cloudflare 3.5.0 → 4.0.0

package/resources/zero-trust/identity-providers.d.ts

@@ -54,7 +54,7 @@ export interface AzureAD {
      * The configuration settings for enabling a System for Cross-Domain Identity
      * Management (SCIM) with the identity provider.
      */
-    scim_config?: SCIMConfig;
+    scim_config?: IdentityProviderSCIMConfig;
 }
 export declare namespace AzureAD {
     /**
@@ -104,6 +104,77 @@ export declare namespace AzureAD {
         support_groups?: boolean;
     }
 }
+export interface AzureADParam {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    config: AzureADParam.Config;
+    /**
+     * The name of the identity provider, shown to users on the login page.
+     */
+    name: string;
+    /**
+     * The type of identity provider. To determine the value for a specific provider,
+     * refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    type: IdentityProviderTypeParam;
+    /**
+     * The configuration settings for enabling a System for Cross-Domain Identity
+     * Management (SCIM) with the identity provider.
+     */
+    scim_config?: IdentityProviderSCIMConfigParam;
+}
+export declare namespace AzureADParam {
+    /**
+     * The configuration parameters for the identity provider. To view the required
+     * parameters for a specific provider, refer to our
+     * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+     */
+    interface Config {
+        /**
+         * Custom claims
+         */
+        claims?: Array<string>;
+        /**
+         * Your OAuth Client ID
+         */
+        client_id?: string;
+        /**
+         * Your OAuth Client Secret
+         */
+        client_secret?: string;
+        /**
+         * Should Cloudflare try to load authentication contexts from your account
+         */
+        conditional_access_enabled?: boolean;
+        /**
+         * Your Azure directory uuid
+         */
+        directory_id?: string;
+        /**
+         * The claim name for email in the id_token response.
+         */
+        email_claim_name?: string;
+        /**
+         * Indicates the type of user interaction that is required. prompt=login forces the
+         * user to enter their credentials on that request, negating single-sign on.
+         * prompt=none is the opposite. It ensures that the user isn't presented with any
+         * interactive prompt. If the request can't be completed silently by using
+         * single-sign on, the Microsoft identity platform returns an interaction_required
+         * error. prompt=select_account interrupts single sign-on providing account
+         * selection experience listing all the accounts either in session or any
+         * remembered account or an option to choose to use a different account altogether.
+         */
+        prompt?: 'login' | 'select_account' | 'none';
+        /**
+         * Should Cloudflare try to load groups from your account
+         */
+        support_groups?: boolean;
+    }
+}
 export interface GenericOAuthConfig {
     /**
      * Your OAuth Client ID
@@ -132,7 +203,606 @@ export declare namespace IdentityProvider {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: AccessCentrify.Config;
+        config: AccessCentrify.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessCentrify {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your centrify account url
+             */
+            centrify_account?: string;
+            /**
+             * Your centrify app id
+             */
+            centrify_app_id?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
+    }
+    interface AccessFacebook {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProvidersAPI.GenericOAuthConfig;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    interface AccessGitHub {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProvidersAPI.GenericOAuthConfig;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    interface AccessGoogle {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessGoogle.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessGoogle {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
+    }
+    interface AccessGoogleApps {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessGoogleApps.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessGoogleApps {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your companies TLD
+             */
+            apps_domain?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+        }
+    }
+    interface AccessLinkedin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProvidersAPI.GenericOAuthConfig;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    interface AccessOIDC {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessOIDC.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessOIDC {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * The authorization_endpoint URL of your IdP
+             */
+            auth_url?: string;
+            /**
+             * The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens
+             */
+            certs_url?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Enable Proof Key for Code Exchange (PKCE)
+             */
+            pkce_enabled?: boolean;
+            /**
+             * OAuth scopes
+             */
+            scopes?: Array<string>;
+            /**
+             * The token_endpoint URL of your IdP
+             */
+            token_url?: string;
+        }
+    }
+    interface AccessOkta {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessOkta.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessOkta {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Your okta authorization server id
+             */
+            authorization_server_id?: string;
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your okta account url
+             */
+            okta_account?: string;
+        }
+    }
+    interface AccessOnelogin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessOnelogin.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessOnelogin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your OneLogin account url
+             */
+            onelogin_account?: string;
+        }
+    }
+    interface AccessPingone {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessPingone.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessPingone {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * Custom claims
+             */
+            claims?: Array<string>;
+            /**
+             * Your OAuth Client ID
+             */
+            client_id?: string;
+            /**
+             * Your OAuth Client Secret
+             */
+            client_secret?: string;
+            /**
+             * The claim name for email in the id_token response.
