> ## Documentation Index
> Fetch the complete documentation index at: https://translations.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Actualizar parcialmente una conexión por id

> Actualice los detalles de una [conexión](https://auth0.com/docs/authenticate/identity-providers) específica, incluidas las propiedades de las opciones para la configuración del proveedor de identidad.

**Nota**: Si usa el parámetro `options`, se reemplazará todo el objeto `options`. Para evitar datos parciales u otros problemas, asegúrese de que todos los parámetros estén presentes al usar esta opción.


export const Scopes = ({scopes = []}) => {
  return <div>
      <div class="api-section-heading flex flex-col gap-y-4 w-full">
        <div class="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 class="api-section-heading-title flex-1 mb-0">Scopes</h4>
          <div class="flex items-center"></div>
        </div>
      </div>
      <div class="mt-4">
        <div class="space-y-4 whitespace-normal prose prose-sm prose-gray dark:prose-invert overflow-wrap-anywhere [&_*]:overflow-wrap-anywhere">
          <p class="whitespace-pre-line text-xs">
            {"Los alcances definen los permisos y los niveles de acceso para las solicitudes a la API y los tokens de autenticación."}
          </p>
        </div>
      </div>
      <div class="flex font-mono text-sm group/param-head param-head break-all relative mt-6" id="scopes-scopes">
        <div class="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div class="flex items-center flex-wrap gap-2">
            <div class="absolute -top-1.5">
              <a href="#scopes-scopes" class="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Ir al encabezado">
                ​
                <div class="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            {scopes.map((scope, index) => {
    return <span class="flex items-center px-2 py-0.5 rounded-md bg-gray-100/50 dark:bg-white/5 text-gray-600 dark:text-gray-200 font-medium break-all" style={{
      lineHeight: "1rem",
      fontSize: "0.75rem",
      fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace'
    }} data-component-part="field-info-pill" key={index}>
                  {scope}
                </span>;
  })}
          </div>
        </div>
      </div>
    </div>;
};

export const ApiReleaseLifecycle = ({releaseLifecycle = "GA"}) => {
  const lifecycleMap = {
    ea: "Acceso Anticipado",
    ga: "Disponible Generalmente",
    deprecated: "Obsoleto",
    planned: "Planificado",
    beta: "Beta"
  };
  const LIFECYCLE_THEMES = {
    info: {
      light: {
        bg: "lab(91.896% .077188 -6.94053)",
        text: "lab(36.091% 25.9241 -68.0384)"
      },
      dark: {
        bg: "lab(16.0426% 6.71726 -27.2409)",
        text: "lab(72.6029% 4.08953 -41.9669)"
      }
    },
    secondary: {
      light: {
        bg: "lab(90.8548% 11.3355 8.01476)",
        text: "lab(47.5286% 56.4238 43.4706)"
      },
      dark: {
        bg: "lab(16.3609% 37.191 25.6346)",
        text: "lab(71.881% 41.5 29.4839)"
      }
    },
    danger: {
      light: {
        bg: "lab(94.7916% -.0000298023 0)",
        text: "lab(54.3656% 0 -.0000119209)"
      },
      dark: {
        bg: "lab(13.232% 0 0)",
        text: "lab(51.6164% 0 0)"
      }
    }
  };
  const LIFECYCLE_THEME_MAP = {
    ea: "info",
    ga: "info",
    beta: "info",
    deprecated: "secondary",
    planned: "danger"
  };
  const lifecycle = releaseLifecycle.toLocaleLowerCase();
  const lifecycleText = lifecycleMap[lifecycle];
  if (!lifecycleText) {
    return null;
  }
  const theme = LIFECYCLE_THEMES[LIFECYCLE_THEME_MAP[lifecycle]];
  return <div>
      <div className="api-section-heading flex flex-col gap-y-4 w-full">
        <div className="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 className="api-section-heading-title flex-1 mb-0">Ciclo de Vida de la Versión</h4>
        </div>
      </div>
      <div className="flex font-mono text-sm group/param-head param-head break-all relative mt-2.5" id="releaselifecycle-lifecycle">
        <div className="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div className="flex items-center flex-wrap gap-2">
            <div className="absolute -top-1.5">
              <a href="#releaselifecycle-lifecycle" className="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Navegar al encabezado">
                <div className="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            <span className="inline-flex items-center w-fit font-medium gap-1 py-0.5 px-2 rounded-md" style={{
    lineHeight: "1rem",
    fontSize: "0.75rem",
    fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace',
    backgroundColor: `light-dark(${theme.light.bg}, ${theme.dark.bg})`,
    color: `light-dark(${theme.light.text}, ${theme.dark.text})`,
    borderColor: `light-dark(color-mix(in oklab, ${theme.light.text} 25%, transparent), color-mix(in oklab, ${theme.dark.text} 25%, transparent))`
  }}>
              {lifecycleText}
            </span>
          </div>
        </div>
      </div>
    </div>;
};

<ApiReleaseLifecycle releaseLifecycle="GA" />

<Scopes scopes={["update:connections"]} />


## OpenAPI

````yaml es/docs/oas/management/v2/management-api-oas.json PATCH /connections/{id}
openapi: 3.1.0
info:
  contact:
    name: Auth0 Support
    url: https://support.auth0.com
  description: Auth0 Management API v2.
  termsOfService: https://auth0.com/web-terms/
  title: Auth0 Management API
  version: '2.0'
servers:
  - url: https://{tenantDomain}/api/v2
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Dominio del Tenant de Auth0
security:
  - bearerAuth: []
externalDocs:
  description: Documentación de Auth0 Management API
  url: https://auth0.com/docs/api/management/v2/
paths:
  /connections/{id}:
    patch:
      tags:
        - connections
      summary: Actualizar una conexión
      description: >
        Actualice los detalles de una
        [conexión](https://auth0.com/docs/authenticate/identity-providers)
        específica, incluidas las propiedades de las opciones para la
        configuración del proveedor de identidad.


        **Nota**: Si usa el parámetro `options`, se reemplazará todo el objeto
        `options`. Para evitar datos parciales u otros problemas, asegúrese de
        que todos los parámetros estén presentes al usar esta opción.
      operationId: patch_connections_by_id
      parameters:
        - description: El id de la conexión que se va a actualizar
          in: path
          name: id
          required: true
          schema:
            type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateConnectionRequestContent'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/UpdateConnectionRequestContent'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UpdateConnectionResponseContent'
          description: La conexión se actualizó.
