> ## Documentation Index
> Fetch the complete documentation index at: https://translations.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Mettre à jour les attributs du fournisseur d’identité de l’organisation

> Actualisez le mappage d’attributs d’un fournisseur d’identité précisé par son ID pour cette organisation. Les mappages sont réinitialisés aux valeurs par défaut définies par l’administrateur.

export const Scopes = ({scopes = []}) => {
  return <div>
      <div class="api-section-heading flex flex-col gap-y-4 w-full">
        <div class="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 class="api-section-heading-title flex-1 mb-0">Portées</h4>
          <div class="flex items-center"></div>
        </div>
      </div>
      <div class="mt-4">
        <div class="space-y-4 whitespace-normal prose prose-sm prose-gray dark:prose-invert overflow-wrap-anywhere [&_*]:overflow-wrap-anywhere">
          <p class="whitespace-pre-line text-xs">
            {"Les portées définissent les autorisations et les niveaux d’accès des requêtes API et des jetons d’authentification."}
          </p>
        </div>
      </div>
      <div class="flex font-mono text-sm group/param-head param-head break-all relative mt-6" id="scopes-scopes">
        <div class="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div class="flex items-center flex-wrap gap-2">
            <div class="absolute -top-1.5">
              <a href="#scopes-scopes" class="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Aller à l’en-tête">
                ​
                <div class="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            {scopes.map((scope, index) => {
    return <span class="flex items-center px-2 py-0.5 rounded-md bg-gray-100/50 dark:bg-white/5 text-gray-600 dark:text-gray-200 font-medium break-all" style={{
      lineHeight: "1rem",
      fontSize: "0.75rem",
      fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace'
    }} data-component-part="field-info-pill" key={index}>
                  {scope}
                </span>;
  })}
          </div>
        </div>
      </div>
    </div>;
};

export const ApiReleaseLifecycle = ({releaseLifecycle = "GA"}) => {
  const lifecycleMap = {
    ea: "Accès anticipé",
    ga: "Généralement disponible",
    deprecated: "Déprécié",
    planned: "Planifié",
    beta: "Bêta"
  };
  const LIFECYCLE_THEMES = {
    info: {
      light: {
        bg: "lab(91.896% .077188 -6.94053)",
        text: "lab(36.091% 25.9241 -68.0384)"
      },
      dark: {
        bg: "lab(16.0426% 6.71726 -27.2409)",
        text: "lab(72.6029% 4.08953 -41.9669)"
      }
    },
    secondary: {
      light: {
        bg: "lab(90.8548% 11.3355 8.01476)",
        text: "lab(47.5286% 56.4238 43.4706)"
      },
      dark: {
        bg: "lab(16.3609% 37.191 25.6346)",
        text: "lab(71.881% 41.5 29.4839)"
      }
    },
    danger: {
      light: {
        bg: "lab(94.7916% -.0000298023 0)",
        text: "lab(54.3656% 0 -.0000119209)"
      },
      dark: {
        bg: "lab(13.232% 0 0)",
        text: "lab(51.6164% 0 0)"
      }
    }
  };
  const LIFECYCLE_THEME_MAP = {
    ea: "info",
    ga: "info",
    beta: "info",
    deprecated: "secondary",
    planned: "danger"
  };
  const lifecycle = releaseLifecycle.toLocaleLowerCase();
  const lifecycleText = lifecycleMap[lifecycle];
  if (!lifecycleText) {
    return null;
  }
  const theme = LIFECYCLE_THEMES[LIFECYCLE_THEME_MAP[lifecycle]];
  return <div>
      <div className="api-section-heading flex flex-col gap-y-4 w-full">
        <div className="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 className="api-section-heading-title flex-1 mb-0">Cycle de vie de la version</h4>
        </div>
      </div>
      <div className="flex font-mono text-sm group/param-head param-head break-all relative mt-2.5" id="releaselifecycle-lifecycle">
        <div className="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div className="flex items-center flex-wrap gap-2">
            <div className="absolute -top-1.5">
              <a href="#releaselifecycle-lifecycle" className="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Naviguer vers l'en-tête">
                <div className="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            <span className="inline-flex items-center w-fit font-medium gap-1 py-0.5 px-2 rounded-md" style={{
    lineHeight: "1rem",
    fontSize: "0.75rem",
    fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace',
    backgroundColor: `light-dark(${theme.light.bg}, ${theme.dark.bg})`,
    color: `light-dark(${theme.light.text}, ${theme.dark.text})`,
    borderColor: `light-dark(color-mix(in oklab, ${theme.light.text} 25%, transparent), color-mix(in oklab, ${theme.dark.text} 25%, transparent))`
  }}>
              {lifecycleText}
            </span>
          </div>
        </div>
      </div>
    </div>;
};

<ApiReleaseLifecycle releaseLifecycle="EA" />

<Scopes scopes={["update:my_org:identity_providers"]} />


## OpenAPI

````yaml docs/fr-ca/oas/myorganization/myorganization-api-oas.json PUT /identity-providers/{idp_id}/update-attributes
openapi: 3.1.0
info:
  description: API My organisation
  license:
    name: UNLICENSED
    url: https://auth0.com
  termsOfService: https://auth0.com/web-terms/
  title: My Organization API
  version: 1.0.0
servers:
  - url: https://{tenantDomain}/my-org/v1
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du tenant Auth0
  - url: https://{tenantDomain}/my-org
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du tenant Auth0
security: []
tags:
  - description: Configuration
    name: config
    x-displayName: Configuration
  - description: Gérez les détails liés à votre organisation.