+             */
+            email_claim_name?: string;
+            /**
+             * Your PingOne environment identifier
+             */
+            ping_env_id?: string;
+        }
+    }
+    interface AccessSAML {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessSAML.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessSAML {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            /**
+             * A list of SAML attribute names that will be added to your signed JWT token and
+             * can be used in SAML policy rules.
+             */
+            attributes?: Array<string>;
+            /**
+             * The attribute name for email in the SAML response.
+             */
+            email_attribute_name?: string;
+            /**
+             * Add a list of attribute names that will be returned in the response header from
+             * the Access callback.
+             */
+            header_attributes?: Array<Config.HeaderAttribute>;
+            /**
+             * X509 certificate to verify the signature in the SAML authentication response
+             */
+            idp_public_certs?: Array<string>;
+            /**
+             * IdP Entity ID or Issuer URL
+             */
+            issuer_url?: string;
+            /**
+             * Sign the SAML authentication request with Access credentials. To verify the
+             * signature, use the public key from the Access certs endpoints.
+             */
+            sign_request?: boolean;
+            /**
+             * URL to send the SAML authentication requests to
+             */
+            sso_target_url?: string;
+        }
+        namespace Config {
+            interface HeaderAttribute {
+                /**
+                 * attribute name from the IDP
+                 */
+                attribute_name?: string;
+                /**
+                 * header that will be added on the request to the origin
+                 */
+                header_name?: string;
+            }
+        }
+    }
+    interface AccessYandex {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: IdentityProvidersAPI.GenericOAuthConfig;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderType;
+        /**
+         * UUID
+         */
+        id?: string;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    interface AccessOnetimepin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessOnetimepin.Config;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -151,7 +821,43 @@ export declare namespace IdentityProvider {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
+    }
+    namespace AccessOnetimepin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+            redirect_url?: string;
+        }
+    }
+}
+export type IdentityProviderParam = AzureADParam | IdentityProviderParam.AccessCentrify | IdentityProviderParam.AccessFacebook | IdentityProviderParam.AccessGitHub | IdentityProviderParam.AccessGoogle | IdentityProviderParam.AccessGoogleApps | IdentityProviderParam.AccessLinkedin | IdentityProviderParam.AccessOIDC | IdentityProviderParam.AccessOkta | IdentityProviderParam.AccessOnelogin | IdentityProviderParam.AccessPingone | IdentityProviderParam.AccessSAML | IdentityProviderParam.AccessYandex | IdentityProviderParam.AccessOnetimepin;
+export declare namespace IdentityProviderParam {
+    interface AccessCentrify {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        config: AccessCentrify.Config;
+        /**
+         * The name of the identity provider, shown to users on the login page.
+         */
+        name: string;
+        /**
+         * The type of identity provider. To determine the value for a specific provider,
+         * refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
+        /**
+         * The configuration settings for enabling a System for Cross-Domain Identity
+         * Management (SCIM) with the identity provider.
