cloudflare 4.5.0 → 5.0.0

package/resources/zero-trust/access/applications/applications.d.ts

@@ -3,16 +3,16 @@ import * as Core from "../../../../core.js";
 import * as ApplicationsAPI from "./applications.js";
 import * as PoliciesAPI from "../policies.js";
 import * as CAsAPI from "./cas.js";
-import { CA, CACreateParams, CADeleteParams, CADeleteResponse, CAGetParams, CAListParams, CAs, CAsSinglePage } from "./cas.js";
+import { CA, CACreateParams, CADeleteParams, CADeleteResponse, CAGetParams, CAListParams, CAs, CAsV4PagePaginationArray } from "./cas.js";
 import * as ApplicationsPoliciesAPI from "./policies.js";
-import { AccessDevicePostureRule, AccessRule, AnyValidServiceTokenRule, AuthenticationMethodRule, AzureGroupRule, CertificateRule, CountryRule, DomainRule, EmailListRule, EmailRule, EveryoneRule, ExternalEvaluationRule, GSuiteGroupRule, GitHubOrganizationRule, GroupRule, IPListRule, IPRule, OktaGroupRule, Policies, PolicyCreateParams, PolicyCreateResponse, PolicyDeleteParams, PolicyDeleteResponse, PolicyGetParams, PolicyGetResponse, PolicyListParams, PolicyListResponse, PolicyListResponsesSinglePage, PolicyUpdateParams, PolicyUpdateResponse, SAMLGroupRule, ServiceTokenRule } from "./policies.js";
+import { AccessDevicePostureRule, AccessRule, AnyValidServiceTokenRule, AuthenticationMethodRule, AzureGroupRule, CertificateRule, CountryRule, DomainRule, EmailListRule, EmailRule, EveryoneRule, ExternalEvaluationRule, GSuiteGroupRule, GitHubOrganizationRule, GroupRule, IPListRule, IPRule, OktaGroupRule, Policies, PolicyCreateParams, PolicyCreateResponse, PolicyDeleteParams, PolicyDeleteResponse, PolicyGetParams, PolicyGetResponse, PolicyListParams, PolicyListResponse, PolicyListResponsesV4PagePaginationArray, PolicyUpdateParams, PolicyUpdateResponse, SAMLGroupRule, ServiceTokenRule } from "./policies.js";
 import * as SettingsAPI from "./settings.js";
 import { SettingEditParams, SettingEditResponse, SettingUpdateParams, SettingUpdateResponse, Settings } from "./settings.js";
 import * as UserPolicyChecksAPI from "./user-policy-checks.js";
 import { UserPolicyCheckGeo, UserPolicyCheckListParams, UserPolicyCheckListResponse, UserPolicyChecks } from "./user-policy-checks.js";
 import * as PolicyTestsAPI from "./policy-tests/policy-tests.js";
 import { PolicyTestCreateParams, PolicyTestCreateResponse, PolicyTestGetParams, PolicyTestGetResponse, PolicyTests } from "./policy-tests/policy-tests.js";
-import { SinglePage } from "../../../../pagination.js";
+import { V4PagePaginationArray, type V4PagePaginationArrayParams } from "../../../../pagination.js";
 export declare class Applications extends APIResource {
     cas: CAsAPI.CAs;
     userPolicyChecks: UserPolicyChecksAPI.UserPolicyChecks;
@@ -63,8 +63,8 @@ export declare class Applications extends APIResource {
      * }
      * ```
      */
-    list(params?: ApplicationListParams, options?: Core.RequestOptions): Core.PagePromise<ApplicationListResponsesSinglePage, ApplicationListResponse>;
-    list(options?: Core.RequestOptions): Core.PagePromise<ApplicationListResponsesSinglePage, ApplicationListResponse>;
+    list(params?: ApplicationListParams, options?: Core.RequestOptions): Core.PagePromise<ApplicationListResponsesV4PagePaginationArray, ApplicationListResponse>;
+    list(options?: Core.RequestOptions): Core.PagePromise<ApplicationListResponsesV4PagePaginationArray, ApplicationListResponse>;
     /**
      * Deletes an application from Access.
      *
@@ -108,7 +108,7 @@ export declare class Applications extends APIResource {
     revokeTokens(appId: AppIDParam, params?: ApplicationRevokeTokensParams, options?: Core.RequestOptions): Core.APIPromise<ApplicationRevokeTokensResponse | null>;
     revokeTokens(appId: AppIDParam, options?: Core.RequestOptions): Core.APIPromise<ApplicationRevokeTokensResponse | null>;
 }
-export declare class ApplicationListResponsesSinglePage extends SinglePage<ApplicationListResponse> {
+export declare class ApplicationListResponsesV4PagePaginationArray extends V4PagePaginationArray<ApplicationListResponse> {
 }
 export type AllowedHeaders = string;
 export type AllowedHeadersParam = string;
@@ -3089,6 +3089,20 @@ export declare namespace ApplicationCreateResponse {
          */
         bg_color?: string;
         created_at?: string;
+        /**
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
+         */
+        custom_deny_url?: string;
+        /**
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
+         */
+        custom_non_identity_deny_url?: string;
+        /**
+         * The custom pages that will be displayed when applicable for this application
+         */
+        custom_pages?: Array<string>;
         /**
          * The primary hostname and path secured by Access. This domain will be displayed
          * if the app is visible in the App Launcher.
@@ -3111,11 +3125,6 @@ export declare namespace ApplicationCreateResponse {
          */
         name?: string;
         policies?: Array<AppLauncherApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: AppLauncherApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
@@ -3230,83 +3239,6 @@ export declare namespace ApplicationCreateResponse {
             session_duration?: string;
             updated_at?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface DeviceEnrollmentPermissionsApplication {
         /**
@@ -3322,10 +3254,6 @@ export declare namespace ApplicationCreateResponse {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<ApplicationsAPI.AllowedIdPs>;
-        /**
-         * The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Audience tag.
          */
@@ -3335,86 +3263,40 @@ export declare namespace ApplicationCreateResponse {
          * login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
-        /**
-         * The background color of the App Launcher page.
-         */
-        bg_color?: string;
         created_at?: string;
         /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
          */
-        domain?: string;
+        custom_deny_url?: string;
         /**
-         * The links in the App Launcher footer.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
          */
-        footer_links?: Array<DeviceEnrollmentPermissionsApplication.FooterLink>;
+        custom_non_identity_deny_url?: string;
         /**
-         * The background color of the App Launcher header.
+         * The custom pages that will be displayed when applicable for this application
          */
-        header_bg_color?: string;
+        custom_pages?: Array<string>;
         /**
-         * The design of the App Launcher landing page shown to users when they log in.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
-        landing_page_design?: DeviceEnrollmentPermissionsApplication.LandingPageDesign;
+        domain?: string;
         /**
          * The name of the application.
          */
         name?: string;
         policies?: Array<DeviceEnrollmentPermissionsApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: DeviceEnrollmentPermissionsApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
          * s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
         updated_at?: string;
     }
     namespace DeviceEnrollmentPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -3481,83 +3363,6 @@ export declare namespace ApplicationCreateResponse {
             session_duration?: string;
             updated_at?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface BrowserIsolationPermissionsApplication {
         /**
@@ -3573,10 +3378,6 @@ export declare namespace ApplicationCreateResponse {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<ApplicationsAPI.AllowedIdPs>;
-        /**
-         * The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Audience tag.
          */
@@ -3586,86 +3387,40 @@ export declare namespace ApplicationCreateResponse {
          * login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
-        /**
-         * The background color of the App Launcher page.
