> ## Documentation Index
> Fetch the complete documentation index at: https://translations.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Modifier une connexion par id

> Met à jour les détails d’une [connexion](https://auth0.com/docs/authenticate/identity-providers) précise, y compris les propriétés des options pour la configuration du fournisseur d’identité.

**Remarque** : Si vous utilisez le paramètre `options`, l’objet `options` est remplacé dans son intégralité. Pour éviter des données partielles ou d’autres problèmes, assurez-vous que tous les paramètres sont présents lorsque vous utilisez cette option.


export const Scopes = ({scopes = []}) => {
  return <div>
      <div class="api-section-heading flex flex-col gap-y-4 w-full">
        <div class="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 class="api-section-heading-title flex-1 mb-0">Scopes</h4>
          <div class="flex items-center"></div>
        </div>
      </div>
      <div class="mt-4">
        <div class="space-y-4 whitespace-normal prose prose-sm prose-gray dark:prose-invert overflow-wrap-anywhere [&_*]:overflow-wrap-anywhere">
          <p class="whitespace-pre-line text-xs">
            {"Les scopes définissent les autorisations et les niveaux d’accès des requêtes d’API et des jetons d’authentification."}
          </p>
        </div>
      </div>
      <div class="flex font-mono text-sm group/param-head param-head break-all relative mt-6" id="scopes-scopes">
        <div class="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div class="flex items-center flex-wrap gap-2">
            <div class="absolute -top-1.5">
              <a href="#scopes-scopes" class="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Accéder à l’en-tête">
                ​
                <div class="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            {scopes.map((scope, index) => {
    return <span class="flex items-center px-2 py-0.5 rounded-md bg-gray-100/50 dark:bg-white/5 text-gray-600 dark:text-gray-200 font-medium break-all" style={{
      lineHeight: "1rem",
      fontSize: "0.75rem",
      fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace'
    }} data-component-part="field-info-pill" key={index}>
                  {scope}
                </span>;
  })}
          </div>
        </div>
      </div>
    </div>;
};

export const ApiReleaseLifecycle = ({releaseLifecycle = "GA"}) => {
  const lifecycleMap = {
    ea: "Accès anticipé",
    ga: "Généralement disponible",
    deprecated: "Obsolète",
    planned: "Planifié",
    beta: "Bêta"
  };
  const LIFECYCLE_THEMES = {
    info: {
      light: {
        bg: "lab(91.896% .077188 -6.94053)",
        text: "lab(36.091% 25.9241 -68.0384)"
      },
      dark: {
        bg: "lab(16.0426% 6.71726 -27.2409)",
        text: "lab(72.6029% 4.08953 -41.9669)"
      }
    },
    secondary: {
      light: {
        bg: "lab(90.8548% 11.3355 8.01476)",
        text: "lab(47.5286% 56.4238 43.4706)"
      },
      dark: {
        bg: "lab(16.3609% 37.191 25.6346)",
        text: "lab(71.881% 41.5 29.4839)"
      }
    },
    danger: {
      light: {
        bg: "lab(94.7916% -.0000298023 0)",
        text: "lab(54.3656% 0 -.0000119209)"
      },
      dark: {
        bg: "lab(13.232% 0 0)",
        text: "lab(51.6164% 0 0)"
      }
    }
  };
  const LIFECYCLE_THEME_MAP = {
    ea: "info",
    ga: "info",
    beta: "info",
    deprecated: "secondary",
    planned: "danger"
  };
  const lifecycle = releaseLifecycle.toLocaleLowerCase();
  const lifecycleText = lifecycleMap[lifecycle];
  if (!lifecycleText) {
    return null;
  }
  const theme = LIFECYCLE_THEMES[LIFECYCLE_THEME_MAP[lifecycle]];
  return <div>
      <div className="api-section-heading flex flex-col gap-y-4 w-full">
        <div className="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 className="api-section-heading-title flex-1 mb-0">Cycle de vie de la version</h4>
        </div>
      </div>
      <div className="flex font-mono text-sm group/param-head param-head break-all relative mt-2.5" id="releaselifecycle-lifecycle">
        <div className="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div className="flex items-center flex-wrap gap-2">
            <div className="absolute -top-1.5">
              <a href="#releaselifecycle-lifecycle" className="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Accéder à l'en-tête">
                <div className="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            <span className="inline-flex items-center w-fit font-medium gap-1 py-0.5 px-2 rounded-md" style={{
    lineHeight: "1rem",
    fontSize: "0.75rem",
    fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace',
    backgroundColor: `light-dark(${theme.light.bg}, ${theme.dark.bg})`,
    color: `light-dark(${theme.light.text}, ${theme.dark.text})`,
    borderColor: `light-dark(color-mix(in oklab, ${theme.light.text} 25%, transparent), color-mix(in oklab, ${theme.dark.text} 25%, transparent))`
  }}>
              {lifecycleText}
            </span>
          </div>
        </div>
      </div>
    </div>;
};

