cloudflare 3.0.0 → 3.2.0

package/resources/zero-trust/identity-providers.d.ts

@@ -6,11 +6,11 @@ export declare class IdentityProviders extends APIResource {
     /**
      * Adds a new identity provider to Access.
      */
-    create(params: IdentityProviderCreateParams, options?: Core.RequestOptions): Core.APIPromise<ZeroTrustIdentityProviders>;
+    create(params: IdentityProviderCreateParams, options?: Core.RequestOptions): Core.APIPromise<IdentityProvider>;
     /**
      * Updates a configured identity provider.
      */
-    update(uuid: string, params: IdentityProviderUpdateParams, options?: Core.RequestOptions): Core.APIPromise<ZeroTrustIdentityProviders>;
+    update(uuid: string, params: IdentityProviderUpdateParams, options?: Core.RequestOptions): Core.APIPromise<IdentityProvider>;
     /**
      * Lists all configured identity providers.
      */
@@ -24,121 +24,108 @@ export declare class IdentityProviders extends APIResource {
     /**
      * Fetches a configured identity provider.
      */
-    get(uuid: string, params?: IdentityProviderGetParams, options?: Core.RequestOptions): Core.APIPromise<ZeroTrustIdentityProviders>;
-    get(uuid: string, options?: Core.RequestOptions): Core.APIPromise<ZeroTrustIdentityProviders>;
+    get(uuid: string, params?: IdentityProviderGetParams, options?: Core.RequestOptions): Core.APIPromise<IdentityProvider>;
+    get(uuid: string, options?: Core.RequestOptions): Core.APIPromise<IdentityProvider>;
 }
 export declare class IdentityProviderListResponsesSinglePage extends SinglePage<IdentityProviderListResponse> {
 }
-export type ZeroTrustIdentityProviders = ZeroTrustIdentityProviders.AccessAzureAd | ZeroTrustIdentityProviders.AccessCentrify | ZeroTrustIdentityProviders.AccessFacebook | ZeroTrustIdentityProviders.AccessGitHub | ZeroTrustIdentityProviders.AccessGoogle | ZeroTrustIdentityProviders.AccessGoogleApps | ZeroTrustIdentityProviders.AccessLinkedin | ZeroTrustIdentityProviders.AccessOidc | ZeroTrustIdentityProviders.AccessOkta | ZeroTrustIdentityProviders.AccessOnelogin | ZeroTrustIdentityProviders.AccessPingone | ZeroTrustIdentityProviders.AccessSaml | ZeroTrustIdentityProviders.AccessYandex | ZeroTrustIdentityProviders.AccessOnetimepin;
-export declare namespace ZeroTrustIdentityProviders {
-    interface AccessAzureAd {
+export interface AzureAD {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: AzureAD.Config;
+    /**
+     * The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+    /**
+     * The type of identity provider. To determine the value for a specific provider,
+     * refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type: IdentityProviderType;
+    /**
+     * UUID
+     */
+    id?: string;
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    scim_config?: ScimConfig;
+}
+export declare namespace AzureAD {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    interface Config {
         /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         * Custom claims
          */
-        config: AccessAzureAd.Config;
+        claims?: Array<string>;
         /**
-         * The name of the identity provider, shown to users on the login page.
+         * Your OAuth Client ID
          */
-        name: string;
+        client_id?: string;
         /**
-         * The type of identity provider. To determine the value for a specific provider,
-         * refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         * Your OAuth Client Secret
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        client_secret?: string;
         /**
-         * UUID
+         * Should Cloudflare try to load authentication contexts from your account
          */
-        id?: string;
+        conditional_access_enabled?: boolean;
         /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
+         * Your Azure directory uuid
          */
-        scim_config?: AccessAzureAd.ScimConfig;
-    }
-    namespace AccessAzureAd {
+        directory_id?: string;
         /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         * The claim name for email in the id_token response.
          */
-        interface Config {
-            /**
-             * Custom claims
-             */
-            claims?: Array<string>;
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-            /**
-             * Should Cloudflare try to load authentication contexts from your account
-             */
-            conditional_access_enabled?: boolean;
-            /**
-             * Your Azure directory uuid
-             */
-            directory_id?: string;
-            /**
-             * The claim name for email in the id_token response.
-             */
-            email_claim_name?: string;
-            /**
-             * Indicates the type of user interaction that is required. prompt=login forces the
-             * user to enter their credentials on that request, negating single-sign on.
-             * prompt=none is the opposite. It ensures that the user isn't presented with any
-             * interactive prompt. If the request can't be completed silently by using
-             * single-sign on, the Microsoft identity platform returns an interaction_required
-             * error. prompt=select_account interrupts single sign-on providing account
-             * selection experience listing all the accounts either in session or any
-             * remembered account or an option to choose to use a different account altogether.