-         */
-        bg_color?: string;
         created_at?: string;
         /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
          */
-        domain?: string;
+        custom_deny_url?: string;
         /**
-         * The links in the App Launcher footer.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
          */
-        footer_links?: Array<BrowserIsolationPermissionsApplication.FooterLink>;
+        custom_non_identity_deny_url?: string;
         /**
-         * The background color of the App Launcher header.
+         * The custom pages that will be displayed when applicable for this application
          */
-        header_bg_color?: string;
+        custom_pages?: Array<string>;
         /**
-         * The design of the App Launcher landing page shown to users when they log in.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
-        landing_page_design?: BrowserIsolationPermissionsApplication.LandingPageDesign;
+        domain?: string;
         /**
          * The name of the application.
          */
         name?: string;
         policies?: Array<BrowserIsolationPermissionsApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: BrowserIsolationPermissionsApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
          * s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
         updated_at?: string;
     }
     namespace BrowserIsolationPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -3732,83 +3487,6 @@ export declare namespace ApplicationCreateResponse {
             session_duration?: string;
             updated_at?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface BookmarkApplication {
         /**
@@ -3836,11 +3514,6 @@ export declare namespace ApplicationCreateResponse {
          * The name of the application.
          */
         name?: string;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: BookmarkApplication.SCIMConfig;
         /**
          * The tags you want assigned to an application. Tags are used to filter
          * applications in the App Launcher dashboard.
@@ -3852,85 +3525,6 @@ export declare namespace ApplicationCreateResponse {
         type?: ApplicationsAPI.ApplicationType;
         updated_at?: string;
     }
-    namespace BookmarkApplication {
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
     interface InfrastructureApplication {
         target_criteria: Array<InfrastructureApplication.TargetCriterion>;
         /**
@@ -3951,11 +3545,6 @@ export declare namespace ApplicationCreateResponse {
          */
         name?: string;
         policies?: Array<InfrastructureApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: InfrastructureApplication.SCIMConfig;
         updated_at?: string;
     }
     namespace InfrastructureApplication {
@@ -4042,88 +3631,11 @@ export declare namespace ApplicationCreateResponse {
                 }
             }
         }
+    }
+    interface BrowserRdpApplication {
         /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
-    interface BrowserRdpApplication {
-        /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
         domain: string;
         target_criteria: Array<BrowserRdpApplication.TargetCriterion>;
@@ -4278,7 +3790,7 @@ export declare namespace ApplicationCreateResponse {
             /**
              * The communication protocol your application secures.
              */
-            protocol: 'SSH';
+            protocol: 'RDP';
             /**
              * Contains a map of target attribute keys to target attribute values.
              */
@@ -5708,6 +5220,20 @@ export declare namespace ApplicationUpdateResponse {
          */
         bg_color?: string;
         created_at?: string;
+        /**
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
+         */
+        custom_deny_url?: string;
+        /**
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
+         */
+        custom_non_identity_deny_url?: string;
+        /**
+         * The custom pages that will be displayed when applicable for this application
+         */
+        custom_pages?: Array<string>;
         /**
          * The primary hostname and path secured by Access. This domain will be displayed
          * if the app is visible in the App Launcher.
@@ -5730,11 +5256,6 @@ export declare namespace ApplicationUpdateResponse {
          */
         name?: string;
         policies?: Array<AppLauncherApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: AppLauncherApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
@@ -5849,83 +5370,6 @@ export declare namespace ApplicationUpdateResponse {
             session_duration?: string;
             updated_at?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface DeviceEnrollmentPermissionsApplication {
         /**
@@ -5941,10 +5385,6 @@ export declare namespace ApplicationUpdateResponse {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<ApplicationsAPI.AllowedIdPs>;
-        /**
-         * The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Audience tag.
          */
@@ -5954,86 +5394,40 @@ export declare namespace ApplicationUpdateResponse {
          * login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
-        /**
-         * The background color of the App Launcher page.
-         */
-        bg_color?: string;
         created_at?: string;
         /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
          */
-        domain?: string;
+        custom_deny_url?: string;
         /**
-         * The links in the App Launcher footer.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
          */
-        footer_links?: Array<DeviceEnrollmentPermissionsApplication.FooterLink>;
+        custom_non_identity_deny_url?: string;
         /**
-         * The background color of the App Launcher header.
+         * The custom pages that will be displayed when applicable for this application
          */
-        header_bg_color?: string;
+        custom_pages?: Array<string>;
         /**
-         * The design of the App Launcher landing page shown to users when they log in.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
-        landing_page_design?: DeviceEnrollmentPermissionsApplication.LandingPageDesign;
+        domain?: string;
         /**
          * The name of the application.
          */
         name?: string;
         policies?: Array<DeviceEnrollmentPermissionsApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: DeviceEnrollmentPermissionsApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
          * s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
         updated_at?: string;
     }
     namespace DeviceEnrollmentPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -6100,87 +5494,10 @@ export declare namespace ApplicationUpdateResponse {
             session_duration?: string;
             updated_at?: string;
         }
+    }
+    interface BrowserIsolationPermissionsApplication {
         /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
-    interface BrowserIsolationPermissionsApplication {
-        /**
-         * The application type.
+         * The application type.
          */
         type: ApplicationsAPI.ApplicationType;
         /**
@@ -6192,10 +5509,6 @@ export declare namespace ApplicationUpdateResponse {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<ApplicationsAPI.AllowedIdPs>;
-        /**
-         * The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Audience tag.
          */
@@ -6205,86 +5518,40 @@ export declare namespace ApplicationUpdateResponse {
          * login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
-        /**
-         * The background color of the App Launcher page.
-         */
-        bg_color?: string;
         created_at?: string;
         /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
          */
-        domain?: string;
+        custom_deny_url?: string;
         /**
-         * The links in the App Launcher footer.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
          */
-        footer_links?: Array<BrowserIsolationPermissionsApplication.FooterLink>;
+        custom_non_identity_deny_url?: string;
         /**
-         * The background color of the App Launcher header.
+         * The custom pages that will be displayed when applicable for this application
          */
-        header_bg_color?: string;
+        custom_pages?: Array<string>;
         /**
-         * The design of the App Launcher landing page shown to users when they log in.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
-        landing_page_design?: BrowserIsolationPermissionsApplication.LandingPageDesign;
+        domain?: string;
         /**
          * The name of the application.
          */
         name?: string;
         policies?: Array<BrowserIsolationPermissionsApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: BrowserIsolationPermissionsApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
          * s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
         updated_at?: string;
     }
     namespace BrowserIsolationPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -6351,83 +5618,6 @@ export declare namespace ApplicationUpdateResponse {
             session_duration?: string;
             updated_at?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface BookmarkApplication {
         /**
@@ -6455,11 +5645,6 @@ export declare namespace ApplicationUpdateResponse {
          * The name of the application.
          */
         name?: string;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: BookmarkApplication.SCIMConfig;
         /**
          * The tags you want assigned to an application. Tags are used to filter
          * applications in the App Launcher dashboard.
@@ -6471,149 +5656,65 @@ export declare namespace ApplicationUpdateResponse {
         type?: ApplicationsAPI.ApplicationType;
         updated_at?: string;
     }
-    namespace BookmarkApplication {
+    interface InfrastructureApplication {
+        target_criteria: Array<InfrastructureApplication.TargetCriterion>;
         /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
+         * The application type.
          */
-        interface SCIMConfig {
+        type: ApplicationsAPI.ApplicationType;
+        /**
+         * UUID.
+         */
+        id?: string;
+        /**
+         * Audience tag.
+         */
+        aud?: string;
+        created_at?: string;
+        /**
+         * The name of the application.
+         */
+        name?: string;
+        policies?: Array<InfrastructureApplication.Policy>;
+        updated_at?: string;
+    }
+    namespace InfrastructureApplication {
+        interface TargetCriterion {
             /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
+             * The port that the targets use for the chosen communication protocol. A port
+             * cannot be assigned to multiple protocols.
