firebase-tools 9.18.0 → 9.22.0

package/lib/emulator/auth/apiSpec.js

@@ -632,149 +632,6 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v1/projects": {
-            get: {
-                description: "Gets a project's public Identity Toolkit configuration. (Legacy) This method also supports authenticated calls from a developer to retrieve non-public configuration.",
-                operationId: "identitytoolkit.getProjects",
-                responses: {
-                    200: {
-                        description: "Successful response",
-                        content: {
-                            "*/*": {
-                                schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1GetProjectConfigResponse",
-                                },
-                            },
-                        },
-                    },
-                },
-                parameters: [
-                    {
-                        name: "androidPackageName",
-                        in: "query",
-                        description: "Android package name to check against the real android package name. If this field is provided, and sha1_cert_hash is not provided, the action will throw an error if this does not match the real android package name.",
-                        schema: { type: "string" },
-                    },
-                    {
-                        name: "clientId",
-                        in: "query",
-                        description: "The RP OAuth client ID. If set, a check will be performed to ensure that the OAuth client is valid for the retrieved project and the request rejected with a client error if not valid.",
-                        schema: { type: "string" },
-                    },
-                    {
-                        name: "delegatedProjectNumber",
-                        in: "query",
-                        description: "Project Number of the delegated project request. This field should only be used as part of the Firebase V1 migration.",
-                        schema: { type: "string" },
-                    },
-                    {
-                        name: "firebaseAppId",
-                        in: "query",
-                        description: "The Firebase app ID, for applications that use Firebase. This can be found in the Firebase console for your project. If set, a check will be performed to ensure that the app ID is valid for the retrieved project. If not valid, the request will be rejected with a client error.",
-                        schema: { type: "string" },
-                    },
-                    {
-                        name: "iosBundleId",
-                        in: "query",
-                        description: "iOS bundle id to check against the real ios bundle id. If this field is provided, the action will throw an error if this does not match the real iOS bundle id.",
-                        schema: { type: "string" },
-                    },
-                    {
-                        name: "projectNumber",
-                        in: "query",
-                        description: "Project number of the configuration to retrieve. This field is deprecated and should not be used by new integrations.",
-                        schema: { type: "string" },
-                    },
-                    {
-                        name: "returnDynamicLink",
-                        in: "query",
-                        description: "Whether dynamic link should be returned.",
-                        schema: { type: "boolean" },
-                    },
-                    {
-                        name: "sha1Cert",
-                        in: "query",
-                        description: "SHA-1 Android application cert hash. If set, a check will be performed to ensure that the cert hash is valid for the retrieved project and android_package_name.",
-                        schema: { type: "string" },
-                    },
-                ],
-                security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
-                tags: ["v1"],
-            },
-            parameters: [
-                { $ref: "#/components/parameters/access_token" },
-                { $ref: "#/components/parameters/alt" },
-                { $ref: "#/components/parameters/callback" },
-                { $ref: "#/components/parameters/fields" },
-                { $ref: "#/components/parameters/oauth_token" },
-                { $ref: "#/components/parameters/prettyPrint" },
-                { $ref: "#/components/parameters/quotaUser" },
-                { $ref: "#/components/parameters/uploadType" },
-                { $ref: "#/components/parameters/upload_protocol" },
-            ],
-        },
-        "/v1/recaptchaParams": {
-            get: {
-                description: "Gets parameters needed for generating a reCAPTCHA challenge.",
-                operationId: "identitytoolkit.getRecaptchaParams",
-                responses: {
-                    200: {
-                        description: "Successful response",
-                        content: {
-                            "*/*": {
-                                schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1GetRecaptchaParamResponse",
-                                },
-                            },
-                        },
-                    },
-                },
-                security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
-                tags: ["v1"],
-            },
-            parameters: [
-                { $ref: "#/components/parameters/access_token" },
-                { $ref: "#/components/parameters/alt" },
-                { $ref: "#/components/parameters/callback" },
-                { $ref: "#/components/parameters/fields" },
-                { $ref: "#/components/parameters/oauth_token" },
-                { $ref: "#/components/parameters/prettyPrint" },
-                { $ref: "#/components/parameters/quotaUser" },
-                { $ref: "#/components/parameters/uploadType" },
-                { $ref: "#/components/parameters/upload_protocol" },
-            ],
-        },
-        "/v1/sessionCookiePublicKeys": {
-            get: {
-                description: "Retrieves the set of public keys of the session cookie JSON Web Token (JWT) signer that can be used to validate the session cookie created through createSessionCookie.",
-                operationId: "identitytoolkit.getSessionCookiePublicKeys",
-                responses: {
-                    200: {
-                        description: "Successful response",
-                        content: {
-                            "*/*": {
-                                schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1GetSessionCookiePublicKeysResponse",
-                                },
-                            },
-                        },
-                    },
-                },
-                tags: ["v1"],
-                security: [{ apiKey: [] }],
-            },
-            parameters: [
-                { $ref: "#/components/parameters/access_token" },
-                { $ref: "#/components/parameters/alt" },
-                { $ref: "#/components/parameters/callback" },
-                { $ref: "#/components/parameters/fields" },
-                { $ref: "#/components/parameters/oauth_token" },
-                { $ref: "#/components/parameters/prettyPrint" },
-                { $ref: "#/components/parameters/quotaUser" },
-                { $ref: "#/components/parameters/uploadType" },
-                { $ref: "#/components/parameters/upload_protocol" },
-            ],
-        },
         "/v1/projects/{targetProjectId}/accounts": {
             post: {
                 description: "Signs up a new email and password user or anonymous user, or upgrades an anonymous user to email and password. For an admin request with a Google OAuth 2.0 credential with the proper [permissions](https://cloud.google.com/identity-platform/docs/access-control), creates a new anonymous, email and password, or phone number user. An [API key](https://cloud.google.com/docs/authentication/api-keys) is required in the request in order to identify the Google Cloud project.",
@@ -1806,33 +1663,74 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/accounts/mfaEnrollment:finalize": {
-            post: {
-                description: "Finishes enrolling a second factor for the user.",
-                operationId: "identitytoolkit.accounts.mfaEnrollment.finalize",
+        "/v1/projects": {
+            get: {
+                description: "Gets a project's public Identity Toolkit configuration. (Legacy) This method also supports authenticated calls from a developer to retrieve non-public configuration.",
+                operationId: "identitytoolkit.getProjects",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
                                 schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2FinalizeMfaEnrollmentResponse",
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1GetProjectConfigResponse",
                                 },
                             },
                         },
                     },
                 },
-                requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: {
-                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2FinalizeMfaEnrollmentRequest",
-                            },
-                        },
+                parameters: [
+                    {
+                        name: "androidPackageName",
+                        in: "query",
+                        description: "Android package name to check against the real android package name. If this field is provided, and sha1_cert_hash is not provided, the action will throw an error if this does not match the real android package name.",
+                        schema: { type: "string" },
                     },
-                },
+                    {
+                        name: "clientId",
+                        in: "query",
+                        description: "The RP OAuth client ID. If set, a check will be performed to ensure that the OAuth client is valid for the retrieved project and the request rejected with a client error if not valid.",
+                        schema: { type: "string" },
+                    },
+                    {
+                        name: "delegatedProjectNumber",
+                        in: "query",
+                        description: "Project Number of the delegated project request. This field should only be used as part of the Firebase V1 migration.",
+                        schema: { type: "string" },
+                    },
+                    {
+                        name: "firebaseAppId",
+                        in: "query",
+                        description: "The Firebase app ID, for applications that use Firebase. This can be found in the Firebase console for your project. If set, a check will be performed to ensure that the app ID is valid for the retrieved project. If not valid, the request will be rejected with a client error.",
+                        schema: { type: "string" },
+                    },
+                    {
+                        name: "iosBundleId",
+                        in: "query",
+                        description: "iOS bundle id to check against the real ios bundle id. If this field is provided, the action will throw an error if this does not match the real iOS bundle id.",
+                        schema: { type: "string" },
+                    },
+                    {
+                        name: "projectNumber",
+                        in: "query",
+                        description: "Project number of the configuration to retrieve. This field is deprecated and should not be used by new integrations.",
+                        schema: { type: "string" },
+                    },
+                    {
+                        name: "returnDynamicLink",
+                        in: "query",
+                        description: "Whether dynamic link should be returned.",
+                        schema: { type: "boolean" },
+                    },
+                    {
+                        name: "sha1Cert",
+                        in: "query",
