cloudflare 3.0.0-beta.8 → 3.0.0

package/src/resources/zero-trust/identity-providers.ts

@@ -5,6 +5,7 @@ import { APIResource } from "../../resource";
 import { isRequestOptions } from "../../core";
 import { CloudflareError } from "../../error";
 import * as IdentityProvidersAPI from "./identity-providers";
+import { SinglePage } from "../../pagination";
 
 export class IdentityProviders extends APIResource {
   /**
@@ -13,7 +14,7 @@ export class IdentityProviders extends APIResource {
   create(
     params: IdentityProviderCreateParams,
     options?: Core.RequestOptions,
-  ): Core.APIPromise<AccessIdentityProviders> {
+  ): Core.APIPromise<ZeroTrustIdentityProviders> {
     const { account_id, zone_id, ...body } = params;
     if (!account_id && !zone_id) {
       throw new CloudflareError('You must provide either account_id or zone_id.');
@@ -35,7 +36,7 @@ export class IdentityProviders extends APIResource {
       this._client.post(`/${accountOrZone}/${accountOrZoneId}/access/identity_providers`, {
         body,
         ...options,
-      }) as Core.APIPromise<{ result: AccessIdentityProviders }>
+      }) as Core.APIPromise<{ result: ZeroTrustIdentityProviders }>
     )._thenUnwrap((obj) => obj.result);
   }
 
@@ -46,7 +47,7 @@ export class IdentityProviders extends APIResource {
     uuid: string,
     params: IdentityProviderUpdateParams,
     options?: Core.RequestOptions,
-  ): Core.APIPromise<AccessIdentityProviders> {
+  ): Core.APIPromise<ZeroTrustIdentityProviders> {
     const { account_id, zone_id, ...body } = params;
     if (!account_id && !zone_id) {
       throw new CloudflareError('You must provide either account_id or zone_id.');
@@ -68,7 +69,7 @@ export class IdentityProviders extends APIResource {
       this._client.put(`/${accountOrZone}/${accountOrZoneId}/access/identity_providers/${uuid}`, {
         body,
         ...options,
-      }) as Core.APIPromise<{ result: AccessIdentityProviders }>
+      }) as Core.APIPromise<{ result: ZeroTrustIdentityProviders }>
     )._thenUnwrap((obj) => obj.result);
   }
 
@@ -78,12 +79,14 @@ export class IdentityProviders extends APIResource {
   list(
     params?: IdentityProviderListParams,
     options?: Core.RequestOptions,
-  ): Core.APIPromise<IdentityProviderListResponse | null>;
-  list(options?: Core.RequestOptions): Core.APIPromise<IdentityProviderListResponse | null>;
+  ): Core.PagePromise<IdentityProviderListResponsesSinglePage, IdentityProviderListResponse>;
+  list(
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<IdentityProviderListResponsesSinglePage, IdentityProviderListResponse>;
   list(
     params: IdentityProviderListParams | Core.RequestOptions = {},
     options?: Core.RequestOptions,
-  ): Core.APIPromise<IdentityProviderListResponse | null> {
+  ): Core.PagePromise<IdentityProviderListResponsesSinglePage, IdentityProviderListResponse> {
     if (isRequestOptions(params)) {
       return this.list({}, params);
     }
@@ -104,12 +107,11 @@ export class IdentityProviders extends APIResource {
           accountOrZone: 'zones',
           accountOrZoneId: zone_id,
         };
-    return (
-      this._client.get(
-        `/${accountOrZone}/${accountOrZoneId}/access/identity_providers`,
-        options,
-      ) as Core.APIPromise<{ result: IdentityProviderListResponse | null }>
-    )._thenUnwrap((obj) => obj.result);
+    return this._client.getAPIList(
+      `/${accountOrZone}/${accountOrZoneId}/access/identity_providers`,
+      IdentityProviderListResponsesSinglePage,
+      options,
+    );
   }
 