-             */
-            prompt?: 'login' | 'select_account' | 'none';
-            /**
-             * Should Cloudflare try to load groups from your account
-             */
-            support_groups?: boolean;
-        }
+        email_claim_name?: string;
         /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
+         * Indicates the type of user interaction that is required. prompt=login forces the
+         * user to enter their credentials on that request, negating single-sign on.
+         * prompt=none is the opposite. It ensures that the user isn't presented with any
+         * interactive prompt. If the request can't be completed silently by using
+         * single-sign on, the Microsoft identity platform returns an interaction_required
+         * error. prompt=select_account interrupts single sign-on providing account
+         * selection experience listing all the accounts either in session or any
+         * remembered account or an option to choose to use a different account altogether.
          */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        prompt?: 'login' | 'select_account' | 'none';
+        /**
+         * Should Cloudflare try to load groups from your account
+         */
+        support_groups?: boolean;
     }
+}
+export interface GenericOAuthConfig {
+    /**
+     * Your OAuth Client ID
+     */
+    client_id?: string;
+    /**
+     * Your OAuth Client Secret
+     */
+    client_secret?: string;
+}
+export interface GenericOAuthConfigParam {
+    /**
+     * Your OAuth Client ID
+     */
+    client_id?: string;
+    /**
+     * Your OAuth Client Secret
+     */
+    client_secret?: string;
+}
+export type IdentityProvider = AzureAD | IdentityProvider.AccessCentrify | IdentityProvider.AccessFacebook | IdentityProvider.AccessGitHub | IdentityProvider.AccessGoogle | IdentityProvider.AccessGoogleApps | IdentityProvider.AccessLinkedin | IdentityProvider.AccessOIDC | IdentityProvider.AccessOkta | IdentityProvider.AccessOnelogin | IdentityProvider.AccessPingone | IdentityProvider.AccessSAML | IdentityProvider.AccessYandex | IdentityProvider.AccessOnetimepin;
+export declare namespace IdentityProvider {
     interface AccessCentrify {
         /**
          * The configuration parameters for the identity provider. To view the required
@@ -155,7 +142,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -164,7 +151,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessCentrify.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessCentrify {
         /**
@@ -198,39 +185,6 @@ export declare namespace ZeroTrustIdentityProviders {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessFacebook {
         /**
@@ -238,7 +192,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessFacebook.Config;
+        config: IdentityProvidersAPI.GenericOAuthConfig;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -248,7 +202,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -257,57 +211,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessFacebook.ScimConfig;
-    }
-    namespace AccessFacebook {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     interface AccessGitHub {
         /**
@@ -315,7 +219,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessGitHub.Config;
+        config: IdentityProvidersAPI.GenericOAuthConfig;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -325,7 +229,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -334,57 +238,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessGitHub.ScimConfig;
-    }
-    namespace AccessGitHub {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     interface AccessGoogle {
         /**
@@ -402,7 +256,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -411,7 +265,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessGoogle.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessGoogle {
         /**
@@ -437,39 +291,6 @@ export declare namespace ZeroTrustIdentityProviders {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessGoogleApps {
         /**
@@ -487,7 +308,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -496,7 +317,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessGoogleApps.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessGoogleApps {
         /**
@@ -526,39 +347,6 @@ export declare namespace ZeroTrustIdentityProviders {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessLinkedin {
         /**
@@ -566,7 +354,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessLinkedin.Config;
+        config: IdentityProvidersAPI.GenericOAuthConfig;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -576,7 +364,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -585,65 +373,15 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessLinkedin.ScimConfig;
-    }
-    namespace AccessLinkedin {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
-    interface AccessOidc {
+    interface AccessOIDC {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessOidc.Config;
+        config: AccessOIDC.Config;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -653,7 +391,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -662,9 +400,9 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessOidc.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
-    namespace AccessOidc {
+    namespace AccessOIDC {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -704,39 +442,6 @@ export declare namespace ZeroTrustIdentityProviders {
              */
             token_url?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessOkta {
         /**
@@ -754,7 +459,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -763,7 +468,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessOkta.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessOkta {
         /**
@@ -797,41 +502,8 @@ export declare namespace ZeroTrustIdentityProviders {
              */
             okta_account?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
-    }
-    interface AccessOnelogin {