    name: orgDetails
    x-displayName: Organization Details Management
  - description: Gérez les fournisseurs d’identité de votre organisation.
    name: idpManagement
    x-displayName: Identity Provider Management
  - description: Gérer les répertoires d’utilisateurs de votre organisation.
    name: userStoresManagement
    x-displayName: User Stores Management
  - description: Gérer les domaines associés à votre organisation
    name: orgDomainManagement
    x-displayName: Domain Management
  - description: Gérer les membres de votre organisation
    name: orgMemberManagement
    x-displayName: Member Management
  - description: Gérer les autorisations client de votre organisation
    name: clientGrantManagement
    x-displayName: Client Grant Management
  - description: Gérer les clients API de votre organisation
    name: clientManagement
    x-displayName: Client Management
  - description: Gérer les rôles de votre organisation
    name: roles
    x-displayName: Roles
paths:
  /identity-providers/{idp_id}/update-attributes:
    put:
      tags:
        - idpManagement
      summary: Actualiser le mappage des attributs du fournisseur d’identité
      description: >-
        Actualisez le mappage d’attributs d’un fournisseur d’identité précisé
        par son ID pour cette organisation. Les mappages sont réinitialisés aux
        valeurs par défaut définies par l’administrateur.
      operationId: UpdateOrganizationIdentityProviderAttributes
      parameters:
        - $ref: '#/components/parameters/IdpIdPathParameter'
      requestBody:
        $ref: '#/components/requestBodies/EmptyBody'
      responses:
        '200':
          $ref: '#/components/responses/GetIdentityProviderResponse'
        '400':
          $ref: '#/components/responses/ClientErrorBadRequestResponse'
        '401':
          $ref: '#/components/responses/ClientErrorUnauthorizedResponse'
        '403':
          $ref: '#/components/responses/ClientErrorInsufficientScopeResponse'
        '404':
          $ref: '#/components/responses/ClientErrorNotFoundOrgOrIdpResponse'
        '429':
          $ref: '#/components/responses/ClientErrorTooManyRequestsResponse'
      security:
        - OAuth2ClientCredentials:
            - update:my_org:identity_providers
        - OAuth2AuthCode:
            - update:my_org:identity_providers
      x-codeSamples: []
components:
  parameters:
    IdpIdPathParameter:
      in: path
      name: idp_id
      required: true
      schema:
        $ref: '#/components/schemas/IdpId'
  requestBodies:
    EmptyBody:
      content:
        application/json:
          examples: {}
          schema:
            additionalProperties: false
            type: object
  responses:
    GetIdentityProviderResponse:
      content:
        application/json:
          examples:
            getIdPResponseExample:
              $ref: '#/components/examples/GetIdentityProviderResponseExample'
          schema:
            $ref: '#/components/schemas/GetIdentityProviderResponseContent'
      description: Fournisseur d’identité récupéré avec succès.
      headers:
        Retry-After:
          $ref: '#/components/headers/Retry-After'
        X-Auth0-Error-Kind:
          $ref: '#/components/headers/X-Auth0-Error-Kind'
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
    ClientErrorBadRequestResponse:
      content:
        application/json:
          examples:
            errorInvalidJsonExample:
              $ref: '#/components/examples/ErrorBadRequestExample'
            validationErrorExample:
              $ref: '#/components/examples/ErrorValidationExample'
          schema:
            oneOf:
              - $ref: '#/components/schemas/ErrorResponseContent'
              - $ref: '#/components/schemas/ValidationErrorResponseContent'
      description: Corps de la requête invalide. Le message varie selon la cause.