   /**
@@ -161,13 +163,13 @@ export class IdentityProviders extends APIResource {
     uuid: string,
     params?: IdentityProviderGetParams,
     options?: Core.RequestOptions,
-  ): Core.APIPromise<AccessIdentityProviders>;
-  get(uuid: string, options?: Core.RequestOptions): Core.APIPromise<AccessIdentityProviders>;
+  ): Core.APIPromise<ZeroTrustIdentityProviders>;
+  get(uuid: string, options?: Core.RequestOptions): Core.APIPromise<ZeroTrustIdentityProviders>;
   get(
     uuid: string,
     params: IdentityProviderGetParams | Core.RequestOptions = {},
     options?: Core.RequestOptions,
-  ): Core.APIPromise<AccessIdentityProviders> {
+  ): Core.APIPromise<ZeroTrustIdentityProviders> {
     if (isRequestOptions(params)) {
       return this.get(uuid, {}, params);
     }
@@ -192,28 +194,30 @@ export class IdentityProviders extends APIResource {
       this._client.get(
         `/${accountOrZone}/${accountOrZoneId}/access/identity_providers/${uuid}`,
         options,
-      ) as Core.APIPromise<{ result: AccessIdentityProviders }>
+      ) as Core.APIPromise<{ result: ZeroTrustIdentityProviders }>
     )._thenUnwrap((obj) => obj.result);
   }
 }
 
-export type AccessIdentityProviders =
-  | AccessIdentityProviders.AccessAzureAd
-  | AccessIdentityProviders.AccessCentrify
-  | AccessIdentityProviders.AccessFacebook
-  | AccessIdentityProviders.AccessGitHub
-  | AccessIdentityProviders.AccessGoogle
-  | AccessIdentityProviders.AccessGoogleApps
-  | AccessIdentityProviders.AccessLinkedin
-  | AccessIdentityProviders.AccessOidc
-  | AccessIdentityProviders.AccessOkta
-  | AccessIdentityProviders.AccessOnelogin
-  | AccessIdentityProviders.AccessPingone
-  | AccessIdentityProviders.AccessSaml
-  | AccessIdentityProviders.AccessYandex
-  | AccessIdentityProviders.AccessOnetimepin;
-
-export namespace AccessIdentityProviders {
+export class IdentityProviderListResponsesSinglePage extends SinglePage<IdentityProviderListResponse> {}
+
+export type ZeroTrustIdentityProviders =
+  | ZeroTrustIdentityProviders.AccessAzureAd
+  | ZeroTrustIdentityProviders.AccessCentrify
+  | ZeroTrustIdentityProviders.AccessFacebook
+  | ZeroTrustIdentityProviders.AccessGitHub
+  | ZeroTrustIdentityProviders.AccessGoogle
+  | ZeroTrustIdentityProviders.AccessGoogleApps
+  | ZeroTrustIdentityProviders.AccessLinkedin
+  | ZeroTrustIdentityProviders.AccessOidc
+  | ZeroTrustIdentityProviders.AccessOkta
+  | ZeroTrustIdentityProviders.AccessOnelogin
+  | ZeroTrustIdentityProviders.AccessPingone
+  | ZeroTrustIdentityProviders.AccessSaml
+  | ZeroTrustIdentityProviders.AccessYandex
+  | ZeroTrustIdentityProviders.AccessOnetimepin;
+
+export namespace ZeroTrustIdentityProviders {
   export interface AccessAzureAd {
     /**
      * The configuration parameters for the identity provider. To view the required
@@ -1844,7 +1848,7 @@ export namespace AccessIdentityProviders {
   }
 }
 
-export type IdentityProviderListResponse = Array<
+export type IdentityProviderListResponse =
   | IdentityProviderListResponse.AccessAzureAd
   | IdentityProviderListResponse.AccessCentrify
   | IdentityProviderListResponse.AccessFacebook
@@ -1857,8 +1861,7 @@ export type IdentityProviderListResponse = Array<
   | IdentityProviderListResponse.AccessOnelogin
   | IdentityProviderListResponse.AccessPingone
   | IdentityProviderListResponse.AccessSaml
-  | IdentityProviderListResponse.AccessYandex
->;
+  | IdentityProviderListResponse.AccessYandex;
 
 export namespace IdentityProviderListResponse {
   export interface AccessAzureAd {
@@ -3412,487 +3415,3493 @@ export interface IdentityProviderDeleteResponse {
   id?: string;
 }
 