+                        description: "SHA-1 Android application cert hash. If set, a check will be performed to ensure that the cert hash is valid for the retrieved project and android_package_name.",
+                        schema: { type: "string" },
+                    },
+                ],
                 security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
-                tags: ["accounts"],
+                tags: ["v1"],
             },
             parameters: [
                 { $ref: "#/components/parameters/access_token" },
@@ -1846,33 +1744,24 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/accounts/mfaEnrollment:start": {
-            post: {
-                description: "Step one of the MFA enrollment process. In SMS case, this sends an SMS verification code to the user.",
-                operationId: "identitytoolkit.accounts.mfaEnrollment.start",
+        "/v1/recaptchaParams": {
+            get: {
+                description: "Gets parameters needed for generating a reCAPTCHA challenge.",
+                operationId: "identitytoolkit.getRecaptchaParams",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
                                 schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2StartMfaEnrollmentResponse",
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1GetRecaptchaParamResponse",
                                 },
                             },
                         },
                     },
                 },
-                requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: {
-                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2StartMfaEnrollmentRequest",
-                            },
-                        },
-                    },
-                },
                 security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
-                tags: ["accounts"],
+                tags: ["v1"],
             },
             parameters: [
                 { $ref: "#/components/parameters/access_token" },
@@ -1886,33 +1775,144 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/accounts/mfaEnrollment:withdraw": {
-            post: {
-                description: "Revokes one second factor from the enrolled second factors for an account.",
-                operationId: "identitytoolkit.accounts.mfaEnrollment.withdraw",
+        "/v1/sessionCookiePublicKeys": {
+            get: {
+                description: "Retrieves the set of public keys of the session cookie JSON Web Token (JWT) signer that can be used to validate the session cookie created through createSessionCookie.",
+                operationId: "identitytoolkit.getSessionCookiePublicKeys",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
                                 schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2WithdrawMfaResponse",
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1GetSessionCookiePublicKeysResponse",
                                 },
                             },
                         },
                     },
                 },
-                requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: {
-                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2WithdrawMfaRequest",
-                            },
-                        },
-                    },
-                },
-                security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
-                tags: ["accounts"],
+                tags: ["v1"],
+                security: [{ apiKey: [] }],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/accounts/mfaEnrollment:finalize": {
+            post: {
+                description: "Finishes enrolling a second factor for the user.",
+                operationId: "identitytoolkit.accounts.mfaEnrollment.finalize",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2FinalizeMfaEnrollmentResponse",
+                                },
+                            },
+                        },
+                    },
+                },
+                requestBody: {
+                    content: {
+                        "application/json": {
+                            schema: {
+                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2FinalizeMfaEnrollmentRequest",
+                            },
+                        },
+                    },
+                },
+                security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
+                tags: ["accounts"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/accounts/mfaEnrollment:start": {
+            post: {
+                description: "Step one of the MFA enrollment process. In SMS case, this sends an SMS verification code to the user.",
+                operationId: "identitytoolkit.accounts.mfaEnrollment.start",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2StartMfaEnrollmentResponse",
+                                },
+                            },
+                        },
+                    },
+                },
+                requestBody: {
+                    content: {
+                        "application/json": {
+                            schema: {
+                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2StartMfaEnrollmentRequest",
+                            },
+                        },
+                    },
+                },
+                security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
+                tags: ["accounts"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/accounts/mfaEnrollment:withdraw": {
+            post: {
+                description: "Revokes one second factor from the enrolled second factors for an account.",
+                operationId: "identitytoolkit.accounts.mfaEnrollment.withdraw",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2WithdrawMfaResponse",
+                                },
+                            },
+                        },
+                    },
+                },
+                requestBody: {
+                    content: {
+                        "application/json": {
+                            schema: {
+                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2WithdrawMfaRequest",
+                            },
+                        },
+                    },
+                },
+                security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
+                tags: ["accounts"],
             },
             parameters: [
                 { $ref: "#/components/parameters/access_token" },
@@ -2055,10 +2055,78 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/{parent}/defaultSupportedIdpConfigs": {
+        "/v2/projects/{targetProjectId}/config": {
+            get: {
+                description: "Retrieve an Identity Toolkit project configuration.",
+                operationId: "identitytoolkit.projects.getConfig",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Config" },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                security: [{ Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] }, { apiKey: [] }],
+                tags: ["projects"],
+            },
+            patch: {
+                description: "Update an Identity Toolkit project configuration.",
+                operationId: "identitytoolkit.projects.updateConfig",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Config" },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "updateMask",
+                        in: "query",
+                        description: "The update mask applies to the resource. Fields set in the config but not included in this update mask will be ignored. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
+                        schema: { type: "string" },
+                    },
+                ],
+                requestBody: {
+                    content: {
+                        "application/json": {
+                            schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Config" },
+                        },
+                    },
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/defaultSupportedIdpConfigs": {
             post: {
                 description: "Create a default supported Idp configuration for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.defaultSupportedIdpConfigs.create",
+                operationId: "identitytoolkit.projects.defaultSupportedIdpConfigs.create",
                 responses: {
                     200: {
                         description: "Successful response",
@@ -2072,13 +2140,7 @@ exports.default = {
                     },
                 },
                 parameters: [
-                    {
-                        name: "parent",
-                        in: "path",
-                        description: 'The parent resource name where the config to be created, for example: "projects/my-awesome-project"',
-                        required: true,
-                        schema: { type: "string" },
-                    },
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
                     {
                         name: "idpId",
                         in: "query",
@@ -2087,13 +2149,7 @@ exports.default = {
                     },
                 ],
                 requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: {
-                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
-                            },
-                        },
-                    },
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
                 },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
@@ -2104,7 +2160,7 @@ exports.default = {
             },
             get: {
                 description: "List all default supported Idp configurations for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.defaultSupportedIdpConfigs.list",
+                operationId: "identitytoolkit.projects.defaultSupportedIdpConfigs.list",
                 responses: {
                     200: {
                         description: "Successful response",
@@ -2118,13 +2174,7 @@ exports.default = {
                     },
                 },
                 parameters: [
-                    {
-                        name: "parent",
-                        in: "path",
-                        description: 'The parent resource name, for example, "projects/my-awesome-project".',
-                        required: true,
-                        schema: { type: "string" },
-                    },
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
                     {
                         name: "pageSize",
                         in: "query",
@@ -2157,10 +2207,10 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/{name}": {
+        "/v2/projects/{targetProjectId}/defaultSupportedIdpConfigs/{defaultSupportedIdpConfigsId}": {
             delete: {
-                description: "Delete an Oidc Idp configuration for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.delete",
+                description: "Delete a default supported Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.defaultSupportedIdpConfigs.delete",
                 responses: {
                     200: {
                         description: "Successful response",
@@ -2168,10 +2218,10 @@ exports.default = {
                     },
                 },
                 parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
                     {
-                        name: "name",
+                        name: "defaultSupportedIdpConfigsId",
                         in: "path",
-                        description: "The resource name of the config to be deleted, for example: 'projects/my-awesome-project/oauthIdpConfigs/oauth-config-id'.",
                         required: true,
                         schema: { type: "string" },
                     },
@@ -2184,25 +2234,25 @@ exports.default = {
                 tags: ["projects"],
             },
             get: {
-                description: "Retrieve an Oidc Idp configuration for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.get",
+                description: "Retrieve a default supported Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.defaultSupportedIdpConfigs.get",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
                                 schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
                                 },
                             },