    ClientErrorUnauthorizedResponse:
      content:
        application/json:
          examples:
            errorMissingTokenExample:
              $ref: '#/components/examples/ErrorMissingTokenExample'
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
      description: "Non autorisé\_: jeton manquant, invalide ou expiré."
    ClientErrorInsufficientScopeResponse:
      content:
        application/json:
          examples:
            errorInsufficientScopeExample:
              $ref: '#/components/examples/ErrorInsufficientScopeExample'
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
      description: Scope insuffisant.
    ClientErrorNotFoundOrgOrIdpResponse:
      content:
        application/json:
          examples:
            ErrorIdpNotFoundExample:
              $ref: '#/components/examples/ErrorIdpNotFoundExample'
            errorOrgNotFoundExample:
              $ref: '#/components/examples/ErrorOrgNotFoundExample'
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
      description: Ressource introuvable.
    ClientErrorTooManyRequestsResponse:
      content:
        application/json:
          examples:
            errorEndpointRateLimitExample:
              $ref: '#/components/examples/ErrorEndpointRateLimitExample'
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
      description: >-
        Trop de requêtes. Vérifiez les en-têtes X-RateLimit-Limit,
        X-RateLimit-Remaining et X-RateLimit-Reset.
      headers:
        Retry-After:
          $ref: '#/components/headers/Retry-After'
        X-Auth0-Error-Kind:
          $ref: '#/components/headers/X-Auth0-Error-Kind'
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
  schemas:
    IdpId:
      description: Identifiant du fournisseur d’identité.
      pattern: ^con_[A-Za-z0-9]{16}$
      readOnly: true
      type: string
    GetIdentityProviderResponseContent:
      $ref: '#/components/schemas/IdpKnownResponse'
    ErrorResponseContent:
      additionalProperties: false
      properties:
        detail:
          description: Description détaillée de l’erreur.
          type: string
        status:
          description: Le code d’état HTTP résultant de la requête.
          type: integer
        title:
          description: Brève description de l’erreur.
          type: string
        type:
          description: URI qui décrit l’erreur.
          format: uri
          type: string
      required:
        - type
        - status
        - title
        - detail
      type: object
    ValidationErrorResponseContent:
      additionalProperties: false
      properties:
        status:
          description: Le code d’état HTTP résultant de la requête.
          type: integer
        title:
          description: Brève description de l’erreur.
          type: string
        type:
          description: URI qui décrit l’erreur.
          format: uri
          type: string
        validation_errors:
          items:
            $ref: '#/components/schemas/ValidationErrorDetail'
          type: array
      required:
        - type
        - status
        - title
        - validation_errors
      type: object
    IdpKnownResponse:
      oneOf:
        - $ref: '#/components/schemas/IdpAdfsResponse'
        - $ref: '#/components/schemas/IdpGoogleAppsResponse'
        - $ref: '#/components/schemas/IdpOidcResponse'
        - $ref: '#/components/schemas/IdpOktaResponse'
        - $ref: '#/components/schemas/IdpPingFederateResponse'
        - $ref: '#/components/schemas/IdpSamlpResponse'
        - $ref: '#/components/schemas/IdpWaadResponse'
    ValidationErrorDetail:
      additionalProperties: false
      properties:
        detail:
          description: Description détaillée de l’erreur.
          type: string
        field:
          description: Nom du paramètre non valide.
          type: string
        pointer:
          description: >-
            Pointeur JSON indiquant l’emplacement exact de l’erreur dans un
            document JSON en cours de validation.
          type: string
        source:
          description: >-
            Précise la source de l’erreur (p. ex., le corps, la requête ou
            l’en-tête dans un message HTML).
          type: string
      required:
        - detail
      type: object
    IdpAdfsResponse:
      allOf:
        - $ref: '#/components/schemas/IdpBaseResponse'
        - properties:
            options:
              $ref: '#/components/schemas/IdpAdfsOptionsResponse'
              description: Options spécifiques au fournisseur d’identité.
            strategy:
              const: adfs
          required:
            - strategy
            - options
          type: object
      description: Options spécifiques au fournisseur d’identité.