-export interface IdentityProviderCreateParams {
-  /**
-   * Body param:
-   */
-  config: IdentityProviderCreateParams.Config;
-
-  /**
-   * Body param: The name of the identity provider, shown to users on the login page.
-   */
-  name: string;
-
-  /**
-   * Body param: The type of identity provider. To determine the value for a specific
-   * provider, refer to our
-   * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-   */
-  type:
-    | 'onetimepin'
-    | 'azureAD'
-    | 'saml'
-    | 'centrify'
-    | 'facebook'
-    | 'github'
-    | 'google-apps'
-    | 'google'
-    | 'linkedin'
-    | 'oidc'
-    | 'okta'
-    | 'onelogin'
-    | 'pingone'
-    | 'yandex';
-
-  /**
-   * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
-   * Zone ID.
-   */
-  account_id?: string;
-
-  /**
-   * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
-   * Account ID.
-   */
-  zone_id?: string;
-
-  /**
-   * Body param:
-   */
-  scim_config?: IdentityProviderCreateParams.ScimConfig;
-}
+export type IdentityProviderCreateParams =
+  | IdentityProviderCreateParams.AccessAzureAd
+  | IdentityProviderCreateParams.AccessCentrify
+  | IdentityProviderCreateParams.AccessFacebook
+  | IdentityProviderCreateParams.AccessGitHub
+  | IdentityProviderCreateParams.AccessGoogle
+  | IdentityProviderCreateParams.AccessGoogleApps
+  | IdentityProviderCreateParams.AccessLinkedin
+  | IdentityProviderCreateParams.AccessOidc
+  | IdentityProviderCreateParams.AccessOkta
+  | IdentityProviderCreateParams.AccessOnelogin
+  | IdentityProviderCreateParams.AccessPingone
+  | IdentityProviderCreateParams.AccessSaml
+  | IdentityProviderCreateParams.AccessYandex
+  | IdentityProviderCreateParams.AccessOnetimepin;
 
 export namespace IdentityProviderCreateParams {
-  export interface Config {
+  export interface AccessAzureAd {
     /**
-     * Your companies TLD
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    apps_domain?: string;
+    config: IdentityProviderCreateParams.AccessAzureAd.Config;
 
     /**
-     * A list of SAML attribute names that will be added to your signed JWT token and
-     * can be used in SAML policy rules.
+     * Body param: The name of the identity provider, shown to users on the login page.
      */
-    attributes?: Array<string>;
+    name: string;
 
     /**
-     * The authorization_endpoint URL of your IdP
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    auth_url?: string;
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
 
     /**
-     * Your okta authorization server id
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
      */
-    authorization_server_id?: string;
+    account_id?: string;
 
     /**
-     * Your centrify account url
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
      */
-    centrify_account?: string;
+    zone_id?: string;
 
     /**
-     * Your centrify app id
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
      */
-    centrify_app_id?: string;
+    scim_config?: IdentityProviderCreateParams.AccessAzureAd.ScimConfig;
+  }
 
+  export namespace AccessAzureAd {
     /**
-     * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    certs_url?: string;
+    export interface Config {
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
 
-    /**
-     * Custom claims
-     */
-    claims?: Array<string>;
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
 
-    /**
-     * Your OAuth Client ID
-     */
-    client_id?: string;
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
 
-    /**
-     * Your OAuth Client Secret
-     */
-    client_secret?: string;
+      /**
+       * Should Cloudflare try to load authentication contexts from your account
+       */
+      conditional_access_enabled?: boolean;
 
-    /**
-     * Should Cloudflare try to load authentication contexts from your account
-     */
-    conditional_access_enabled?: boolean;
+      /**
+       * Your Azure directory uuid
+       */
+      directory_id?: string;
 
-    /**
-     * Your Azure directory uuid
-     */
-    directory_id?: string;
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
 
-    /**
-     * The attribute name for email in the SAML response.
-     */
-    email_attribute_name?: string;
+      /**
+       * Indicates the type of user interaction that is required. prompt=login forces the
+       * user to enter their credentials on that request, negating single-sign on.
+       * prompt=none is the opposite. It ensures that the user isn't presented with any
+       * interactive prompt. If the request can't be completed silently by using
+       * single-sign on, the Microsoft identity platform returns an interaction_required
+       * error. prompt=select_account interrupts single sign-on providing account
+       * selection experience listing all the accounts either in session or any
+       * remembered account or an option to choose to use a different account altogether.
+       */
+      prompt?: 'login' | 'select_account' | 'none';
 
-    /**
-     * The claim name for email in the id_token response.
-     */
-    email_claim_name?: string;
+      /**
+       * Should Cloudflare try to load groups from your account
+       */
+      support_groups?: boolean;
+    }
 
     /**
-     * Add a list of attribute names that will be returned in the response header from
-     * the Access callback.
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
      */
-    header_attributes?: Array<Config.HeaderAttribute>;
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
 
-    /**
-     * X509 certificate to verify the signature in the SAML authentication response
-     */
-    idp_public_certs?: Array<string>;
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
 
