> ## Documentation Index
> Fetch the complete documentation index at: https://translations.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Paramètres du correctif

> Mettre à jour les paramètres d’un tenant.

export const Scopes = ({scopes = []}) => {
  return <div>
      <div class="api-section-heading flex flex-col gap-y-4 w-full">
        <div class="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 class="api-section-heading-title flex-1 mb-0">Portées</h4>
          <div class="flex items-center"></div>
        </div>
      </div>
      <div class="mt-4">
        <div class="space-y-4 whitespace-normal prose prose-sm prose-gray dark:prose-invert overflow-wrap-anywhere [&_*]:overflow-wrap-anywhere">
          <p class="whitespace-pre-line text-xs">
            {"Les portées définissent les autorisations et les niveaux d’accès des requêtes API et des jetons d’authentification."}
          </p>
        </div>
      </div>
      <div class="flex font-mono text-sm group/param-head param-head break-all relative mt-6" id="scopes-scopes">
        <div class="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div class="flex items-center flex-wrap gap-2">
            <div class="absolute -top-1.5">
              <a href="#scopes-scopes" class="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Aller à l’en-tête">
                ​
                <div class="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            {scopes.map((scope, index) => {
    return <span class="flex items-center px-2 py-0.5 rounded-md bg-gray-100/50 dark:bg-white/5 text-gray-600 dark:text-gray-200 font-medium break-all" style={{
      lineHeight: "1rem",
      fontSize: "0.75rem",
      fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace'
    }} data-component-part="field-info-pill" key={index}>
                  {scope}
                </span>;
  })}
          </div>
        </div>
      </div>
    </div>;
};

export const ApiReleaseLifecycle = ({releaseLifecycle = "GA"}) => {
  const lifecycleMap = {
    ea: "Accès anticipé",
    ga: "Généralement disponible",
    deprecated: "Déprécié",
    planned: "Planifié",
    beta: "Bêta"
  };
  const LIFECYCLE_THEMES = {
    info: {
      light: {
        bg: "lab(91.896% .077188 -6.94053)",
        text: "lab(36.091% 25.9241 -68.0384)"
      },
      dark: {
        bg: "lab(16.0426% 6.71726 -27.2409)",
        text: "lab(72.6029% 4.08953 -41.9669)"
      }
    },
    secondary: {
      light: {
        bg: "lab(90.8548% 11.3355 8.01476)",
        text: "lab(47.5286% 56.4238 43.4706)"
      },
      dark: {
        bg: "lab(16.3609% 37.191 25.6346)",
        text: "lab(71.881% 41.5 29.4839)"
      }
    },
    danger: {
      light: {
        bg: "lab(94.7916% -.0000298023 0)",
        text: "lab(54.3656% 0 -.0000119209)"
      },
      dark: {
        bg: "lab(13.232% 0 0)",
        text: "lab(51.6164% 0 0)"
      }
    }
  };
  const LIFECYCLE_THEME_MAP = {
    ea: "info",
    ga: "info",
    beta: "info",
    deprecated: "secondary",
    planned: "danger"
  };
  const lifecycle = releaseLifecycle.toLocaleLowerCase();
  const lifecycleText = lifecycleMap[lifecycle];
  if (!lifecycleText) {
    return null;
  }
  const theme = LIFECYCLE_THEMES[LIFECYCLE_THEME_MAP[lifecycle]];
  return <div>
      <div className="api-section-heading flex flex-col gap-y-4 w-full">
        <div className="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 className="api-section-heading-title flex-1 mb-0">Cycle de vie de la version</h4>
        </div>
      </div>
      <div className="flex font-mono text-sm group/param-head param-head break-all relative mt-2.5" id="releaselifecycle-lifecycle">
        <div className="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div className="flex items-center flex-wrap gap-2">
            <div className="absolute -top-1.5">
              <a href="#releaselifecycle-lifecycle" className="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Naviguer vers l'en-tête">
                <div className="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            <span className="inline-flex items-center w-fit font-medium gap-1 py-0.5 px-2 rounded-md" style={{
    lineHeight: "1rem",
    fontSize: "0.75rem",
    fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace',
    backgroundColor: `light-dark(${theme.light.bg}, ${theme.dark.bg})`,
    color: `light-dark(${theme.light.text}, ${theme.dark.text})`,
    borderColor: `light-dark(color-mix(in oklab, ${theme.light.text} 25%, transparent), color-mix(in oklab, ${theme.dark.text} 25%, transparent))`
  }}>
              {lifecycleText}
            </span>
          </div>
        </div>
      </div>
    </div>;
};

<ApiReleaseLifecycle releaseLifecycle="GA" />

<Scopes scopes={["update:tenant_settings"]} />


## OpenAPI

````yaml docs/fr-ca/oas/management/v2/management-api-oas.json PATCH /tenants/settings
openapi: 3.1.0
info:
  contact:
    name: Auth0 Support
    url: https://support.auth0.com
  description: Auth0 Management API v2.
  termsOfService: https://auth0.com/web-terms/
  title: Auth0 Management API
  version: '2.0'
servers:
  - url: https://{tenantDomain}/api/v2
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du tenant Auth0
security:
  - bearerAuth: []
externalDocs:
  description: Documentation de l’Auth0 Management API
  url: https://auth0.com/docs/api/management/v2/
paths:
  /tenants/settings:
    patch:
      tags:
        - tenants
      summary: Mettre à jour les paramètres du tenant
      description: Mettre à jour les paramètres d’un tenant.
      operationId: patch_settings
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateTenantSettingsRequestContent'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/UpdateTenantSettingsRequestContent'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UpdateTenantSettingsResponseContent'
          description: Paramètres du tenant mis à jour avec succès.
        '400':
          description: Corps de requête invalide. Le message varie selon la cause.
        '401':
          description: Jeton invalide.
          x-description-1: Client is not global.
          x-description-2: Invalid signature received for JSON Web Token validation.
        '403':
          description: >-
            Scope insuffisant; l’un des suivants est requis :
            update:tenant_settings.