<ApiReleaseLifecycle releaseLifecycle="GA" />

<Scopes scopes={["update:connections"]} />


## OpenAPI

````yaml fr-CA/docs/oas/management/v2/management-api-oas.json PATCH /connections/{id}
openapi: 3.1.0
info:
  contact:
    name: Auth0 Support
    url: https://support.auth0.com
  description: Auth0 Management API v2.
  termsOfService: https://auth0.com/web-terms/
  title: Auth0 Management API
  version: '2.0'
servers:
  - url: https://{tenantDomain}/api/v2
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du locataire Auth0
security:
  - bearerAuth: []
externalDocs:
  description: Documentation de l’Auth0 Management API
  url: https://auth0.com/docs/api/management/v2/
paths:
  /connections/{id}:
    patch:
      tags:
        - connections
      summary: Mettre à jour une connexion
      description: "Met à jour les détails d’une [connexion](https://auth0.com/docs/authenticate/identity-providers) précise, y compris les propriétés des options pour la configuration du fournisseur d’identité.\n\n**Remarque**\_: Si vous utilisez le paramètre `options`, l’objet `options` est remplacé dans son intégralité. Pour éviter des données partielles ou d’autres problèmes, assurez-vous que tous les paramètres sont présents lorsque vous utilisez cette option.\n"
      operationId: patch_connections_by_id
      parameters:
        - description: L’id de la connexion à mettre à jour
          in: path
          name: id
          required: true
          schema:
            type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateConnectionRequestContent'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/UpdateConnectionRequestContent'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UpdateConnectionResponseContent'
          description: La connexion a été mise à jour.
        '400':
          description: URI de requête non valide. Le message varie selon la cause.
          x-description-1: Invalid request body. The message will vary depending on the cause.
          x-description-10: The action_id field value cannot be empty, null or undefined
          x-description-11: The provided custom password hash action id does not exist
          x-description-12: >-
            The provided action does not support the password hash migration
            trigger
          x-description-13: >-
            The provided action must be deployed to be used for password hash
            migration
          x-description-2: >-
            This database contains users. You cannot change
            "options.enabledDatabaseCustomization" setting.
          x-description-3: Your account is not allowed to set options.set_user_root_attributes
          x-description-4: >-
            The Azure AD common endpoint cannot be enabled for this connection
            when SCIM is enabled.
          x-description-5: >-
            The Google Workspace Users API (options.api_enable_users) cannot be
            disabled for this connection when inbound directory provisioning is
            enabled.
          x-description-6: >-
            The Groups extended attribute (options.ext_groups) cannot be
            disabled for this connection when inbound directory provisioning for
            groups is enabled.
          x-description-7: >-
            options.set_user_root_attributes can be set only for enterprise
            connections, social connections or custom database connections
            (using external users store)
          x-description-8: >-
            custom_password_hash option cannot be set because the universal
            password hash feature is not enabled for this tenant
          x-description-9: >-
            The custom_password_hash option is only available for database
            connections
        '401':
          description: Jeton invalide.
          x-description-1: Client is not global.
          x-description-2: Invalid signature received for JSON Web Token validation
        '403':
          description: "Scope insuffisant; l’un des scopes suivants est requis\_: update:connections"
        '404':
          description: La connexion n’existe pas
        '409':
          description: La paire name/client_id a déjà été utilisée pour une autre connexion
        '429':
          description: >-
            Trop de requêtes. Vérifiez les en-têtes X-RateLimit-Limit,
            X-RateLimit-Remaining et X-RateLimit-Reset.
      security:
        - bearerAuth: []
        - oAuth2ClientCredentials:
            - update:connections
      x-codeSamples:
        - label: Update a connection
          lang: go
          source: |
            package example

            import (
                context "context"

                management "github.com/auth0/go-auth0/management/management"
                client "github.com/auth0/go-auth0/management/management/client"
                option "github.com/auth0/go-auth0/management/management/option"
            )

            func do() {
                client := client.NewClient(
                    option.WithToken(
                        "<token>",
                    ),
                )
                request := &management.UpdateConnectionRequestContent{}
                client.Connections.Update(
                    context.TODO(),
                    "id",
                    request,
                )
            }
        - label: Update a connection
          lang: typescript
          source: |
            import { ManagementClient } from "auth0";

            async function main() {
                const client = new ManagementClient({
                    token: "<token>",
                });
                await client.connections.update("id", {});
            }
            main();
        - label: Update a connection
          lang: javascript
          source: |
            import { ManagementClient } from "auth0";

            async function main() {
                const client = new ManagementClient({
                    token: "<token>",
                });
                await client.connections.update("id", {});
            }
            main();
components:
  schemas:
    UpdateConnectionRequestContent:
      additionalProperties: false
      minProperties: 1
      properties:
        authentication:
          $ref: '#/components/schemas/ConnectionAuthenticationPurpose'
          x-release-lifecycle: GA
        connected_accounts:
          $ref: '#/components/schemas/ConnectionConnectedAccountsPurpose'