-    /**
-     * IdP Entity ID or Issuer URL
-     */
-    issuer_url?: string;
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
 
-    /**
-     * Your okta account url
-     */
-    okta_account?: string;
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
 
+  export interface AccessCentrify {
     /**
-     * Your OneLogin account url
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    onelogin_account?: string;
+    config: IdentityProviderCreateParams.AccessCentrify.Config;
 
     /**
-     * Your PingOne environment identifier
+     * Body param: The name of the identity provider, shown to users on the login page.
      */
-    ping_env_id?: string;
+    name: string;
 
     /**
-     * Indicates the type of user interaction that is required. prompt=login forces the
-     * user to enter their credentials on that request, negating single-sign on.
-     * prompt=none is the opposite. It ensures that the user isn't presented with any
-     * interactive prompt. If the request can't be completed silently by using
-     * single-sign on, the Microsoft identity platform returns an interaction_required
-     * error. prompt=select_account interrupts single sign-on providing account
-     * selection experience listing all the accounts either in session or any
-     * remembered account or an option to choose to use a different account altogether.
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    prompt?: 'login' | 'select_account' | 'none';
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
 
     /**
-     * OAuth scopes
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
      */
-    scopes?: Array<string>;
+    account_id?: string;
 
     /**
-     * Sign the SAML authentication request with Access credentials. To verify the
-     * signature, use the public key from the Access certs endpoints.
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
      */
-    sign_request?: boolean;
+    zone_id?: string;
 
     /**
-     * URL to send the SAML authentication requests to
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
      */
-    sso_target_url?: string;
+    scim_config?: IdentityProviderCreateParams.AccessCentrify.ScimConfig;
+  }
 
+  export namespace AccessCentrify {
     /**
-     * Should Cloudflare try to load groups from your account
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    support_groups?: boolean;
+    export interface Config {
+      /**
+       * Your centrify account url
+       */
+      centrify_account?: string;
+
+      /**
+       * Your centrify app id
+       */
+      centrify_app_id?: string;
+
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+    }
 
     /**
-     * The token_endpoint URL of your IdP
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
      */
-    token_url?: string;
-  }
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
 
-  export namespace Config {
-    export interface HeaderAttribute {
       /**
-       * attribute name from the IDP
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
        */
-      attribute_name?: string;
+      secret?: string;
 
       /**
-       * header that will be added on the request to the origin
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
        */
-      header_name?: string;
+      user_deprovision?: boolean;
     }
   }
 
-  export interface ScimConfig {
+  export interface AccessFacebook {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessFacebook.Config;
+
     /**
-     * A flag to enable or disable SCIM for the identity provider.
+     * Body param: The name of the identity provider, shown to users on the login page.
      */
-    enabled?: boolean;
+    name: string;
 
     /**
-     * A flag to revoke a user's session in Access and force a reauthentication on the
-     * user's Gateway session when they have been added or removed from a group in the
-     * Identity Provider.
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    group_member_deprovision?: boolean;
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
 
     /**
-     * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-     * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-     * enabled.
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
      */
-    seat_deprovision?: boolean;
+    account_id?: string;
 
     /**
-     * A read-only token generated when the SCIM integration is enabled for the first
-     * time. It is redacted on subsequent requests. If you lose this you will need to
-     * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
      */
-    secret?: string;
+    zone_id?: string;
 
     /**
-     * A flag to enable revoking a user's session in Access and Gateway when they have
-     * been deprovisioned in the Identity Provider.
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
      */
-    user_deprovision?: boolean;
+    scim_config?: IdentityProviderCreateParams.AccessFacebook.ScimConfig;
   }
-}
-
-export interface IdentityProviderUpdateParams {
-  /**
-   * Body param:
-   */
-  config: IdentityProviderUpdateParams.Config;
 
-  /**
-   * Body param: The name of the identity provider, shown to users on the login page.
-   */
-  name: string;
+  export namespace AccessFacebook {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
 
-  /**
-   * Body param: The type of identity provider. To determine the value for a specific
-   * provider, refer to our
-   * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-   */
-  type:
-    | 'onetimepin'
-    | 'azureAD'
-    | 'saml'
-    | 'centrify'
-    | 'facebook'
-    | 'github'
-    | 'google-apps'
-    | 'google'
-    | 'linkedin'
-    | 'oidc'
-    | 'okta'
-    | 'onelogin'
-    | 'pingone'
-    | 'yandex';
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+    }
 
-  /**
-   * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
-   * Zone ID.
-   */
-  account_id?: string;
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
 