      title: IdP ADFS Response
      type: object
      unevaluatedProperties: false
    IdpGoogleAppsResponse:
      allOf:
        - $ref: '#/components/schemas/IdpBaseResponse'
        - properties:
            options:
              $ref: '#/components/schemas/IdpGoogleAppsOptionsResponse'
              description: Options spécifiques au fournisseur d’identité.
            strategy:
              const: google-apps
          required:
            - strategy
            - options
          type: object
      description: Options spécifiques au fournisseur d’identité.
      title: IdP Google Workforce Response
      type: object
      unevaluatedProperties: false
    IdpOidcResponse:
      allOf:
        - $ref: '#/components/schemas/IdpBaseResponse'
        - properties:
            attributes:
              items:
                $ref: '#/components/schemas/IdpUserAttributeMapItem'
              type: array
            options:
              $ref: '#/components/schemas/IdpOidcOptionsResponse'
              description: Options spécifiques au fournisseur d’identité.
            strategy:
              const: oidc
          required:
            - strategy
            - options
            - attributes
          type: object
      description: Options spécifiques au fournisseur d’identité.
      title: IdP OIDC Response
      type: object
      unevaluatedProperties: false
    IdpOktaResponse:
      allOf:
        - $ref: '#/components/schemas/IdpBaseResponse'
        - properties:
            attributes:
              items:
                $ref: '#/components/schemas/IdpUserAttributeMapItem'
              type: array
            options:
              $ref: '#/components/schemas/IdpOktaOptionsResponse'
              description: Options spécifiques au fournisseur d’identité.
            strategy:
              const: okta
          required:
            - strategy
            - options
            - attributes
          type: object
      description: Options spécifiques au fournisseur d’identité.
      title: IdP Okta Response
      type: object
      unevaluatedProperties: false
    IdpPingFederateResponse:
      allOf:
        - $ref: '#/components/schemas/IdpBaseResponse'
        - properties:
            options:
              $ref: '#/components/schemas/IdpPingFederateOptionsResponse'
              description: Options spécifiques au fournisseur d’identité.
            strategy:
              const: pingfederate
          required:
            - strategy
            - options
          type: object
      description: Options spécifiques au fournisseur d’identité.
      title: IdP Ping Response
      type: object
      unevaluatedProperties: false
    IdpSamlpResponse:
      allOf:
        - $ref: '#/components/schemas/IdpBaseResponse'
        - properties:
            attributes:
              items:
                $ref: '#/components/schemas/IdpUserAttributeMapItem'
              type: array
            options:
              $ref: '#/components/schemas/IdpSamlpOptionsResponse'
              description: Options spécifiques au fournisseur d’identité.
            strategy:
              const: samlp
          required:
            - strategy
            - options
            - attributes
          type: object
      description: Options spécifiques au fournisseur d’identité.
      title: IdP SAML Response
      type: object
      unevaluatedProperties: false
    IdpWaadResponse:
      allOf:
        - $ref: '#/components/schemas/IdpBaseResponse'
        - properties:
            options:
              $ref: '#/components/schemas/IdpWaadOptionsResponse'
              description: Options spécifiques au fournisseur d’identité.
            strategy:
              const: waad
          required:
            - strategy
            - options
          type: object
      description: Options spécifiques au fournisseur d’identité.
      title: IdP Microsoft Azure AD Response
      type: object
      unevaluatedProperties: false
    IdpBaseResponse:
      allOf:
        - properties:
            access_level:
              $ref: '#/components/schemas/OrganizationAccessLevelEnum'
              readOnly: true
            assign_membership_on_login:
              description: >-
                Si true, l’utilisateur deviendra membre de l’organisation lors
                de la connexion.
              type: boolean
            display_name:
              description: Nom du fournisseur d’identité utilisé sur l’écran de connexion.
              maxLength: 128
              minLength: 1
              type: string
            domains:
              description: Liste des domaines pour Home Realm Discovery (HRD)
              items:
                type: string
              type: array
            id:
              $ref: '#/components/schemas/IdpId'
            is_enabled:
              description: >-
                True si le fournisseur d’identité est activé pour
                l’organisation.
              type: boolean
            name:
              description: Le nom du fournisseur d’identité
              maxLength: 128
              type:
                - string
                - 'null'
            show_as_button:
              description: >-
                Permet d’afficher un bouton pour la connexion sur la page de
                connexion (nouvelle expérience seulement). Si false, elle pourra
                être utilisée uniquement par Home Realm Discovery (HRD).