+    }
+    interface AccessOnelogin {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -847,7 +519,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -856,7 +528,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessOnelogin.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessOnelogin {
         /**
@@ -886,39 +558,6 @@ export declare namespace ZeroTrustIdentityProviders {
              */
             onelogin_account?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessPingone {
         /**
@@ -936,7 +575,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -945,7 +584,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessPingone.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessPingone {
         /**
@@ -975,47 +614,14 @@ export declare namespace ZeroTrustIdentityProviders {
              */
             ping_env_id?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
-    interface AccessSaml {
+    interface AccessSAML {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessSaml.Config;
+        config: AccessSAML.Config;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -1025,7 +631,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1034,9 +640,9 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessSaml.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
-    namespace AccessSaml {
+    namespace AccessSAML {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -1087,39 +693,6 @@ export declare namespace ZeroTrustIdentityProviders {
                 header_name?: string;
             }
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessYandex {
         /**
@@ -1127,7 +700,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessYandex.Config;
+        config: IdentityProvidersAPI.GenericOAuthConfig;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -1137,7 +710,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1146,57 +719,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessYandex.ScimConfig;
-    }
-    namespace AccessYandex {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     interface AccessOnetimepin {
         /**
@@ -1214,7 +737,7 @@ export declare namespace ZeroTrustIdentityProviders {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1223,154 +746,89 @@ export declare namespace ZeroTrustIdentityProviders {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessOnetimepin.ScimConfig;
-    }
-    namespace AccessOnetimepin {
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
 }
-export type IdentityProviderListResponse = IdentityProviderListResponse.AccessAzureAd | IdentityProviderListResponse.AccessCentrify | IdentityProviderListResponse.AccessFacebook | IdentityProviderListResponse.AccessGitHub | IdentityProviderListResponse.AccessGoogle | IdentityProviderListResponse.AccessGoogleApps | IdentityProviderListResponse.AccessLinkedin | IdentityProviderListResponse.AccessOidc | IdentityProviderListResponse.AccessOkta | IdentityProviderListResponse.AccessOnelogin | IdentityProviderListResponse.AccessPingone | IdentityProviderListResponse.AccessSaml | IdentityProviderListResponse.AccessYandex;
+/**
+ * The type of identity provider. To determine the value for a specific provider,
+ * refer to our
+ * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+ */
+export type IdentityProviderType = 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+/**
+ * The type of identity provider. To determine the value for a specific provider,
+ * refer to our
+ * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+ */
+export type IdentityProviderTypeParam = 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+/**
+ * The configuration settings for enabling a System for Cross-Domain Identity
+ * Management (SCIM) with the identity provider.
+ */
+export interface ScimConfig {
+    /**
+     * A flag to enable or disable SCIM for the identity provider.
+     */
+    enabled?: boolean;
+    /**
+     * A flag to revoke a user's session in Access and force a reauthentication on the
+     * user's Gateway session when they have been added or removed from a group in the
+     * Identity Provider.
+     */
+    group_member_deprovision?: boolean;
+    /**
+     * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+     * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+     * enabled.
+     */
+    seat_deprovision?: boolean;
+    /**
+     * A read-only token generated when the SCIM integration is enabled for the first
+     * time. It is redacted on subsequent requests. If you lose this you will need to
+     * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+     */
+    secret?: string;
+    /**
+     * A flag to enable revoking a user's session in Access and Gateway when they have
+     * been deprovisioned in the Identity Provider.
+     */
+    user_deprovision?: boolean;
+}
+/**
+ * The configuration settings for enabling a System for Cross-Domain Identity
+ * Management (SCIM) with the identity provider.
+ */
+export interface ScimConfigParam {
+    /**
+     * A flag to enable or disable SCIM for the identity provider.
+     */
+    enabled?: boolean;
+    /**
+     * A flag to revoke a user's session in Access and force a reauthentication on the
+     * user's Gateway session when they have been added or removed from a group in the
+     * Identity Provider.
+     */
+    group_member_deprovision?: boolean;
+    /**
+     * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
+     * in the Identity Provider. This cannot be enabled unless user_deprovision is also
+     * enabled.
+     */
+    seat_deprovision?: boolean;
+    /**
+     * A read-only token generated when the SCIM integration is enabled for the first
+     * time. It is redacted on subsequent requests. If you lose this you will need to
+     * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+     */
+    secret?: string;
+    /**
+     * A flag to enable revoking a user's session in Access and Gateway when they have
+     * been deprovisioned in the Identity Provider.