        '429':
          description: >-
            Trop de requêtes. Vérifiez les en-têtes X-RateLimit-Limit,
            X-RateLimit-Remaining et X-RateLimit-Reset.
      security:
        - bearerAuth: []
        - oAuth2ClientCredentials:
            - update:tenant_settings
      x-codeSamples:
        - label: Update tenant settings
          lang: csharp
          source: |
            using Auth0.ManagementApi;
            using System.Threading.Tasks;
            using Auth0.ManagementApi.Tenants;

            public partial class Examples
            {
                public async Task Example() {
                    var client = new ManagementApiClient(
                        token: "<token>",
                        clientOptions: new ClientOptions { BaseUrl = "https://{YOUR_DOMAIN}/api/v2" }
                    );

                    await client.Tenants.Settings.UpdateAsync(
                        new UpdateTenantSettingsRequestContent()
                    );
                }

            }
        - label: Update tenant settings
          lang: go
          source: |
            package example

            import (
                context "context"

                management "github.com/auth0/go-auth0/v3/management"
                client "github.com/auth0/go-auth0/v3/management/client"
                option "github.com/auth0/go-auth0/v3/management/option"
            )

            func do() {
                mgmt, err := client.New(
                    "{YOUR_DOMAIN}",
                    option.WithToken(
                        "<token>",
                    ),
                )
                if err != nil {
                    return
                }
                request := &management.UpdateTenantSettingsRequestContent{}
                mgmt.Tenants.Settings.Update(
                    context.TODO(),
                    request,
                )
            }
        - label: Update tenant settings
          lang: java
          source: >-
            package com.example.usage;


            import com.auth0.client.mgmt.ManagementApi;

            import
            com.auth0.client.mgmt.tenants.types.UpdateTenantSettingsRequestContent;


            public class Example {
                public static void main(String[] args) {
                    ManagementApi client = ManagementApi
                        .builder()
                        .domain("{YOUR_DOMAIN}")
                        .token("<token>")
                        .build();

                    client.tenants().settings().update(
                        UpdateTenantSettingsRequestContent
                            .builder()
                            .build()
                    );
                }
            }
        - label: Update tenant settings
          lang: php
          source: >
            <?php


            namespace Example;


            use Auth0\SDK\API\Management\Wrapper\ManagementClient;

            use Auth0\SDK\API\Management\Wrapper\ManagementClientOptions;

            use
            Auth0\SDK\API\Management\Tenants\Settings\Requests\UpdateTenantSettingsRequestContent;


            $client = new ManagementClient(new ManagementClientOptions(
                domain: '{YOUR_DOMAIN}',
                token: '<token>',
            ));

            $client->tenants->settings->update(
                new UpdateTenantSettingsRequestContent([]),
            );
        - label: Update tenant settings
          lang: python
          source: |
            from auth0.management import ManagementClient

            client = ManagementClient(
                domain="{YOUR_DOMAIN}",
                token="<token>",
            )

            client.tenants.settings.update()
        - label: Update tenant settings
          lang: ruby
          source: >
            require "auth0"


            client = Auth0::Management.new(token: "<token>", base_url:
            "https://{YOUR_DOMAIN}/api/v2")


            client.tenants.settings.update
        - label: Update tenant settings
          lang: typescript
          source: |
            import { ManagementClient } from "auth0";

            async function main() {
                const client = new ManagementClient({
                    domain: "{YOUR_DOMAIN}",
                    token: "<token>",
                });
                await client.tenants.settings.update({});
            }
            main();
        - label: Update tenant settings
          lang: javascript
          source: |
            import { ManagementClient } from "auth0";

            async function main() {
                const client = new ManagementClient({
                    domain: "{YOUR_DOMAIN}",
                    token: "<token>",
                });
                await client.tenants.settings.update({});
            }
            main();
components:
  schemas:
    UpdateTenantSettingsRequestContent:
      additionalProperties: false
      minProperties: 1
      properties:
        acr_values_supported:
          description: Valeurs ACR prises en charge
          items:
            format: acr
            type: string
          minItems: 0
          type:
            - array
            - 'null'
        allow_organization_name_in_authentication_api:
          default: false
          description: >-
            Indique s’il faut accepter un nom d’organisation au lieu d’un ID sur
            les points de terminaison d’authentification
          type:
            - boolean
            - 'null'
        allowed_logout_urls:
          description: URL valides vers lesquelles rediriger après le logout d’Auth0.
          items:
            format: url-with-placeholders
            type: string
          type: array
        authorization_response_iss_parameter_supported:
          default: false
          description: Prend en charge le paramètre iss dans les réponses d’autorisation
          type:
            - boolean
            - 'null'
        change_password:
          $ref: '#/components/schemas/TenantSettingsPasswordPage'
        client_id_metadata_document_supported:
          default: false
          description: >-
            Indique si le serveur d’autorisation prend en charge la récupération
            des métadonnées du client à partir d’une URL client_id.
          type: boolean
          x-release-lifecycle: EA
        country_codes:
          $ref: '#/components/schemas/TenantSettingsCountryCodes'
        customize_mfa_in_postlogin_action:
          default: false
          description: >-
            Indique s’il faut activer les facteurs flexibles pour l’AMF dans
            l’action PostLogin
          type:
            - boolean
            - 'null'
        default_audience:
          default: ''
          description: Audience par défaut pour l’Authorization de l’API.
          type: string
        default_directory:
          default: ''
          description: "Nom de la connexion utilisée pour les grants par mot de passe au endpoint `/token`. Les type de connexion suivants sont pris en charge\_: LDAP, AD, Database Connections, Passwordless, Windows Azure Active Directory, ADFS."
          type: string
        default_redirection_uri:
          description: L’URI de redirection absolue par défaut doit utiliser HTTPS
          format: absolute-https-uri-or-empty
          type: string
        default_token_quota:
          $ref: '#/components/schemas/DefaultTokenQuota'
          x-release-lifecycle: EA
        device_flow:
          $ref: '#/components/schemas/TenantSettingsDeviceFlow'
          description: Configuration du Device Flow.
        dynamic_client_registration_security_mode:
          $ref: >-
            #/components/schemas/TenantSettingsDynamicClientRegistrationSecurityMode
          x-release-lifecycle: GA
        enable_ai_guide:
          description: >-
            Indique si Auth0 Guide (assistance propulsée par l’IA) est activé
            pour ce tenant.
          type: boolean
        enabled_locales:
          description: Paramètres régionaux pris en charge pour l’interface utilisateur
          items:
            $ref: '#/components/schemas/TenantSettingsSupportedLocalesEnum'
          minItems: 1
          type: array
        ephemeral_session_lifetime:
          default: 72
          description: >-
            Nombre d’heures pendant lesquelles une session éphémère (non
            persistante) restera valide.
          minimum: 1
          type: integer
        ephemeral_session_lifetime_in_minutes:
          description: >-
            Nombre de minutes pendant lesquelles une session éphémère (non
            persistante) restera valide. Ne peut pas être spécifié en même temps
            que `ephemeral_session_lifetime`.
          minimum: 1
          type: integer
        error_page:
          $ref: '#/components/schemas/TenantSettingsErrorPage'
        flags:
          $ref: '#/components/schemas/TenantSettingsFlags'
        friendly_name:
          default: My Company
          description: Nom convivial de ce tenant.
          type: string
        guardian_mfa_page:
          $ref: '#/components/schemas/TenantSettingsGuardianPage'
        idle_ephemeral_session_lifetime:
          default: 24
          description: >-
            Nombre d’heures pendant lesquelles une session éphémère (non
            persistante) peut rester inactive avant que l’utilisateur doive se
            connecter de nouveau.
          minimum: 1
          type: integer
        idle_ephemeral_session_lifetime_in_minutes:
          description: >-
            Nombre de minutes pendant lesquelles une session éphémère (non
            persistante) peut rester inactive avant que l’utilisateur doive se
            connecter de nouveau. Ne peut pas être spécifié en même temps que
            `idle_ephemeral_session_lifetime`.