              */
-            idp_uid: string;
+            port: number;
             /**
-             * The base URI for the application's SCIM-compatible API.
+             * The communication protocol your application secures.
              */
-            remote_uri: string;
+            protocol: 'SSH';
             /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
+             * Contains a map of target attribute keys to target attribute values.
              */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
+            target_attributes: {
+                [key: string]: Array<string>;
+            };
+        }
+        interface Policy {
             /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
+             * The UUID of the policy
              */
-            deactivate_on_delete?: boolean;
+            id?: string;
             /**
-             * Whether SCIM provisioning is turned on for this application.
+             * The rules that define how users may connect to the targets secured by your
+             * application.
              */
-            enabled?: boolean;
+            connection_rules?: Policy.ConnectionRules;
+            created_at?: string;
             /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
+             * The action Access will take if a user matches this policy. Infrastructure
+             * application policies can only use the Allow action.
              */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
+            decision?: ApplicationsAPI.Decision;
             /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
-    interface InfrastructureApplication {
-        target_criteria: Array<InfrastructureApplication.TargetCriterion>;
-        /**
-         * The application type.
-         */
-        type: ApplicationsAPI.ApplicationType;
-        /**
-         * UUID.
-         */
-        id?: string;
-        /**
-         * Audience tag.
-         */
-        aud?: string;
-        created_at?: string;
-        /**
-         * The name of the application.
-         */
-        name?: string;
-        policies?: Array<InfrastructureApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: InfrastructureApplication.SCIMConfig;
-        updated_at?: string;
-    }
-    namespace InfrastructureApplication {
-        interface TargetCriterion {
-            /**
-             * The port that the targets use for the chosen communication protocol. A port
-             * cannot be assigned to multiple protocols.
-             */
-            port: number;
-            /**
-             * The communication protocol your application secures.
-             */
-            protocol: 'SSH';
-            /**
-             * Contains a map of target attribute keys to target attribute values.
-             */
-            target_attributes: {
-                [key: string]: Array<string>;
-            };
-        }
-        interface Policy {
-            /**
-             * The UUID of the policy
-             */
-            id?: string;
-            /**
-             * The rules that define how users may connect to the targets secured by your
-             * application.
-             */
-            connection_rules?: Policy.ConnectionRules;
-            created_at?: string;
-            /**
-             * The action Access will take if a user matches this policy. Infrastructure
-             * application policies can only use the Allow action.
-             */
-            decision?: ApplicationsAPI.Decision;
-            /**
-             * Rules evaluated with a NOT logical operator. To match the policy, a user cannot
-             * meet any of the Exclude rules.
+             * Rules evaluated with a NOT logical operator. To match the policy, a user cannot
+             * meet any of the Exclude rules.
              */
             exclude?: Array<ApplicationsPoliciesAPI.AccessRule>;
             /**
@@ -6661,83 +5762,6 @@ export declare namespace ApplicationUpdateResponse {
                 }
             }
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface BrowserRdpApplication {
         /**
@@ -6897,7 +5921,7 @@ export declare namespace ApplicationUpdateResponse {
             /**
              * The communication protocol your application secures.
              */
-            protocol: 'SSH';
+            protocol: 'RDP';
             /**
              * Contains a map of target attribute keys to target attribute values.
              */
@@ -8327,6 +7351,20 @@ export declare namespace ApplicationListResponse {
          */
         bg_color?: string;
         created_at?: string;
+        /**
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
+         */
+        custom_deny_url?: string;
+        /**
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
+         */
+        custom_non_identity_deny_url?: string;
+        /**
+         * The custom pages that will be displayed when applicable for this application
+         */
+        custom_pages?: Array<string>;
         /**
          * The primary hostname and path secured by Access. This domain will be displayed
          * if the app is visible in the App Launcher.
@@ -8349,11 +7387,6 @@ export declare namespace ApplicationListResponse {
          */
         name?: string;
         policies?: Array<AppLauncherApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: AppLauncherApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
@@ -8468,87 +7501,10 @@ export declare namespace ApplicationListResponse {
             session_duration?: string;
             updated_at?: string;
         }
+    }
+    interface DeviceEnrollmentPermissionsApplication {
         /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
-    interface DeviceEnrollmentPermissionsApplication {
-        /**
-         * The application type.
+         * The application type.
          */
         type: ApplicationsAPI.ApplicationType;
         /**
@@ -8560,10 +7516,6 @@ export declare namespace ApplicationListResponse {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<ApplicationsAPI.AllowedIdPs>;
-        /**
-         * The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Audience tag.
          */
@@ -8573,86 +7525,40 @@ export declare namespace ApplicationListResponse {
          * login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
-        /**
-         * The background color of the App Launcher page.
-         */
-        bg_color?: string;
         created_at?: string;
         /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
          */
-        domain?: string;
+        custom_deny_url?: string;
         /**
-         * The links in the App Launcher footer.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
          */
-        footer_links?: Array<DeviceEnrollmentPermissionsApplication.FooterLink>;
+        custom_non_identity_deny_url?: string;
         /**
-         * The background color of the App Launcher header.
+         * The custom pages that will be displayed when applicable for this application
          */
-        header_bg_color?: string;
+        custom_pages?: Array<string>;
         /**
-         * The design of the App Launcher landing page shown to users when they log in.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
-        landing_page_design?: DeviceEnrollmentPermissionsApplication.LandingPageDesign;
+        domain?: string;
         /**
          * The name of the application.
          */
         name?: string;
         policies?: Array<DeviceEnrollmentPermissionsApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: DeviceEnrollmentPermissionsApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
          * s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
         updated_at?: string;
     }
     namespace DeviceEnrollmentPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -8719,83 +7625,6 @@ export declare namespace ApplicationListResponse {
             session_duration?: string;
             updated_at?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface BrowserIsolationPermissionsApplication {
         /**
@@ -8811,10 +7640,6 @@ export declare namespace ApplicationListResponse {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<ApplicationsAPI.AllowedIdPs>;
-        /**
-         * The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Audience tag.
          */
@@ -8824,86 +7649,40 @@ export declare namespace ApplicationListResponse {
          * login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
-        /**
-         * The background color of the App Launcher page.
-         */
-        bg_color?: string;
         created_at?: string;
         /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
          */
-        domain?: string;
+        custom_deny_url?: string;
         /**
-         * The links in the App Launcher footer.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
          */
-        footer_links?: Array<BrowserIsolationPermissionsApplication.FooterLink>;
+        custom_non_identity_deny_url?: string;
         /**
-         * The background color of the App Launcher header.
+         * The custom pages that will be displayed when applicable for this application
          */
-        header_bg_color?: string;
+        custom_pages?: Array<string>;
         /**
-         * The design of the App Launcher landing page shown to users when they log in.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
-        landing_page_design?: BrowserIsolationPermissionsApplication.LandingPageDesign;
+        domain?: string;
         /**
          * The name of the application.
          */
         name?: string;
         policies?: Array<BrowserIsolationPermissionsApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: BrowserIsolationPermissionsApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
          * s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
         updated_at?: string;
     }
     namespace BrowserIsolationPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -8970,87 +7749,10 @@ export declare namespace ApplicationListResponse {
             session_duration?: string;
             updated_at?: string;
         }
+    }
+    interface BookmarkApplication {
         /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
-    interface BookmarkApplication {
-        /**
-         * UUID.
+         * UUID.
          */
         id?: string;
         /**
@@ -9074,11 +7776,6 @@ export declare namespace ApplicationListResponse {
          * The name of the application.
          */
         name?: string;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: BookmarkApplication.SCIMConfig;
         /**
          * The tags you want assigned to an application. Tags are used to filter
          * applications in the App Launcher dashboard.