              type: boolean
            strategy:
              $ref: '#/components/schemas/IdpStrategyEnum'
          required:
            - strategy
          type: object
    IdpAdfsOptionsResponse:
      oneOf:
        - additionalProperties: false
          properties:
            adfs_server:
              description: >-
                Le paramètre adfs_server correspond à l’URL publique utilisée
                par les parties de confiance et les clients internes pour
                communiquer avec un serveur ADFS dans le cadre de
                l’authentification et de l’émission de jetons
              type: string
          title: adfs_server
          type: object
        - additionalProperties: false
          properties:
            fedMetadataXml:
              description: >-
                Dans ADFS, un fichier XML Federation Metadata est un document
                essentiel qui sert de référence pour établir une relation de
                confiance entre un serveur ADFS et d’autres parties de confiance
                qui souhaitent utiliser les informations d’identité fournies par
                ADFS.
              type: string
          title: fedMetadataXml
          type: object
      type: object
    IdpGoogleAppsOptionsResponse:
      additionalProperties: false
      properties:
        client_id:
          description: Identifiant unique de votre application Google enregistrée.
          type: string
        domain:
          description: Nom de domaine Google Workspace de votre organisation.
          type: string
        icon_url:
          description: >-
            URL pointant vers un fichier image représentant votre application
            cliente.
          type: string
      type: object
    IdpUserAttributeMapItem:
      allOf:
        - $ref: '#/components/schemas/BaseUserAttributeMapItem'
        - properties:
            sso_field:
              description: Le ou les noms du champ sso.
              items:
                type: string
              type: array
          required:
            - sso_field
          type: object
      type: object
      unevaluatedProperties: false
    IdpOidcOptionsResponse:
      additionalProperties: false
      properties:
        client_id:
          description: >-
            Identifiant fourni par votre fournisseur. Identifiant unique de
            votre application enregistrée.
          type: string
        discovery_url:
          description: >-
            L’URL où le fournisseur d’identité OIDC publie son information de
            configuration du fournisseur OpenID
          type: string
        type:
          $ref: '#/components/schemas/IdpOidcOptionsTypeEnum'
      type: object
    IdpOktaOptionsResponse:
      additionalProperties: false
      properties:
        client_id:
          description: Identifiant unique de votre application Okta enregistrée
          type: string
        domain:
          description: Le nom de domaine Okta de votre organisation.
          type: string
        icon_url:
          description: >-
            Une URL pointant vers un fichier image qui représente votre
            application cliente.
          type: string
      type: object
    IdpPingFederateOptionsResponse:
      additionalProperties: false
      properties:
        cert:
          description: >-
            Valeur dérivée du décodage de signingCert. Elle ne doit pas être
            mise à jour directement; mettez plutôt à jour signingCertificate
            afin de décoder une nouvelle valeur pour ce champ
          readOnly: true
          type: string
        digestAlgorithm:
          $ref: '#/components/schemas/IdpSignAlgDigestTypeEnum'
        icon_url:
          description: >-
            Une URL pointant vers un fichier image qui représente votre
            application cliente.
          type: string
        idpInitiated:
          $ref: '#/components/schemas/IdpOptionsIdpInitiated'
        pingFederateBaseUrl:
          description: >-
            URL fournie par PingFederate qui renvoie les informations utilisées
            pour créer la connexion
          type: string
        signSAMLRequest:
          description: >-
            Indique si PingFederate doit signer numériquement les requêtes
            d’authentification SAML sortantes destinées aux parties
            utilisatrices
          type: boolean
        signatureAlgorithm:
          $ref: '#/components/schemas/IdpSignAlgTypeEnum'
      type: object
    IdpSamlpOptionsResponse:
      oneOf:
        - additionalProperties: false
          properties:
            bindingMethod:
              description: >-
                Définit la liaison HTTP précise utilisée pour l’envoi des
                messages SAML.
              type: string
            cert:
              description: >-
                Certificat de signature (encodé en PEM ou CER) que vous avez
                récupéré auprès de l’IdP
              type: string
            digestAlgorithm:
              $ref: '#/components/schemas/IdpSignAlgDigestTypeEnum'
            icon_url:
              description: >-
                Une URL pointant vers un fichier image qui représente votre
                application cliente.