        '400':
          description: URI de solicitud no válido. El mensaje variará según la causa.
          x-description-1: Invalid request body. The message will vary depending on the cause.
          x-description-10: The action_id field value cannot be empty, null or undefined
          x-description-11: The provided custom password hash action id does not exist
          x-description-12: >-
            The provided action does not support the password hash migration
            trigger
          x-description-13: >-
            The provided action must be deployed to be used for password hash
            migration
          x-description-2: >-
            This database contains users. You cannot change
            "options.enabledDatabaseCustomization" setting.
          x-description-3: Your account is not allowed to set options.set_user_root_attributes
          x-description-4: >-
            The Azure AD common endpoint cannot be enabled for this connection
            when SCIM is enabled.
          x-description-5: >-
            The Google Workspace Users API (options.api_enable_users) cannot be
            disabled for this connection when inbound directory provisioning is
            enabled.
          x-description-6: >-
            The Groups extended attribute (options.ext_groups) cannot be
            disabled for this connection when inbound directory provisioning for
            groups is enabled.
          x-description-7: >-
            options.set_user_root_attributes can be set only for enterprise
            connections, social connections or custom database connections
            (using external users store)
          x-description-8: >-
            custom_password_hash option cannot be set because the universal
            password hash feature is not enabled for this tenant
          x-description-9: >-
            The custom_password_hash option is only available for database
            connections
        '401':
          description: Token no válido.
          x-description-1: Client is not global.
          x-description-2: Invalid signature received for JSON Web Token validation
        '403':
          description: >-
            scope insuficiente; se requiere uno de los siguientes:
            update:connections
        '404':
          description: La conexión no existe
        '409':
          description: La tupla name/client_id ya se ha utilizado para otra conexión
        '429':
          description: >-
            Demasiadas solicitudes. Revise los encabezados X-RateLimit-Limit,
            X-RateLimit-Remaining y X-RateLimit-Reset.
      security:
        - bearerAuth: []
        - oAuth2ClientCredentials:
            - update:connections
      x-codeSamples:
        - label: Update a connection
          lang: go
          source: |
            package example

            import (
                context "context"

                management "github.com/auth0/go-auth0/management/management"
                client "github.com/auth0/go-auth0/management/management/client"
                option "github.com/auth0/go-auth0/management/management/option"
            )

            func do() {
                client := client.NewClient(
                    option.WithToken(
                        "<token>",
                    ),
                )
                request := &management.UpdateConnectionRequestContent{}
                client.Connections.Update(
                    context.TODO(),
                    "id",
                    request,
                )
            }
        - label: Update a connection
          lang: typescript
          source: |
            import { ManagementClient } from "auth0";

            async function main() {
                const client = new ManagementClient({
                    token: "<token>",
                });
                await client.connections.update("id", {});
            }
            main();
        - label: Update a connection
          lang: javascript
          source: |
            import { ManagementClient } from "auth0";

            async function main() {
                const client = new ManagementClient({
                    token: "<token>",
                });
                await client.connections.update("id", {});
            }
            main();
components:
  schemas:
    UpdateConnectionRequestContent:
      additionalProperties: false
      minProperties: 1
      properties:
        authentication:
          $ref: '#/components/schemas/ConnectionAuthenticationPurpose'
          x-release-lifecycle: GA
        connected_accounts:
          $ref: '#/components/schemas/ConnectionConnectedAccountsPurpose'
          x-release-lifecycle: GA
        display_name:
          description: >-
            El nombre de la conexión usado en la nueva experiencia de Universal
            Login. Si display_name no se incluye en la solicitud, el campo se
            sobrescribirá con el valor de name.
          maxLength: 128
          type: string
        enabled_clients:
          description: >-
            Propiedad OBSOLETA. Use el endpoint PATCH
            /v2/connections/{id}/clients para habilitar o deshabilitar la
            conexión para cualquier cliente.
          items:
            description: >-
              El client_id del cliente para el cual se debe habilitar la
              conexión
            format: client-id
            type: string
          type:
            - array
            - 'null'
          x-release-lifecycle: deprecated
        is_domain_connection:
          description: >-
            <code>true</code> la promociona a una conexión de nivel de dominio
            para que las aplicaciones de terceros puedan usarla.
            <code>false</code> no promociona la conexión, por lo que solo podrán
            usarla las aplicaciones de primera parte que tengan la conexión
            habilitada. (El valor predeterminado es <code>false</code>.)
          type: boolean
        metadata:
          $ref: '#/components/schemas/ConnectionsMetadata'
        options:
          $ref: '#/components/schemas/UpdateConnectionOptions'
        realms:
          description: >-
            Define los realm para los que se usará la conexión (es decir,
            dominios de correo electrónico). Si la lista está vacía o no se
            especifica la propiedad, el nombre de la conexión se agregará como
            realm.
          items:
            description: El realm al que pertenece esta conexión
            format: connection-realm
            type: string
          type: array
        show_as_button:
          description: >-
            Habilita la visualización de un botón para la conexión en la página
            de inicio de sesión (solo en la nueva experiencia). Si es false,
            solo podrá usarse mediante HRD. (El valor predeterminado es
            <code>false</code>.)
          type: boolean
      type: object
    UpdateConnectionResponseContent:
      additionalProperties: false
      properties:
        authentication:
          $ref: '#/components/schemas/ConnectionAuthenticationPurpose'
          x-release-lifecycle: GA
        connected_accounts:
          $ref: '#/components/schemas/ConnectionConnectedAccountsPurpose'
          x-release-lifecycle: GA
        display_name:
          description: Nombre de la conexión usado en la pantalla de inicio de sesión
          type: string
        enabled_clients:
          description: >-
            Propiedad obsoleta. Use el endpoint GET /connections/:id/clients
            para obtener los ID de los clientes para los que la conexión está
            habilitada
          items:
            description: El ID de cliente
            type: string
          type: array
          x-release-lifecycle: deprecated
        id:
          default: con_0000000000000001
          description: El identificador de la conexión
          type: string
        is_domain_connection:
          description: True si la conexión es de nivel de dominio
          type: boolean
        metadata:
          $ref: '#/components/schemas/ConnectionsMetadata'
        name:
          default: My connection
          description: El nombre de la conexión
          type: string
        options:
          $ref: '#/components/schemas/ConnectionOptions'
        realms:
          description: >-
            Define los realms para los que se usará la conexión (es decir,
            dominios de correo electrónico). Si el array está vacío o no se
            especifica la propiedad, el nombre de la conexión se agregará como
            realm.