@@ -9090,85 +7787,6 @@ export declare namespace ApplicationListResponse {
         type?: ApplicationsAPI.ApplicationType;
         updated_at?: string;
     }
-    namespace BookmarkApplication {
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
     interface InfrastructureApplication {
         target_criteria: Array<InfrastructureApplication.TargetCriterion>;
         /**
@@ -9189,11 +7807,6 @@ export declare namespace ApplicationListResponse {
          */
         name?: string;
         policies?: Array<InfrastructureApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: InfrastructureApplication.SCIMConfig;
         updated_at?: string;
     }
     namespace InfrastructureApplication {
@@ -9280,83 +7893,6 @@ export declare namespace ApplicationListResponse {
                 }
             }
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface BrowserRdpApplication {
         /**
@@ -9516,7 +8052,7 @@ export declare namespace ApplicationListResponse {
             /**
              * The communication protocol your application secures.
              */
-            protocol: 'SSH';
+            protocol: 'RDP';
             /**
              * Contains a map of target attribute keys to target attribute values.
              */
@@ -10952,6 +9488,20 @@ export declare namespace ApplicationGetResponse {
          */
         bg_color?: string;
         created_at?: string;
+        /**
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
+         */
+        custom_deny_url?: string;
+        /**
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
+         */
+        custom_non_identity_deny_url?: string;
+        /**
+         * The custom pages that will be displayed when applicable for this application
+         */
+        custom_pages?: Array<string>;
         /**
          * The primary hostname and path secured by Access. This domain will be displayed
          * if the app is visible in the App Launcher.
@@ -10974,11 +9524,6 @@ export declare namespace ApplicationGetResponse {
          */
         name?: string;
         policies?: Array<AppLauncherApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: AppLauncherApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
@@ -11093,87 +9638,10 @@ export declare namespace ApplicationGetResponse {
             session_duration?: string;
             updated_at?: string;
         }
+    }
+    interface DeviceEnrollmentPermissionsApplication {
         /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
-    interface DeviceEnrollmentPermissionsApplication {
-        /**
-         * The application type.
+         * The application type.
          */
         type: ApplicationsAPI.ApplicationType;
         /**
@@ -11185,10 +9653,6 @@ export declare namespace ApplicationGetResponse {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<ApplicationsAPI.AllowedIdPs>;
-        /**
-         * The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Audience tag.
          */
@@ -11198,86 +9662,40 @@ export declare namespace ApplicationGetResponse {
          * login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
-        /**
-         * The background color of the App Launcher page.
-         */
-        bg_color?: string;
         created_at?: string;
         /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
          */
-        domain?: string;
+        custom_deny_url?: string;
         /**
-         * The links in the App Launcher footer.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
          */
-        footer_links?: Array<DeviceEnrollmentPermissionsApplication.FooterLink>;
+        custom_non_identity_deny_url?: string;
         /**
-         * The background color of the App Launcher header.
+         * The custom pages that will be displayed when applicable for this application
          */
-        header_bg_color?: string;
+        custom_pages?: Array<string>;
         /**
-         * The design of the App Launcher landing page shown to users when they log in.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
-        landing_page_design?: DeviceEnrollmentPermissionsApplication.LandingPageDesign;
+        domain?: string;
         /**
          * The name of the application.
          */
         name?: string;
         policies?: Array<DeviceEnrollmentPermissionsApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: DeviceEnrollmentPermissionsApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
          * s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
         updated_at?: string;
     }
     namespace DeviceEnrollmentPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -11344,83 +9762,6 @@ export declare namespace ApplicationGetResponse {
             session_duration?: string;
             updated_at?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface BrowserIsolationPermissionsApplication {
         /**
@@ -11436,10 +9777,6 @@ export declare namespace ApplicationGetResponse {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<ApplicationsAPI.AllowedIdPs>;
-        /**
-         * The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Audience tag.
          */
@@ -11449,86 +9786,40 @@ export declare namespace ApplicationGetResponse {
          * login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
-        /**
-         * The background color of the App Launcher page.
-         */
-        bg_color?: string;
         created_at?: string;
         /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing identity-based rules.
          */
-        domain?: string;
+        custom_deny_url?: string;
         /**
-         * The links in the App Launcher footer.
+         * The custom URL a user is redirected to when they are denied access to the
+         * application when failing non-identity rules.
          */
-        footer_links?: Array<BrowserIsolationPermissionsApplication.FooterLink>;
+        custom_non_identity_deny_url?: string;
         /**
-         * The background color of the App Launcher header.
+         * The custom pages that will be displayed when applicable for this application
          */
-        header_bg_color?: string;
+        custom_pages?: Array<string>;
         /**
-         * The design of the App Launcher landing page shown to users when they log in.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
-        landing_page_design?: BrowserIsolationPermissionsApplication.LandingPageDesign;
+        domain?: string;
         /**
          * The name of the application.
          */
         name?: string;
         policies?: Array<BrowserIsolationPermissionsApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: BrowserIsolationPermissionsApplication.SCIMConfig;
         /**
          * The amount of time that tokens issued for this application will be valid. Must
          * be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms,
          * s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
         updated_at?: string;
     }
     namespace BrowserIsolationPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -11595,83 +9886,6 @@ export declare namespace ApplicationGetResponse {
             session_duration?: string;
             updated_at?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface BookmarkApplication {
         /**
@@ -11699,11 +9913,6 @@ export declare namespace ApplicationGetResponse {
          * The name of the application.
          */
         name?: string;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: BookmarkApplication.SCIMConfig;
         /**
          * The tags you want assigned to an application. Tags are used to filter
          * applications in the App Launcher dashboard.
@@ -11715,85 +9924,6 @@ export declare namespace ApplicationGetResponse {
         type?: ApplicationsAPI.ApplicationType;
         updated_at?: string;
     }
-    namespace BookmarkApplication {
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
     interface InfrastructureApplication {
         target_criteria: Array<InfrastructureApplication.TargetCriterion>;
         /**
@@ -11814,11 +9944,6 @@ export declare namespace ApplicationGetResponse {
          */
         name?: string;
         policies?: Array<InfrastructureApplication.Policy>;
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        scim_config?: InfrastructureApplication.SCIMConfig;
         updated_at?: string;
     }
     namespace InfrastructureApplication {
@@ -11905,88 +10030,11 @@ export declare namespace ApplicationGetResponse {
                 }
             }
         }
+    }
+    interface BrowserRdpApplication {
         /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasic | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerToken | ApplicationsAPI.SCIMConfigAuthenticationOauth2 | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMapping>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
-    interface BrowserRdpApplication {
-        /**
-         * The primary hostname and path secured by Access. This domain will be displayed
-         * if the app is visible in the App Launcher.
+         * The primary hostname and path secured by Access. This domain will be displayed
+         * if the app is visible in the App Launcher.
          */
         domain: string;
         target_criteria: Array<BrowserRdpApplication.TargetCriterion>;
@@ -12141,7 +10189,7 @@ export declare namespace ApplicationGetResponse {
             /**
              * The communication protocol your application secures.
              */
-            protocol: 'SSH';
+            protocol: 'RDP';
             /**
              * Contains a map of target attribute keys to target attribute values.