                         },
                     },
                 },
                 parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
                     {
-                        name: "name",
+                        name: "defaultSupportedIdpConfigsId",
                         in: "path",
-                        description: "The resource name of the config, for example: 'projects/my-awesome-project/oauthIdpConfigs/oauth-config-id'.",
                         required: true,
                         schema: { type: "string" },
                     },
@@ -2215,37 +2265,37 @@ exports.default = {
                 tags: ["projects"],
             },
             patch: {
-                description: "Update an Oidc Idp configuration for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.patch",
+                description: "Update a default supported Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.defaultSupportedIdpConfigs.patch",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
                                 schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
                                 },
                             },
                         },
                     },
                 },
                 parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
                     {
-                        name: "name",
+                        name: "defaultSupportedIdpConfigsId",
                         in: "path",
-                        description: "The name of the OAuthIdpConfig resource, for example: 'projects/my-awesome-project/oauthIdpConfigs/oauth-config-id'. Ignored during create requests.",
                         required: true,
                         schema: { type: "string" },
                     },
                     {
                         name: "updateMask",
                         in: "query",
-                        description: "The update mask applies to the resource. Empty update mask will result in updating nothing. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
+                        description: "The update mask applies to the resource. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
                         schema: { type: "string" },
                     },
                 ],
                 requestBody: {
-                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
                 },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
@@ -2266,10 +2316,10 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/{parent}/inboundSamlConfigs": {
+        "/v2/projects/{targetProjectId}/inboundSamlConfigs": {
             post: {
                 description: "Create an inbound SAML configuration for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.inboundSamlConfigs.create",
+                operationId: "identitytoolkit.projects.inboundSamlConfigs.create",
                 responses: {
                     200: {
                         description: "Successful response",
@@ -2283,13 +2333,7 @@ exports.default = {
                     },
                 },
                 parameters: [
-                    {
-                        name: "parent",
-                        in: "path",
-                        description: 'The parent resource name where the config to be created, for example: "projects/my-awesome-project"',
-                        required: true,
-                        schema: { type: "string" },
-                    },
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
                     {
                         name: "inboundSamlConfigId",
                         in: "query",
@@ -2298,13 +2342,7 @@ exports.default = {
                     },
                 ],
                 requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: {
-                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
-                            },
-                        },
-                    },
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
                 },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
@@ -2315,7 +2353,7 @@ exports.default = {
             },
             get: {
                 description: "List all inbound SAML configurations for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.inboundSamlConfigs.list",
+                operationId: "identitytoolkit.projects.inboundSamlConfigs.list",
                 responses: {
                     200: {
                         description: "Successful response",
@@ -2329,13 +2367,7 @@ exports.default = {
                     },
                 },
                 parameters: [
-                    {
-                        name: "parent",
-                        in: "path",
-                        description: 'The parent resource name, for example, "projects/my-awesome-project".',
-                        required: true,
-                        schema: { type: "string" },
-                    },
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
                     {
                         name: "pageSize",
                         in: "query",
@@ -2368,40 +2400,20 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/{parent}/oauthIdpConfigs": {
-            post: {
-                description: "Create an Oidc Idp configuration for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.create",
+        "/v2/projects/{targetProjectId}/inboundSamlConfigs/{inboundSamlConfigsId}": {
+            delete: {
+                description: "Delete an inbound SAML configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.inboundSamlConfigs.delete",
                 responses: {
                     200: {
                         description: "Successful response",
-                        content: {
-                            "*/*": {
-                                schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
-                                },
-                            },
-                        },
+                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleProtobufEmpty" } } },
                     },
                 },
                 parameters: [
-                    {
-                        name: "parent",
-                        in: "path",
-                        description: 'The parent resource name where the config to be created, for example: "projects/my-awesome-project"',
-                        required: true,
-                        schema: { type: "string" },
-                    },
-                    {
-                        name: "oauthIdpConfigId",
-                        in: "query",
-                        description: "The id to use for this config.",
-                        schema: { type: "string" },
-                    },
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "inboundSamlConfigsId", in: "path", required: true, schema: { type: "string" } },
                 ],
-                requestBody: {
-                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
-                },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
                     { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
@@ -2410,28 +2422,794 @@ exports.default = {
                 tags: ["projects"],
             },
             get: {
-                description: "List all Oidc Idp configurations for an Identity Toolkit project.",
-                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.list",
+                description: "Retrieve an inbound SAML configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.inboundSamlConfigs.get",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
                                 schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ListOAuthIdpConfigsResponse",
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
                                 },
                             },
                         },
                     },
                 },
                 parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "inboundSamlConfigsId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            patch: {
+                description: "Update an inbound SAML configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.inboundSamlConfigs.patch",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "inboundSamlConfigsId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "updateMask",
+                        in: "query",
+                        description: "The update mask applies to the resource. Empty update mask will result in updating nothing. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
+                        schema: { type: "string" },
+                    },
+                ],
+                requestBody: {
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/oauthIdpConfigs": {
+            post: {
+                description: "Create an Oidc Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.oauthIdpConfigs.create",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "oauthIdpConfigId",
+                        in: "query",
+                        description: "The id to use for this config.",
+                        schema: { type: "string" },
+                    },
+                ],
+                requestBody: {
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            get: {
+                description: "List all Oidc Idp configurations for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.oauthIdpConfigs.list",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ListOAuthIdpConfigsResponse",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "pageSize",
+                        in: "query",
+                        description: "The maximum number of items to return.",
+                        schema: { type: "integer" },
+                    },
+                    {
+                        name: "pageToken",
+                        in: "query",
+                        description: "The next_page_token value returned from a previous List request, if any.",
+                        schema: { type: "string" },
+                    },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/oauthIdpConfigs/{oauthIdpConfigsId}": {
+            delete: {
+                description: "Delete an Oidc Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.oauthIdpConfigs.delete",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleProtobufEmpty" } } },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "oauthIdpConfigsId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            get: {
+                description: "Retrieve an Oidc Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.oauthIdpConfigs.get",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "oauthIdpConfigsId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            patch: {
+                description: "Update an Oidc Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.oauthIdpConfigs.patch",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "oauthIdpConfigsId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "updateMask",
+                        in: "query",
+                        description: "The update mask applies to the resource. Empty update mask will result in updating nothing. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
+                        schema: { type: "string" },
+                    },
+                ],
+                requestBody: {
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants": {
+            post: {
+                description: "Create a tenant. Requires write permission on the Agent project.",
+                operationId: "identitytoolkit.projects.tenants.create",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Tenant" },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                requestBody: { $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2Tenant" },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            get: {
+                description: "List tenants under the given agent project. Requires read permission on the Agent project.",
+                operationId: "identitytoolkit.projects.tenants.list",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ListTenantsResponse",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "pageSize",
+                        in: "query",