-  /**
-   * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
-   * Account ID.
-   */
-  zone_id?: string;
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
 
-  /**
-   * Body param:
-   */
-  scim_config?: IdentityProviderUpdateParams.ScimConfig;
-}
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
 
-export namespace IdentityProviderUpdateParams {
-  export interface Config {
-    /**
-     * Your companies TLD
-     */
-    apps_domain?: string;
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
 
-    /**
-     * A list of SAML attribute names that will be added to your signed JWT token and
-     * can be used in SAML policy rules.
-     */
-    attributes?: Array<string>;
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
 
+  export interface AccessGitHub {
     /**
-     * The authorization_endpoint URL of your IdP
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    auth_url?: string;
+    config: IdentityProviderCreateParams.AccessGitHub.Config;
 
     /**
-     * Your okta authorization server id
+     * Body param: The name of the identity provider, shown to users on the login page.
      */
-    authorization_server_id?: string;
+    name: string;
 
     /**
-     * Your centrify account url
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    centrify_account?: string;
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
 
     /**
-     * Your centrify app id
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
      */
-    centrify_app_id?: string;
+    account_id?: string;
 
     /**
-     * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
      */
-    certs_url?: string;
+    zone_id?: string;
 
     /**
-     * Custom claims
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
      */
-    claims?: Array<string>;
+    scim_config?: IdentityProviderCreateParams.AccessGitHub.ScimConfig;
+  }
 
+  export namespace AccessGitHub {
     /**
-     * Your OAuth Client ID
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    client_id?: string;
+    export interface Config {
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
 
-    /**
-     * Your OAuth Client Secret
-     */
-    client_secret?: string;
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+    }
 
     /**
-     * Should Cloudflare try to load authentication contexts from your account
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
      */
-    conditional_access_enabled?: boolean;
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
 
-    /**
-     * Your Azure directory uuid
-     */
-    directory_id?: string;
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
 
-    /**
-     * The attribute name for email in the SAML response.
-     */
-    email_attribute_name?: string;
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
 
-    /**
-     * The claim name for email in the id_token response.
-     */
-    email_claim_name?: string;
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
 
-    /**
-     * Add a list of attribute names that will be returned in the response header from
-     * the Access callback.
-     */
-    header_attributes?: Array<Config.HeaderAttribute>;
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
 
+  export interface AccessGoogle {
     /**
-     * X509 certificate to verify the signature in the SAML authentication response
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    idp_public_certs?: Array<string>;
+    config: IdentityProviderCreateParams.AccessGoogle.Config;
 
     /**
-     * IdP Entity ID or Issuer URL
+     * Body param: The name of the identity provider, shown to users on the login page.
      */
-    issuer_url?: string;
+    name: string;
 
     /**
-     * Your okta account url
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    okta_account?: string;
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
 
     /**
-     * Your OneLogin account url
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
      */
-    onelogin_account?: string;
+    account_id?: string;
 
     /**
-     * Your PingOne environment identifier
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
      */
-    ping_env_id?: string;
+    zone_id?: string;
 
     /**
-     * Indicates the type of user interaction that is required. prompt=login forces the
-     * user to enter their credentials on that request, negating single-sign on.
-     * prompt=none is the opposite. It ensures that the user isn't presented with any
-     * interactive prompt. If the request can't be completed silently by using
-     * single-sign on, the Microsoft identity platform returns an interaction_required
-     * error. prompt=select_account interrupts single sign-on providing account
-     * selection experience listing all the accounts either in session or any
-     * remembered account or an option to choose to use a different account altogether.
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
      */
-    prompt?: 'login' | 'select_account' | 'none';
+    scim_config?: IdentityProviderCreateParams.AccessGoogle.ScimConfig;
+  }
 
+  export namespace AccessGoogle {
     /**
-     * OAuth scopes
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    scopes?: Array<string>;
+    export interface Config {
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
 
-    /**
-     * Sign the SAML authentication request with Access credentials. To verify the
-     * signature, use the public key from the Access certs endpoints.
-     */
-    sign_request?: boolean;
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
 
-    /**
-     * URL to send the SAML authentication requests to
-     */
-    sso_target_url?: string;
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
 
-    /**
-     * Should Cloudflare try to load groups from your account
-     */
-    support_groups?: boolean;
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+    }
 
     /**
-     * The token_endpoint URL of your IdP
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
      */
-    token_url?: string;
-  }
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
 