              type: string
            idpInitiated:
              $ref: '#/components/schemas/IdpOptionsIdpInitiated'
            metadataUrl:
              description: >-
                URL fournie par le fournisseur SAML qui renvoie les informations
                utilisées pour créer la connexion
              type: string
            protocolBinding:
              $ref: '#/components/schemas/IdpProtocolBindingTypeEnum'
            signSAMLRequest:
              description: >-
                Lorsque cette option est activée, la requête d’authentification
                SAML sera signée.
              type: boolean
            signatureAlgorithm:
              $ref: '#/components/schemas/IdpSignAlgTypeEnum'
          title: automatic
          type: object
        - additionalProperties: false
          properties:
            bindingMethod:
              description: >-
                Définit la liaison HTTP précise utilisée pour l’envoi des
                messages SAML.
              type: string
            cert:
              description: >-
                Certificat de signature (encodé en PEM ou CER) que vous avez
                récupéré auprès de l’IdP
              type: string
            digestAlgorithm:
              $ref: '#/components/schemas/IdpSignAlgDigestTypeEnum'
            icon_url:
              description: >-
                Une URL pointant vers un fichier image qui représente votre
                application cliente.
              type: string
            idpInitiated:
              $ref: '#/components/schemas/IdpOptionsIdpInitiated'
            protocolBinding:
              $ref: '#/components/schemas/IdpProtocolBindingTypeEnum'
            signInEndpoint:
              description: L’URL du point de terminaison de connexion de l’IdP
              type: string
            signSAMLRequest:
              description: >-
                Lorsqu’elle est activée, la demande d’authentification SAML sera
                signée.
              type: boolean
            signatureAlgorithm:
              $ref: '#/components/schemas/IdpSignAlgTypeEnum'
          title: manual
          type: object
    IdpWaadOptionsResponse:
      additionalProperties: false
      properties:
        client_id:
          description: Identifiant unique de votre application Azure AD enregistrée.
          type: string
        icon_url:
          description: >-
            Une URL pointant vers un fichier image qui représente votre
            application cliente.
          type: string
        tenant_domain:
          description: >-
            Le nom de votre domaine Azure AD. Vous le trouverez sur la page
            Overview de votre annuaire Azure AD dans le portail Microsoft Azure.
          type: string
      type: object
    OrganizationAccessLevelEnum:
      description: Le niveau d’accès autorisé pour l’Organisation
      enum:
        - none
        - readonly
        - limited
        - full
      type: string
    IdpStrategyEnum:
      description: Le type de fournisseur d’identité
      enum:
        - adfs
        - google-apps
        - oidc
        - okta
        - pingfederate
        - samlp
        - waad
      type: string
    BaseUserAttributeMapItem:
      properties:
        description:
          description: La description de l’attribut utilisateur.
          type: string
        is_extra:
          description: >-
            Indique si cet attribut ne fait pas partie du schéma défini par
            l’administrateur, mais est fourni par la source. La propriété sera
            supprimée lors d’une opération d’actualisation.
          type: boolean
        is_missing:
          description: >-
            Indique si cet attribut est attendu, mais n’est pas fourni par le
            schéma défini par l’administrateur. La propriété sera ajoutée lors
            d’une opération d’actualisation.
          type: boolean
        is_required:
          description: Indique si l’attribut est requis.
          type: boolean
        label:
          description: Le libellé de l’attribut utilisateur.
          type: string
        user_attribute:
          description: Le nom de l’attribut utilisateur.
          type: string
      required:
        - is_required
        - is_extra
        - is_missing
      type: object
    IdpOidcOptionsTypeEnum:
      description: >-
        Sélectionnez si les échanges d’authentification se font par
        communication serveur à serveur (canal arrière) ou dans le navigateur à
        l’aide de Implicit Flow with Form Post (canal frontal)
      enum:
        - front_channel
        - back_channel
      type: string
    IdpSignAlgDigestTypeEnum:
      description: Sélectionnez l’algorithme de condensé utilisé pour la signature
      enum:
        - sha256
        - sha1
      type: string
    IdpOptionsIdpInitiated:
      description: >-
        Un objet contenant le détail de configuration des flux
        d’authentification unique initiés par l’Identity Provider (IdP)
      properties:
        client_authorizequery:
          description: >-
            Ce champ représente un modèle servant à construire la chaîne de
            requête d’autorisation lors de l’initialisation d’un flux initié par
            l’IdP vers un client précis
          type: string
        client_id:
          description: >-
            Le client ID de votre application par défaut pour laquelle le flux
            initié par l’IdP est configuré
          type: string
        client_protocol:
          description: >-
            Il s’agit du protocole utilisé pour connecter l’application par
            défaut sélectionnée
          type: string
        enabled:
          description: >-
            Un indicateur précisant si le SSO initié par l’IdP est activé pour
            cette connexion
          type: boolean
      type: object
    IdpSignAlgTypeEnum:
      description: Sélectionnez l’algorithme utilisé pour la signature
      enum:
        - rsa-sha256
        - rsa-sha1
      type: string
    IdpProtocolBindingTypeEnum:
      description: HTTP binding pris en charge par l’IdP.