+                        description: "The maximum number of results to return, capped at 1000. If not specified, the default value is 20.",
+                        schema: { type: "integer" },
+                    },
+                    {
+                        name: "pageToken",
+                        in: "query",
+                        description: "The pagination token from the response of a previous request.",
+                        schema: { type: "string" },
+                    },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}": {
+            delete: {
+                description: "Delete a tenant. Requires write permission on the Agent project.",
+                operationId: "identitytoolkit.projects.tenants.delete",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleProtobufEmpty" } } },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            get: {
+                description: "Get a tenant. Requires read permission on the Tenant resource.",
+                operationId: "identitytoolkit.projects.tenants.get",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Tenant" },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            patch: {
+                description: "Update a tenant. Requires write permission on the Tenant resource.",
+                operationId: "identitytoolkit.projects.tenants.patch",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Tenant" },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "updateMask",
+                        in: "query",
+                        description: "If provided, only update fields set in the update mask. Otherwise, all settable fields will be updated. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
+                        schema: { type: "string" },
+                    },
+                ],
+                requestBody: { $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2Tenant" },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}:getIamPolicy": {
+            post: {
+                description: "Gets the access control policy for a resource. An error is returned if the resource does not exist. An empty policy is returned if the resource exists but does not have a policy set on it. Caller must have the right Google IAM permission on the resource.",
+                operationId: "identitytoolkit.projects.tenants.getIamPolicy",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleIamV1Policy" } } },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                requestBody: {
+                    content: {
+                        "application/json": {
+                            schema: { $ref: "#/components/schemas/GoogleIamV1GetIamPolicyRequest" },
+                        },
+                    },
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}:setIamPolicy": {
+            post: {
+                description: "Sets the access control policy for a resource. If the policy exists, it is replaced. Caller must have the right Google IAM permission on the resource.",
+                operationId: "identitytoolkit.projects.tenants.setIamPolicy",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleIamV1Policy" } } },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                requestBody: {
+                    content: {
+                        "application/json": {
+                            schema: { $ref: "#/components/schemas/GoogleIamV1SetIamPolicyRequest" },
+                        },
+                    },
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}:testIamPermissions": {
+            post: {
+                description: "Returns the caller's permissions on a resource. An error is returned if the resource does not exist. A caller is not required to have Google IAM permission to make this request.",
+                operationId: "identitytoolkit.projects.tenants.testIamPermissions",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: { $ref: "#/components/schemas/GoogleIamV1TestIamPermissionsResponse" },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                requestBody: {
+                    content: {
+                        "application/json": {
+                            schema: { $ref: "#/components/schemas/GoogleIamV1TestIamPermissionsRequest" },
+                        },
+                    },
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}/defaultSupportedIdpConfigs": {
+            post: {
+                description: "Create a default supported Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.defaultSupportedIdpConfigs.create",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "idpId",
+                        in: "query",
+                        description: "The id of the Idp to create a config for. Call ListDefaultSupportedIdps for list of all default supported Idps.",
+                        schema: { type: "string" },
+                    },
+                ],
+                requestBody: {
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            get: {
+                description: "List all default supported Idp configurations for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.defaultSupportedIdpConfigs.list",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ListDefaultSupportedIdpConfigsResponse",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "pageSize",
+                        in: "query",
+                        description: "The maximum number of items to return.",
+                        schema: { type: "integer" },
+                    },
+                    {
+                        name: "pageToken",
+                        in: "query",
+                        description: "The next_page_token value returned from a previous List request, if any.",
+                        schema: { type: "string" },
+                    },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}/defaultSupportedIdpConfigs/{defaultSupportedIdpConfigsId}": {
+            delete: {
+                description: "Delete a default supported Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.defaultSupportedIdpConfigs.delete",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleProtobufEmpty" } } },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "defaultSupportedIdpConfigsId",
+                        in: "path",
+                        required: true,
+                        schema: { type: "string" },
+                    },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            get: {
+                description: "Retrieve a default supported Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.defaultSupportedIdpConfigs.get",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "defaultSupportedIdpConfigsId",
+                        in: "path",
+                        required: true,
+                        schema: { type: "string" },
+                    },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            patch: {
+                description: "Update a default supported Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.defaultSupportedIdpConfigs.patch",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
                     {
-                        name: "parent",
+                        name: "defaultSupportedIdpConfigsId",
                         in: "path",
-                        description: 'The parent resource name, for example, "projects/my-awesome-project".',
                         required: true,
                         schema: { type: "string" },
                     },
+                    {
+                        name: "updateMask",
+                        in: "query",
+                        description: "The update mask applies to the resource. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
+                        schema: { type: "string" },
+                    },
+                ],
+                requestBody: {
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}/inboundSamlConfigs": {
+            post: {
+                description: "Create an inbound SAML configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.inboundSamlConfigs.create",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "inboundSamlConfigId",
+                        in: "query",
+                        description: "The id to use for this config.",
+                        schema: { type: "string" },
+                    },
+                ],
+                requestBody: {
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            get: {
+                description: "List all inbound SAML configurations for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.inboundSamlConfigs.list",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ListInboundSamlConfigsResponse",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
                     {
                         name: "pageSize",
                         in: "query",
@@ -2439,12 +3217,109 @@ exports.default = {
                         schema: { type: "integer" },
                     },
                     {
-                        name: "pageToken",
+                        name: "pageToken",
+                        in: "query",
+                        description: "The next_page_token value returned from a previous List request, if any.",
+                        schema: { type: "string" },
+                    },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}/inboundSamlConfigs/{inboundSamlConfigsId}": {
+            delete: {
+                description: "Delete an inbound SAML configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.inboundSamlConfigs.delete",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleProtobufEmpty" } } },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "inboundSamlConfigsId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            get: {
+                description: "Retrieve an inbound SAML configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.inboundSamlConfigs.get",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "inboundSamlConfigsId", in: "path", required: true, schema: { type: "string" } },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
+                    { apiKey: [] },
+                ],
+                tags: ["projects"],
+            },
+            patch: {
+                description: "Update an inbound SAML configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.inboundSamlConfigs.patch",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "inboundSamlConfigsId", in: "path", required: true, schema: { type: "string" } },
+                    {
+                        name: "updateMask",
                         in: "query",
-                        description: "The next_page_token value returned from a previous List request, if any.",
+                        description: "The update mask applies to the resource. Empty update mask will result in updating nothing. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
                         schema: { type: "string" },
                     },
                 ],
+                requestBody: {
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
+                },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
                     { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
@@ -2464,35 +3339,34 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/{parent}/tenants": {
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}/oauthIdpConfigs": {
             post: {
-                description: "Create a tenant. Requires write permission on the Agent project.",
-                operationId: "identitytoolkit.projects.tenants.create",
+                description: "Create an Oidc Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.create",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
-                                schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Tenant" },
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                                },
                             },
                         },
                     },
                 },
                 parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
                     {
-                        name: "parent",
-                        in: "path",
-                        description: 'The parent resource name where the tenant will be created. For example, "projects/project1".',