+         */
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     namespace AccessCentrify {
         /**
@@ -192,7 +898,7 @@ export declare namespace IdentityProvider {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProvidersAPI.GenericOAuthConfig;
+        config: IdentityProvidersAPI.GenericOAuthConfigParam;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -202,16 +908,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     interface AccessGitHub {
         /**
@@ -219,7 +921,7 @@ export declare namespace IdentityProvider {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProvidersAPI.GenericOAuthConfig;
+        config: IdentityProvidersAPI.GenericOAuthConfigParam;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -229,16 +931,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     interface AccessGoogle {
         /**
@@ -256,16 +954,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     namespace AccessGoogle {
         /**
@@ -308,16 +1002,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     namespace AccessGoogleApps {
         /**
@@ -354,7 +1044,7 @@ export declare namespace IdentityProvider {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProvidersAPI.GenericOAuthConfig;
+        config: IdentityProvidersAPI.GenericOAuthConfigParam;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -364,16 +1054,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     interface AccessOIDC {
         /**
@@ -391,16 +1077,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     namespace AccessOIDC {
         /**
@@ -433,6 +1115,10 @@ export declare namespace IdentityProvider {
              * The claim name for email in the id_token response.
              */
             email_claim_name?: string;
+            /**
+             * Enable Proof Key for Code Exchange (PKCE)
+             */
+            pkce_enabled?: boolean;
             /**
              * OAuth scopes
              */
@@ -459,16 +1145,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     namespace AccessOkta {
         /**
@@ -519,16 +1201,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     namespace AccessOnelogin {
         /**
@@ -575,16 +1253,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     namespace AccessPingone {
         /**
@@ -631,16 +1305,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     namespace AccessSAML {
         /**
@@ -700,7 +1370,7 @@ export declare namespace IdentityProvider {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: IdentityProvidersAPI.GenericOAuthConfig;
+        config: IdentityProvidersAPI.GenericOAuthConfigParam;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -710,16 +1380,12 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
     }
     interface AccessOnetimepin {
         /**
@@ -727,7 +1393,7 @@ export declare namespace IdentityProvider {
          * parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: unknown;
+        config: AccessOnetimepin.Config;
         /**
          * The name of the identity provider, shown to users on the login page.
          */
@@ -737,45 +1403,46 @@ export declare namespace IdentityProvider {
          * refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        type: IdentityProvidersAPI.IdentityProviderType;
-        /**
-         * UUID
-         */
-        id?: string;
+        type: IdentityProvidersAPI.IdentityProviderTypeParam;
         /**
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfigParam;
+    }
+    namespace AccessOnetimepin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+        }
     }
 }
-/**
- * The type of identity provider. To determine the value for a specific provider,
- * refer to our
- * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
- */
-export type IdentityProviderType = 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
-/**
- * The type of identity provider. To determine the value for a specific provider,
- * refer to our
- * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
- */
-export type IdentityProviderTypeParam = 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
 /**
  * The configuration settings for enabling a System for Cross-Domain Identity
  * Management (SCIM) with the identity provider.
  */
-export interface SCIMConfig {
+export interface IdentityProviderSCIMConfig {
     /**
      * A flag to enable or disable SCIM for the identity provider.
      */
     enabled?: boolean;
     /**
-     * A flag to revoke a user's session in Access and force a reauthentication on the
-     * user's Gateway session when they have been added or removed from a group in the
-     * Identity Provider.
+     * Indicates how a SCIM event updates a user identity used for policy evaluation.
+     * Use "automatic" to automatically update a user's identity and augment it with
+     * fields from the SCIM user resource. Use "reauth" to force re-authentication on
+     * group membership updates, user identity update will only occur after successful
+     * re-authentication. With "reauth" identities will not contain fields from the
+     * SCIM user resource. With "no_action" identities will not be changed by SCIM
+     * updates in any way and users will not be prompted to reauthenticate.
+     */
+    identity_update_behavior?: 'automatic' | 'reauth' | 'no_action';
+    /**
+     * The base URL of Cloudflare's SCIM V2.0 API endpoint.
      */
-    group_member_deprovision?: boolean;
+    scim_base_url?: string;
     /**
      * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
      * in the Identity Provider. This cannot be enabled unless user_deprovision is also
@@ -785,7 +1452,7 @@ export interface SCIMConfig {
     /**
      * A read-only token generated when the SCIM integration is enabled for the first
      * time. It is redacted on subsequent requests. If you lose this you will need to
-     * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
+     * refresh it at /access/identity_providers/:idpID/refresh_scim_secret.