              */
@@ -12337,7 +10385,7 @@ export declare namespace ApplicationGetResponse {
     }
 }
 export type ApplicationRevokeTokensResponse = unknown;
-export type ApplicationCreateParams = ApplicationCreateParams.SelfHostedApplication | ApplicationCreateParams.SaaSApplication | ApplicationCreateParams.BrowserSSHApplication | ApplicationCreateParams.BrowserVNCApplication | ApplicationCreateParams.AppLauncherApplication | ApplicationCreateParams.DeviceEnrollmentPermissionsApplication | ApplicationCreateParams.BrowserIsolationPermissionsApplication | ApplicationCreateParams.BookmarkApplication | ApplicationCreateParams.InfrastructureApplication | ApplicationCreateParams.BrowserRdpApplication;
+export type ApplicationCreateParams = ApplicationCreateParams.SelfHostedApplication | ApplicationCreateParams.SaaSApplication | ApplicationCreateParams.BrowserSSHApplication | ApplicationCreateParams.BrowserVNCApplication | ApplicationCreateParams.AppLauncherApplication | ApplicationCreateParams.DeviceEnrollmentPermissionsApplication | ApplicationCreateParams.BrowserIsolationPermissionsApplication | ApplicationCreateParams.AccessBookmarkProps | ApplicationCreateParams.InfrastructureApplication | ApplicationCreateParams.BrowserRdpApplication;
 export declare namespace ApplicationCreateParams {
     interface SelfHostedApplication {
         /**
@@ -13567,6 +11615,21 @@ export declare namespace ApplicationCreateParams {
          * Body param: The background color of the App Launcher page.
          */
         bg_color?: string;
+        /**
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing identity-based rules.
+         */
+        custom_deny_url?: string;
+        /**
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing non-identity rules.
+         */
+        custom_non_identity_deny_url?: string;
+        /**
+         * Body param: The custom pages that will be displayed when applicable for this
+         * application
+         */
+        custom_pages?: Array<string>;
         /**
          * Body param: The links in the App Launcher footer.
          */
@@ -13586,11 +11649,6 @@ export declare namespace ApplicationCreateParams {
          * policies exclusive to the application.
          */
         policies?: Array<AppLauncherApplication.AccessAppPolicyLink | string | AppLauncherApplication.UnionMember2>;
-        /**
-         * Body param: Configuration for provisioning to this application via SCIM. This is
-         * currently in closed beta.
-         */
-        scim_config?: AppLauncherApplication.SCIMConfig;
         /**
          * Body param: The amount of time that tokens issued for this application will be
          * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
@@ -13692,83 +11750,6 @@ export declare namespace ApplicationCreateParams {
              */
             session_duration?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMappingParam>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface DeviceEnrollmentPermissionsApplication {
         /**
@@ -13790,90 +11771,40 @@ export declare namespace ApplicationCreateParams {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<AllowedIdPsParam>;
-        /**
-         * Body param: The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Body param: When set to `true`, users skip the identity provider selection step
          * during login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
         /**
-         * Body param: The background color of the App Launcher page.
-         */
-        bg_color?: string;
-        /**
-         * Body param: The links in the App Launcher footer.
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing identity-based rules.
          */
-        footer_links?: Array<DeviceEnrollmentPermissionsApplication.FooterLink>;
+        custom_deny_url?: string;
         /**
-         * Body param: The background color of the App Launcher header.
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing non-identity rules.
          */
-        header_bg_color?: string;
+        custom_non_identity_deny_url?: string;
         /**
-         * Body param: The design of the App Launcher landing page shown to users when they
-         * log in.
+         * Body param: The custom pages that will be displayed when applicable for this
+         * application
          */
-        landing_page_design?: DeviceEnrollmentPermissionsApplication.LandingPageDesign;
+        custom_pages?: Array<string>;
         /**
          * Body param: The policies that Access applies to the application, in ascending
          * order of precedence. Items can reference existing policies or create new
          * policies exclusive to the application.
          */
         policies?: Array<DeviceEnrollmentPermissionsApplication.AccessAppPolicyLink | string | DeviceEnrollmentPermissionsApplication.UnionMember2>;
-        /**
-         * Body param: Configuration for provisioning to this application via SCIM. This is
-         * currently in closed beta.
-         */
-        scim_config?: DeviceEnrollmentPermissionsApplication.SCIMConfig;
         /**
          * Body param: The amount of time that tokens issued for this application will be
          * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
          * (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Body param: Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
     }
     namespace DeviceEnrollmentPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         /**
          * A JSON that links a reusable policy to an application.
          */
@@ -13928,196 +11859,69 @@ export declare namespace ApplicationCreateParams {
              */
             session_duration?: string;
         }
+    }
+    interface BrowserIsolationPermissionsApplication {
         /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
+         * Body param: The application type.
          */
-        interface SCIMConfig {
+        type: ApplicationTypeParam;
+        /**
+         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+         * Zone ID.
+         */
+        account_id?: string;
+        /**
+         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+         * Account ID.
+         */
+        zone_id?: string;
+        /**
+         * Body param: The identity providers your users can select when connecting to this
+         * application. Defaults to all IdPs configured in your account.
+         */
+        allowed_idps?: Array<AllowedIdPsParam>;
+        /**
+         * Body param: When set to `true`, users skip the identity provider selection step
+         * during login. You must specify only one identity provider in allowed_idps.
+         */
+        auto_redirect_to_identity?: boolean;
+        /**
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing identity-based rules.
+         */
+        custom_deny_url?: string;
+        /**
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing non-identity rules.
+         */
+        custom_non_identity_deny_url?: string;
+        /**
+         * Body param: The custom pages that will be displayed when applicable for this
+         * application
+         */
+        custom_pages?: Array<string>;
+        /**
+         * Body param: The policies that Access applies to the application, in ascending
+         * order of precedence. Items can reference existing policies or create new
+         * policies exclusive to the application.
+         */
+        policies?: Array<BrowserIsolationPermissionsApplication.AccessAppPolicyLink | string | BrowserIsolationPermissionsApplication.UnionMember2>;
+        /**
+         * Body param: The amount of time that tokens issued for this application will be
+         * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
+         * (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications.
+         */
+        session_duration?: string;
+    }
+    namespace BrowserIsolationPermissionsApplication {
+        /**
+         * A JSON that links a reusable policy to an application.
+         */
+        interface AccessAppPolicyLink {
             /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
+             * The UUID of the policy
              */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMappingParam>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
-    interface BrowserIsolationPermissionsApplication {
-        /**
-         * Body param: The application type.
-         */
-        type: ApplicationTypeParam;
-        /**
-         * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
-         * Zone ID.
-         */
-        account_id?: string;
-        /**
-         * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
-         * Account ID.
-         */
-        zone_id?: string;
-        /**
-         * Body param: The identity providers your users can select when connecting to this
-         * application. Defaults to all IdPs configured in your account.
-         */
-        allowed_idps?: Array<AllowedIdPsParam>;
-        /**
-         * Body param: The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
-        /**
-         * Body param: When set to `true`, users skip the identity provider selection step
-         * during login. You must specify only one identity provider in allowed_idps.
-         */
-        auto_redirect_to_identity?: boolean;
-        /**
-         * Body param: The background color of the App Launcher page.
-         */
-        bg_color?: string;
-        /**
-         * Body param: The links in the App Launcher footer.
-         */
-        footer_links?: Array<BrowserIsolationPermissionsApplication.FooterLink>;
-        /**
-         * Body param: The background color of the App Launcher header.
-         */
-        header_bg_color?: string;
-        /**
-         * Body param: The design of the App Launcher landing page shown to users when they
-         * log in.
-         */
-        landing_page_design?: BrowserIsolationPermissionsApplication.LandingPageDesign;
-        /**
-         * Body param: The policies that Access applies to the application, in ascending
-         * order of precedence. Items can reference existing policies or create new
-         * policies exclusive to the application.
-         */
-        policies?: Array<BrowserIsolationPermissionsApplication.AccessAppPolicyLink | string | BrowserIsolationPermissionsApplication.UnionMember2>;
-        /**
-         * Body param: Configuration for provisioning to this application via SCIM. This is
-         * currently in closed beta.
