**
+         * Body param: The configuration parameters for the identity provider. To view the
+         * required parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: unknown;
+        /**
+         * Body param: The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
         /**
-         * A flag to enable or disable SCIM for the identity provider.
+         * Body param: The type of identity provider. To determine the value for a specific
+         * provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        enabled?: boolean;
+        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
         /**
-         * A flag to revoke a user's session in Access and force a reauthentication on the
-         * user's Gateway session when they have been added or removed from a group in the
-         * Identity Provider.
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
          */
-        group_member_deprovision?: boolean;
+        account_id?: string;
         /**
-         * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-         * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-         * enabled.
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
          */
-        seat_deprovision?: boolean;
+        zone_id?: string;
         /**
-         * A read-only token generated when the SCIM integration is enabled for the first
-         * time. It is redacted on subsequent requests. If you lose this you will need to
-         * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+         * Body param: The configuration settings for enabling a System for Cross-Domain
+         * Identity Management (SCIM) with the identity provider.
          */
-        secret?: string;
+        scim_config?: IdentityProviderUpdateParams.AccessOnetimepin.ScimConfig;
+    }
+    namespace AccessOnetimepin {
         /**
-         * A flag to enable revoking a user's session in Access and Gateway when they have
-         * been deprovisioned in the Identity Provider.
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
          */
-        user_deprovision?: boolean;
+        interface ScimConfig {
+            /**
+             * A flag to enable or disable SCIM for the identity provider.
+             */
+            enabled?: boolean;
+            /**
+             * A flag to revoke a user's session in Access and force a reauthentication on the
+             * user's Gateway session when they have been added or removed from a group in the
+             * Identity Provider.
+             */
+            group_member_deprovision?: boolean;
+            /**
+             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+             * enabled.
+             */
+            seat_deprovision?: boolean;
+            /**
+             * A read-only token generated when the SCIM integration is enabled for the first
+             * time. It is redacted on subsequent requests. If you lose this you will need to
+             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             */
+            secret?: string;
+            /**
+             * A flag to enable revoking a user's session in Access and Gateway when they have
+             * been deprovisioned in the Identity Provider.
+             */
+            user_deprovision?: boolean;
+        }
     }
 }
 export interface IdentityProviderListParams {