          minimum: 1
          type: integer
        idle_session_lifetime:
          default: 72
          description: >-
            Nombre d’heures pendant lesquelles une session peut rester inactive
            avant que l’utilisateur doive se connecter de nouveau.
          minimum: 1
          type: integer
        idle_session_lifetime_in_minutes:
          description: >-
            Nombre de minutes pendant lesquelles une session peut rester
            inactive avant que l’utilisateur doive se connecter de nouveau. Ne
            peut pas être spécifié en même temps que `idle_session_lifetime`.
          minimum: 1
          type: integer
        include_session_metadata_in_tenant_logs:
          default: false
          description: >-
            Indique si les métadonnées de session sont incluses dans certains
            logs du tenant (slo, oidc_backchannel_logout_failed,
            oidc_backchannel_logout_succeeded).
          type: boolean
          x-release-lifecycle: EA
        legacy_sandbox_version:
          description: >-
            Version héritée du bac à sable sélectionnée pour l’environnement
            d’extensibilité
          maxLength: 8
          type: string
        mtls:
          $ref: '#/components/schemas/TenantSettingsMTLS'
        oidc_logout:
          $ref: '#/components/schemas/TenantOIDCLogoutSettings'
        phone_consolidated_experience:
          description: Indique si Phone Consolidated Experience est activé pour ce tenant.
          type: boolean
        picture_url:
          default: https://mycompany.org/logo.png
          description: "URL du logo à afficher pour ce tenant (taille recommandée\_: 150x150)"
          format: absolute-uri-or-empty
          type: string
        pushed_authorization_requests_supported:
          default: false
          description: Active l’utilisation des Pushed Authorization Requests
          type:
            - boolean
            - 'null'
        resource_parameter_profile:
          $ref: '#/components/schemas/TenantSettingsResourceParameterProfile'
          x-release-lifecycle: GA
        sandbox_version:
          default: '22'
          description: Version du sandbox sélectionnée pour l’environnement d’extensibilité
          maxLength: 8
          type: string
        security_headers:
          $ref: '#/components/schemas/TenantSettingsNullableSecurityHeaders'
        session_cookie:
          $ref: '#/components/schemas/SessionCookieSchema'
        session_lifetime:
          default: 168
          description: Nombre d’heures pendant lesquelles une session restera valide.
          minimum: 1
          type: integer
        session_lifetime_in_minutes:
          description: >-
            Nombre de minutes pendant lesquelles une session restera valide. Ne
            peut pas être spécifié en même temps que `session_lifetime`.
          minimum: 1
          type: integer
        sessions:
          $ref: '#/components/schemas/TenantSettingsSessions'
        skip_non_verifiable_callback_uri_confirmation_prompt:
          description: >-
            Détermine si une invite de confirmation s’affiche pendant les flux
            de connexion lorsque l’URI de redirection utilise des URI de rappel
            non vérifiables (par exemple, un schéma d’URI personnalisé comme
            `myapp://` ou `localhost`).

            Si cette valeur est définie sur true, aucune invite de confirmation
            ne s’affichera. Nous recommandons de la définir sur false afin
            d’offrir une meilleure protection contre les applications
            malveillantes.

            Consultez
            https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation
            pour en savoir plus.
          type:
            - boolean
            - 'null'
        support_email:
          default: support@mycompany.org
          description: Courriel de soutien pour l’utilisateur final.
          format: email-or-empty
          type: string
        support_url:
          default: https://mycompany.org/support
          description: URL de soutien pour l’utilisateur final.
          format: absolute-uri-or-empty
          type: string
      type: object
    UpdateTenantSettingsResponseContent:
      additionalProperties: false
      properties:
        acr_values_supported:
          description: Valeurs ACR prises en charge
          items:
            format: acr
            type: string
          minItems: 0
          type:
            - array
            - 'null'
        allow_organization_name_in_authentication_api:
          default: false
          description: >-
            Indique s’il faut accepter un nom d’organisation au lieu d’un ID sur
            les points de terminaison d’authentification
          type: boolean
        allowed_logout_urls:
          description: URL valides de redirection après la déconnexion d’Auth0.
          items:
            format: url
            type: string
          type: array
        authorization_response_iss_parameter_supported:
          default: false
          description: Prend en charge le paramètre iss dans les réponses d’autorisation
          type:
            - boolean
            - 'null'
        change_password:
          $ref: '#/components/schemas/TenantSettingsPasswordPage'
        client_id_metadata_document_supported:
          default: false
          description: >-
            Indique si le authorization server prend en charge la récupération
            des client metadata à partir d’une URL client_id.
          type: boolean
          x-release-lifecycle: EA
        country_codes:
          $ref: '#/components/schemas/TenantSettingsCountryCodesResponse'
        customize_mfa_in_postlogin_action:
          default: false
          description: >-
            Indique s’il faut activer les facteurs flexibles pour l’AMF dans
            l’action PostLogin
          type: boolean
        default_audience:
          default: ''
          description: Audience par défaut pour l’autorisation de l’API.
          type: string
        default_directory:
          default: ''
          description: >-
            Nom de la connexion utilisée pour les octrois par mot de passe au
            endpoint `/token`. Les types de connexion suivants sont pris en
            charge : LDAP, AD, Database Connections, Passwordless, Windows Azure
            Active Directory, ADFS.
          type: string
        default_redirection_uri:
          description: L’URI de redirection absolue par défaut doit utiliser HTTPS
          type: string
        default_token_quota:
          $ref: '#/components/schemas/DefaultTokenQuota'
          x-release-lifecycle: EA
        device_flow:
          $ref: '#/components/schemas/TenantSettingsDeviceFlow'
        dynamic_client_registration_security_mode:
          $ref: >-
            #/components/schemas/TenantSettingsDynamicClientRegistrationSecurityMode
          x-release-lifecycle: GA
        enable_ai_guide:
          description: >-
            Indique si Auth0 Guide (assistance propulsée par l’IA) est activé
            pour ce tenant.
          type: boolean
        enabled_locales:
          description: Paramètres régionaux pris en charge pour l’interface utilisateur.
          items:
            $ref: '#/components/schemas/SupportedLocales'
          type: array
        ephemeral_session_lifetime:
          default: 72
          description: >-
            Nombre d’heures pendant lesquelles une session éphémère (non
            persistante) restera valide.
          minimum: 1
          type: number
        error_page:
          $ref: '#/components/schemas/TenantSettingsErrorPage'
        flags:
          $ref: '#/components/schemas/TenantSettingsFlags'
        friendly_name:
          default: My Company
          description: Nom convivial de ce tenant.
          type: string
        guardian_mfa_page:
          $ref: '#/components/schemas/TenantSettingsGuardianPage'
        idle_ephemeral_session_lifetime:
          default: 24
          description: >-
            Nombre d’heures pendant lesquelles une session éphémère (non
            persistante) peut rester inactive avant que l’utilisateur doive se
            connecter de nouveau.