          items:
            description: El realm al que pertenece esta conexión
            format: connection-realm
            type: string
          type: array
        show_as_button:
          description: >-
            Permite mostrar un botón para la conexión en la pantalla de inicio
            de sesión (solo en la nueva experiencia). Si es false, solo se podrá
            usar mediante HRD.
          type: boolean
        strategy:
          default: auth0
          description: El tipo de la conexión, relacionado con el proveedor de identidad
          type: string
      type: object
    ConnectionAuthenticationPurpose:
      additionalProperties: false
      description: >-
        Configure el propósito de una conexión para usarla en la autenticación
        durante el inicio de sesión.
      properties:
        active:
          type: boolean
      required:
        - active
      type: object
      x-release-lifecycle: GA
    ConnectionConnectedAccountsPurpose:
      additionalProperties: false
      description: >-
        Configure el propósito de una conexión para usarla con cuentas
        conectadas y Token Vault.
      properties:
        active:
          type: boolean
        cross_app_access:
          type: boolean
      required:
        - active
      type: object
      x-release-lifecycle: GA
    ConnectionsMetadata:
      additionalProperties:
        maxLength: 255
        type:
          - string
          - 'null'
      description: >-
        Metadatos asociados a la conexión en forma de objeto con valores de
        cadena (máx. 255 caracteres). Se permite un máximo de 10 propiedades de
        metadatos.
      maxProperties: 10
      type: object
    UpdateConnectionOptions:
      additionalProperties: true
      description: >-
        Las opciones de la conexión (dependen de la estrategia de conexión).
        Para actualizar estas opciones, debe estar presente el scope
        `update:connections_options`. Para verificar los cambios, incluya
        también el scope `read:connections_options`. Si no se especifica este
        scope, no podrá revisar el objeto actualizado.
      properties:
        api_enable_groups:
          type: boolean
          x-release-lifecycle: EA
        api_enable_users:
          type: boolean
        assertion_decryption_settings:
          $ref: '#/components/schemas/ConnectionAssertionDecryptionSettings'
        attributes:
          $ref: '#/components/schemas/ConnectionAttributes'
        authentication_methods:
          $ref: '#/components/schemas/ConnectionAuthenticationMethods'
        basic_profile:
          type: boolean
        configuration:
          additionalProperties:
            type:
              - string
              - 'null'
          description: Almacena configuraciones de solo cadena cifradas para las conexiones
          type:
            - object
            - 'null'
        customScripts:
          $ref: '#/components/schemas/ConnectionCustomScripts'
        disable_self_service_change_password:
          type: boolean
        dpop_signing_alg:
          $ref: '#/components/schemas/ConnectionDpopSigningAlgEnum'
        enable_script_context:
          description: >-
            Establézcalo en true para inyectar contexto en los script de Custom
            DB (advertencia: no se puede deshabilitar una vez habilitado)
          type: boolean
        enabledDatabaseCustomization:
          description: Establézcalo en true para usar un almacén de usuarios legado
          type: boolean
        ext_admin:
          type: boolean
        ext_agreed_terms:
          type: boolean
        ext_assigned_plans:
          type: boolean
        ext_groups:
          type: boolean
        ext_is_suspended:
          type: boolean
        ext_profile:
          type: boolean
        federated_connections_access_tokens:
          $ref: '#/components/schemas/ConnectionFederatedConnectionsAccessTokens'
        gateway_authentication:
          $ref: '#/components/schemas/ConnectionGatewayAuthentication'
        id_token_session_expiry_supported:
          $ref: '#/components/schemas/ConnectionIdTokenSessionExpirySupported'
        id_token_signed_response_algs:
          $ref: '#/components/schemas/ConnectionIdTokenSignedResponseAlgs'
        import_mode:
          description: >-
            Habilite esta opción si tiene un almacén de usuarios legado y desea
            migrar gradualmente esos usuarios al almacén de usuarios de Auth0
          type: boolean
        non_persistent_attrs:
          description: >-
            Una lista de campos de usuario que no deben almacenarse en la base
            de datos de Auth0
            (https://auth0.com/docs/security/data-security/denylist)
          items:
            type: string
          type:
            - array
            - 'null'
        passkey_options:
          $ref: '#/components/schemas/ConnectionPasskeyOptions'
        passwordPolicy:
          $ref: '#/components/schemas/ConnectionPasswordPolicyEnum'
        password_complexity_options:
          $ref: '#/components/schemas/ConnectionPasswordComplexityOptions'
        password_dictionary:
          $ref: '#/components/schemas/ConnectionPasswordDictionaryOptions'
        password_history:
          $ref: '#/components/schemas/ConnectionPasswordHistoryOptions'
        password_no_personal_info:
          $ref: '#/components/schemas/ConnectionPasswordNoPersonalInfoOptions'
        password_options:
          $ref: '#/components/schemas/ConnectionPasswordOptions'
          x-release-lifecycle: EA
        precedence:
          description: >-
            Orden de precedencia de los tipos de atributos. Si no se especifica
            la propiedad, se usará la precedencia predeterminada de los
            atributos.
          items:
            $ref: '#/components/schemas/ConnectionIdentifierPrecedenceEnum'
          minItems: 3
          type: array
        set_user_root_attributes:
          $ref: '#/components/schemas/ConnectionSetUserRootAttributesEnum'
        token_endpoint_auth_method:
          $ref: '#/components/schemas/ConnectionTokenEndpointAuthMethodEnum'
        token_endpoint_auth_signing_alg:
          $ref: '#/components/schemas/ConnectionTokenEndpointAuthSigningAlgEnum'
        token_endpoint_jwtca_aud_format:
          $ref: '#/components/schemas/ConnectionTokenEndpointJwtcaAudFormatEnumOIDC'
        upstream_params:
          $ref: '#/components/schemas/ConnectionUpstreamParams'
        validation:
          $ref: '#/components/schemas/ConnectionValidationOptions'
      type:
        - object
        - 'null'
    ConnectionOptions:
      additionalProperties: true
      description: >-
        Para devolver opciones en la respuesta, debe estar presente el scope
        `read:connections_options`
      type: object
    ConnectionAssertionDecryptionSettings:
      additionalProperties: false
      description: Configuración para el descifrado de aserciones SAML.