-         */
-        scim_config?: BrowserIsolationPermissionsApplication.SCIMConfig;
-        /**
-         * Body param: The amount of time that tokens issued for this application will be
-         * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
-         * (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications.
-         */
-        session_duration?: string;
-        /**
-         * Body param: Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
-    }
-    namespace BrowserIsolationPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
-        /**
-         * A JSON that links a reusable policy to an application.
-         */
-        interface AccessAppPolicyLink {
-            /**
-             * The UUID of the policy
-             */
-            id?: string;
+            id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -14164,85 +11968,8 @@ export declare namespace ApplicationCreateParams {
              */
             session_duration?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMappingParam>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
-    interface BookmarkApplication {
+    interface AccessBookmarkProps {
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -14255,113 +11982,29 @@ export declare namespace ApplicationCreateParams {
         zone_id?: string;
         /**
          * Body param: Displays the application in the App Launcher.
-         */
-        app_launcher_visible?: boolean;
-        /**
-         * Body param: The URL or domain of the bookmark.
-         */
-        domain?: string;
-        /**
-         * Body param: The image URL for the logo shown in the App Launcher dashboard.
-         */
-        logo_url?: string;
-        /**
-         * Body param: The name of the application.
-         */
-        name?: string;
-        /**
-         * Body param: Configuration for provisioning to this application via SCIM. This is
-         * currently in closed beta.
-         */
-        scim_config?: BookmarkApplication.SCIMConfig;
-        /**
-         * Body param: The tags you want assigned to an application. Tags are used to
-         * filter applications in the App Launcher dashboard.
-         */
-        tags?: Array<string>;
-        /**
-         * Body param: The application type.
-         */
-        type?: ApplicationTypeParam;
-    }
-    namespace BookmarkApplication {
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMappingParam>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
+         */
+        app_launcher_visible?: boolean;
+        /**
+         * Body param: The URL or domain of the bookmark.
+         */
+        domain?: string;
+        /**
+         * Body param: The image URL for the logo shown in the App Launcher dashboard.
+         */
+        logo_url?: string;
+        /**
+         * Body param: The name of the application.
+         */
+        name?: string;
+        /**
+         * Body param: The tags you want assigned to an application. Tags are used to
+         * filter applications in the App Launcher dashboard.
+         */
+        tags?: Array<string>;
+        /**
+         * Body param: The application type.
+         */
+        type?: ApplicationTypeParam;
     }
     interface InfrastructureApplication {
         /**
@@ -14642,7 +12285,7 @@ export declare namespace ApplicationCreateParams {
             /**
              * The communication protocol your application secures.
              */
-            protocol: 'SSH';
+            protocol: 'RDP';
             /**
              * Contains a map of target attribute keys to target attribute values.
              */
@@ -14825,7 +12468,7 @@ export declare namespace ApplicationCreateParams {
         }
     }
 }
-export type ApplicationUpdateParams = ApplicationUpdateParams.SelfHostedApplication | ApplicationUpdateParams.SaaSApplication | ApplicationUpdateParams.BrowserSSHApplication | ApplicationUpdateParams.BrowserVNCApplication | ApplicationUpdateParams.AppLauncherApplication | ApplicationUpdateParams.DeviceEnrollmentPermissionsApplication | ApplicationUpdateParams.BrowserIsolationPermissionsApplication | ApplicationUpdateParams.BookmarkApplication | ApplicationUpdateParams.InfrastructureApplication | ApplicationUpdateParams.BrowserRdpApplication;
+export type ApplicationUpdateParams = ApplicationUpdateParams.SelfHostedApplication | ApplicationUpdateParams.SaaSApplication | ApplicationUpdateParams.BrowserSSHApplication | ApplicationUpdateParams.BrowserVNCApplication | ApplicationUpdateParams.AppLauncherApplication | ApplicationUpdateParams.DeviceEnrollmentPermissionsApplication | ApplicationUpdateParams.BrowserIsolationPermissionsApplication | ApplicationUpdateParams.AccessBookmarkProps | ApplicationUpdateParams.InfrastructureApplication | ApplicationUpdateParams.BrowserRdpApplication;
 export declare namespace ApplicationUpdateParams {
     interface SelfHostedApplication {
         /**
@@ -16055,6 +13698,21 @@ export declare namespace ApplicationUpdateParams {
          * Body param: The background color of the App Launcher page.
          */
         bg_color?: string;
+        /**
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing identity-based rules.
+         */
+        custom_deny_url?: string;
+        /**
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing non-identity rules.
+         */
+        custom_non_identity_deny_url?: string;
+        /**
+         * Body param: The custom pages that will be displayed when applicable for this
+         * application
+         */
+        custom_pages?: Array<string>;
         /**
          * Body param: The links in the App Launcher footer.
          */
@@ -16074,11 +13732,6 @@ export declare namespace ApplicationUpdateParams {
          * policies exclusive to the application.
          */
         policies?: Array<AppLauncherApplication.AccessAppPolicyLink | string | AppLauncherApplication.UnionMember2>;
-        /**
-         * Body param: Configuration for provisioning to this application via SCIM. This is
-         * currently in closed beta.
-         */
-        scim_config?: AppLauncherApplication.SCIMConfig;
         /**
          * Body param: The amount of time that tokens issued for this application will be
          * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
@@ -16180,83 +13833,6 @@ export declare namespace ApplicationUpdateParams {
              */
             session_duration?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMappingParam>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
     interface DeviceEnrollmentPermissionsApplication {
         /**
@@ -16278,90 +13854,40 @@ export declare namespace ApplicationUpdateParams {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<AllowedIdPsParam>;
-        /**
-         * Body param: The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Body param: When set to `true`, users skip the identity provider selection step
          * during login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
         /**
-         * Body param: The background color of the App Launcher page.
-         */
-        bg_color?: string;
-        /**
-         * Body param: The links in the App Launcher footer.
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing identity-based rules.
          */
-        footer_links?: Array<DeviceEnrollmentPermissionsApplication.FooterLink>;
+        custom_deny_url?: string;
         /**
-         * Body param: The background color of the App Launcher header.
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing non-identity rules.
          */
-        header_bg_color?: string;
+        custom_non_identity_deny_url?: string;
         /**
-         * Body param: The design of the App Launcher landing page shown to users when they
-         * log in.
+         * Body param: The custom pages that will be displayed when applicable for this
+         * application
          */
-        landing_page_design?: DeviceEnrollmentPermissionsApplication.LandingPageDesign;
+        custom_pages?: Array<string>;
         /**
          * Body param: The policies that Access applies to the application, in ascending
          * order of precedence. Items can reference existing policies or create new
          * policies exclusive to the application.
          */
         policies?: Array<DeviceEnrollmentPermissionsApplication.AccessAppPolicyLink | string | DeviceEnrollmentPermissionsApplication.UnionMember2>;
-        /**
-         * Body param: Configuration for provisioning to this application via SCIM. This is
-         * currently in closed beta.
-         */
-        scim_config?: DeviceEnrollmentPermissionsApplication.SCIMConfig;
         /**
          * Body param: The amount of time that tokens issued for this application will be
          * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
          * (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Body param: Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
     }
     namespace DeviceEnrollmentPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         /**
          * A JSON that links a reusable policy to an application.
          */
@@ -16402,96 +13928,19 @@ export declare namespace ApplicationUpdateParams {
              */
             precedence?: number;
             /**
-             * A custom message that will appear on the purpose justification screen.
-             */
-            purpose_justification_prompt?: string;
-            /**
-             * Require users to enter a justification when they log in to the application.
-             */
-            purpose_justification_required?: boolean;
-            /**
-             * The amount of time that tokens issued for the application will be valid. Must be
-             * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
-             * m, h.
-             */
-            session_duration?: string;
-        }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMappingParam>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
+             * A custom message that will appear on the purpose justification screen.