-                        required: true,
+                        name: "oauthIdpConfigId",
+                        in: "query",
+                        description: "The id to use for this config.",
                         schema: { type: "string" },
                     },
                 ],
                 requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Tenant" },
-                        },
-                    },
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
                 },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
@@ -2502,38 +3376,33 @@ exports.default = {
                 tags: ["projects"],
             },
             get: {
-                description: "List tenants under the given agent project. Requires read permission on the Agent project.",
-                operationId: "identitytoolkit.projects.tenants.list",
+                description: "List all Oidc Idp configurations for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.list",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
                                 schema: {
-                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ListTenantsResponse",
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ListOAuthIdpConfigsResponse",
                                 },
                             },
                         },
                     },
                 },
                 parameters: [
-                    {
-                        name: "parent",
-                        in: "path",
-                        description: "Required. The parent resource name to list tenants for.",
-                        required: true,
-                        schema: { type: "string" },
-                    },
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
                     {
                         name: "pageSize",
                         in: "query",
-                        description: "The maximum number of results to return, capped at 1000. If not specified, the default value is 20.",
+                        description: "The maximum number of items to return.",
                         schema: { type: "integer" },
                     },
                     {
                         name: "pageToken",
                         in: "query",
-                        description: "The pagination token from the response of a previous request.",
+                        description: "The next_page_token value returned from a previous List request, if any.",
                         schema: { type: "string" },
                     },
                 ],
@@ -2556,32 +3425,21 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
-        "/v2/{resource}:getIamPolicy": {
-            post: {
-                description: "Gets the access control policy for a resource. An error is returned if the resource does not exist. An empty policy is returned if the resource exists but does not have a policy set on it. Caller must have the right Google IAM permission on the resource.",
-                operationId: "identitytoolkit.projects.tenants.getIamPolicy",
+        "/v2/projects/{targetProjectId}/tenants/{tenantId}/oauthIdpConfigs/{oauthIdpConfigsId}": {
+            delete: {
+                description: "Delete an Oidc Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.delete",
                 responses: {
                     200: {
                         description: "Successful response",
-                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleIamV1Policy" } } },
+                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleProtobufEmpty" } } },
                     },
                 },
                 parameters: [
-                    {
-                        name: "resource",
-                        in: "path",
-                        description: "REQUIRED: The resource for which the policy is being requested. See the operation documentation for the appropriate value for this field.",
-                        required: true,
-                        schema: { type: "string" },
-                    },
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "oauthIdpConfigsId", in: "path", required: true, schema: { type: "string" } },
                 ],
-                requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: { $ref: "#/components/schemas/GoogleIamV1GetIamPolicyRequest" },
-                        },
-                    },
-                },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
                     { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
@@ -2589,44 +3447,26 @@ exports.default = {
                 ],
                 tags: ["projects"],
             },
-            parameters: [
-                { $ref: "#/components/parameters/access_token" },
-                { $ref: "#/components/parameters/alt" },
-                { $ref: "#/components/parameters/callback" },
-                { $ref: "#/components/parameters/fields" },
-                { $ref: "#/components/parameters/oauth_token" },
-                { $ref: "#/components/parameters/prettyPrint" },
-                { $ref: "#/components/parameters/quotaUser" },
-                { $ref: "#/components/parameters/uploadType" },
-                { $ref: "#/components/parameters/upload_protocol" },
-            ],
-        },
-        "/v2/{resource}:setIamPolicy": {
-            post: {
-                description: "Sets the access control policy for a resource. If the policy exists, it is replaced. Caller must have the right Google IAM permission on the resource.",
-                operationId: "identitytoolkit.projects.tenants.setIamPolicy",
+            get: {
+                description: "Retrieve an Oidc Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.get",
                 responses: {
                     200: {
                         description: "Successful response",
-                        content: { "*/*": { schema: { $ref: "#/components/schemas/GoogleIamV1Policy" } } },
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                                },
+                            },
+                        },
                     },
                 },
                 parameters: [
-                    {
-                        name: "resource",
-                        in: "path",
-                        description: "REQUIRED: The resource for which the policy is being specified. See the operation documentation for the appropriate value for this field.",
-                        required: true,
-                        schema: { type: "string" },
-                    },
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "oauthIdpConfigsId", in: "path", required: true, schema: { type: "string" } },
                 ],
-                requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: { $ref: "#/components/schemas/GoogleIamV1SetIamPolicyRequest" },
-                        },
-                    },
-                },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
                     { Oauth2: ["https://www.googleapis.com/auth/firebase"] },
@@ -2634,47 +3474,34 @@ exports.default = {
                 ],
                 tags: ["projects"],
             },
-            parameters: [
-                { $ref: "#/components/parameters/access_token" },
-                { $ref: "#/components/parameters/alt" },
-                { $ref: "#/components/parameters/callback" },
-                { $ref: "#/components/parameters/fields" },
-                { $ref: "#/components/parameters/oauth_token" },
-                { $ref: "#/components/parameters/prettyPrint" },
-                { $ref: "#/components/parameters/quotaUser" },
-                { $ref: "#/components/parameters/uploadType" },
-                { $ref: "#/components/parameters/upload_protocol" },
-            ],
-        },
-        "/v2/{resource}:testIamPermissions": {
-            post: {
-                description: "Returns the caller's permissions on a resource. An error is returned if the resource does not exist. A caller is not required to have Google IAM permission to make this request.",
-                operationId: "identitytoolkit.projects.tenants.testIamPermissions",
+            patch: {
+                description: "Update an Oidc Idp configuration for an Identity Toolkit project.",
+                operationId: "identitytoolkit.projects.tenants.oauthIdpConfigs.patch",
                 responses: {
                     200: {
                         description: "Successful response",
                         content: {
                             "*/*": {
-                                schema: { $ref: "#/components/schemas/GoogleIamV1TestIamPermissionsResponse" },
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
+                                },
                             },
                         },
                     },
                 },
                 parameters: [
+                    { name: "targetProjectId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "tenantId", in: "path", required: true, schema: { type: "string" } },
+                    { name: "oauthIdpConfigsId", in: "path", required: true, schema: { type: "string" } },
                     {
-                        name: "resource",
-                        in: "path",
-                        description: "REQUIRED: The resource for which the policy detail is being requested. See the operation documentation for the appropriate value for this field.",
-                        required: true,
+                        name: "updateMask",
+                        in: "query",
+                        description: "The update mask applies to the resource. Empty update mask will result in updating nothing. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask",
                         schema: { type: "string" },
                     },
                 ],
                 requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: { $ref: "#/components/schemas/GoogleIamV1TestIamPermissionsRequest" },
-                        },
-                    },
+                    $ref: "#/components/requestBodies/GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig",
                 },
                 security: [
                     { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
@@ -2753,6 +3580,37 @@ exports.default = {
                 tags: ["emulator"],
             },
         },
+        "/emulator/v1/projects/{targetProjectId}/tenants/{tenantId}/accounts": {
+            parameters: [
+                {
+                    name: "targetProjectId",
+                    in: "path",
+                    description: "The ID of the Google Cloud project that the accounts belong to.",
+                    required: true,
+                    schema: { type: "string" },
+                },
+                {
+                    name: "tenantId",
+                    in: "path",
+                    description: "The ID of the Identity Platform tenant the accounts belongs to. If not specified, accounts on the Identity Platform project are returned.",
+                    required: true,
+                    schema: { type: "string" },
+                },
+            ],
+            servers: [{ url: "" }],
+            delete: {
+                description: "Remove all accounts in the project, regardless of state.",
+                operationId: "emulator.projects.accounts.delete",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: { "application/json": { schema: { type: "object" } } },
+                    },
+                },
+                security: [],
+                tags: ["emulator"],
+            },
+        },
         "/emulator/v1/projects/{targetProjectId}/config": {
             parameters: [
                 {
@@ -2832,6 +3690,41 @@ exports.default = {
                 tags: ["emulator"],
             },
         },
+        "/emulator/v1/projects/{targetProjectId}/tenants/{tenantId}/oobCodes": {
+            parameters: [
+                {
+                    name: "targetProjectId",
+                    in: "path",
+                    description: "The ID of the Google Cloud project that the confirmation codes belongs to.",
+                    required: true,
+                    schema: { type: "string" },
+                },
+                {