+     */
+    user_deprovision?: boolean;
+}
+export type IdentityProviderListResponse = AzureAD | IdentityProviderListResponse.AccessCentrify | IdentityProviderListResponse.AccessFacebook | IdentityProviderListResponse.AccessGitHub | IdentityProviderListResponse.AccessGoogle | IdentityProviderListResponse.AccessGoogleApps | IdentityProviderListResponse.AccessLinkedin | IdentityProviderListResponse.AccessOIDC | IdentityProviderListResponse.AccessOkta | IdentityProviderListResponse.AccessOnelogin | IdentityProviderListResponse.AccessPingone | IdentityProviderListResponse.AccessSAML | IdentityProviderListResponse.AccessYandex;
 export declare namespace IdentityProviderListResponse {
-    interface AccessAzureAd {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        config: AccessAzureAd.Config;
-        /**
-         * The name of the identity provider, shown to users on the login page.
-         */
-        name: string;
-        /**
-         * The type of identity provider. To determine the value for a specific provider,
-         * refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
-        /**
-         * UUID
-         */
-        id?: string;
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        scim_config?: AccessAzureAd.ScimConfig;
-    }
-    namespace AccessAzureAd {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Custom claims
-             */
-            claims?: Array<string>;
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-            /**
-             * Should Cloudflare try to load authentication contexts from your account
-             */
-            conditional_access_enabled?: boolean;
-            /**
-             * Your Azure directory uuid
-             */
-            directory_id?: string;
-            /**
-             * The claim name for email in the id_token response.
-             */
-            email_claim_name?: string;
-            /**
-             * Indicates the type of user interaction that is required. prompt=login forces the
-             * user to enter their credentials on that request, negating single-sign on.
-             * prompt=none is the opposite. It ensures that the user isn't presented with any
-             * interactive prompt. If the request can't be completed silently by using
-             * single-sign on, the Microsoft identity platform returns an interaction_required
-             * error. prompt=select_account interrupts single sign-on providing account
-             * selection experience listing all the accounts either in session or any
-             * remembered account or an option to choose to use a different account altogether.
-             */
-            prompt?: 'login' | 'select_account' | 'none';
-            /**
-             * Should Cloudflare try to load groups from your account
-             */
-            support_groups?: boolean;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
-    }
     interface AccessCentrify {
         /**
          * The configuration parameters for the identity provider. To view the required
@@ -1387,7 +845,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1396,7 +854,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessCentrify.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessCentrify {
         /**
@@ -1430,39 +888,6 @@ export declare namespace IdentityProviderListResponse {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessFacebook {
         /**
@@ -1470,7 +895,7 @@ export declare namespace IdentityProviderListResponse {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessFacebook.Config;
+        config: IdentityProvidersAPI.GenericOAuthConfig;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -1480,7 +905,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1489,57 +914,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessFacebook.ScimConfig;
-    }
-    namespace AccessFacebook {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     interface AccessGitHub {
         /**
@@ -1547,7 +922,7 @@ export declare namespace IdentityProviderListResponse {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessGitHub.Config;
+        config: IdentityProvidersAPI.GenericOAuthConfig;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -1557,66 +932,16 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
-        /**
-         * UUID
-         */
-        id?: string;
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        scim_config?: AccessGitHub.ScimConfig;
-    }
-    namespace AccessGitHub {
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         * UUID
          */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
+        id?: string;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     interface AccessGoogle {
         /**
@@ -1634,7 +959,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1643,7 +968,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessGoogle.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessGoogle {
         /**
@@ -1669,39 +994,6 @@ export declare namespace IdentityProviderListResponse {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessGoogleApps {
         /**
@@ -1719,7 +1011,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1728,7 +1020,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessGoogleApps.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessGoogleApps {
         /**
@@ -1758,39 +1050,6 @@ export declare namespace IdentityProviderListResponse {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessLinkedin {
         /**
@@ -1798,7 +1057,7 @@ export declare namespace IdentityProviderListResponse {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessLinkedin.Config;
+        config: IdentityProvidersAPI.GenericOAuthConfig;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -1808,7 +1067,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1817,65 +1076,15 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessLinkedin.ScimConfig;
-    }
-    namespace AccessLinkedin {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
-    interface AccessOidc {
+    interface AccessOIDC {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessOidc.Config;
+        config: AccessOIDC.Config;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -1885,7 +1094,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1894,9 +1103,9 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessOidc.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
-    namespace AccessOidc {