          minimum: 1
          type: number
        idle_session_lifetime:
          default: 72
          description: >-
            Nombre d’heures pendant lesquelles une session peut rester inactive
            avant que l’utilisateur doive se connecter de nouveau.
          type: number
        include_session_metadata_in_tenant_logs:
          default: false
          description: >-
            Indique si les session metadata sont incluses dans certains tenant
            logs (slo, oidc_backchannel_logout_failed,
            oidc_backchannel_logout_succeeded).
          type: boolean
          x-release-lifecycle: EA
        legacy_sandbox_version:
          default: ''
          description: >-
            Version du bac à sable sélectionnée pour l’extensibilité des règles
            et des hooks.
          type: string
        mtls:
          $ref: '#/components/schemas/TenantSettingsMTLS'
        oidc_logout:
          $ref: '#/components/schemas/TenantOIDCLogoutSettings'
        phone_consolidated_experience:
          description: Indique si Phone Consolidated Experience est activé pour ce tenant.
          type: boolean
        picture_url:
          default: https://mycompany.org/logo.png
          description: 'URL du logo à afficher pour ce tenant (taille recommandée : 150x150)'
          format: absolute-uri-or-empty
          type: string
        pushed_authorization_requests_supported:
          default: false
          description: Active l’utilisation des Pushed Authorization Requests
          type: boolean
        resource_parameter_profile:
          $ref: '#/components/schemas/TenantSettingsResourceParameterProfile'
          x-release-lifecycle: GA
        sandbox_version:
          default: '22'
          description: >-
            Version du bac à sable sélectionnée pour l’environnement
            d’extensibilité.
          type: string
        sandbox_versions_available:
          description: >-
            Versions du bac à sable offertes pour l’environnement
            d’extensibilité.
          items:
            type: string
          type: array
        security_headers:
          $ref: '#/components/schemas/TenantSettingsNullableSecurityHeaders'
        session_cookie:
          $ref: '#/components/schemas/SessionCookieSchema'
        session_lifetime:
          default: 168
          description: Nombre d’heures pendant lesquelles une session restera valide.
          type: number
        sessions:
          $ref: '#/components/schemas/TenantSettingsSessions'
        skip_non_verifiable_callback_uri_confirmation_prompt:
          description: >-
            Contrôle si une invite de confirmation s’affiche pendant les login
            flows lorsque l’URI de redirection utilise des callback URI non
            vérifiables (par exemple, un schéma d’URI personnalisé comme
            `myapp://` ou `localhost`).

            Si cette option est définie à true, aucune invite de confirmation ne
            s’affichera. Nous recommandons de la définir à false pour mieux se
            protéger contre les applications malveillantes.

            Consultez
            https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation
            pour en savoir plus.
          type:
            - boolean
            - 'null'
        support_email:
          default: support@mycompany.org
          description: Adresse courriel de soutien pour l’utilisateur final.
          format: email-or-empty
          type: string
        support_url:
          default: https://mycompany.org/support
          description: URL de soutien pour l’utilisateur final.
          format: absolute-uri-or-empty
          type: string
      type: object
    TenantSettingsPasswordPage:
      additionalProperties: false
      description: Personnalisation de la page Change Password.
      properties:
        enabled:
          default: false
          description: >-
            Indique s’il faut utiliser le HTML Change Password personnalisé
            (true) ou la page Auth0 par défaut (false). Par défaut, la page
            Auth0 est utilisée.
          type: boolean
        html:
          default: ''
          description: >-
            HTML Change Password personnalisé (syntaxe <a
            href='https://github.com/Shopify/liquid/wiki/Liquid-for-Designers'>Liquid</a>
            prise en charge).
          type: string
      type:
        - object
        - 'null'
    TenantSettingsCountryCodes:
      additionalProperties: false
      description: Configuration de l’indicatif régional pour la saisie de l’identifiant.
      properties:
        list:
          description: Tableau de codes de pays ISO 3166-1 alpha-2.
          items:
            maxLength: 2
            minLength: 2
            pattern: ^[A-Z]{2}$
            type: string
          type: array
        mode:
          $ref: '#/components/schemas/TenantSettingsCountryCodesMode'
      type:
        - object
        - 'null'
    DefaultTokenQuota:
      additionalProperties: false
      description: >-
        Configuration du quota de jetons, pour configurer les quotas d’émission
        de jetons pour les clients et les organisations. S’applique à tous les
        clients et à toutes les organisations, sauf si un remplacement est
        défini dans les paramètres de chaque client ou organisation.
      minProperties: 1
      properties:
        clients:
          $ref: '#/components/schemas/TokenQuotaConfiguration'
        organizations:
          $ref: '#/components/schemas/TokenQuotaConfiguration'
      type:
        - object
        - 'null'
      x-release-lifecycle: EA
    TenantSettingsDeviceFlow:
      additionalProperties: false
      description: Configuration du flux d’appareil
      properties:
        charset:
          $ref: '#/components/schemas/TenantSettingsDeviceFlowCharset'
        mask:
          default: '****-****'
          description: >-
            Masque utilisé pour formater un code utilisateur généré dans un
            format convivial et lisible.
          maxLength: 20
          type: string
      type:
        - object
        - 'null'
    TenantSettingsDynamicClientRegistrationSecurityMode:
      description: >-
        Définit le `third_party_security_mode` attribué aux clients créés au
        moyen de Dynamic Client Registration. `strict` applique des contrôles de
        sécurité renforcés. `permissive` conserve le <a
        href="https://auth0.com/docs/get-started/applications/third-party-applications/permissive-mode#dynamic-client-registration-in-permissive-mode">comportement
        préexistant</a> et n’est offert qu’aux tenants ayant déjà utilisé des
        clients tiers.
      enum:
        - strict
        - permissive
      type: string
      x-release-lifecycle: GA
    TenantSettingsSupportedLocalesEnum:
      enum:
        - am
        - ar
        - ar-EG
        - ar-SA
        - az
        - bg
        - bn
        - bs
        - ca-ES
        - cnr
        - cs
        - cy
        - da
        - de
        - el
        - en
        - en-CA
        - es
        - es-419
        - es-AR
        - es-MX
        - et
        - eu-ES
        - fa
        - fi
        - fr
        - fr-CA
        - fr-FR
        - gl-ES
        - gu
        - he
        - hi
        - hr
        - hu
        - hy
        - id
        - is
        - it
        - ja
        - ka
        - kk
        - kn
        - ko
        - lt
        - lv
        - mk
        - ml
        - mn
        - mr
        - ms
        - my
        - nb
        - nl
        - nn
        - 'no'
        - pa
        - pl
        - pt
        - pt-BR
        - pt-PT
        - ro
        - ru
        - sk
        - sl
        - so
        - sq
        - sr
        - sv
        - sw
        - ta
        - te
        - th
        - tl
        - tr
        - uk
        - ur
        - vi
        - zgh
        - zh-CN
        - zh-HK
        - zh-MO
        - zh-TW
      type: string
    TenantSettingsErrorPage:
      additionalProperties: false
      description: Personnalisation de la page d’Error.