-  export namespace Config {
-    export interface HeaderAttribute {
       /**
-       * attribute name from the IDP
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
        */
-      attribute_name?: string;
+      secret?: string;
 
       /**
-       * header that will be added on the request to the origin
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
        */
-      header_name?: string;
+      user_deprovision?: boolean;
     }
   }
 
-  export interface ScimConfig {
+  export interface AccessGoogleApps {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessGoogleApps.Config;
+
     /**
-     * A flag to enable or disable SCIM for the identity provider.
+     * Body param: The name of the identity provider, shown to users on the login page.
      */
-    enabled?: boolean;
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
 
     /**
-     * A flag to revoke a user's session in Access and force a reauthentication on the
-     * user's Gateway session when they have been added or removed from a group in the
-     * Identity Provider.
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
      */
-    group_member_deprovision?: boolean;
+    account_id?: string;
 
     /**
-     * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-     * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-     * enabled.
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
      */
-    seat_deprovision?: boolean;
+    zone_id?: string;
 
     /**
-     * A read-only token generated when the SCIM integration is enabled for the first
-     * time. It is redacted on subsequent requests. If you lose this you will need to
-     * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
      */
-    secret?: string;
+    scim_config?: IdentityProviderCreateParams.AccessGoogleApps.ScimConfig;
+  }
 