      */
     secret?: string;
     /**
@@ -798,35 +1465,45 @@ export interface SCIMConfig {
  * The configuration settings for enabling a System for Cross-Domain Identity
  * Management (SCIM) with the identity provider.
  */
-export interface SCIMConfigParam {
+export interface IdentityProviderSCIMConfigParam {
     /**
      * A flag to enable or disable SCIM for the identity provider.
      */
     enabled?: boolean;
     /**
-     * A flag to revoke a user's session in Access and force a reauthentication on the
-     * user's Gateway session when they have been added or removed from a group in the
-     * Identity Provider.
+     * Indicates how a SCIM event updates a user identity used for policy evaluation.
+     * Use "automatic" to automatically update a user's identity and augment it with
+     * fields from the SCIM user resource. Use "reauth" to force re-authentication on
+     * group membership updates, user identity update will only occur after successful
+     * re-authentication. With "reauth" identities will not contain fields from the
+     * SCIM user resource. With "no_action" identities will not be changed by SCIM
+     * updates in any way and users will not be prompted to reauthenticate.
      */
-    group_member_deprovision?: boolean;
+    identity_update_behavior?: 'automatic' | 'reauth' | 'no_action';
     /**
      * A flag to remove a user's seat in Zero Trust when they have been deprovisioned
      * in the Identity Provider. This cannot be enabled unless user_deprovision is also
      * enabled.
      */
     seat_deprovision?: boolean;
-    /**
-     * A read-only token generated when the SCIM integration is enabled for the first
-     * time. It is redacted on subsequent requests. If you lose this you will need to
-     * refresh it token at /access/identity_providers/:idpID/refresh_scim_secret.
-     */
-    secret?: string;
     /**
      * A flag to enable revoking a user's session in Access and Gateway when they have
      * been deprovisioned in the Identity Provider.
      */
     user_deprovision?: boolean;
 }
+/**
+ * The type of identity provider. To determine the value for a specific provider,
+ * refer to our
+ * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+ */
+export type IdentityProviderType = 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
+/**
+ * The type of identity provider. To determine the value for a specific provider,
+ * refer to our
+ * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+ */
+export type IdentityProviderTypeParam = 'onetimepin' | 'azureAD' | 'saml' | 'centrify' | 'facebook' | 'github' | 'google-apps' | 'google' | 'linkedin' | 'oidc' | 'okta' | 'onelogin' | 'pingone' | 'yandex';
 export type IdentityProviderListResponse = AzureAD | IdentityProviderListResponse.AccessCentrify | IdentityProviderListResponse.AccessFacebook | IdentityProviderListResponse.AccessGitHub | IdentityProviderListResponse.AccessGoogle | IdentityProviderListResponse.AccessGoogleApps | IdentityProviderListResponse.AccessLinkedin | IdentityProviderListResponse.AccessOIDC | IdentityProviderListResponse.AccessOkta | IdentityProviderListResponse.AccessOnelogin | IdentityProviderListResponse.AccessPingone | IdentityProviderListResponse.AccessSAML | IdentityProviderListResponse.AccessYandex;
 export declare namespace IdentityProviderListResponse {
     interface AccessCentrify {
@@ -854,7 +1531,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     namespace AccessCentrify {
         /**
@@ -914,7 +1591,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     interface AccessGitHub {
         /**
@@ -941,7 +1618,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     interface AccessGoogle {
         /**
@@ -968,7 +1645,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     namespace AccessGoogle {
         /**
@@ -1020,7 +1697,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     namespace AccessGoogleApps {
         /**
@@ -1076,7 +1753,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     interface AccessOIDC {
         /**
@@ -1103,7 +1780,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     namespace AccessOIDC {
         /**
@@ -1136,6 +1813,10 @@ export declare namespace IdentityProviderListResponse {
              * The claim name for email in the id_token response.