+    namespace AccessOIDC {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -1936,39 +1145,6 @@ export declare namespace IdentityProviderListResponse {
              */
             token_url?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessOkta {
         /**
@@ -1986,7 +1162,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -1995,7 +1171,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessOkta.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessOkta {
         /**
@@ -2029,39 +1205,6 @@ export declare namespace IdentityProviderListResponse {
              */
             okta_account?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessOnelogin {
         /**
@@ -2079,7 +1222,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -2088,7 +1231,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessOnelogin.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessOnelogin {
         /**
@@ -2118,39 +1261,6 @@ export declare namespace IdentityProviderListResponse {
              */
             onelogin_account?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessPingone {
         /**
@@ -2168,7 +1278,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -2177,7 +1287,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessPingone.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
     namespace AccessPingone {
         /**
@@ -2207,47 +1317,14 @@ export declare namespace IdentityProviderListResponse {
              */
             ping_env_id?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
-    interface AccessSaml {
+    interface AccessSAML {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessSaml.Config;
+        config: AccessSAML.Config;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -2257,7 +1334,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -2266,9 +1343,9 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessSaml.ScimConfig;
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
-    namespace AccessSaml {
+    namespace AccessSAML {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -2319,39 +1396,6 @@ export declare namespace IdentityProviderListResponse {
                 header_name?: string;
             }
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessYandex {
         /**
@@ -2359,7 +1403,7 @@ export declare namespace IdentityProviderListResponse {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessYandex.Config;
+        config: IdentityProvidersAPI.GenericOAuthConfig;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -2369,7 +1413,7 @@ export declare namespace IdentityProviderListResponse {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProvidersAPI.IdentityProviderType;
         /**
          * UUID
          */
@@ -2378,57 +1422,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: AccessYandex.ScimConfig;
-    }
-    namespace AccessYandex {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: IdentityProvidersAPI.ScimConfig;
     }
 }
 export interface IdentityProviderDeleteResponse {
@@ -2437,15 +1431,15 @@ export interface IdentityProviderDeleteResponse {
      */
     id?: string;
 }
-export type IdentityProviderCreateParams = IdentityProviderCreateParams.AccessAzureAd | IdentityProviderCreateParams.AccessCentrify | IdentityProviderCreateParams.AccessFacebook | IdentityProviderCreateParams.AccessGitHub | IdentityProviderCreateParams.AccessGoogle | IdentityProviderCreateParams.AccessGoogleApps | IdentityProviderCreateParams.AccessLinkedin | IdentityProviderCreateParams.AccessOidc | IdentityProviderCreateParams.AccessOkta | IdentityProviderCreateParams.AccessOnelogin | IdentityProviderCreateParams.AccessPingone | IdentityProviderCreateParams.AccessSaml | IdentityProviderCreateParams.AccessYandex | IdentityProviderCreateParams.AccessOnetimepin;
+export type IdentityProviderCreateParams = IdentityProviderCreateParams.AzureAD | IdentityProviderCreateParams.AccessCentrify | IdentityProviderCreateParams.AccessFacebook | IdentityProviderCreateParams.AccessGitHub | IdentityProviderCreateParams.AccessGoogle | IdentityProviderCreateParams.AccessGoogleApps | IdentityProviderCreateParams.AccessLinkedin | IdentityProviderCreateParams.AccessOIDC | IdentityProviderCreateParams.AccessOkta | IdentityProviderCreateParams.AccessOnelogin | IdentityProviderCreateParams.AccessPingone | IdentityProviderCreateParams.AccessSAML | IdentityProviderCreateParams.AccessYandex | IdentityProviderCreateParams.AccessOnetimepin;
 export declare namespace IdentityProviderCreateParams {
-    interface AccessAzureAd {
+    interface AzureAD {
         /**
          * Body param: The configuration parameters for the identity provider. To view the
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderCreateParams.AccessAzureAd.Config;
+        config: IdentityProviderCreateParams.AzureAD.Config;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -2455,7 +1449,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -2470,9 +1464,9 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessAzureAd.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
-    namespace AccessAzureAd {
+    namespace AzureAD {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -2519,39 +1513,6 @@ export declare namespace IdentityProviderCreateParams {
              */
             support_groups?: boolean;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessCentrify {
         /**
@@ -2569,7 +1530,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -2584,7 +1545,7 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessCentrify.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessCentrify {
         /**
@@ -2618,39 +1579,6 @@ export declare namespace IdentityProviderCreateParams {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessFacebook {
         /**
@@ -2658,7 +1586,7 @@ export declare namespace IdentityProviderCreateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderCreateParams.AccessFacebook.Config;
+        config: GenericOAuthConfigParam;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -2668,7 +1596,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -2682,58 +1610,8 @@ export declare namespace IdentityProviderCreateParams {
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
-         */
-        scim_config?: IdentityProviderCreateParams.AccessFacebook.ScimConfig;
-    }
-    namespace AccessFacebook {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+         */
+        scim_config?: ScimConfigParam;
     }
     interface AccessGitHub {
         /**