      properties:
        html:
          default: ''
          description: >-
            HTML Error personnalisé (<a
            href='https://github.com/Shopify/liquid/wiki/Liquid-for-Designers'>syntaxe
            Liquid</a> prise en charge).
          type: string
        show_log_link:
          default: false
          description: >-
            Indique s’il faut afficher le lien vers le log dans la page d’erreur
            par défaut (true, par défaut) ou ne pas l’afficher (false).
          type: boolean
        url:
          default: https://mycompany.org/error
          description: >-
            URL vers laquelle rediriger en cas d’erreur au lieu d’afficher la
            page d’erreur par défaut.
          format: absolute-uri-or-empty
          type: string
      type:
        - object
        - 'null'
    TenantSettingsFlags:
      additionalProperties: false
      description: Indicateurs utilisés pour modifier le comportement de ce tenant.
      properties:
        allow_changing_enable_sso:
          description: >-
            Indique si le paramètre `enable_sso` peut être modifié (true) ou non
            (false).
          type: boolean
        allow_legacy_delegation_grant_types:
          description: >-
            Si cette option est activée, les clients peuvent ajouter des grants
            Delegation hérités.
          type: boolean
        allow_legacy_ro_grant_types:
          description: >-
            Si cette option est activée, les clients peuvent ajouter des grants
            RO hérités.
          type: boolean
        allow_legacy_tokeninfo_endpoint:
          description: >-
            Indique si le point de terminaison hérité `/tokeninfo` est activé
            pour votre compte (true) ou indisponible (false).
          type: boolean
        change_pwd_flow_v1:
          default: false
          description: >-
            Indique s’il faut utiliser l’ancien flux Change Password v1 (true,
            non recommandé sauf pour la rétrocompatibilité) ou le nouveau flux
            plus sécuritaire (false, recommandé).
          type: boolean
        custom_domains_provisioning:
          default: false
          description: >-
            Si la valeur est true, la fonctionnalité de custom domains sera
            activée pour le tenant.
          type: boolean
        dashboard_insights_view:
          description: Active la nouvelle vue de la page d’activité Insights
          type: boolean
        dashboard_log_streams_next:
          description: >-
            Active l’accès bêta aux changements apportés à la diffusion des
            journaux
          type: boolean
        disable_clickjack_protection_headers:
          description: >-
            Indique si les prompts de Classic Universal Login incluent des
            en-têtes de sécurité supplémentaires pour prévenir le détournement
            de clics (true) ou aucune protection (false).
          type: boolean
        disable_fields_map_fix:
          description: >-
            Désactive la correction du mappage des champs SAML pour les mappages
            erronés comportant des attributs répétés
          type: boolean
        disable_impersonation:
          default: false
          description: >-
            Indique si la fonctionnalité d’usurpation d’identité a été
            désactivée (true) ou non (false). Lecture seule.
          type: boolean
        disable_management_api_sms_obfuscation:
          default: true
          description: >-
            Si la valeur est true, les numéros de téléphone SMS ne seront pas
            masqués dans les appels GET de la Management API.
          type: boolean
        enable_adfs_waad_email_verification:
          description: >-
            Active le flux de vérification de l’adresse courriel pendant la
            connexion pour les connexions Azure AD et ADFS
          type: boolean
        enable_apis_section:
          default: false
          description: Indique si la section API est activée (true) ou désactivée (false).
          type: boolean
        enable_client_connections:
          default: true
          description: >-
            Indique si toutes les connexions actuelles doivent être activées
            lors de la création d’un nouveau client (application) (true, par
            défaut) ou non (false).
          type: boolean
        enable_dynamic_client_registration:
          default: false
          description: >-
            Indique si des développeurs tiers peuvent <a
            href="https://auth0.com/docs/api-auth/dynamic-client-registration">enregistrer
            dynamiquement</a> des applications pour vos API (true) ou non
            (false). Cet indicateur active Dynamic Client Registration.
          type: boolean
        enable_idtoken_api2:
          description: >-
            Indique si les ID tokens peuvent être utilisés pour autoriser
            certains types de requête vers l’API v2 (true) ou non (false).
          type: boolean
        enable_legacy_profile:
          description: >-
            Indique si les ID tokens et le point de terminaison UserInfo
            incluent un profil utilisateur complet (true) ou seulement les
            claims OpenID Connect (false).
          type: boolean
        enable_pipeline2:
          default: true
          description: >-
            Indique si les scénarios avancés d’Authorization d’API sont activés
            (true) ou désactivés (false).
          type: boolean
        enable_public_signup_user_exists_error:
          description: >-
            Indique si le processus d’inscription publique affiche une erreur
            user_exists (true) ou une erreur générique (false) si l’utilisateur
            existe déjà.
          type: boolean
        enable_sso:
          description: >-
            Indique si les utilisateurs doivent confirmer l’ouverture de session
            avant la redirection SSO (false) ou s’ils ne reçoivent aucune invite
            (true).
          type: boolean
        enforce_client_authentication_on_passwordless_start:
          description: >-
            Exige l’authentification du client pour le démarrage de
            Passwordless.
          type: boolean
        genai_trial:
          description: Ce tenant s’est inscrit à l’essai Auth4GenAI
          type: boolean
        improved_signup_bot_detection_in_classic:
          description: >-
            Améliore la détection des robots pendant l’inscription dans Classic
            Universal Login
          type: boolean
        mfa_show_factor_list_on_enrollment:
          description: >-
            Permet aux utilisateurs de choisir le facteur à inscrire parmi les
            facteurs MFA disponibles.
          type: boolean
        no_disclose_enterprise_connections:
          description: >-
            Ne pas publier les informations des Enterprise Connections avec les
            domaines IdP dans le fichier de configuration de Lock.
          type: boolean
        remove_alg_from_jwks:
          description: Supprime la propriété alg du point de terminaison well-known JWKS
          type: boolean
        revoke_refresh_token_grant:
          description: >-
            Supprime l’autorisation sous-jacente lorsqu’un Refresh Token est
            révoqué au moyen de l’Authentication API.
          type: boolean
        trust_azure_adfs_email_verified_connection_property:
          default: false
          description: >-
            Modifie le comportement de email_verified pour les connexions Azure
            AD/ADFS lorsqu’elle est activée. Sinon, définit email_verified à
            false.
          type: boolean
      type: object
    TenantSettingsGuardianPage:
      additionalProperties: false
      description: Personnalisation de la page Guardian.
      properties:
        enabled:
          default: false
          description: >-
            Indique s’il faut utiliser le HTML Guardian personnalisé (true) ou
            la page Auth0 par défaut (false, par défaut)
          type: boolean
        html:
          default: ''
          description: ' HTML Guardian personnalisé (la <a href=''https://github.com/Shopify/liquid/wiki/Liquid-for-Designers''>syntaxe Liquid</a> est prise en charge).'
          type: string
      type:
        - object
        - 'null'
    TenantSettingsMTLS:
      additionalProperties: false
      description: Configuration mTLS.