              */
             email_claim_name?: string;
+            /**
+             * Enable Proof Key for Code Exchange (PKCE)
+             */
+            pkce_enabled?: boolean;
             /**
              * OAuth scopes
              */
@@ -1171,7 +1852,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     namespace AccessOkta {
         /**
@@ -1231,7 +1912,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     namespace AccessOnelogin {
         /**
@@ -1287,7 +1968,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     namespace AccessPingone {
         /**
@@ -1343,7 +2024,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
     namespace AccessSAML {
         /**
@@ -1422,7 +2103,7 @@ export declare namespace IdentityProviderListResponse {
          * The configuration settings for enabling a System for Cross-Domain Identity
          * Management (SCIM) with the identity provider.
          */
-        scim_config?: IdentityProvidersAPI.SCIMConfig;
+        scim_config?: IdentityProvidersAPI.IdentityProviderSCIMConfig;
     }
 }
 export interface IdentityProviderDeleteResponse {
@@ -1460,15 +2141,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AzureAD {
         /**
@@ -1545,15 +2222,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessCentrify {
         /**
@@ -1615,15 +2288,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     interface AccessGitHub {
         /**
@@ -1652,15 +2321,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     interface AccessGoogle {
         /**
@@ -1689,15 +2354,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessGoogle {
         /**
@@ -1751,15 +2412,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessGoogleApps {
         /**
@@ -1817,15 +2474,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     interface AccessOIDC {
         /**
@@ -1854,15 +2507,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessOIDC {
         /**
@@ -1895,6 +2544,10 @@ export declare namespace IdentityProviderCreateParams {
              * The claim name for email in the id_token response.
              */
             email_claim_name?: string;
+            /**
+             * Enable Proof Key for Code Exchange (PKCE)
+             */
+            pkce_enabled?: boolean;
             /**
              * OAuth scopes
              */
@@ -1932,15 +2585,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessOkta {
         /**
@@ -2002,15 +2651,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessOnelogin {
         /**
@@ -2068,15 +2713,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessPingone {
         /**
@@ -2134,15 +2775,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessSAML {
         /**
@@ -2223,15 +2860,11 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     interface AccessOnetimepin {
         /**
@@ -2239,7 +2872,7 @@ export declare namespace IdentityProviderCreateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: unknown;
+        config: IdentityProviderCreateParams.AccessOnetimepin.Config;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -2260,15 +2893,20 @@ export declare namespace IdentityProviderCreateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
+    }
+    namespace AccessOnetimepin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+        }
     }
 }
 export type IdentityProviderUpdateParams = IdentityProviderUpdateParams.AzureAD | IdentityProviderUpdateParams.AccessCentrify | IdentityProviderUpdateParams.AccessFacebook | IdentityProviderUpdateParams.AccessGitHub | IdentityProviderUpdateParams.AccessGoogle | IdentityProviderUpdateParams.AccessGoogleApps | IdentityProviderUpdateParams.AccessLinkedin | IdentityProviderUpdateParams.AccessOIDC | IdentityProviderUpdateParams.AccessOkta | IdentityProviderUpdateParams.AccessOnelogin | IdentityProviderUpdateParams.AccessPingone | IdentityProviderUpdateParams.AccessSAML | IdentityProviderUpdateParams.AccessYandex | IdentityProviderUpdateParams.AccessOnetimepin;
@@ -2300,15 +2938,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AzureAD {
         /**
@@ -2385,15 +3019,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessCentrify {
         /**
@@ -2455,15 +3085,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     interface AccessGitHub {
         /**
@@ -2492,15 +3118,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     interface AccessGoogle {
         /**
@@ -2529,15 +3151,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessGoogle {
         /**
@@ -2591,15 +3209,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessGoogleApps {
         /**
@@ -2657,15 +3271,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     interface AccessOIDC {
         /**
@@ -2694,15 +3304,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessOIDC {
         /**
@@ -2735,6 +3341,10 @@ export declare namespace IdentityProviderUpdateParams {
              * The claim name for email in the id_token response.