+                    name: "tenantId",
+                    in: "path",
+                    description: "The ID of the Identity Platform tenant the accounts belongs to. If not specified, accounts on the Identity Platform project are returned.",
+                    required: true,
+                    schema: { type: "string" },
+                },
+            ],
+            servers: [{ url: "" }],
+            get: {
+                description: "List all pending confirmation codes for the project.",
+                operationId: "emulator.projects.oobCodes.list",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "application/json": {
+                                schema: { $ref: "#/components/schemas/EmulatorV1ProjectsOobCodes" },
+                            },
+                        },
+                    },
+                },
+                security: [],
+                tags: ["emulator"],
+            },
+        },
         "/emulator/v1/projects/{targetProjectId}/verificationCodes": {
             parameters: [
                 {
@@ -2859,10 +3752,86 @@ exports.default = {
                 security: [],
                 tags: ["emulator"],
             },
-        },
-    },
-    components: {
-        schemas: {
+        },
+        "/emulator/v1/projects/{targetProjectId}/tenants/{tenantId}/verificationCodes": {
+            parameters: [
+                {
+                    name: "targetProjectId",
+                    in: "path",
+                    description: "The ID of the Google Cloud project that the verification codes belongs to.",
+                    required: true,
+                    schema: { type: "string" },
+                },
+                {
+                    name: "tenantId",
+                    in: "path",
+                    description: "The ID of the Identity Platform tenant the accounts belongs to. If not specified, accounts on the Identity Platform project are returned.",
+                    required: true,
+                    schema: { type: "string" },
+                },
+            ],
+            servers: [{ url: "" }],
+            get: {
+                description: "List all pending phone verification codes for the project.",
+                operationId: "emulator.projects.verificationCodes.list",
+                responses: {
+                    200: {
+                        description: "Successful response",
+                        content: {
+                            "application/json": {
+                                schema: { $ref: "#/components/schemas/EmulatorV1ProjectsOobCodes" },
+                            },
+                        },
+                    },
+                },
+                security: [],
+                tags: ["emulator"],
+            },
+        },
+    },
+    components: {
+        schemas: {
+            GoogleCloudIdentitytoolkitV1Argon2Parameters: {
+                description: "The parameters for Argon2 hashing algorithm.",
+                properties: {
+                    associatedData: {
+                        description: "The additional associated data, if provided, is appended to the hash value to provide an additional layer of security. A base64-encoded string if specified via JSON.",
+                        format: "byte",
+                        type: "string",
+                    },
+                    hashLengthBytes: {
+                        description: "Required. The desired hash length in bytes. Minimum is 4 and maximum is 1024.",
+                        format: "int32",
+                        type: "integer",
+                    },
+                    hashType: {
+                        description: "Required. Must not be HASH_TYPE_UNSPECIFIED.",
+                        enum: ["HASH_TYPE_UNSPECIFIED", "ARGON2_D", "ARGON2_ID", "ARGON2_I"],
+                        type: "string",
+                    },
+                    iterations: {
+                        description: "Required. The number of iterations to perform. Minimum is 1, maximum is 16.",
+                        format: "int32",
+                        type: "integer",
+                    },
+                    memoryCostKib: {
+                        description: "Required. The memory cost in kibibytes. Maximum is 32768.",
+                        format: "int32",
+                        type: "integer",
+                    },
+                    parallelism: {
+                        description: "Required. The degree of parallelism, also called threads or lanes. Minimum is 1, maximum is 16.",
+                        format: "int32",
+                        type: "integer",
+                    },
+                    version: {
+                        description: "The version of the Argon2 algorithm. This defaults to VERSION_13 if not specified.",
+                        enum: ["VERSION_UNSPECIFIED", "VERSION_10", "VERSION_13"],
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitV1AutoRetrievalInfo: {
                 description: "The information required to auto-retrieve an SMS.",
                 properties: {
@@ -4040,7 +5009,7 @@ exports.default = {
                         type: "string",
                     },
                     postBody: {
-                        description: "If the user is signing in with an authorization response obtained via a previous CreateAuthUri authorization request, this is the body of the HTTP POST callback from the IdP, if present. Otherwise, if the user is signing in with a manually provided IdP credential, this should be a URL-encoded form that contains the credential (e.g. an ID token or access token for OAuth 2.0 IdPs) and the provider ID of the IdP that issued the credential. For example, if the user is signing in to the Google provider using a Google ID token, this should be set to `id_token=[GOOGLE_ID_TOKEN]&providerId=google.com`, where `[GOOGLE_ID_TOKEN]` should be replaced with the Google ID token. If the user is signing in to the Facebook provider using a Facebook access token, this should be set to `access_token=[FACEBOOK_ACCESS_TOKEN]&providerId=facebook.com`, where `[FACEBOOK_ACCESS_TOKEN]` should be replaced with the Facebook access token. If the user is signing in to the Twitter provider using a Twitter OAuth 1.0 credential, this should be set to `access_token=[TWITTER_ACCESS_TOKEN]&oauth_token_secret=[TWITTER_TOKEN_SECRET]&providerId=twitter.com`, where `[TWITTER_ACCESS_TOKEN]` and `[TWITTER_TOKEN_SECRET]` should be replaced with the Twitter OAuth access token and Twitter OAuth token secret respectively.",
+                        description: "If the user is signing in with an authorization response obtained via a previous CreateAuthUri authorization request, this is the body of the HTTP POST callback from the IdP, if present. Otherwise, if the user is signing in with a manually provided IdP credential, this should be a URL-encoded form that contains the credential (e.g. an ID token or access token for OAuth 2.0 IdPs) and the provider ID of the IdP that issued the credential. For example, if the user is signing in to the Google provider using a Google ID token, this should be set to `id_token=[GOOGLE_ID_TOKEN]&providerId=google.com`, where `[GOOGLE_ID_TOKEN]` should be replaced with the Google ID token. If the user is signing in to the Facebook provider using a Facebook authentication token, this should be set to `id_token=[FACEBOOK_AUTHENTICATION_TOKEN]&providerId=facebook.com&nonce= [NONCE]`, where `[FACEBOOK_AUTHENTICATION_TOKEN]` should be replaced with the Facebook authentication token. Nonce is required for validating the token. The request will fail if no nonce is provided. If the user is signing in to the Facebook provider using a Facebook access token, this should be set to `access_token=[FACEBOOK_ACCESS_TOKEN]&providerId=facebook.com`, where `[FACEBOOK_ACCESS_TOKEN]` should be replaced with the Facebook access token. If the user is signing in to the Twitter provider using a Twitter OAuth 1.0 credential, this should be set to `access_token=[TWITTER_ACCESS_TOKEN]&oauth_token_secret=[TWITTER_TOKEN_SECRET]&providerId=twitter.com`, where `[TWITTER_ACCESS_TOKEN]` and `[TWITTER_TOKEN_SECRET]` should be replaced with the Twitter OAuth access token and Twitter OAuth token secret respectively.",
                         type: "string",
                     },
                     requestUri: {
@@ -4498,6 +5467,9 @@ exports.default = {
                         description: "Whether to overwrite an existing account in Identity Platform with a matching `local_id` in the request. If true, the existing account will be overwritten. If false, an error will be returned.",
                         type: "boolean",
                     },
+                    argon2Parameters: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1Argon2Parameters",
+                    },
                     blockSize: {
                         description: "The block size parameter used by the STANDARD_SCRYPT hashing function. This parameter, along with parallelization and cpu_mem_cost help tune the resources needed to hash a password, and should be tuned as processor speeds and memory technologies advance.",
                         format: "int32",
@@ -4519,7 +5491,7 @@ exports.default = {
                         type: "integer",
                     },
                     hashAlgorithm: {
-                        description: "Required. The hashing function used to hash the account passwords. Must be one of the following: * HMAC_SHA256 * HMAC_SHA1 * HMAC_MD5 * SCRYPT * PBKDF_SHA1 * MD5 * HMAC_SHA512 * SHA1 * BCRYPT * PBKDF2_SHA256 * SHA256 * SHA512 * STANDARD_SCRYPT",
+                        description: "Required. The hashing function used to hash the account passwords. Must be one of the following: * HMAC_SHA256 * HMAC_SHA1 * HMAC_MD5 * SCRYPT * PBKDF_SHA1 * MD5 * HMAC_SHA512 * SHA1 * BCRYPT * PBKDF2_SHA256 * SHA256 * SHA512 * STANDARD_SCRYPT * ARGON2",
                         type: "string",
                     },
                     memoryCost: {
@@ -4727,6 +5699,16 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2Anonymous: {
+                description: "Configuration options related to authenticating an anonymous user.",
+                properties: {
+                    enabled: {
+                        description: "Whether anonymous user auth is enabled for the project or not.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2AppleSignInConfig: {
                 description: "Additional config for SignInWithApple.",
                 properties: {
@@ -4741,6 +5723,41 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2BlockingFunctionsConfig: {
+                description: "Configuration related to Blocking Functions.",
+                properties: {
+                    forwardInboundCredentials: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ForwardInboundCredentials",
+                    },
+                    triggers: {
+                        additionalProperties: {
+                            $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Trigger",
+                        },
+                        description: 'Map of Trigger to event type. Key should be one of the supported event types: "beforeCreate", "beforeSignIn"',
+                        type: "object",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2ClientConfig: {
+                description: "Options related to how clients making requests on behalf of a project should be configured.",
+                properties: {
+                    apiKey: {
+                        description: "Output only. API key that can be used when making requests for this project.",
+                        readOnly: true,
+                        type: "string",
+                    },
+                    firebaseSubdomain: {
+                        description: "Output only. Firebase subdomain.",
+                        readOnly: true,
+                        type: "string",
+                    },
+                    permissions: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Permissions",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2CodeFlowConfig: {
                 description: "Additional config for Apple for code flow.",
                 properties: {
@@ -4753,6 +5770,46 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2Config: {