      properties:
        enable_endpoint_aliases:
          default: false
          description: Si la valeur est true, active les alias de point de terminaison mTLS
          type: boolean
      type:
        - object
        - 'null'
    TenantOIDCLogoutSettings:
      additionalProperties: false
      description: Paramètres liés à la déconnexion RP initiée par OIDC
      properties:
        rp_logout_end_session_endpoint_discovery:
          default: true
          description: >-
            Activer l’URL `end_session_endpoint` dans la configuration de
            découverte `.well-known`
          type: boolean
      type: object
    TenantSettingsResourceParameterProfile:
      default: audience
      description: >-
        Profil qui détermine comment l’identité de la ressource protégée
        (c.-à-d. l’API) peut être spécifiée dans les points de terminaison OAuth
        lorsqu’un accès est demandé. Lorsqu’il est défini à audience (par
        défaut), le paramètre audience est utilisé pour spécifier le resource
        server. Lorsqu’il est défini à compatibility, le paramètre audience est
        quand même vérifié en premier, mais s’il n’est pas fourni, le paramètre
        resource peut alors être utilisé pour spécifier le resource server.
      enum:
        - audience
        - compatibility
      type: string
      x-release-lifecycle: GA
    TenantSettingsNullableSecurityHeaders:
      additionalProperties: false
      description: Configuration des en-têtes de sécurité pour les réponses du tenant.
      properties:
        content_security_policy:
          $ref: '#/components/schemas/ContentSecurityPolicyConfig'
        x_xss_protection:
          $ref: '#/components/schemas/XssProtectionConfig'
      type:
        - object
        - 'null'
    SessionCookieSchema:
      additionalProperties: false
      description: Configuration du cookie de session
      properties:
        mode:
          $ref: '#/components/schemas/SessionCookieModeEnum'
      required:
        - mode
      type:
        - object
        - 'null'
    TenantSettingsSessions:
      additionalProperties: false
      description: Paramètres relatifs aux sessions pour le tenant
      properties:
        oidc_logout_prompt_enabled:
          default: true
          description: >-
            Indique s’il faut contourner la logique d’invite (false) lors de
            l’exécution de OIDC Logout
          type: boolean
      type:
        - object
        - 'null'
    TenantSettingsCountryCodesResponse:
      additionalProperties: false
      description: Configuration de l’indicatif régional pour la saisie de l’identifiant.
      properties:
        list:
          description: Tableau de codes de pays ISO 3166-1 alpha-2.
          items:
            maxLength: 2
            minLength: 2
            pattern: ^[A-Z]{2}$
            type: string
          type: array
        mode:
          $ref: '#/components/schemas/TenantSettingsCountryCodesModeResponse'
      type: object
    SupportedLocales:
      enum:
        - am
        - ar
        - ar-EG
        - ar-SA
        - az
        - bg
        - bn
        - bs
        - ca-ES
        - cnr
        - cs
        - cy
        - da
        - de
        - el
        - en
        - en-CA
        - es
        - es-419
        - es-AR
        - es-MX
        - et
        - eu-ES
        - fa
        - fi
        - fr
        - fr-CA
        - fr-FR
        - gl-ES
        - gu
        - he
        - hi
        - hr
        - hu
        - hy
        - id
        - is
        - it
        - ja
        - ka
        - kk
        - kn
        - ko
        - lt
        - lv
        - mk
        - ml
        - mn
        - mr
        - ms
        - my
        - nb
        - nl
        - nn
        - 'no'
        - pa
        - pl
        - pt
        - pt-BR
        - pt-PT
        - ro
        - ru
        - sk
        - sl
        - so
        - sq
        - sr
        - sv
        - sw
        - ta
        - te
        - th
        - tl
        - tr
        - uk
        - ur
        - vi
        - zgh
        - zh-CN
        - zh-HK
        - zh-MO
        - zh-TW
      type: string
    TenantSettingsCountryCodesMode:
      description: Indique si la liste est une liste d’autorisation ou une liste de rejet.
      enum:
        - allow
        - deny
      type: string
    TokenQuotaConfiguration:
      additionalProperties: true
      properties:
        client_credentials:
          $ref: '#/components/schemas/TokenQuotaClientCredentials'
      required:
        - client_credentials
      type: object
    TenantSettingsDeviceFlowCharset:
      default: base20
      description: >-
        Jeu de caractères utilisé pour générer un code utilisateur. Peut être
        `base20` ou `digits`.
      enum:
        - base20
        - digits
      type: string
    ContentSecurityPolicyConfig:
      additionalProperties: false
      description: >-
        Configuration de la Content Security Policy avec prise en charge de
        plusieurs politiques.
      properties:
        enabled:
          description: Indique si la CSP est activée.
          type: boolean
        policies:
          $ref: '#/components/schemas/CspPolicies'
        reporting_infrastructure:
          $ref: '#/components/schemas/CspReportingInfrastructure'
      type:
        - object
        - 'null'
    XssProtectionConfig:
      additionalProperties: false
      description: >-
        Configuration de l’en-tête X-XSS-Protection (en-tête obsolète, utilisez
        plutôt CSP).
      properties:
        enabled:
          description: Indique si l’en-tête X-XSS-Protection est activé.
          type: boolean
        mode:
          $ref: '#/components/schemas/XssProtectionMode'
        report_uri:
          description: Endpoint HTTPS pour les rapports de violation de X-XSS-Protection.
          type: string
      type:
        - object
        - 'null'
    SessionCookieModeEnum:
      default: persistent
      description: Comportement du cookie de session
      enum:
        - persistent
        - non-persistent
      type: string
    TenantSettingsCountryCodesModeResponse:
      description: Indique si la liste est une liste d’autorisation ou une liste de rejet.
      enum:
        - allow
        - deny
      type: string
    TokenQuotaClientCredentials:
      additionalProperties: false
      description: La configuration du quota de jetons
      minProperties: 1
      properties:
        enforce:
          description: >-
            Si cette option est activée, le quota sera appliqué et les requêtes
            qui dépassent le quota échoueront. Si elle est désactivée, le quota
            ne sera pas appliqué, mais des notifications pour les requêtes qui
            dépassent le quota seront consignées dans les journaux.
          type: boolean
        per_day:
          description: Nombre maximal de jetons émis par jour
          maximum: 2147483647
          minimum: 1
          type: integer
        per_hour:
          description: Nombre maximal de jetons émis par heure
          maximum: 2147483647
          minimum: 1
          type: integer
      type: object
    CspPolicies:
      description: Tableau de policies CSP (appliquées et/ou signalées).
      items:
        $ref: '#/components/schemas/CspPolicy'
      type: array
    CspReportingInfrastructure:
      additionalProperties: false
      description: Configuration globale de l’infrastructure de signalement.
      properties:
        report_to:
          $ref: '#/components/schemas/CspReportTo'
        reporting_endpoints:
          $ref: '#/components/schemas/CspReportingEndpoints'
      type:
        - object
        - 'null'
    XssProtectionMode:
      description: "Mode X-XSS-Protection\_: block."
      enum:
        - block
      type: string
    CspPolicy:
      additionalProperties: false
      description: >-
        Une seule policy CSP avec mode, directives, indicateurs et signalement
        facultatif.