@@ -2741,7 +1619,7 @@ export declare namespace IdentityProviderCreateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderCreateParams.AccessGitHub.Config;
+        config: GenericOAuthConfigParam;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -2751,7 +1629,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -2766,57 +1644,7 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessGitHub.ScimConfig;
-    }
-    namespace AccessGitHub {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
     interface AccessGoogle {
         /**
@@ -2834,7 +1662,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -2849,7 +1677,7 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessGoogle.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessGoogle {
         /**
@@ -2875,39 +1703,6 @@ export declare namespace IdentityProviderCreateParams {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessGoogleApps {
         /**
@@ -2925,7 +1720,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -2940,7 +1735,7 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessGoogleApps.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessGoogleApps {
         /**
@@ -2970,39 +1765,6 @@ export declare namespace IdentityProviderCreateParams {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessLinkedin {
         /**
@@ -3010,7 +1772,7 @@ export declare namespace IdentityProviderCreateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderCreateParams.AccessLinkedin.Config;
+        config: GenericOAuthConfigParam;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -3020,7 +1782,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3035,65 +1797,15 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessLinkedin.ScimConfig;
-    }
-    namespace AccessLinkedin {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
-    interface AccessOidc {
+    interface AccessOIDC {
         /**
          * Body param: The configuration parameters for the identity provider. To view the
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderCreateParams.AccessOidc.Config;
+        config: IdentityProviderCreateParams.AccessOIDC.Config;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -3103,7 +1815,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3118,9 +1830,9 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessOidc.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
-    namespace AccessOidc {
+    namespace AccessOIDC {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -3160,39 +1872,6 @@ export declare namespace IdentityProviderCreateParams {
              */
             token_url?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessOkta {
         /**
@@ -3210,7 +1889,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3225,7 +1904,7 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessOkta.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessOkta {
         /**
@@ -3259,39 +1938,6 @@ export declare namespace IdentityProviderCreateParams {
              */
             okta_account?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessOnelogin {
         /**
@@ -3309,7 +1955,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3324,7 +1970,7 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessOnelogin.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessOnelogin {
         /**
@@ -3354,39 +2000,6 @@ export declare namespace IdentityProviderCreateParams {
              */
             onelogin_account?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessPingone {
         /**
@@ -3404,7 +2017,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3419,7 +2032,7 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessPingone.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessPingone {
         /**
@@ -3449,47 +2062,14 @@ export declare namespace IdentityProviderCreateParams {
              */
             ping_env_id?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
-    interface AccessSaml {
+    interface AccessSAML {
         /**
          * Body param: The configuration parameters for the identity provider. To view the
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderCreateParams.AccessSaml.Config;
+        config: IdentityProviderCreateParams.AccessSAML.Config;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -3499,7 +2079,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3514,9 +2094,9 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessSaml.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
-    namespace AccessSaml {
+    namespace AccessSAML {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -3567,39 +2147,6 @@ export declare namespace IdentityProviderCreateParams {
                 header_name?: string;
             }
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessYandex {
         /**
@@ -3607,7 +2154,7 @@ export declare namespace IdentityProviderCreateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderCreateParams.AccessYandex.Config;
+        config: GenericOAuthConfigParam;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -3617,7 +2164,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3632,57 +2179,7 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessYandex.ScimConfig;
-    }
-    namespace AccessYandex {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
     interface AccessOnetimepin {
         /**
@@ -3700,7 +2197,7 @@ export declare namespace IdentityProviderCreateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3715,53 +2212,18 @@ export declare namespace IdentityProviderCreateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderCreateParams.AccessOnetimepin.ScimConfig;
-    }
-    namespace AccessOnetimepin {
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
 }
-export type IdentityProviderUpdateParams = IdentityProviderUpdateParams.AccessAzureAd | IdentityProviderUpdateParams.AccessCentrify | IdentityProviderUpdateParams.AccessFacebook | IdentityProviderUpdateParams.AccessGitHub | IdentityProviderUpdateParams.AccessGoogle | IdentityProviderUpdateParams.AccessGoogleApps | IdentityProviderUpdateParams.AccessLinkedin | IdentityProviderUpdateParams.AccessOidc | IdentityProviderUpdateParams.AccessOkta | IdentityProviderUpdateParams.AccessOnelogin | IdentityProviderUpdateParams.AccessPingone | IdentityProviderUpdateParams.AccessSaml | IdentityProviderUpdateParams.AccessYandex | IdentityProviderUpdateParams.AccessOnetimepin;