+                description: "Represents an Identity Toolkit project.",
+                properties: {
+                    authorizedDomains: {
+                        description: "List of domains authorized for OAuth redirects",
+                        items: { type: "string" },
+                        type: "array",
+                    },
+                    blockingFunctions: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2BlockingFunctionsConfig",
+                    },
+                    client: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ClientConfig" },
+                    mfa: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2MultiFactorAuthConfig",
+                    },
+                    monitoring: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2MonitoringConfig",
+                    },
+                    multiTenant: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2MultiTenantConfig",
+                    },
+                    name: {
+                        description: 'Output only. The name of the Config resource. Example: "projects/my-awesome-project/config"',
+                        readOnly: true,
+                        type: "string",
+                    },
+                    notification: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2NotificationConfig",
+                    },
+                    quota: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2QuotaConfig" },
+                    signIn: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2SignInConfig" },
+                    subtype: {
+                        description: "Output only. The subtype of this config.",
+                        enum: ["SUBTYPE_UNSPECIFIED", "IDENTITY_PLATFORM", "FIREBASE_AUTH"],
+                        readOnly: true,
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdp: {
                 description: "Standard Identity Toolkit-trusted IDPs.",
                 properties: {
@@ -4780,6 +5837,94 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2DnsInfo: {
+                description: "Information of custom domain DNS verification. By default, default_domain will be used. A custom domain can be configured using VerifyCustomDomain.",
+                properties: {
+                    customDomain: {
+                        description: "Output only. The applied verified custom domain.",
+                        readOnly: true,
+                        type: "string",
+                    },
+                    customDomainState: {
+                        description: "Output only. The current verification state of the custom domain. The custom domain will only be used once the domain verification is successful.",
+                        enum: [
+                            "VERIFICATION_STATE_UNSPECIFIED",
+                            "NOT_STARTED",
+                            "IN_PROGRESS",
+                            "FAILED",
+                            "SUCCEEDED",
+                        ],
+                        readOnly: true,
+                        type: "string",
+                    },
+                    domainVerificationRequestTime: {
+                        description: "Output only. The timestamp of initial request for the current domain verification.",
+                        format: "google-datetime",
+                        readOnly: true,
+                        type: "string",
+                    },
+                    pendingCustomDomain: {
+                        description: "Output only. The custom domain that's to be verified.",
+                        readOnly: true,
+                        type: "string",
+                    },
+                    useCustomDomain: { description: "Whether to use custom domain.", type: "boolean" },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2Email: {
+                description: "Configuration options related to authenticating a user by their email address.",
+                properties: {
+                    enabled: {
+                        description: "Whether email auth is enabled for the project or not.",
+                        type: "boolean",
+                    },
+                    passwordRequired: {
+                        description: "Whether a password is required for email auth or not. If true, both an email and password must be provided to sign in. If false, a user may sign in via either email/password or email link.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2EmailTemplate: {
+                description: "Email template. The subject and body fields can contain the following placeholders which will be replaced with the appropriate values: %LINK% - The link to use to redeem the send OOB code. %EMAIL% - The email where the email is being sent. %NEW_EMAIL% - The new email being set for the account (when applicable). %APP_NAME% - The GCP project's display name. %DISPLAY_NAME% - The user's display name.",
+                properties: {
+                    body: { description: "Email body", type: "string" },
+                    bodyFormat: {
+                        description: "Email body format",
+                        enum: ["BODY_FORMAT_UNSPECIFIED", "PLAIN_TEXT", "HTML"],
+                        type: "string",
+                    },
+                    customized: {
+                        description: "Output only. Whether the body or subject of the email is customized.",
+                        readOnly: true,
+                        type: "boolean",
+                    },
+                    replyTo: { description: "Reply-to address", type: "string" },
+                    senderDisplayName: { description: "Sender display name", type: "string" },
+                    senderLocalPart: { description: "Local part of From address", type: "string" },
+                    subject: { description: "Subject of the email", type: "string" },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2ForwardInboundCredentials: {
+                description: "Indicates which credentials to pass to the registered Blocking Functions.",
+                properties: {
+                    accessToken: {
+                        description: "Whether to pass the user's OAuth identity provider's access token.",
+                        type: "boolean",
+                    },
+                    idToken: {
+                        description: "Whether to pass the user's OIDC identity provider's ID token.",
+                        type: "boolean",
+                    },
+                    refreshToken: {
+                        description: "Whether to pass the user's OAuth identity provider's refresh token.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2HashConfig: {
                 description: "History information of the hash algorithm and key. Different accounts' passwords may be generated by different version.",
                 properties: {
@@ -4871,6 +6016,16 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2Inheritance: {
+                description: "Settings that the tenants will inherit from project level.",
+                properties: {
+                    emailSendingConfig: {
+                        description: "Whether to allow the tenant to inherit custom domains, email templates, and custom SMTP settings. If true, email sent from tenant will follow the project level email sending configurations. If false (by default), emails will go with the default settings with no customizations.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2ListDefaultSupportedIdpConfigsResponse: {
                 description: "Response for DefaultSupportedIdpConfigs",
                 properties: {
@@ -4952,6 +6107,15 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2MonitoringConfig: {
+                description: "Configuration related to monitoring project activity.",
+                properties: {
+                    requestLogging: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2RequestLogging",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2MultiFactorAuthConfig: {
                 description: "Options related to MultiFactor Authentication for the project.",
                 properties: {
@@ -4968,6 +6132,32 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2MultiTenantConfig: {
+                description: "Configuration related to multi-tenant functionality.",
+                properties: {
+                    allowTenants: {
+                        description: "Whether this project can have tenants or not.",
+                        type: "boolean",
+                    },
+                    defaultTenantLocation: {
+                        description: 'The default cloud parent org or folder that the tenant project should be created under. The parent resource name should be in the format of "/", such as "folders/123" or "organizations/456". If the value is not set, the tenant will be created under the same organization or folder as the agent project.',
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2NotificationConfig: {
+                description: "Configuration related to sending notifications to users.",
+                properties: {
+                    defaultLocale: {
+                        description: "Default locale used for email and SMS in IETF BCP 47 format.",
+                        type: "string",
+                    },
+                    sendEmail: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2SendEmail" },
+                    sendSms: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2SendSms" },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig: {
                 description: "Configuration options for authenticating with an OAuth IDP.",
                 properties: {
@@ -4996,7 +6186,7 @@ exports.default = {
                 type: "object",
             },
             GoogleCloudIdentitytoolkitAdminV2OAuthResponseType: {
-                description: "The multiple response type to request for in the OAuth authorization flow. This can possibly be a combination of set bits (e.g. {id_token, token}).",
+                description: "The response type to request for in the OAuth authorization flow. You can set either `id_token` or `code` to true, but not both. Setting both types to be simultaneously true (`{code: true, id_token: true}`) is not yet supported. See https://openid.net/specs/openid-connect-core-1_0.html#Authentication for a mapping of response type to OAuth 2.0 flow.",
                 properties: {
                     code: {
                         description: "If true, authorization code is returned from IdP's authorization endpoint.",
@@ -5007,9 +6197,142 @@ exports.default = {
                         type: "boolean",
                     },
                     token: {
-                        description: "If true, access token is returned from IdP's authorization endpoint.",
+                        description: "Do not use. The `token` response type is not supported at the moment.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2Permissions: {
+                description: "Configuration related to restricting a user's ability to affect their account.",
+                properties: {
+                    disabledUserDeletion: {
+                        description: "When true, end users cannot delete their account on the associated project through any of our API methods",
+                        type: "boolean",
+                    },
+                    disabledUserSignup: {
+                        description: "When true, end users cannot sign up for a new account on the associated project through any of our API methods",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2PhoneNumber: {
+                description: "Configuration options related to authenticated a user by their phone number.",
+                properties: {
+                    enabled: {
+                        description: "Whether phone number auth is enabled for the project or not.",
+                        type: "boolean",
+                    },
+                    testPhoneNumbers: {
+                        additionalProperties: { type: "string" },
+                        description: "A map of that can be used for phone auth testing.",
+                        type: "object",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2QuotaConfig: {
+                description: "Configuration related to quotas.",