+  export namespace AccessGoogleApps {
     /**
-     * A flag to enable revoking a user's session in Access and Gateway when they have
-     * been deprovisioned in the Identity Provider.
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
      */
-    user_deprovision?: boolean;
+    export interface Config {
+      /**
+       * Your companies TLD
+       */
+      apps_domain?: string;
+
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessLinkedin {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessLinkedin.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderCreateParams.AccessLinkedin.ScimConfig;
+  }
+
+  export namespace AccessLinkedin {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessOidc {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessOidc.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderCreateParams.AccessOidc.ScimConfig;
+  }
+
+  export namespace AccessOidc {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * The authorization_endpoint URL of your IdP
+       */
+      auth_url?: string;
+
+      /**
+       * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+       */
+      certs_url?: string;
+
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * OAuth scopes
+       */
+      scopes?: Array<string>;
+
+      /**
+       * The token_endpoint URL of your IdP
+       */
+      token_url?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessOkta {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessOkta.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderCreateParams.AccessOkta.ScimConfig;
+  }
+
+  export namespace AccessOkta {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your okta authorization server id
+       */
+      authorization_server_id?: string;
+
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * Your okta account url
+       */
+      okta_account?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessOnelogin {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessOnelogin.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderCreateParams.AccessOnelogin.ScimConfig;
+  }
+
+  export namespace AccessOnelogin {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * Your OneLogin account url
+       */
+      onelogin_account?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessPingone {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessPingone.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderCreateParams.AccessPingone.ScimConfig;
+  }
+
+  export namespace AccessPingone {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * Your PingOne environment identifier
+       */
+      ping_env_id?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessSaml {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessSaml.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderCreateParams.AccessSaml.ScimConfig;
+  }
+
+  export namespace AccessSaml {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * A list of SAML attribute names that will be added to your signed JWT token and
+       * can be used in SAML policy rules.
+       */
+      attributes?: Array<string>;
+
+      /**
+       * The attribute name for email in the SAML response.
+       */
+      email_attribute_name?: string;
+
+      /**
+       * Add a list of attribute names that will be returned in the response header from
+       * the Access callback.
+       */
+      header_attributes?: Array<Config.HeaderAttribute>;
+
+      /**
+       * X509 certificate to verify the signature in the SAML authentication response
+       */
+      idp_public_certs?: Array<string>;
+
+      /**
+       * IdP Entity ID or Issuer URL
+       */
+      issuer_url?: string;
+
+      /**
+       * Sign the SAML authentication request with Access credentials. To verify the
+       * signature, use the public key from the Access certs endpoints.
+       */
+      sign_request?: boolean;
+
+      /**
+       * URL to send the SAML authentication requests to
+       */
+      sso_target_url?: string;
+    }
+
+    export namespace Config {
+      export interface HeaderAttribute {
+        /**
+         * attribute name from the IDP
+         */
+        attribute_name?: string;
+
+        /**
+         * header that will be added on the request to the origin
+         */
+        header_name?: string;
+      }
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessYandex {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderCreateParams.AccessYandex.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderCreateParams.AccessYandex.ScimConfig;
+  }
+
+  export namespace AccessYandex {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessOnetimepin {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: unknown;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderCreateParams.AccessOnetimepin.ScimConfig;
+  }
+
+  export namespace AccessOnetimepin {
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+}
+
+export type IdentityProviderUpdateParams =
+  | IdentityProviderUpdateParams.AccessAzureAd
+  | IdentityProviderUpdateParams.AccessCentrify
+  | IdentityProviderUpdateParams.AccessFacebook
+  | IdentityProviderUpdateParams.AccessGitHub
+  | IdentityProviderUpdateParams.AccessGoogle
+  | IdentityProviderUpdateParams.AccessGoogleApps
+  | IdentityProviderUpdateParams.AccessLinkedin
+  | IdentityProviderUpdateParams.AccessOidc
+  | IdentityProviderUpdateParams.AccessOkta
+  | IdentityProviderUpdateParams.AccessOnelogin
+  | IdentityProviderUpdateParams.AccessPingone
+  | IdentityProviderUpdateParams.AccessSaml
+  | IdentityProviderUpdateParams.AccessYandex
+  | IdentityProviderUpdateParams.AccessOnetimepin;
+
+export namespace IdentityProviderUpdateParams {
+  export interface AccessAzureAd {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessAzureAd.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessAzureAd.ScimConfig;
+  }
+
+  export namespace AccessAzureAd {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * Should Cloudflare try to load authentication contexts from your account
+       */
+      conditional_access_enabled?: boolean;
+
+      /**
+       * Your Azure directory uuid
+       */
+      directory_id?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * Indicates the type of user interaction that is required. prompt=login forces the
+       * user to enter their credentials on that request, negating single-sign on.
+       * prompt=none is the opposite. It ensures that the user isn't presented with any
+       * interactive prompt. If the request can't be completed silently by using
+       * single-sign on, the Microsoft identity platform returns an interaction_required
+       * error. prompt=select_account interrupts single sign-on providing account
+       * selection experience listing all the accounts either in session or any
+       * remembered account or an option to choose to use a different account altogether.
+       */
+      prompt?: 'login' | 'select_account' | 'none';
+
+      /**
+       * Should Cloudflare try to load groups from your account
+       */
+      support_groups?: boolean;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessCentrify {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessCentrify.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessCentrify.ScimConfig;
+  }
+
+  export namespace AccessCentrify {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your centrify account url
+       */
+      centrify_account?: string;
+
+      /**
+       * Your centrify app id
+       */
+      centrify_app_id?: string;
+
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessFacebook {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessFacebook.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessFacebook.ScimConfig;
+  }
+
+  export namespace AccessFacebook {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessGitHub {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessGitHub.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessGitHub.ScimConfig;
+  }
+
+  export namespace AccessGitHub {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessGoogle {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessGoogle.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessGoogle.ScimConfig;
+  }
+