              */
             email_claim_name?: string;
+            /**
+             * Enable Proof Key for Code Exchange (PKCE)
+             */
+            pkce_enabled?: boolean;
             /**
              * OAuth scopes
              */
@@ -2772,15 +3382,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessOkta {
         /**
@@ -2842,15 +3448,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessOnelogin {
         /**
@@ -2908,15 +3510,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessPingone {
         /**
@@ -2974,15 +3572,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     namespace AccessSAML {
         /**
@@ -3063,15 +3657,11 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
     }
     interface AccessOnetimepin {
         /**
@@ -3079,7 +3669,7 @@ export declare namespace IdentityProviderUpdateParams {
          * required parameters for a specific provider, refer to our
          * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
          */
-        config: unknown;
+        config: IdentityProviderUpdateParams.AccessOnetimepin.Config;
         /**
          * Body param: The name of the identity provider, shown to users on the login page.
          */
@@ -3100,26 +3690,38 @@ export declare namespace IdentityProviderUpdateParams {
          * Account ID.
          */
         zone_id?: string;
-        /**
-         * Body param: UUID
-         */
-        id?: string;
         /**
          * Body param: The configuration settings for enabling a System for Cross-Domain
          * Identity Management (SCIM) with the identity provider.
          */
-        scim_config?: SCIMConfigParam;
+        scim_config?: IdentityProviderSCIMConfigParam;
+    }
+    namespace AccessOnetimepin {
+        /**
+         * The configuration parameters for the identity provider. To view the required
+         * parameters for a specific provider, refer to our
+         * [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/).
+         */
+        interface Config {
+        }
     }
 }
 export interface IdentityProviderListParams {
     /**
-     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
+     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+     * Zone ID.
      */
     account_id?: string;
     /**
-     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
+     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+     * Account ID.
      */
     zone_id?: string;
+    /**
+     * Query param: Indicates to Access to only retrieve identity providers that have
+     * the System for Cross-Domain Identity Management (SCIM) enabled.
+     */
+    scim_enabled?: string;
 }
 export interface IdentityProviderDeleteParams {
     /**
@@ -3142,18 +3744,6 @@ export interface IdentityProviderGetParams {
     zone_id?: string;
 }
 export declare namespace IdentityProviders {
-    export import AzureAD = IdentityProvidersAPI.AzureAD;
-    export import GenericOAuthConfig = IdentityProvidersAPI.GenericOAuthConfig;
-    export import IdentityProvider = IdentityProvidersAPI.IdentityProvider;
-    export import IdentityProviderType = IdentityProvidersAPI.IdentityProviderType;
-    export import SCIMConfig = IdentityProvidersAPI.SCIMConfig;
-    export import IdentityProviderListResponse = IdentityProvidersAPI.IdentityProviderListResponse;
-    export import IdentityProviderDeleteResponse = IdentityProvidersAPI.IdentityProviderDeleteResponse;
-    export import IdentityProviderListResponsesSinglePage = IdentityProvidersAPI.IdentityProviderListResponsesSinglePage;
-    export import IdentityProviderCreateParams = IdentityProvidersAPI.IdentityProviderCreateParams;
-    export import IdentityProviderUpdateParams = IdentityProvidersAPI.IdentityProviderUpdateParams;
-    export import IdentityProviderListParams = IdentityProvidersAPI.IdentityProviderListParams;
-    export import IdentityProviderDeleteParams = IdentityProvidersAPI.IdentityProviderDeleteParams;
-    export import IdentityProviderGetParams = IdentityProvidersAPI.IdentityProviderGetParams;
+    export { type AzureAD as AzureAD, type GenericOAuthConfig as GenericOAuthConfig, type IdentityProvider as IdentityProvider, type IdentityProviderSCIMConfig as IdentityProviderSCIMConfig, type IdentityProviderType as IdentityProviderType, type IdentityProviderListResponse as IdentityProviderListResponse, type IdentityProviderDeleteResponse as IdentityProviderDeleteResponse, IdentityProviderListResponsesSinglePage as IdentityProviderListResponsesSinglePage, type IdentityProviderCreateParams as IdentityProviderCreateParams, type IdentityProviderUpdateParams as IdentityProviderUpdateParams, type IdentityProviderListParams as IdentityProviderListParams, type IdentityProviderDeleteParams as IdentityProviderDeleteParams, type IdentityProviderGetParams as IdentityProviderGetParams, };
 }
 //# sourceMappingURL=identity-providers.d.ts.map