      properties:
        algorithm_exceptions:
          description: >-
            Una lista de algoritmos inseguros permitidos para el descifrado de
            aserciones SAML.
          items:
            maxLength: 100
            minLength: 1
            type: string
          type: array
        algorithm_profile:
          $ref: >-
            #/components/schemas/ConnectionAssertionDecryptionAlgorithmProfileEnum
      required:
        - algorithm_profile
      type: object
    ConnectionAttributes:
      additionalProperties: false
      description: Configuración de atributos
      minProperties: 1
      properties:
        email:
          $ref: '#/components/schemas/EmailAttribute'
        phone_number:
          $ref: '#/components/schemas/PhoneAttribute'
        username:
          $ref: '#/components/schemas/UsernameAttribute'
      type: object
    ConnectionAuthenticationMethods:
      additionalProperties: false
      description: Opciones para habilitar métodos de autenticación.
      properties:
        email_otp:
          $ref: '#/components/schemas/ConnectionEmailOtpAuthenticationMethod'
          x-release-lifecycle: EA
        passkey:
          $ref: '#/components/schemas/ConnectionPasskeyAuthenticationMethod'
        password:
          $ref: '#/components/schemas/ConnectionPasswordAuthenticationMethod'
        phone_otp:
          $ref: '#/components/schemas/ConnectionPhoneOtpAuthenticationMethod'
          x-release-lifecycle: EA
      type:
        - object
        - 'null'
    ConnectionCustomScripts:
      additionalProperties: true
      description: >-
        Mapa de scripts usados para integrarse con una base de datos
        personalizada.
      properties:
        change_email:
          minLength: 1
          type: string
        change_password:
          minLength: 1
          type: string
        change_phone_number:
          minLength: 1
          type: string
        change_username:
          minLength: 1
          type: string
        create:
          minLength: 1
          type: string
        delete:
          minLength: 1
          type: string
        get_user:
          minLength: 1
          type: string
        login:
          minLength: 1
          type: string
        verify:
          minLength: 1
          type: string
      type: object
    ConnectionDpopSigningAlgEnum:
      description: Algoritmo usado para firmar el JWT de prueba de DPoP.
      enum:
        - ES256
        - ES384
        - ES512
        - Ed25519
      type: string
      x-merge-priority: -5
    ConnectionFederatedConnectionsAccessTokens:
      additionalProperties: false
      description: Tokens de acceso de conexiones federadas
      properties:
        active:
          description: >-
            Habilita la recopilación de tokens de actualización y tokens de
            acceso para conexiones federadas
          type: boolean
      type:
        - object
        - 'null'
    ConnectionGatewayAuthentication:
      additionalProperties: true
      description: >-
        Configuración de autenticación basada en token que se aplicará cuando la
        conexión use una estrategia sms.
      properties:
        audience:
          description: La audiencia que se agregará a la carga útil del JWT.
          type: string
        method:
          description: El tipo de encabezado Authorization.
          type: string
        secret:
          description: El secreto que se utilizará para firmar tokens.
          type: string
        secret_base64_encoded:
          description: >-
            Establézcalo en true si el secreto proporcionado está codificado en
            base64.
          type: boolean
        subject:
          description: El asunto que se agregará a la carga útil del JWT.
          type: string
      required:
        - method
        - audience
        - secret
      type:
        - object
        - 'null'
    ConnectionIdTokenSessionExpirySupported:
      description: >-
        Indica si el Proveedor de identidad admite el vencimiento de la sesión
        mediante el id_token. Si es true, el sistema usará el claim
        session_expiry del id_token para determinar el vencimiento de la sesión.
      type: boolean
      x-merge-priority: -5
      x-release-lifecycle: GA
    ConnectionIdTokenSignedResponseAlgs:
      description: Lista de algoritmos permitidos para verificar los tokens de ID.
      items:
        $ref: '#/components/schemas/ConnectionIdTokenSignedResponseAlgEnum'
      type:
        - array
        - 'null'
      x-merge-priority: -5
    ConnectionPasskeyOptions:
      additionalProperties: false
      description: Opciones para el método de autenticación con clave de acceso
      properties:
        challenge_ui:
          $ref: '#/components/schemas/ConnectionPasskeyChallengeUIEnum'
        local_enrollment_enabled:
          description: >-
            Habilita o deshabilita la pantalla de inscripción de una clave de
            acceso local cuando el usuario se autentica con una clave de acceso
            entre dispositivos para la conexión.
          type: boolean
        progressive_enrollment_enabled:
          description: >-
            Habilita o deshabilita la inscripción progresiva de claves de acceso
            para la conexión.
          type: boolean
      type:
        - object
        - 'null'
    ConnectionPasswordPolicyEnum:
      description: Nivel de seguridad de la contraseña
      enum:
        - none
        - low
        - fair
        - good
        - excellent
        - null
      type:
        - string
        - 'null'
    ConnectionPasswordComplexityOptions:
      additionalProperties: false
      description: Opciones de complejidad de la contraseña
      properties:
        min_length:
          description: Longitud mínima de la contraseña
          maximum: 128
          minimum: 1
          type: integer
      type:
        - object
        - 'null'
    ConnectionPasswordDictionaryOptions:
      additionalProperties: false
      description: Opciones de la política de diccionario de contraseñas
      properties:
        dictionary:
          description: Diccionario de contraseñas Custom. Una matriz de hasta 200 entradas.
          items:
            description: >-
              Entrada del diccionario de contraseñas Custom. Máximo 50
              caracteres.