+  export namespace AccessGoogle {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessGoogleApps {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessGoogleApps.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessGoogleApps.ScimConfig;
+  }
+
+  export namespace AccessGoogleApps {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your companies TLD
+       */
+      apps_domain?: string;
+
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessLinkedin {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessLinkedin.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessLinkedin.ScimConfig;
+  }
+
+  export namespace AccessLinkedin {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessOidc {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessOidc.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessOidc.ScimConfig;
+  }
+
+  export namespace AccessOidc {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * The authorization_endpoint URL of your IdP
+       */
+      auth_url?: string;
+
+      /**
+       * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+       */
+      certs_url?: string;
+
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * OAuth scopes
+       */
+      scopes?: Array<string>;
+
+      /**
+       * The token_endpoint URL of your IdP
+       */
+      token_url?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessOkta {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessOkta.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessOkta.ScimConfig;
+  }
+
+  export namespace AccessOkta {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your okta authorization server id
+       */
+      authorization_server_id?: string;
+
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * Your okta account url
+       */
+      okta_account?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessOnelogin {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessOnelogin.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessOnelogin.ScimConfig;
+  }
+
+  export namespace AccessOnelogin {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * Your OneLogin account url
+       */
+      onelogin_account?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessPingone {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessPingone.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessPingone.ScimConfig;
+  }
+
+  export namespace AccessPingone {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Custom claims
+       */
+      claims?: Array<string>;
+
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+
+      /**
+       * The claim name for email in the id_token response.
+       */
+      email_claim_name?: string;
+
+      /**
+       * Your PingOne environment identifier
+       */
+      ping_env_id?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessSaml {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessSaml.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessSaml.ScimConfig;
+  }
+
+  export namespace AccessSaml {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * A list of SAML attribute names that will be added to your signed JWT token and
+       * can be used in SAML policy rules.
+       */
+      attributes?: Array<string>;
+
+      /**
+       * The attribute name for email in the SAML response.
+       */
+      email_attribute_name?: string;
+
+      /**
+       * Add a list of attribute names that will be returned in the response header from
+       * the Access callback.
+       */
+      header_attributes?: Array<Config.HeaderAttribute>;
+
+      /**
+       * X509 certificate to verify the signature in the SAML authentication response
+       */
+      idp_public_certs?: Array<string>;
+
+      /**
+       * IdP Entity ID or Issuer URL
+       */
+      issuer_url?: string;
+
+      /**
+       * Sign the SAML authentication request with Access credentials. To verify the
+       * signature, use the public key from the Access certs endpoints.
+       */
+      sign_request?: boolean;
+
+      /**
+       * URL to send the SAML authentication requests to
+       */
+      sso_target_url?: string;
+    }
+
+    export namespace Config {
+      export interface HeaderAttribute {
+        /**
+         * attribute name from the IDP
+         */
+        attribute_name?: string;
+
+        /**
+         * header that will be added on the request to the origin
+         */
+        header_name?: string;
+      }
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessYandex {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: IdentityProviderUpdateParams.AccessYandex.Config;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessYandex.ScimConfig;
+  }
+
+  export namespace AccessYandex {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    export interface Config {
+      /**
+       * Your OAuth Client ID
+       */
+      client_id?: string;
+
+      /**
+       * Your OAuth Client Secret
+       */
+      client_secret?: string;
+    }
+
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
+  }
+
+  export interface AccessOnetimepin {
+    /**
+     * Body param: The configuration parameters for the identity provider. To view the
+     * required parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: unknown;
+
+    /**
+     * Body param: The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+
+    /**
+     * Body param: The type of identity provider. To determine the value for a specific
+     * provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type:
+      | 'onetimepin'
+      | 'azureAD'
+      | 'saml'
+      | 'centrify'
+      | 'facebook'
+      | 'github'
+      | 'google-apps'
+      | 'google'
+      | 'linkedin'
+      | 'oidc'
+      | 'okta'
+      | 'onelogin'
+      | 'pingone'
+      | 'yandex';
+
+    /**
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
+     */
+    account_id?: string;
+
+    /**
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
+     */
+    zone_id?: string;
+
+    /**
+     * Body param: The configuration settings for enabling a System for Cross-Domain
+     * Identity Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderUpdateParams.AccessOnetimepin.ScimConfig;
+  }
+
+  export namespace AccessOnetimepin {
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    export interface ScimConfig {
+      /**
+       * A flag to enable or disable SCIM for the identity provider.
+       */
+      enabled?: boolean;
+
+      /**
+       * A flag to revoke a user's session in Access and force a reauthentication on the
+       * user's Gateway session when they have been added or removed from a group in the
+       * Identity Provider.
+       */
+      group_member_deprovision?: boolean;
+
+      /**
+       * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+       * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+       * enabled.
+       */
+      seat_deprovision?: boolean;
+
+      /**
+       * A read-only token generated when the SCIM integration is enabled for the first
+       * time. It is redacted on subsequent requests. If you lose this you will need to
+       * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+       */
+      secret?: string;
+
+      /**
+       * A flag to enable revoking a user's session in Access and Gateway when they have
+       * been deprovisioned in the Identity Provider.
+       */
+      user_deprovision?: boolean;
+    }
   }
 }
 
@@ -3933,9 +6942,10 @@ export interface IdentityProviderGetParams {
 }
 
 export namespace IdentityProviders {
-  export import AccessIdentityProviders = IdentityProvidersAPI.AccessIdentityProviders;
+  export import ZeroTrustIdentityProviders = IdentityProvidersAPI.ZeroTrustIdentityProviders;
   export import IdentityProviderListResponse = IdentityProvidersAPI.IdentityProviderListResponse;
   export import IdentityProviderDeleteResponse = IdentityProvidersAPI.IdentityProviderDeleteResponse;
+  export import IdentityProviderListResponsesSinglePage = IdentityProvidersAPI.IdentityProviderListResponsesSinglePage;
   export import IdentityProviderCreateParams = IdentityProvidersAPI.IdentityProviderCreateParams;
   export import IdentityProviderUpdateParams = IdentityProvidersAPI.IdentityProviderUpdateParams;
   export import IdentityProviderListParams = IdentityProvidersAPI.IdentityProviderListParams;