              */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
+            purpose_justification_prompt?: string;
+            /**
+             * Require users to enter a justification when they log in to the application.
+             */
+            purpose_justification_required?: boolean;
+            /**
+             * The amount of time that tokens issued for the application will be valid. Must be
+             * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
+             * m, h.
+             */
+            session_duration?: string;
         }
     }
     interface BrowserIsolationPermissionsApplication {
@@ -16514,90 +13963,40 @@ export declare namespace ApplicationUpdateParams {
          * application. Defaults to all IdPs configured in your account.
          */
         allowed_idps?: Array<AllowedIdPsParam>;
-        /**
-         * Body param: The image URL of the logo shown in the App Launcher header.
-         */
-        app_launcher_logo_url?: string;
         /**
          * Body param: When set to `true`, users skip the identity provider selection step
          * during login. You must specify only one identity provider in allowed_idps.
          */
         auto_redirect_to_identity?: boolean;
         /**
-         * Body param: The background color of the App Launcher page.
-         */
-        bg_color?: string;
-        /**
-         * Body param: The links in the App Launcher footer.
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing identity-based rules.
          */
-        footer_links?: Array<BrowserIsolationPermissionsApplication.FooterLink>;
+        custom_deny_url?: string;
         /**
-         * Body param: The background color of the App Launcher header.
+         * Body param: The custom URL a user is redirected to when they are denied access
+         * to the application when failing non-identity rules.
          */
-        header_bg_color?: string;
+        custom_non_identity_deny_url?: string;
         /**
-         * Body param: The design of the App Launcher landing page shown to users when they
-         * log in.
+         * Body param: The custom pages that will be displayed when applicable for this
+         * application
          */
-        landing_page_design?: BrowserIsolationPermissionsApplication.LandingPageDesign;
+        custom_pages?: Array<string>;
         /**
          * Body param: The policies that Access applies to the application, in ascending
          * order of precedence. Items can reference existing policies or create new
          * policies exclusive to the application.
          */
         policies?: Array<BrowserIsolationPermissionsApplication.AccessAppPolicyLink | string | BrowserIsolationPermissionsApplication.UnionMember2>;
-        /**
-         * Body param: Configuration for provisioning to this application via SCIM. This is
-         * currently in closed beta.
-         */
-        scim_config?: BrowserIsolationPermissionsApplication.SCIMConfig;
         /**
          * Body param: The amount of time that tokens issued for this application will be
          * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
          * (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications.
          */
         session_duration?: string;
-        /**
-         * Body param: Determines when to skip the App Launcher landing page.
-         */
-        skip_app_launcher_login_page?: boolean;
     }
     namespace BrowserIsolationPermissionsApplication {
-        interface FooterLink {
-            /**
-             * The hypertext in the footer link.
-             */
-            name: string;
-            /**
-             * the hyperlink in the footer link.
-             */
-            url: string;
-        }
-        /**
-         * The design of the App Launcher landing page shown to users when they log in.
-         */
-        interface LandingPageDesign {
-            /**
-             * The background color of the log in button on the landing page.
-             */
-            button_color?: string;
-            /**
-             * The color of the text in the log in button on the landing page.
-             */
-            button_text_color?: string;
-            /**
-             * The URL of the image shown on the landing page.
-             */
-            image_url?: string;
-            /**
-             * The message shown on the landing page.
-             */
-            message?: string;
-            /**
-             * The title shown on the landing page.
-             */
-            title?: string;
-        }
         /**
          * A JSON that links a reusable policy to an application.
          */
@@ -16652,85 +14051,8 @@ export declare namespace ApplicationUpdateParams {
              */
             session_duration?: string;
         }
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMappingParam>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
     }
-    interface BookmarkApplication {
+    interface AccessBookmarkProps {
         /**
          * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
          * Zone ID.
@@ -16757,11 +14079,6 @@ export declare namespace ApplicationUpdateParams {
          * Body param: The name of the application.
          */
         name?: string;
-        /**
-         * Body param: Configuration for provisioning to this application via SCIM. This is
-         * currently in closed beta.
-         */
-        scim_config?: BookmarkApplication.SCIMConfig;
         /**
          * Body param: The tags you want assigned to an application. Tags are used to
          * filter applications in the App Launcher dashboard.
@@ -16772,85 +14089,6 @@ export declare namespace ApplicationUpdateParams {
          */
         type?: ApplicationTypeParam;
     }
-    namespace BookmarkApplication {
-        /**
-         * Configuration for provisioning to this application via SCIM. This is currently
-         * in closed beta.
-         */
-        interface SCIMConfig {
-            /**
-             * The UID of the IdP to use as the source for SCIM resources to provision to this
-             * application.
-             */
-            idp_uid: string;
-            /**
-             * The base URI for the application's SCIM-compatible API.
-             */
-            remote_uri: string;
-            /**
-             * Attributes for configuring HTTP Basic authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            authentication?: ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken | Array<ApplicationsAPI.SCIMConfigAuthenticationHTTPBasicParam | ApplicationsAPI.SCIMConfigAuthenticationOAuthBearerTokenParam | ApplicationsAPI.SCIMConfigAuthenticationOauth2Param | SCIMConfig.AccessSCIMConfigAuthenticationAccessServiceToken>;
-            /**
-             * If false, propagates DELETE requests to the target application for SCIM
-             * resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-             * targets do not support DELETE operations.
-             */
-            deactivate_on_delete?: boolean;
-            /**
-             * Whether SCIM provisioning is turned on for this application.
-             */
-            enabled?: boolean;
-            /**
-             * A list of mappings to apply to SCIM resources before provisioning them in this
-             * application. These can transform or filter the resources to be provisioned.
-             */
-            mappings?: Array<ApplicationsAPI.SCIMConfigMappingParam>;
-        }
-        namespace SCIMConfig {
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-            /**
-             * Attributes for configuring Access Service Token authentication scheme for SCIM
-             * provisioning to an application.
-             */
-            interface AccessSCIMConfigAuthenticationAccessServiceToken {
-                /**
-                 * Client ID of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_id: string;
-                /**
-                 * Client secret of the Access service token used to authenticate with the remote
-                 * service.
-                 */
-                client_secret: string;
-                /**
-                 * The authentication scheme to use when making SCIM requests to this application.
-                 */
-                scheme: 'access_service_token';
-            }
-        }
-    }
     interface InfrastructureApplication {
         /**
          * Body param:
@@ -17130,7 +14368,7 @@ export declare namespace ApplicationUpdateParams {
             /**
              * The communication protocol your application secures.
              */
-            protocol: 'SSH';
+            protocol: 'RDP';
             /**
              * Contains a map of target attribute keys to target attribute values.
              */
@@ -17313,7 +14551,7 @@ export declare namespace ApplicationUpdateParams {
         }
     }
 }
-export interface ApplicationListParams {
+export interface ApplicationListParams extends V4PagePaginationArrayParams {
     /**
      * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
      * Zone ID.