+export type IdentityProviderUpdateParams = IdentityProviderUpdateParams.AzureAD | IdentityProviderUpdateParams.AccessCentrify | IdentityProviderUpdateParams.AccessFacebook | IdentityProviderUpdateParams.AccessGitHub | IdentityProviderUpdateParams.AccessGoogle | IdentityProviderUpdateParams.AccessGoogleApps | IdentityProviderUpdateParams.AccessLinkedin | IdentityProviderUpdateParams.AccessOIDC | IdentityProviderUpdateParams.AccessOkta | IdentityProviderUpdateParams.AccessOnelogin | IdentityProviderUpdateParams.AccessPingone | IdentityProviderUpdateParams.AccessSAML | IdentityProviderUpdateParams.AccessYandex | IdentityProviderUpdateParams.AccessOnetimepin;
 export declare namespace IdentityProviderUpdateParams {
-    interface AccessAzureAd {
+    interface AzureAD {
         /**
          * Body param: The configuration parameters for the identity provider. To view the
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderUpdateParams.AccessAzureAd.Config;
+        config: IdentityProviderUpdateParams.AzureAD.Config;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -3771,7 +2233,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3786,9 +2248,9 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessAzureAd.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
-    namespace AccessAzureAd {
+    namespace AzureAD {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -3835,39 +2297,6 @@ export declare namespace IdentityProviderUpdateParams {
              */
             support_groups?: boolean;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessCentrify {
         /**
@@ -3885,7 +2314,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3900,7 +2329,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessCentrify.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessCentrify {
         /**
@@ -3912,60 +2341,27 @@ export declare namespace IdentityProviderUpdateParams {
             /**
              * Your centrify account url
              */
-            centrify_account?: string;
-            /**
-             * Your centrify app id
-             */
-            centrify_app_id?: string;
-            /**
-             * Custom claims
-             */
-            claims?: Array<string>;
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-            /**
-             * The claim name for email in the id_token response.
-             */
-            email_claim_name?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
+            centrify_account?: string;
             /**
-             * A flag to enable or disable SCIM for the identity provider.
+             * Your centrify app id
              */
-            enabled?: boolean;
+            centrify_app_id?: string;
             /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
+             * Custom claims
              */
-            group_member_deprovision?: boolean;
+            claims?: Array<string>;
             /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
+             * Your OAuth Client ID
              */
-            seat_deprovision?: boolean;
+            client_id?: string;
             /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+             * Your OAuth Client Secret
              */
-            secret?: string;
+            client_secret?: string;
             /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
+             * The claim name for email in the id_token response.
              */
-            user_deprovision?: boolean;
+            email_claim_name?: string;
         }
     }
     interface AccessFacebook {
@@ -3974,7 +2370,7 @@ export declare namespace IdentityProviderUpdateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderUpdateParams.AccessFacebook.Config;
+        config: GenericOAuthConfigParam;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -3984,7 +2380,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -3999,57 +2395,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessFacebook.ScimConfig;
-    }
-    namespace AccessFacebook {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
     interface AccessGitHub {
         /**
@@ -4057,7 +2403,7 @@ export declare namespace IdentityProviderUpdateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderUpdateParams.AccessGitHub.Config;
+        config: GenericOAuthConfigParam;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -4067,7 +2413,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4082,57 +2428,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessGitHub.ScimConfig;
-    }
-    namespace AccessGitHub {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
     interface AccessGoogle {
         /**
@@ -4150,7 +2446,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4165,7 +2461,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessGoogle.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessGoogle {
         /**
@@ -4191,39 +2487,6 @@ export declare namespace IdentityProviderUpdateParams {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessGoogleApps {
         /**
@@ -4241,7 +2504,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4256,7 +2519,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessGoogleApps.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessGoogleApps {
         /**
@@ -4286,39 +2549,6 @@ export declare namespace IdentityProviderUpdateParams {
              */
             email_claim_name?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessLinkedin {
         /**
@@ -4326,7 +2556,7 @@ export declare namespace IdentityProviderUpdateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderUpdateParams.AccessLinkedin.Config;
+        config: GenericOAuthConfigParam;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -4336,7 +2566,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4351,65 +2581,15 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessLinkedin.ScimConfig;
-    }
-    namespace AccessLinkedin {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
-    interface AccessOidc {
+    interface AccessOIDC {
         /**
          * Body param: The configuration parameters for the identity provider. To view the
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderUpdateParams.AccessOidc.Config;
+        config: IdentityProviderUpdateParams.AccessOIDC.Config;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -4419,7 +2599,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4434,9 +2614,9 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessOidc.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
-    namespace AccessOidc {