      properties:
        directives:
          $ref: '#/components/schemas/CspDirectives'
        flags:
          $ref: '#/components/schemas/CspFlags'
        mode:
          $ref: '#/components/schemas/CspPolicyMode'
        reporting:
          $ref: '#/components/schemas/CspPolicyReporting'
      type: object
    CspReportTo:
      additionalProperties: false
      description: Configuration du header Report-To.
      properties:
        endpoints:
          $ref: '#/components/schemas/CspReportToEndpoints'
        group:
          description: Identifiant du groupe de signalement.
          type: string
        max_age:
          description: Durée maximale, en secondes, du header Report-To.
          type: integer
      type:
        - object
        - 'null'
    CspReportingEndpoints:
      additionalProperties:
        type: string
      description: Configuration du header Reporting-Endpoints (paires clé-valeur).
      type: object
    CspDirectives:
      additionalProperties:
        items:
          maxLength: 2048
          type: string
        type: array
      description: >-
        Correspondance des directives CSP. Les clés sont les noms des directives
        et les valeurs sont des tableaux de valeurs de directive.
      maxProperties: 30
      type: object
    CspFlags:
      description: Indicateurs CSP (directives seules sans valeurs).
      items:
        $ref: '#/components/schemas/CspFlag'
      type: array
    CspPolicyMode:
      description: 'Mode de la policy : application ou signalement.'
      enum:
        - enforcing
        - reporting
      type: string
    CspPolicyReporting:
      additionalProperties: false
      description: Configuration du signalement par policy.
      properties:
        report_to_group:
          description: Nom du groupe Report-To pour le signalement moderne.
          type: string
        report_uri:
          description: Endpoint HTTPS pour les rapports de violation CSP.
          type: string
      type:
        - object
        - 'null'
    CspReportToEndpoints:
      description: Tableau des endpoints de signalement.
      items:
        $ref: '#/components/schemas/CspReportToEndpoint'
      type: array
    CspFlag:
      enum:
        - upgrade-insecure-requests
        - block-all-mixed-content
      type: string
    CspReportToEndpoint:
      additionalProperties: false
      description: Un seul endpoint de signalement.
      properties:
        url:
          description: URL HTTPS de l’endpoint de signalement.
          type: string
      type: object
  securitySchemes:
    bearerAuth:
      bearerFormat: jwt
      scheme: bearer
      type: http
    oAuth2ClientCredentials:
      flows:
        clientCredentials:
          scopes:
            create:actions: Create Actions
            create:agents: Create Agents
            create:authentication_methods: Create Authentication Methods
            create:client_credentials: Create Client Credentials
            create:client_grants: Create Client Grants
            create:clients: Create Clients
            create:connection_profiles: Create Connection Profiles
            create:connections: Create Connections
            create:connections_keys: Create Connections Keys
            create:current_user_device_credentials: Create Current User Device Credentials
            create:custom_domains: Create Custom Domains
            create:custom_signing_keys: Create Custom Signing Keys
            create:directory_provisionings: Create Directory Provisionings
            create:email_provider: Create Email Provider
            create:email_templates: Create Email Templates
            create:encryption_keys: Create Encryption Keys
            create:event_streams: Create Event Streams
            create:experimentation: Create Experimentation
            create:flows: Create Flows
            create:flows_vault_connections: Create Flows Vault Connections
            create:forms: Create Forms
            create:group_roles: Create Group Roles
            create:guardian_enrollment_tickets: Create Guardian Enrollment Tickets
            create:hooks: Create Hooks
            create:log_streams: Create Log Streams
            create:network_acl_keys: Create Network ACL Keys
            create:network_acls: Create Network Acls
            create:organization_client_grants: Create Organization Client Grants
            create:organization_clients: Create Organization Client Associations
            create:organization_connections: Create Organization Connections
            create:organization_discovery_domains: Create Organization Discovery Domains
            create:organization_group_roles: Create Organization Group Roles
            create:organization_invitations: Create Organization Invitations
            create:organization_member_roles: Create Organization Member Roles
            create:organization_members: Create Organization Members
            create:organizations: Create Organizations
            create:phone_providers: Create Phone Providers
            create:phone_templates: Create Phone Templates
            create:rate_limit_policies: Create Rate Limit Policies
            create:resource_servers: Create Resource Servers
            create:role_members: Create Role Members
            create:roles: Create Roles
            create:rules: Create Rules
            create:scim_config: Create Scim Config
            create:scim_token: Create Scim Token
            create:self_service_profiles: Create Self Service Profiles
            create:signing_keys: Create Signing Keys
            create:sso_access_tickets: Create Sso Access Tickets
            create:token_exchange_profiles: Create Token Exchange Profiles
            create:user_attribute_profiles: Create User Attribute Profiles
            create:user_tickets: Create User Tickets
            create:users: Create Users
            create:vdcs_templates: Create Vdcs Templates
            delete:actions: Delete Actions
            delete:agents: Delete Agents
            delete:anomaly_blocks: Delete Anomaly Blocks
            delete:authentication_methods: Delete Authentication Methods
            delete:branding: Delete Branding
            delete:client_credentials: Delete Client Credentials
            delete:client_grants: Delete Client Grants
            delete:clients: Delete Clients
            delete:connection_profiles: Delete Connection Profiles
            delete:connections: Delete Connections
            delete:current_user: Delete Current User
            delete:current_user_device_credentials: Delete Current User Device Credentials
            delete:custom_domains: Delete Custom Domains
            delete:custom_signing_keys: Delete Custom Signing Keys
            delete:device_credentials: Delete Device Credentials
            delete:directory_provisionings: Delete Directory Provisionings
            delete:email_provider: Delete Email Provider
            delete:encryption_keys: Delete Encryption Keys
            delete:event_streams: Delete Event Streams
            delete:experimentation: Delete Experimentation
            delete:flows: Delete Flows
            delete:flows_executions: Delete Flows Executions
            delete:flows_vault_connections: Delete Flows Vault Connections
            delete:forms: Delete Forms
            delete:grants: Delete Grants
            delete:group_roles: Delete Group Roles
            delete:groups: Delete Groups
            delete:guardian_enrollments: Delete Guardian Enrollments
            delete:hooks: Delete Hooks
            delete:log_streams: Delete Log Streams
            delete:network_acls: Delete Network Acls
            delete:organization_client_grants: Delete Organization Client Grants
            delete:organization_clients: Delete Organization Client Associations
            delete:organization_connections: Delete Organization Connections
            delete:organization_discovery_domains: Delete Organization Discovery Domains
            delete:organization_group_roles: Delete Organization Group Roles
            delete:organization_invitations: Delete Organization Invitations
            delete:organization_member_roles: Delete Organization Member Roles
            delete:organization_members: Delete Organization Members
            delete:organizations: Delete Organizations
            delete:phone_providers: Delete Phone Providers
            delete:phone_templates: Delete Phone Templates
            delete:rate_limit_policies: Delete Rate Limit Policies
            delete:refresh_tokens: Delete Refresh Tokens
            delete:resource_servers: Delete Resource Servers
            delete:role_members: Delete Role Members