@@ -17377,10 +14615,10 @@ export interface ApplicationRevokeTokensParams {
     zone_id?: string;
 }
 export declare namespace Applications {
-    export { type AllowedHeaders as AllowedHeaders, type AllowedIdPs as AllowedIdPs, type AllowedMethods as AllowedMethods, type AllowedOrigins as AllowedOrigins, type AppID as AppID, type Application as Application, type ApplicationPolicy as ApplicationPolicy, type ApplicationSCIMConfig as ApplicationSCIMConfig, type ApplicationType as ApplicationType, type CORSHeaders as CORSHeaders, type Decision as Decision, type OIDCSaaSApp as OIDCSaaSApp, type SaaSAppNameIDFormat as SaaSAppNameIDFormat, type SAMLSaaSApp as SAMLSaaSApp, type SCIMConfigAuthenticationHTTPBasic as SCIMConfigAuthenticationHTTPBasic, type SCIMConfigAuthenticationOAuthBearerToken as SCIMConfigAuthenticationOAuthBearerToken, type SCIMConfigAuthenticationOauth2 as SCIMConfigAuthenticationOauth2, type SCIMConfigMapping as SCIMConfigMapping, type SelfHostedDomains as SelfHostedDomains, type ApplicationCreateResponse as ApplicationCreateResponse, type ApplicationUpdateResponse as ApplicationUpdateResponse, type ApplicationListResponse as ApplicationListResponse, type ApplicationDeleteResponse as ApplicationDeleteResponse, type ApplicationGetResponse as ApplicationGetResponse, type ApplicationRevokeTokensResponse as ApplicationRevokeTokensResponse, ApplicationListResponsesSinglePage as ApplicationListResponsesSinglePage, type ApplicationCreateParams as ApplicationCreateParams, type ApplicationUpdateParams as ApplicationUpdateParams, type ApplicationListParams as ApplicationListParams, type ApplicationDeleteParams as ApplicationDeleteParams, type ApplicationGetParams as ApplicationGetParams, type ApplicationRevokeTokensParams as ApplicationRevokeTokensParams, };
-    export { CAs as CAs, type CA as CA, type CADeleteResponse as CADeleteResponse, CAsSinglePage as CAsSinglePage, type CACreateParams as CACreateParams, type CAListParams as CAListParams, type CADeleteParams as CADeleteParams, type CAGetParams as CAGetParams, };
+    export { type AllowedHeaders as AllowedHeaders, type AllowedIdPs as AllowedIdPs, type AllowedMethods as AllowedMethods, type AllowedOrigins as AllowedOrigins, type AppID as AppID, type Application as Application, type ApplicationPolicy as ApplicationPolicy, type ApplicationSCIMConfig as ApplicationSCIMConfig, type ApplicationType as ApplicationType, type CORSHeaders as CORSHeaders, type Decision as Decision, type OIDCSaaSApp as OIDCSaaSApp, type SaaSAppNameIDFormat as SaaSAppNameIDFormat, type SAMLSaaSApp as SAMLSaaSApp, type SCIMConfigAuthenticationHTTPBasic as SCIMConfigAuthenticationHTTPBasic, type SCIMConfigAuthenticationOAuthBearerToken as SCIMConfigAuthenticationOAuthBearerToken, type SCIMConfigAuthenticationOauth2 as SCIMConfigAuthenticationOauth2, type SCIMConfigMapping as SCIMConfigMapping, type SelfHostedDomains as SelfHostedDomains, type ApplicationCreateResponse as ApplicationCreateResponse, type ApplicationUpdateResponse as ApplicationUpdateResponse, type ApplicationListResponse as ApplicationListResponse, type ApplicationDeleteResponse as ApplicationDeleteResponse, type ApplicationGetResponse as ApplicationGetResponse, type ApplicationRevokeTokensResponse as ApplicationRevokeTokensResponse, ApplicationListResponsesV4PagePaginationArray as ApplicationListResponsesV4PagePaginationArray, type ApplicationCreateParams as ApplicationCreateParams, type ApplicationUpdateParams as ApplicationUpdateParams, type ApplicationListParams as ApplicationListParams, type ApplicationDeleteParams as ApplicationDeleteParams, type ApplicationGetParams as ApplicationGetParams, type ApplicationRevokeTokensParams as ApplicationRevokeTokensParams, };
+    export { CAs as CAs, type CA as CA, type CADeleteResponse as CADeleteResponse, CAsV4PagePaginationArray as CAsV4PagePaginationArray, type CACreateParams as CACreateParams, type CAListParams as CAListParams, type CADeleteParams as CADeleteParams, type CAGetParams as CAGetParams, };
     export { UserPolicyChecks as UserPolicyChecks, type UserPolicyCheckGeo as UserPolicyCheckGeo, type UserPolicyCheckListResponse as UserPolicyCheckListResponse, type UserPolicyCheckListParams as UserPolicyCheckListParams, };
-    export { Policies as Policies, type AccessDevicePostureRule as AccessDevicePostureRule, type AccessRule as AccessRule, type AnyValidServiceTokenRule as AnyValidServiceTokenRule, type AuthenticationMethodRule as AuthenticationMethodRule, type AzureGroupRule as AzureGroupRule, type CertificateRule as CertificateRule, type CountryRule as CountryRule, type DomainRule as DomainRule, type EmailListRule as EmailListRule, type EmailRule as EmailRule, type EveryoneRule as EveryoneRule, type ExternalEvaluationRule as ExternalEvaluationRule, type GitHubOrganizationRule as GitHubOrganizationRule, type GroupRule as GroupRule, type GSuiteGroupRule as GSuiteGroupRule, type IPListRule as IPListRule, type IPRule as IPRule, type OktaGroupRule as OktaGroupRule, type SAMLGroupRule as SAMLGroupRule, type ServiceTokenRule as ServiceTokenRule, type PolicyCreateResponse as PolicyCreateResponse, type PolicyUpdateResponse as PolicyUpdateResponse, type PolicyListResponse as PolicyListResponse, type PolicyDeleteResponse as PolicyDeleteResponse, type PolicyGetResponse as PolicyGetResponse, PolicyListResponsesSinglePage as PolicyListResponsesSinglePage, type PolicyCreateParams as PolicyCreateParams, type PolicyUpdateParams as PolicyUpdateParams, type PolicyListParams as PolicyListParams, type PolicyDeleteParams as PolicyDeleteParams, type PolicyGetParams as PolicyGetParams, };
+    export { Policies as Policies, type AccessDevicePostureRule as AccessDevicePostureRule, type AccessRule as AccessRule, type AnyValidServiceTokenRule as AnyValidServiceTokenRule, type AuthenticationMethodRule as AuthenticationMethodRule, type AzureGroupRule as AzureGroupRule, type CertificateRule as CertificateRule, type CountryRule as CountryRule, type DomainRule as DomainRule, type EmailListRule as EmailListRule, type EmailRule as EmailRule, type EveryoneRule as EveryoneRule, type ExternalEvaluationRule as ExternalEvaluationRule, type GitHubOrganizationRule as GitHubOrganizationRule, type GroupRule as GroupRule, type GSuiteGroupRule as GSuiteGroupRule, type IPListRule as IPListRule, type IPRule as IPRule, type OktaGroupRule as OktaGroupRule, type SAMLGroupRule as SAMLGroupRule, type ServiceTokenRule as ServiceTokenRule, type PolicyCreateResponse as PolicyCreateResponse, type PolicyUpdateResponse as PolicyUpdateResponse, type PolicyListResponse as PolicyListResponse, type PolicyDeleteResponse as PolicyDeleteResponse, type PolicyGetResponse as PolicyGetResponse, PolicyListResponsesV4PagePaginationArray as PolicyListResponsesV4PagePaginationArray, type PolicyCreateParams as PolicyCreateParams, type PolicyUpdateParams as PolicyUpdateParams, type PolicyListParams as PolicyListParams, type PolicyDeleteParams as PolicyDeleteParams, type PolicyGetParams as PolicyGetParams, };
     export { PolicyTests as PolicyTests, type PolicyTestCreateResponse as PolicyTestCreateResponse, type PolicyTestGetResponse as PolicyTestGetResponse, type PolicyTestCreateParams as PolicyTestCreateParams, type PolicyTestGetParams as PolicyTestGetParams, };
     export { Settings as Settings, type SettingUpdateResponse as SettingUpdateResponse, type SettingEditResponse as SettingEditResponse, type SettingUpdateParams as SettingUpdateParams, type SettingEditParams as SettingEditParams, };
 }