+    namespace AccessOIDC {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -4476,39 +2656,6 @@ export declare namespace IdentityProviderUpdateParams {
              */
             token_url?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessOkta {
         /**
@@ -4526,7 +2673,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4541,7 +2688,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessOkta.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessOkta {
         /**
@@ -4575,39 +2722,6 @@ export declare namespace IdentityProviderUpdateParams {
              */
             okta_account?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessOnelogin {
         /**
@@ -4625,7 +2739,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4640,7 +2754,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessOnelogin.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessOnelogin {
         /**
@@ -4670,39 +2784,6 @@ export declare namespace IdentityProviderUpdateParams {
              */
             onelogin_account?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessPingone {
         /**
@@ -4720,7 +2801,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4735,7 +2816,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessPingone.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
     namespace AccessPingone {
         /**
@@ -4765,47 +2846,14 @@ export declare namespace IdentityProviderUpdateParams {
              */
             ping_env_id?: string;
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
-    interface AccessSaml {
+    interface AccessSAML {
         /**
          * Body param: The configuration parameters for the identity provider. To view the
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderUpdateParams.AccessSaml.Config;
+        config: IdentityProviderUpdateParams.AccessSAML.Config;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -4815,7 +2863,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4830,9 +2878,9 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessSaml.ScimConfig;
+        scim_config?: ScimConfigParam;
     }
-    namespace AccessSaml {
+    namespace AccessSAML {
         /**
          * The configuration parameters for the identity provider. To view the required
          * parameters for a specific provider, refer to our
@@ -4883,39 +2931,6 @@ export declare namespace IdentityProviderUpdateParams {
                 header_name?: string;
             }
         }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
     }
     interface AccessYandex {
         /**
@@ -4923,7 +2938,7 @@ export declare namespace IdentityProviderUpdateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProviderUpdateParams.AccessYandex.Config;
+        config: GenericOAuthConfigParam;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -4933,7 +2948,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -4948,57 +2963,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessYandex.ScimConfig;
-    }
-    namespace AccessYandex {
-        /**
-         * The configuration parameters for the identity provider. To view the required
-         * parameters for a specific provider, refer to our
-         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
-         */
-        interface Config {
-            /**
-             * Your OAuth Client ID
-             */
-            client_id?: string;
-            /**
-             * Your OAuth Client Secret
-             */
-            client_secret?: string;
-        }
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
     interface AccessOnetimepin {
         /**
@@ -5016,7 +2981,7 @@ export declare namespace IdentityProviderUpdateParams {
          * provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+        type: IdentityProviderTypeParam;
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -5031,42 +2996,7 @@ export declare namespace IdentityProviderUpdateParams {
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProviderUpdateParams.AccessOnetimepin.ScimConfig;
-    }
-    namespace AccessOnetimepin {
-        /**
-         * The configuration settings for enabling a System for Cross-Domain Identity
-         * Management (SCIM) with the identity provider.
-         */
-        interface ScimConfig {
-            /**
-             * A flag to enable or disable SCIM for the identity provider.
-             */
-            enabled?: boolean;
-            /**
-             * A flag to revoke a user's session in Access and force a reauthentication on the
-             * user's Gateway session when they have been added or removed from a group in the
-             * Identity Provider.
-             */
-            group_member_deprovision?: boolean;
-            /**
-             * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
-             * in the Identity Provider. This cannot be enabled unless user_deprovision is also
-             * enabled.
-             */
-            seat_deprovision?: boolean;
-            /**
-             * A read-only token generated when the SCIM integration is enabled for the first
-             * time. It is redacted on subsequent requests. If you lose this you will need to
-             * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-             */
-            secret?: string;
-            /**
-             * A flag to enable revoking a user's session in Access and Gateway when they have
-             * been deprovisioned in the Identity Provider.
-             */
-            user_deprovision?: boolean;
-        }
+        scim_config?: ScimConfigParam;
     }
 }
 export interface IdentityProviderListParams {
@@ -5100,7 +3030,11 @@ export interface IdentityProviderGetParams {
     zone_id?: string;
 }
 export declare namespace IdentityProviders {
-    export import ZeroTrustIdentityProviders = IdentityProvidersAPI.ZeroTrustIdentityProviders;
+    export import AzureAD = IdentityProvidersAPI.AzureAD;
+    export import GenericOAuthConfig = IdentityProvidersAPI.GenericOAuthConfig;
+    export import IdentityProvider = IdentityProvidersAPI.IdentityProvider;
+    export import IdentityProviderType = IdentityProvidersAPI.IdentityProviderType;
+    export import ScimConfig = IdentityProvidersAPI.ScimConfig;
     export import IdentityProviderListResponse = IdentityProvidersAPI.IdentityProviderListResponse;
     export import IdentityProviderDeleteResponse = IdentityProvidersAPI.IdentityProviderDeleteResponse;
     export import IdentityProviderListResponsesSinglePage = IdentityProvidersAPI.IdentityProviderListResponsesSinglePage;