            delete:roles: Delete Roles
            delete:rules: Delete Rules
            delete:rules_configs: Delete Rules Configs
            delete:scim_config: Delete Scim Config
            delete:scim_token: Delete Scim Token
            delete:self_service_profiles: Delete Self Service Profiles
            delete:sessions: Delete Sessions
            delete:sso_access_tickets: Delete Sso Access Tickets
            delete:token_exchange_profiles: Delete Token Exchange Profiles
            delete:user_attribute_profiles: Delete User Attribute Profiles
            delete:users: Delete Users
            delete:vdcs_templates: Delete Vdcs Templates
            read:actions: Read Actions
            read:agents: Read Agents
            read:anomaly_blocks: Read Anomaly Blocks
            read:attack_protection: Read Attack Protection
            read:authentication_methods: Read Authentication Methods
            read:branding: Read Branding
            read:client_credentials: Read Client Credentials
            read:client_grants: Read Client Grants
            read:client_keys: Read Client Keys
            read:client_summary: Read Client Summary
            read:clients: Read Clients
            read:connection_profiles: Read Connection Profiles
            read:connections: Read Connections
            read:connections_keys: Read Connections Keys
            read:current_user: Read Current User
            read:custom_domains: Read Custom Domains
            read:custom_signing_keys: Read Custom Signing Keys
            read:device_credentials: Read Device Credentials
            read:directory_provisionings: Read Directory Provisionings
            read:email_provider: Read Email Provider
            read:email_templates: Read Email Templates
            read:encryption_keys: Read Encryption Keys
            read:event_deliveries: Read Event Deliveries
            read:event_streams: Read Event Streams
            read:events: Read Events
            read:experimentation: Read Experimentation
            read:flows: Read Flows
            read:flows_executions: Read Flows Executions
            read:flows_vault_connections: Read Flows Vault Connections
            read:forms: Read Forms
            read:grants: Read Grants
            read:group_members: Read Group Members
            read:group_roles: Read Group Roles
            read:groups: Read Groups
            read:guardian_enrollments: Read Guardian Enrollments
            read:guardian_factors: Read Guardian Factors
            read:hooks: Read Hooks
            read:log_streams: Read Log Streams
            read:logs: Read Logs
            read:logs_users: Read Logs Users
            read:mfa_policies: Read Mfa Policies
            read:network_acls: Read Network Acls
            read:organization_client_grants: Read Organization Client Grants
            read:organization_clients: Read Organization Client Associations
            read:organization_connections: Read Organization Connections
            read:organization_discovery_domains: Read Organization Discovery Domains
            read:organization_group_roles: Read Organization Group Roles
            read:organization_groups: Read Organization Groups
            read:organization_invitations: Read Organization Invitations
            read:organization_member_effective_roles: Read Organization Member Effective Roles
            read:organization_member_role_source_groups: Read Organization Member Role Source Groups
            read:organization_member_roles: Read Organization Member Roles
            read:organization_members: Read Organization Members
            read:organizations: Read Organizations
            read:organizations_summary: Read Organizations Summary
            read:phone_providers: Read Phone Providers
            read:phone_templates: Read Phone Templates
            read:prompts: Read Prompts
            read:rate_limit_policies: Read Rate Limit Policies
            read:refresh_tokens: Read Refresh Tokens
            read:resource_servers: Read Resource Servers
            read:role_members: Read Role Members
            read:roles: Read Roles
            read:rules: Read Rules
            read:rules_configs: Read Rules Configs
            read:scim_config: Read Scim Config
            read:scim_token: Read Scim Token
            read:self_service_profile_custom_texts: Read Self Service Profile Custom Texts
            read:self_service_profiles: Read Self Service Profiles
            read:sessions: Read Sessions
            read:signing_keys: Read Signing Keys
            read:stats: Read Stats
            read:tenant_settings: Read Tenant Settings
            read:token_exchange_profiles: Read Token Exchange Profiles
            read:user_attribute_profiles: Read User Attribute Profiles
            read:user_effective_permissions: Read User Effective Permissions
            read:user_effective_roles: Read User Effective Roles
            read:user_idp_tokens: Read User Idp Tokens
            read:user_permission_source_roles: Read User Permission Source Roles
            read:user_role_source_groups: Read User Role Source Groups
            read:users: Read Users
            read:vdcs_templates: Read Vdcs Templates
            update:actions: Update Actions
            update:agents: Update Agents
            update:attack_protection: Update Attack Protection
            update:authentication_methods: Update Authentication Methods
            update:branding: Update Branding
            update:client_credentials: Update Client Credentials
            update:client_grants: Update Client Grants
            update:client_keys: Update Client Keys
            update:client_token_vault_privileged_access: Update Client Token Vault Privileged Access
            update:clients: Update Clients
            update:connection_profiles: Update Connection Profiles
            update:connections: Update Connections
            update:connections_keys: Update Connections Keys
            update:current_user_identities: Update Current User Identities
            update:current_user_metadata: Update Current User Metadata
            update:custom_domains: Update Custom Domains
            update:custom_signing_keys: Update Custom Signing Keys
            update:directory_provisionings: Update Directory Provisionings
            update:email_provider: Update Email Provider
            update:email_templates: Update Email Templates
            update:encryption_keys: Update Encryption Keys
            update:event_deliveries: Update Event Deliveries
            update:event_streams: Update Event Streams
            update:experimentation: Update Experimentation
            update:flows: Update Flows
            update:flows_vault_connections: Update Flows Vault Connections
            update:forms: Update Forms
            update:guardian_factors: Update Guardian Factors
            update:hooks: Update Hooks
            update:log_streams: Update Log Streams
            update:mfa_policies: Update Mfa Policies
            update:network_acls: Update Network Acls
            update:organization_clients: Update Organization Client Associations
            update:organization_connections: Update Organization Connections
            update:organization_discovery_domains: Update Organization Discovery Domains
            update:organizations: Update Organizations
            update:phone_providers: Update Phone Providers
            update:phone_templates: Update Phone Templates
            update:prompts: Update Prompts
            update:rate_limit_policies: Update Rate Limit Policies
            update:refresh_tokens: Update Refresh Tokens
            update:resource_servers: Update Resource Servers
            update:roles: Update Roles
            update:rules: Update Rules
            update:rules_configs: Update Rules Configs
            update:scim_config: Update Scim Config
            update:self_service_profile_custom_texts: Update Self Service Profile Custom Texts
            update:self_service_profiles: Update Self Service Profiles
            update:sessions: Update Sessions
            update:signing_keys: Update Signing Keys
            update:tenant_settings: Update Tenant Settings
            update:token_exchange_profiles: Update Token Exchange Profiles
            update:user_attribute_profiles: Update User Attribute Profiles
            update:users: Update Users
            update:users_app_metadata: Update Users App Metadata
            update:vdcs_templates: Update Vdcs Templates
          tokenUrl: /oauth/token/
          x-form-parameters:
            audience: /api/v2/
      type: oauth2

````