            maxLength: 50
            type: string
          type: array
        enable:
          type: boolean
      required:
        - enable
      type:
        - object
        - 'null'
    ConnectionPasswordHistoryOptions:
      additionalProperties: false
      description: Opciones de la política de historial de contraseñas
      properties:
        enable:
          type: boolean
        size:
          maximum: 24
          minimum: 0
          type: integer
      required:
        - enable
      type:
        - object
        - 'null'
    ConnectionPasswordNoPersonalInfoOptions:
      additionalProperties: false
      description: Opciones de la política sobre información personal en contraseñas
      properties:
        enable:
          type: boolean
      required:
        - enable
      type:
        - object
        - 'null'
    ConnectionPasswordOptions:
      additionalProperties: false
      description: >-
        Opciones de la política de contraseñas para la configuración de la
        política flexible de contraseñas
      properties:
        complexity:
          $ref: '#/components/schemas/ConnectionPasswordOptionsComplexity'
        dictionary:
          $ref: '#/components/schemas/ConnectionPasswordOptionsDictionary'
        history:
          $ref: '#/components/schemas/ConnectionPasswordOptionsHistory'
        profile_data:
          $ref: '#/components/schemas/ConnectionPasswordOptionsProfileData'
      type: object
      x-release-lifecycle: EA
    ConnectionIdentifierPrecedenceEnum:
      description: Orden de precedencia de los tipos de atributo
      enum:
        - email
        - phone_number
        - username
      type: string
    ConnectionSetUserRootAttributesEnum:
      default: on_each_login
      description: >-
        Cuando es true y se usa un IdP externo, este indicador determina si se
        actualizan los atributos 'name', 'given_name', 'family_name', 'nickname'
        y 'picture'. Además, también determina si se crea el usuario cuando no
        existe previamente. Los valores posibles son 'on_each_login' (valor
        predeterminado: configura la conexión para crear automáticamente al
        usuario si es necesario y actualizar los atributos raíz desde el IdP
        externo en cada inicio de sesión. Cuando se usa esta configuración, los
        atributos raíz no pueden actualizarse de forma independiente),
        'on_first_login' (configura la conexión para crear al usuario y
        establecer los atributos raíz solo en el primer inicio de sesión, lo que
        permite actualizarlos de forma independiente a partir de entonces) y
        'never_on_login' (configura la conexión para no crear al usuario ni
        establecer los atributos raíz desde el IdP externo, lo que permite
        actualizarlos de forma independiente).
      enum:
        - on_each_login
        - on_first_login
        - never_on_login
      type: string
    ConnectionTokenEndpointAuthMethodEnum:
      description: >-
        Método de autenticación usado en el endpoint de token del Proveedor de
        identidad. 'client_secret_post' envía las credenciales en el cuerpo de
        la solicitud; 'private_key_jwt' usa una aserción JWT firmada para una
        mayor seguridad.
      enum:
        - client_secret_post
        - private_key_jwt
      type:
        - string
        - 'null'
      x-merge-priority: -5
    ConnectionTokenEndpointAuthSigningAlgEnum:
      description: Algoritmo usado para firmar client_assertions.
      enum:
        - ES256
        - ES384
        - PS256
        - PS384
        - RS256
        - RS384
        - RS512
      type:
        - string
        - 'null'
      x-merge-priority: -5
    ConnectionTokenEndpointJwtcaAudFormatEnumOIDC:
      description: >-
        Especifica el formato del claim aud (audiencia) incluido en el JWT usado
        para la autenticación del cliente en el endpoint de token. Los valores
        aceptados son: 'issuer' (el claim aud se establece en la URL del issuer
        de OIDC) o 'token_endpoint' (el claim aud se establece en la URL del
        endpoint de token).
      enum:
        - issuer
        - token_endpoint
      type: string
      x-merge-priority: -5
    ConnectionUpstreamParams:
      additionalProperties:
        $ref: '#/components/schemas/ConnectionUpstreamAdditionalProperties'
      description: Opciones para agregar parámetros a la solicitud al IdP ascendente
      type:
        - object
        - 'null'
    ConnectionValidationOptions:
      additionalProperties: false
      description: Opciones de validación
      properties:
        username:
          $ref: '#/components/schemas/ConnectionUsernameValidationOptions'
      type:
        - object
        - 'null'
    ConnectionAssertionDecryptionAlgorithmProfileEnum:
      description: El perfil de algoritmo que se usará para descifrar aserciones SAML.
      enum:
        - v2026-1
      type: string
    EmailAttribute:
      additionalProperties: false
      description: Configuración del atributo de correo electrónico para los usuarios.
      properties:
        identifier:
          $ref: '#/components/schemas/ConnectionAttributeIdentifier'
        profile_required:
          description: Determina si la propiedad debe ser obligatoria para los usuarios
          type: boolean
        signup:
          $ref: '#/components/schemas/SignupVerified'
        unique:
          description: Determina si el atributo es único en una conexión determinada
          type: boolean
        verification_method:
          $ref: '#/components/schemas/VerificationMethodEnum'
      type: object
    PhoneAttribute:
      additionalProperties: false
      description: Configuración del atributo de número de teléfono para los usuarios.
      properties:
        identifier:
          $ref: '#/components/schemas/ConnectionAttributeIdentifier'
        profile_required:
          description: Determina si la propiedad debe ser obligatoria para los usuarios
          type: boolean
        signup:
          $ref: '#/components/schemas/SignupVerified'
      type: object
    UsernameAttribute:
      additionalProperties: false
      description: Configuración del atributo username para los usuarios.
      properties:
        identifier:
          $ref: '#/components/schemas/ConnectionAttributeIdentifier'
        profile_required:
          description: Determina si la propiedad debe ser obligatoria para los usuarios
          type: boolean
        signup:
          $ref: '#/components/schemas/SignupSchema'
        validation:
          $ref: '#/components/schemas/UsernameValidation'
      type: object
    ConnectionEmailOtpAuthenticationMethod:
      additionalProperties: false
      description: Habilitación de la autenticación por OTP por correo electrónico
      properties:
        enabled:
          description: Determina si la OTP por correo electrónico está habilitada
          type: boolean
      type: object
      x-release-lifecycle: EA
    ConnectionPasskeyAuthenticationMethod:
      additionalProperties: false
      description: Habilitación de la autenticación con clave de acceso
      properties:
        enabled:
          description: Determina si las claves de acceso están habilitadas
          type: boolean
      type: object
    ConnectionPasswordAuthenticationMethod:
      additionalProperties: false
      description: Habilitación de la autenticación con contraseña
      properties:
        api_behavior:
          $ref: '#/components/schemas/ConnectionApiBehaviorEnum'
          x-release-lifecycle: EA
        enabled:
          description: Determina si las contraseñas están habilitadas
          type: boolean
        signup_behavior:
          $ref: '#/components/schemas/ConnectionSignupBehaviorEnum'
          x-release-lifecycle: EA
      type: object
    ConnectionPhoneOtpAuthenticationMethod:
      additionalProperties: false
      description: Habilitación de la autenticación OTP por teléfono
      properties:
        enabled:
          description: Determina si la OTP por teléfono está habilitada
          type: boolean
      type: object
      x-release-lifecycle: EA
    ConnectionIdTokenSignedResponseAlgEnum:
      description: Algoritmo permitido para verificar los tokens de ID.