+                properties: {
+                    signUpQuotaConfig: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2TemporaryQuota",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2RequestLogging: {
+                description: "Configuration for logging requests made to this project to Stackdriver Logging",
+                properties: {
+                    enabled: {
+                        description: "Whether logging is enabled for this project or not.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2SendEmail: {
+                description: "Options for email sending.",
+                properties: {
+                    callbackUri: { description: "action url in email template.", type: "string" },
+                    changeEmailTemplate: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2EmailTemplate",
+                    },
+                    dnsInfo: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2DnsInfo" },
+                    legacyResetPasswordTemplate: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2EmailTemplate",
+                    },
+                    method: {
+                        description: "The method used for sending an email.",
+                        enum: ["METHOD_UNSPECIFIED", "DEFAULT", "CUSTOM_SMTP"],
+                        type: "string",
+                    },
+                    resetPasswordTemplate: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2EmailTemplate",
+                    },
+                    revertSecondFactorAdditionTemplate: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2EmailTemplate",
+                    },
+                    smtp: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Smtp" },
+                    verifyEmailTemplate: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2EmailTemplate",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2SendSms: {
+                description: "Options for SMS sending.",
+                properties: {
+                    smsTemplate: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2SmsTemplate",
+                    },
+                    useDeviceLocale: {
+                        description: "Whether to use the accept_language header for SMS.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2SignInConfig: {
+                description: "Configuration related to local sign in methods.",
+                properties: {
+                    allowDuplicateEmails: {
+                        description: "Whether to allow more than one account to have the same email.",
                         type: "boolean",
                     },
+                    anonymous: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Anonymous" },
+                    email: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Email" },
+                    hashConfig: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2HashConfig" },
+                    phoneNumber: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2PhoneNumber",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2SmsTemplate: {
+                description: "The template to use when sending an SMS.",
+                properties: {
+                    content: {
+                        description: "Output only. The SMS's content. Can contain the following placeholders which will be replaced with the appropriate values: %APP_NAME% - For Android or iOS apps, the app's display name. For web apps, the domain hosting the application. %LOGIN_CODE% - The OOB code being sent in the SMS.",
+                        readOnly: true,
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2Smtp: {
+                description: "Configuration for SMTP relay",
+                properties: {
+                    host: { description: "SMTP relay host", type: "string" },
+                    password: { description: "SMTP relay password", type: "string" },
+                    port: { description: "SMTP relay port", format: "int32", type: "integer" },
+                    securityMode: {
+                        description: "SMTP security mode.",
+                        enum: ["SECURITY_MODE_UNSPECIFIED", "SSL", "START_TLS"],
+                        type: "string",
+                    },
+                    senderEmail: { description: "Sender email for the SMTP relay", type: "string" },
+                    username: { description: "SMTP relay username", type: "string" },
                 },
                 type: "object",
             },
@@ -5042,6 +6365,27 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2TemporaryQuota: {
+                description: "Temporary quota increase / decrease",
+                properties: {
+                    quota: {
+                        description: "Corresponds to the 'refill_token_count' field in QuotaServer config",
+                        format: "int64",
+                        type: "string",
+                    },
+                    quotaDuration: {
+                        description: "How long this quota will be active for",
+                        format: "google-duration",
+                        type: "string",
+                    },
+                    startTime: {
+                        description: "When this quota will take affect",
+                        format: "google-datetime",
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2Tenant: {
                 description: "A Tenant contains configuration for the tenant in a multi-tenant project.",
                 properties: {
@@ -5063,6 +6407,9 @@ exports.default = {
                         type: "boolean",
                     },
                     hashConfig: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2HashConfig" },
+                    inheritance: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Inheritance",
+                    },
                     mfaConfig: {
                         $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2MultiFactorAuthConfig",
                     },
@@ -5079,6 +6426,18 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2Trigger: {
+                description: "Synchronous Cloud Function with HTTP Trigger",
+                properties: {
+                    functionUri: { description: "HTTP URI trigger for the Cloud Function.", type: "string" },
+                    updateTime: {
+                        description: "When the trigger was changed.",
+                        format: "google-datetime",
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitV2AutoRetrievalInfo: {
                 description: "The information required to auto-retrieve an SMS.",
                 properties: {
@@ -5337,16 +6696,16 @@ exports.default = {
                 type: "object",
             },
             GoogleIamV1Binding: {
-                description: "Associates `members` with a `role`.",
+                description: "Associates `members`, or principals, with a `role`.",
                 properties: {
                     condition: { $ref: "#/components/schemas/GoogleTypeExpr" },
                     members: {
-                        description: "Specifies the identities requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. ",
+                        description: "Specifies the principals requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. ",
                         items: { type: "string" },
                         type: "array",
                     },
                     role: {
-                        description: "Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+                        description: "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
                         type: "string",
                     },
                 },
@@ -5369,7 +6728,7 @@ exports.default = {
                 type: "object",
             },
             GoogleIamV1Policy: {
-                description: 'An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members` to a single `role`. Members can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp(\'2020-10-01T00:00:00.000Z\')", } } ], "etag": "BwWWja0YfJA=", "version": 3 } **YAML example:** bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp(\'2020-10-01T00:00:00.000Z\') - etag: BwWWja0YfJA= - version: 3 For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).',
+                description: 'An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp(\'2020-10-01T00:00:00.000Z\')", } } ], "etag": "BwWWja0YfJA=", "version": 3 } **YAML example:** bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp(\'2020-10-01T00:00:00.000Z\') etag: BwWWja0YfJA= version: 3 For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).',
                 properties: {
                     auditConfigs: {
                         description: "Specifies cloud audit logging configuration for this policy.",
@@ -5377,7 +6736,7 @@ exports.default = {
                         type: "array",
                     },
                     bindings: {
-                        description: "Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member.",
+                        description: "Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.",
                         items: { $ref: "#/components/schemas/GoogleIamV1Binding" },
                         type: "array",
                     },
@@ -5503,6 +6862,7 @@ exports.default = {
                 description: "Emulator-specific configuration.",
                 properties: {
                     signIn: { properties: { allowDuplicateEmails: { type: "boolean" } }, type: "object" },
+                    usageMode: { enum: ["USAGE_MODE_UNSPECIFIED", "DEFAULT", "PASSTHROUGH"], type: "string" },
                 },
             },
             EmulatorV1ProjectsOobCodes: {
@@ -5670,6 +7030,31 @@ exports.default = {
                     },
                 },
             },
+            GoogleCloudIdentitytoolkitAdminV2Tenant: {
+                content: {
+                    "application/json": {
+                        schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2Tenant" },
+                    },
+                },
+            },
+            GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig: {
+                content: {
+                    "application/json": {
+                        schema: {
+                            $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2InboundSamlConfig",
+                        },
+                    },
+                },
+            },
+            GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig: {
+                content: {
+                    "application/json": {
+                        schema: {
+                            $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdpConfig",
+                        },
+                    },
+                },
+            },
             GoogleCloudIdentitytoolkitAdminV2OAuthIdpConfig: {
                 content: {
                     "application/json": {
@@ -5688,7 +7073,7 @@ exports.default = {
                     implicit: {
                         authorizationUrl: "https://accounts.google.com/o/oauth2/auth",
                         scopes: {
-                            "https://www.googleapis.com/auth/cloud-platform": "See, edit, configure, and delete your Google Cloud Platform data",
+                            "https://www.googleapis.com/auth/cloud-platform": "See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account.",
                             "https://www.googleapis.com/auth/firebase": "View and administer all your Firebase data and settings",
                         },
                     },
@@ -5696,7 +7081,7 @@ exports.default = {
                         authorizationUrl: "https://accounts.google.com/o/oauth2/auth",
                         tokenUrl: "https://accounts.google.com/o/oauth2/token",
                         scopes: {
-                            "https://www.googleapis.com/auth/cloud-platform": "See, edit, configure, and delete your Google Cloud Platform data",
+                            "https://www.googleapis.com/auth/cloud-platform": "See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account.",
                             "https://www.googleapis.com/auth/firebase": "View and administer all your Firebase data and settings",
                         },
                     },