      enum:
        - urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect
        - urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST
      type: string
  examples:
    GetIdentityProviderResponseExample:
      value:
        access_level: readonly
        assign_membership_on_login: false
        attributes:
          - description: Nom d’utilisateur préféré
            is_extra: false
            is_missing: false
            is_required: true
            label: Preferred username
            sso_field:
              - userName
            user_attribute: preferred_username
          - is_extra: true
            is_missing: false
            is_required: true
            sso_field:
              - externalId
            user_attribute: external_id
        display_name: OIDC IdP
        domains:
          - mydomain.com
        id: con_zW1UHutvkVWSWdCC
        is_enabled: true
        name: oidcIdp
        options:
          client_id: a8f3b2e7-5d1c-4f9a-8b0d-2e1c3a5b6f7d
          discovery_url: https://{yourDomain}/.well-known/openid-configuration
          type: front_channel
        show_as_button: true
        strategy: oidc
    ErrorBadRequestExample:
      value:
        detail: The request is invalid.
        status: 400
        title: Bad Request
        type: https://auth0.com/api-errors#A0E-400-0001
    ErrorValidationExample:
      value:
        status: 400
        title: Validation Error
        type: https://auth0.com/api-errors#A0E-400-0003
        validation_errors:
          - detail: is required
            field: data/property_name
            pointer: /property_name
            source: params
    ErrorMissingTokenExample:
      value:
        detail: No auth token provided.
        status: 401
        title: Missing Token
        type: https://auth0.com/api-errors#A0E-401-0002
    ErrorInsufficientScopeExample:
      value:
        detail: >-
          The auth token lacks the required scope: Check the API documentation
          for the required scopes for this endpoint.
        status: 403
        title: Insufficient Scope
        type: https://auth0.com/api-errors#A0E-403-0002
    ErrorIdpNotFoundExample:
      value:
        detail: The IdP does not exist.
        status: 404
        title: Resource Not Found
        type: https://auth0.com/api-errors#A0E-404-0002
    ErrorOrgNotFoundExample:
      value:
        detail: The organization does not exist.
        status: 404
        title: Resource Not Found
        type: https://auth0.com/api-errors#A0E-404-0002
    ErrorEndpointRateLimitExample:
      value:
        detail: The endpoint request limit has been exceeded.
        status: 429
        title: Endpoint Rate Limit Exceeded
        type: https://auth0.com/api-errors#A0E-429-0003
  headers:
    Retry-After:
      description: >-
        Le nombre de secondes que le client doit attendre avant d’effectuer une
        nouvelle requête.
      schema:
        type: integer
    X-Auth0-Error-Kind:
      description: >-
        Indicateur signalant que la limite de débit dépassée est une limite
        globale (par tenant).
      schema:
        enum:
          - global-rate-limit
        type: string
    X-RateLimit-Limit:
      description: >-
        Le nombre de requêtes autorisées dans la fenêtre actuelle de limite de
        débit.
      schema:
        type: integer
    X-RateLimit-Remaining:
      description: >-
        Le nombre de requêtes restantes dans la fenêtre actuelle de limite de
        débit.
      schema:
        type: integer
    X-RateLimit-Reset:
      description: >-
        L’horodatage Unix indiquant quand la fenêtre actuelle de limite de débit
        est réinitialisée.