      enum:
        - ES256
        - ES384
        - PS256
        - PS384
        - RS256
        - RS384
        - RS512
      type: string
      x-merge-priority: -5
    ConnectionPasskeyChallengeUIEnum:
      description: >-
        Controla la interfaz de usuario que se usa para desafiar al usuario con
        su clave de acceso.
      enum:
        - both
        - autofill
        - button
      type: string
    ConnectionPasswordOptionsComplexity:
      additionalProperties: false
      description: Configuración de los requisitos de complejidad de la contraseña
      properties:
        character_type_rule:
          $ref: '#/components/schemas/PasswordCharacterTypeRulePolicyEnum'
        character_types:
          description: >-
            Tipos de caracteres obligatorios que deben estar presentes en las
            contraseñas. Opciones válidas: mayúsculas, minúsculas, número,
            carácter especial
          items:
            $ref: '#/components/schemas/PasswordCharacterTypeEnum'
          type: array
        identical_characters:
          $ref: '#/components/schemas/PasswordIdenticalCharactersPolicyEnum'
        max_length_exceeded:
          $ref: '#/components/schemas/PasswordMaxLengthExceededPolicyEnum'
        min_length:
          description: Longitud mínima requerida de la contraseña (1-72 caracteres)
          maximum: 72
          minimum: 1
          type: integer
        sequential_characters:
          $ref: '#/components/schemas/PasswordSequentialCharactersPolicyEnum'
      type: object
    ConnectionPasswordOptionsDictionary:
      additionalProperties: false
      description: >-
        Política de restricción de contraseñas basada en diccionario para evitar
        contraseñas comunes
      properties:
        active:
          description: >-
            Habilita la comprobación de diccionario para evitar el uso de
            contraseñas comunes y palabras personalizadas bloqueadas
          type: boolean
        custom:
          description: >-
            Array de palabras personalizadas que se bloquearán en las
            contraseñas. Máximo 200 elementos, de hasta 50 caracteres cada uno
          items:
            maxLength: 50
            type: string
          type: array
        default:
          $ref: '#/components/schemas/PasswordDefaultDictionariesEnum'
      type: object
    ConnectionPasswordOptionsHistory:
      additionalProperties: false
      description: >-
        Configuración de la política del historial de contraseñas para evitar la
        reutilización de contraseñas
      properties:
        active:
          description: >-
            Habilita la comprobación del historial de contraseñas para evitar
            que los usuarios reutilicen contraseñas recientes
          type: boolean
        size:
          description: >-
            Número de contraseñas anteriores que se deben recordar para evitar
            su reutilización (1-24)
          maximum: 24
          minimum: 1
          type: integer
      type: object
    ConnectionPasswordOptionsProfileData:
      additionalProperties: false
      description: >-
        Política de restricción de información personal para evitar el uso de
        datos del perfil en las contraseñas
      properties:
        active:
          description: >-
            Evita que los usuarios incluyan datos del perfil (como el nombre o
            el correo electrónico) en sus contraseñas
          type: boolean
        blocked_fields:
          description: Campos de perfil bloqueados. Un array de hasta 12 entradas.
          items:
            description: Entrada de campos de perfil bloqueados. Máximo 100 caracteres.
            maxLength: 100
            type: string
          type: array
      type: object
    ConnectionUpstreamAdditionalProperties:
      oneOf:
        - $ref: '#/components/schemas/ConnectionUpstreamAlias'
        - $ref: '#/components/schemas/ConnectionUpstreamValue'
      type: object
    ConnectionUsernameValidationOptions:
      additionalProperties: false
      properties:
        max:
          maximum: 128
          type: integer
        min:
          minimum: 1
          type: integer
      required:
        - max
        - min
      type:
        - object
        - 'null'
    ConnectionAttributeIdentifier:
      additionalProperties: false
      properties:
        active:
          description: Determina si el atributo se usa para la identificación
          type: boolean
        default_method:
          $ref: '#/components/schemas/DefaultMethodEmailIdentifierEnum'
          x-release-lifecycle: EA
      type: object
    SignupVerified:
      additionalProperties: false
      properties:
        status:
          $ref: '#/components/schemas/SignupStatusEnum'
        verification:
          $ref: '#/components/schemas/SignupVerification'
      type: object
    VerificationMethodEnum:
      enum:
        - link
        - otp
      type: string
    SignupSchema:
      additionalProperties: false
      properties:
        status:
          $ref: '#/components/schemas/SignupStatusEnum'
      type: object
    UsernameValidation:
      additionalProperties: false
      properties:
        allowed_types:
          $ref: '#/components/schemas/UsernameAllowedTypes'
        max_length:
          description: Longitud máxima permitida
          maximum: 128
          minimum: 1
          type: number
        min_length:
          description: Longitud mínima permitida
          maximum: 128
          minimum: 1
          type: number
      type: object
    ConnectionApiBehaviorEnum:
      description: >-
        Especifica el comportamiento de la API para la autenticación por
        contraseña
      enum:
        - required
        - optional
      type: string
      x-release-lifecycle: EA
    ConnectionSignupBehaviorEnum:
      description: >-
        Especifica el comportamiento de registro para la autenticación con
        contraseña
      enum:
        - allow
        - block
      type: string
      x-release-lifecycle: EA
    PasswordCharacterTypeRulePolicyEnum:
      description: >-
        Cuando está habilitado, las contraseñas deben contener al menos 3 de 4
        tipos de caracteres. Solo puede habilitarse cuando se especifican los 4
        tipos de caracteres
      enum:
        - all
        - three_of_four
      type: string
    PasswordCharacterTypeEnum:
      enum:
        - uppercase
        - lowercase
        - number
        - special
      type: string
    PasswordIdenticalCharactersPolicyEnum:
      description: >-
        Controla si se permiten caracteres consecutivos idénticos en las
        contraseñas
      enum:
        - allow
        - block
      type: string
    PasswordMaxLengthExceededPolicyEnum:
      description: >-
        Controla si las contraseñas que superan la longitud máxima se truncan o
        se rechazan
      enum:
        - truncate
        - error
      type: string
    PasswordSequentialCharactersPolicyEnum:
      description: Controla si se permiten caracteres secuenciales en las contraseñas
      enum:
        - allow
        - block
      type: string
    PasswordDefaultDictionariesEnum:
      description: >-
        Diccionario predeterminado que se usará para la validación de
        contraseñas. Opciones: "en_10k" (10.000 palabras comunes) o "en_100k"
        (100.000 palabras comunes)
      enum:
        - en_10k
        - en_100k
      type: string
    ConnectionUpstreamAlias:
      additionalProperties: false
      properties:
        alias:
          $ref: '#/components/schemas/ConnectionUpstreamAliasEnum'
      type: object
    ConnectionUpstreamValue:
      additionalProperties: false
      properties:
        value:
          type: string
      type: object
    DefaultMethodEmailIdentifierEnum:
      description: >-
        Método de autenticación predeterminado para el identificador de correo
        electrónico
      enum:
        - password
        - email_otp
      type: string
      x-release-lifecycle: EA
    SignupStatusEnum:
      enum:
        - required
        - optional
        - inactive
      type: string
    SignupVerification:
      additionalProperties: false
      properties:
        active:
          type: boolean
      type: object
    UsernameAllowedTypes:
      additionalProperties: false
      properties:
        email:
          type: boolean
        phone_number:
          type: boolean
      type: object
    ConnectionUpstreamAliasEnum:
      enum:
        - acr_values
        - audience
        - client_id
        - display
        - id_token_hint
        - login_hint
        - max_age
        - prompt
        - resource
        - response_mode
        - response_type
        - ui_locales
      type: string
  securitySchemes:
    bearerAuth:
      bearerFormat: jwt
      scheme: bearer
      type: http
    oAuth2ClientCredentials:
      flows:
        clientCredentials:
          scopes:
            create:actions: Create Actions
            create:authentication_methods: Create Authentication Methods
            create:client_credentials: Create Client Credentials
            create:client_grants: Create Client Grants
            create:clients: Create Clients
            create:connection_profiles: Create Connection Profiles
            create:connections: Create Connections
            create:connections_keys: Create Connections Keys
            create:current_user_device_credentials: Create Current User Device Credentials
            create:custom_domains: Create Custom Domains
            create:custom_signing_keys: Create Custom Signing Keys
            create:directory_provisionings: Create Directory Provisionings
            create:email_provider: Create Email Provider
            create:email_templates: Create Email Templates
            create:encryption_keys: Create Encryption Keys
            create:event_streams: Create Event Streams
            create:experimentation: Create Experimentation
            create:flows: Create Flows
            create:flows_vault_connections: Create Flows Vault Connections
            create:forms: Create Forms
            create:group_roles: Create Group Roles
            create:guardian_enrollment_tickets: Create Guardian Enrollment Tickets
            create:hooks: Create Hooks
            create:log_streams: Create Log Streams
            create:network_acls: Create Network Acls
            create:organization_client_grants: Create Organization Client Grants
            create:organization_connections: Create Organization Connections
            create:organization_discovery_domains: Create Organization Discovery Domains
            create:organization_group_roles: Create Organization Group Roles
            create:organization_invitations: Create Organization Invitations
            create:organization_member_roles: Create Organization Member Roles
            create:organization_members: Create Organization Members
            create:organizations: Create Organizations
            create:phone_providers: Create Phone Providers
            create:phone_templates: Create Phone Templates
            create:rate_limit_policies: Create Rate Limit Policies
            create:resource_servers: Create Resource Servers
            create:role_members: Create Role Members
            create:roles: Create Roles
            create:rules: Create Rules
            create:scim_config: Create Scim Config
            create:scim_token: Create Scim Token
            create:self_service_profiles: Create Self Service Profiles
            create:signing_keys: Create Signing Keys
            create:sso_access_tickets: Create Sso Access Tickets
            create:token_exchange_profiles: Create Token Exchange Profiles
            create:user_attribute_profiles: Create User Attribute Profiles
            create:user_tickets: Create User Tickets
            create:users: Create Users
            create:vdcs_templates: Create Vdcs Templates
            delete:actions: Delete Actions
            delete:anomaly_blocks: Delete Anomaly Blocks
            delete:authentication_methods: Delete Authentication Methods
            delete:branding: Delete Branding
            delete:client_credentials: Delete Client Credentials
            delete:client_grants: Delete Client Grants
            delete:clients: Delete Clients
            delete:connection_profiles: Delete Connection Profiles
            delete:connections: Delete Connections
            delete:current_user: Delete Current User
            delete:current_user_device_credentials: Delete Current User Device Credentials
            delete:custom_domains: Delete Custom Domains
            delete:custom_signing_keys: Delete Custom Signing Keys
            delete:device_credentials: Delete Device Credentials
            delete:directory_provisionings: Delete Directory Provisionings
            delete:email_provider: Delete Email Provider
            delete:encryption_keys: Delete Encryption Keys
            delete:event_streams: Delete Event Streams
            delete:experimentation: Delete Experimentation
            delete:federated_connections_tokens: Delete Federated Connections Tokens
            delete:flows: Delete Flows
            delete:flows_executions: Delete Flows Executions
            delete:flows_vault_connections: Delete Flows Vault Connections
            delete:forms: Delete Forms
            delete:grants: Delete Grants
            delete:group_roles: Delete Group Roles
            delete:groups: Delete Groups
            delete:guardian_enrollments: Delete Guardian Enrollments
            delete:hooks: Delete Hooks
            delete:log_streams: Delete Log Streams
            delete:network_acls: Delete Network Acls
            delete:organization_client_grants: Delete Organization Client Grants
            delete:organization_connections: Delete Organization Connections
            delete:organization_discovery_domains: Delete Organization Discovery Domains
            delete:organization_group_roles: Delete Organization Group Roles
            delete:organization_invitations: Delete Organization Invitations
            delete:organization_member_roles: Delete Organization Member Roles
            delete:organization_members: Delete Organization Members
            delete:organizations: Delete Organizations
            delete:phone_providers: Delete Phone Providers
            delete:phone_templates: Delete Phone Templates
            delete:rate_limit_policies: Delete Rate Limit Policies
            delete:refresh_tokens: Delete Refresh Tokens
            delete:resource_servers: Delete Resource Servers
            delete:role_members: Delete Role Members
            delete:roles: Delete Roles
            delete:rules: Delete Rules
            delete:rules_configs: Delete Rules Configs
            delete:scim_config: Delete Scim Config
            delete:scim_token: Delete Scim Token
            delete:self_service_profiles: Delete Self Service Profiles
            delete:sessions: Delete Sessions
            delete:sso_access_tickets: Delete Sso Access Tickets
            delete:token_exchange_profiles: Delete Token Exchange Profiles
            delete:user_attribute_profiles: Delete User Attribute Profiles
            delete:users: Delete Users
            delete:vdcs_templates: Delete Vdcs Templates
            read:actions: Read Actions
            read:anomaly_blocks: Read Anomaly Blocks
            read:attack_protection: Read Attack Protection
            read:authentication_methods: Read Authentication Methods
            read:branding: Read Branding
            read:client_credentials: Read Client Credentials
            read:client_grants: Read Client Grants
            read:client_keys: Read Client Keys
            read:client_summary: Read Client Summary
            read:clients: Read Clients
            read:connection_profiles: Read Connection Profiles
            read:connections: Read Connections
            read:connections_keys: Read Connections Keys
            read:current_user: Read Current User
            read:custom_domains: Read Custom Domains
            read:custom_signing_keys: Read Custom Signing Keys
            read:device_credentials: Read Device Credentials
            read:directory_provisionings: Read Directory Provisionings
            read:email_provider: Read Email Provider
            read:email_templates: Read Email Templates
            read:encryption_keys: Read Encryption Keys
            read:event_deliveries: Read Event Deliveries
            read:event_streams: Read Event Streams
            read:events: Read Events
            read:experimentation: Read Experimentation
            read:federated_connections_tokens: Read Federated Connections Tokens
            read:flows: Read Flows
            read:flows_executions: Read Flows Executions
            read:flows_vault_connections: Read Flows Vault Connections
            read:forms: Read Forms
            read:grants: Read Grants
            read:group_members: Read Group Members
            read:group_roles: Read Group Roles
            read:groups: Read Groups
            read:guardian_enrollments: Read Guardian Enrollments
            read:guardian_factors: Read Guardian Factors
            read:hooks: Read Hooks
            read:log_streams: Read Log Streams
            read:logs: Read Logs
            read:logs_users: Read Logs Users
            read:mfa_policies: Read Mfa Policies
            read:network_acls: Read Network Acls
            read:organization_client_grants: Read Organization Client Grants
            read:organization_connections: Read Organization Connections
            read:organization_discovery_domains: Read Organization Discovery Domains
            read:organization_group_roles: Read Organization Group Roles
            read:organization_groups: Read Organization Groups
            read:organization_invitations: Read Organization Invitations
            read:organization_member_effective_roles: Read Organization Member Effective Roles
            read:organization_member_role_source_groups: Read Organization Member Role Source Groups
            read:organization_member_roles: Read Organization Member Roles
            read:organization_members: Read Organization Members
            read:organizations: Read Organizations
            read:organizations_summary: Read Organizations Summary
            read:phone_providers: Read Phone Providers
            read:phone_templates: Read Phone Templates
            read:prompts: Read Prompts
            read:rate_limit_policies: Read Rate Limit Policies
            read:refresh_tokens: Read Refresh Tokens
            read:resource_servers: Read Resource Servers
            read:role_members: Read Role Members
            read:roles: Read Roles
            read:rules: Read Rules
            read:rules_configs: Read Rules Configs
            read:scim_config: Read Scim Config
            read:scim_token: Read Scim Token
            read:self_service_profile_custom_texts: Read Self Service Profile Custom Texts
            read:self_service_profiles: Read Self Service Profiles
            read:sessions: Read Sessions
            read:signing_keys: Read Signing Keys
            read:stats: Read Stats
            read:tenant_settings: Read Tenant Settings
            read:token_exchange_profiles: Read Token Exchange Profiles
            read:user_attribute_profiles: Read User Attribute Profiles
            read:user_effective_permissions: Read User Effective Permissions
            read:user_effective_roles: Read User Effective Roles
            read:user_idp_tokens: Read User Idp Tokens
            read:user_permission_source_roles: Read User Permission Source Roles
            read:user_role_source_groups: Read User Role Source Groups
            read:users: Read Users
            read:vdcs_templates: Read Vdcs Templates
            update:actions: Update Actions
            update:attack_protection: Update Attack Protection
            update:authentication_methods: Update Authentication Methods
            update:branding: Update Branding
            update:client_credentials: Update Client Credentials
            update:client_grants: Update Client Grants
            update:client_keys: Update Client Keys
            update:client_token_vault_privileged_access: Update Client Token Vault Privileged Access
            update:clients: Update Clients
            update:connection_profiles: Update Connection Profiles
            update:connections: Update Connections
            update:connections_keys: Update Connections Keys
            update:current_user_identities: Update Current User Identities
            update:current_user_metadata: Update Current User Metadata
            update:custom_domains: Update Custom Domains
            update:custom_signing_keys: Update Custom Signing Keys
            update:directory_provisionings: Update Directory Provisionings
            update:email_provider: Update Email Provider
            update:email_templates: Update Email Templates
            update:encryption_keys: Update Encryption Keys
            update:event_deliveries: Update Event Deliveries
            update:event_streams: Update Event Streams
            update:experimentation: Update Experimentation
            update:flows: Update Flows
            update:flows_vault_connections: Update Flows Vault Connections
            update:forms: Update Forms
            update:guardian_factors: Update Guardian Factors
            update:hooks: Update Hooks
            update:log_streams: Update Log Streams
            update:mfa_policies: Update Mfa Policies
            update:network_acls: Update Network Acls
            update:organization_connections: Update Organization Connections
            update:organization_discovery_domains: Update Organization Discovery Domains
            update:organizations: Update Organizations
            update:phone_providers: Update Phone Providers
            update:phone_templates: Update Phone Templates
            update:prompts: Update Prompts
            update:rate_limit_policies: Update Rate Limit Policies
            update:refresh_tokens: Update Refresh Tokens
            update:resource_servers: Update Resource Servers
            update:roles: Update Roles
            update:rules: Update Rules
            update:rules_configs: Update Rules Configs
            update:scim_config: Update Scim Config
            update:self_service_profile_custom_texts: Update Self Service Profile Custom Texts
            update:self_service_profiles: Update Self Service Profiles
            update:sessions: Update Sessions
            update:signing_keys: Update Signing Keys
            update:tenant_settings: Update Tenant Settings
            update:token_exchange_profiles: Update Token Exchange Profiles
            update:user_attribute_profiles: Update User Attribute Profiles
            update:users: Update Users
            update:users_app_metadata: Update Users App Metadata
            update:vdcs_templates: Update Vdcs Templates
          tokenUrl: /oauth/token/
          x-form-parameters:
            audience: /api/v2/
      type: oauth2

````