      schema:
        type: integer
  securitySchemes:
    OAuth2ClientCredentials:
      flows:
        clientCredentials:
          scopes:
            create:my_org:client_grants: Create client grants for client in organization
            create:my_org:clients: Create API clients for organization
            create:my_org:domains: Create domain for organization
            create:my_org:identity_providers: Create identity provider for organization
            create:my_org:identity_providers_domains: Associate organization domain with identity provider
            create:my_org:identity_providers_provisioning: Create provisioning configuration for identity provider
            create:my_org:identity_providers_scim_tokens: Create a provisioning SCIM token for this identity provider
            create:my_org:member_invitations: Create member invitations for organization
            create:my_org:member_roles: Create Roles for members in organization
            delete:my_org:clients: Delete API clients for organization
            delete:my_org:domains: Delete domain for organization
            delete:my_org:identity_providers: Delete identity provider for organization
            delete:my_org:identity_providers_domains: Remove organization domain from identity provider
            delete:my_org:identity_providers_provisioning: Delete provisioning configuration for identity provider
            delete:my_org:identity_providers_scim_tokens: Delete a provisioning SCIM configuration for an identity provider
            delete:my_org:member_invitations: Delete member invitations for organization
            delete:my_org:member_roles: Delete Roles from members for organization
            delete:my_org:memberships: Delete members from organization without deleting underlying users
            delete:my_org:organizations: Delete this organization
            read:my_org:clients: Read API clients for organization
            read:my_org:configuration: Read organization configuration
            read:my_org:details: Read organization details
            read:my_org:domains: Read domains for organization
            read:my_org:identity_providers: Read identity providers for organization
            read:my_org:identity_providers_provisioning: Read provisioning configuration for identity provider
            read:my_org:identity_providers_scim_tokens: List the provisioning SCIM tokens for this identity provider
            read:my_org:member_invitations: List member invitations for organization
            read:my_org:member_roles: List Roles for members in organization
            read:my_org:members: List members for organization
            read:my_org:permissions: Read permissions for a user
            read:my_org:user_stores: Read user stores for an organization
            update:my_org:details: Update organization details
            update:my_org:domains: Update domain for organization
            update:my_org:identity_providers: Update identity provider for organization
            update:my_org:identity_providers_detach: Detach identity provider from organization
            update:my_org:identity_providers_provisioning: Update provisioning configuration for identity provider
          tokenUrl: /oauth/token
          x-form-parameters:
            audience: /myorg-api/v1/
      type: oauth2
    OAuth2AuthCode:
      flows:
        authorizationCode:
          authorizationUrl: /authorize
          scopes:
            create:my_org:client_grants: Create client grants for client in organization
            create:my_org:clients: Create API clients for organization
            create:my_org:domains: Create domain for organization
            create:my_org:identity_providers: Create identity provider for organization
            create:my_org:identity_providers_domains: Associate organization domain with identity provider
            create:my_org:identity_providers_provisioning: Create provisioning configuration for identity provider
            create:my_org:identity_providers_scim_tokens: Create a provisioning SCIM token for this identity provider
            create:my_org:member_invitations: Create member invitations for organization
            create:my_org:member_roles: Create Roles for members in organization
            delete:my_org:clients: Delete API clients for organization
            delete:my_org:domains: Delete domain for organization
            delete:my_org:identity_providers: Delete identity provider for organization
            delete:my_org:identity_providers_domains: Remove organization domain from identity provider
            delete:my_org:identity_providers_provisioning: Delete provisioning configuration for identity provider
            delete:my_org:identity_providers_scim_tokens: Delete a provisioning SCIM configuration for an identity provider
            delete:my_org:member_invitations: Delete member invitations for organization
            delete:my_org:member_roles: Delete Roles from members for organization
            delete:my_org:memberships: Delete members from organization without deleting underlying users
            delete:my_org:organizations: Delete this organization
            read:my_org:clients: Read API clients for organization
            read:my_org:configuration: Read organization configuration
            read:my_org:details: Read organization details
            read:my_org:domains: Read domains for organization
            read:my_org:identity_providers: Read identity providers for organization
            read:my_org:identity_providers_provisioning: Read provisioning configuration for identity provider
            read:my_org:identity_providers_scim_tokens: List the provisioning SCIM tokens for this identity provider
            read:my_org:member_invitations: List member invitations for organization
            read:my_org:member_roles: List Roles for members in organization
            read:my_org:members: List members for organization
            read:my_org:permissions: Read permissions for a user
            read:my_org:user_stores: Read user stores for an organization
            update:my_org:details: Update organization details
            update:my_org:domains: Update domain for organization
            update:my_org:identity_providers: Update identity provider for organization
            update:my_org:identity_providers_detach: Detach identity provider from organization
            update:my_org:identity_providers_provisioning: Update provisioning configuration for identity provider
          tokenUrl: /oauth/token
          x-form-parameters:
            audience: /myorg-api/v1/
      type: oauth2

````