          x-release-lifecycle: GA
        display_name:
          description: >-
            Le nom de la connexion utilisé dans la nouvelle expérience Universal
            Login. Si display_name n’est pas inclus dans la requête, le champ
            sera remplacé par la valeur de name.
          maxLength: 128
          type: string
        enabled_clients:
          description: >-
            Propriété OBSOLÈTE. Utilisez le point de terminaison PATCH
            /v2/connections/{id}/clients pour activer ou désactiver la connexion
            pour n’importe quelle application.
          items:
            description: >-
              Le client_id de l’application pour laquelle la connexion doit être
              activée
            format: client-id
            type: string
          type:
            - array
            - 'null'
          x-release-lifecycle: deprecated
        is_domain_connection:
          description: "<code>true</code> promeut la connexion au niveau du domaine afin que les applications tierces puissent l’utiliser. <code>false</code> ne promeut pas la connexion, de sorte que seules les applications de première partie pour lesquelles la connexion est activée peuvent l’utiliser. (Par défaut\_: <code>false</code>.)"
          type: boolean
        metadata:
          $ref: '#/components/schemas/ConnectionsMetadata'
        options:
          $ref: '#/components/schemas/UpdateConnectionOptions'
        realms:
          description: >-
            Définit les realms pour lesquels la connexion sera utilisée (c.-à-d.
            les domaines de courriel). Si le tableau est vide ou que la
            propriété n’est pas spécifiée, le nom de la connexion sera ajouté
            comme realm.
          items:
            description: Le realm auquel cette connexion appartient
            format: connection-realm
            type: string
          type: array
        show_as_button:
          description: "Permet d’afficher un bouton pour la connexion sur la page de connexion (nouvelle expérience seulement). Si false, elle pourra être utilisée uniquement par HRD. (Par défaut\_: <code>false</code>.)"
          type: boolean
      type: object
    UpdateConnectionResponseContent:
      additionalProperties: false
      properties:
        authentication:
          $ref: '#/components/schemas/ConnectionAuthenticationPurpose'
          x-release-lifecycle: GA
        connected_accounts:
          $ref: '#/components/schemas/ConnectionConnectedAccountsPurpose'
          x-release-lifecycle: GA
        display_name:
          description: Nom de la connexion utilisé dans l’écran de connexion
          type: string
        enabled_clients:
          description: >-
            Propriété obsolète. Utilisez le point de terminaison GET
            /connections/:id/clients pour obtenir les id des applications pour
            lesquelles la connexion est activée
          items:
            description: L’ID client
            type: string
          type: array
          x-release-lifecycle: deprecated
        id:
          default: con_0000000000000001
          description: L’identifiant de la connexion
          type: string
        is_domain_connection:
          description: Vrai si la connexion est au niveau du domaine
          type: boolean
        metadata:
          $ref: '#/components/schemas/ConnectionsMetadata'
        name:
          default: My connection
          description: Le nom de la connexion
          type: string
        options:
          $ref: '#/components/schemas/ConnectionOptions'
        realms:
          description: >-
            Définit les realms pour lesquels la connexion sera utilisée (c.-à-d.
            les domaines de courriel). Si le tableau est vide ou si la propriété
            n’est pas spécifiée, le nom de la connexion sera ajouté comme realm.
          items:
            description: Le realm auquel appartient cette connexion
            format: connection-realm
            type: string
          type: array
        show_as_button:
          description: >-
            Active l’affichage d’un bouton pour la connexion sur la page de
            connexion (nouvelle expérience uniquement). Si false, elle sera
            utilisable uniquement via HRD.
          type: boolean
        strategy:
          default: auth0
          description: Le type de connexion, lié au fournisseur d’identité
          type: string
      type: object
    ConnectionAuthenticationPurpose:
      additionalProperties: false
      description: >-
        Configure l’usage d’une connexion à utiliser pour l’authentification
        lors de la connexion.
      properties:
        active:
          type: boolean
      required:
        - active
      type: object
      x-release-lifecycle: GA
    ConnectionConnectedAccountsPurpose:
      additionalProperties: false
      description: >-
        Configurez l’usage d’une connexion à utiliser pour Connected Accounts et
        Token Vault.
      properties:
        active:
          type: boolean
        cross_app_access:
          type: boolean
      required:
        - active
      type: object
      x-release-lifecycle: GA
    ConnectionsMetadata:
      additionalProperties:
        maxLength: 255
        type:
          - string
          - 'null'
      description: >-
        Métadonnées associées à la connexion sous la forme d’un objet contenant
        des valeurs de type chaîne (max. 255 caractères). Un maximum de 10
        propriétés de métadonnées est autorisé.
      maxProperties: 10
      type: object
    UpdateConnectionOptions:
      additionalProperties: true
      description: >-
        Les options de la connexion (elles dépendent de la stratégie de
        connexion). Pour mettre à jour ces options, le scope
        `update:connections_options` doit être présent. Pour vérifier vos
        modifications, incluez aussi le scope `read:connections_options`. Si ce
        scope n’est pas spécifié, vous ne pourrez pas examiner l’objet mis à
        jour.
      properties:
        api_enable_groups:
          type: boolean
          x-release-lifecycle: EA
        api_enable_users:
          type: boolean
        assertion_decryption_settings:
          $ref: '#/components/schemas/ConnectionAssertionDecryptionSettings'
        attributes:
          $ref: '#/components/schemas/ConnectionAttributes'
        authentication_methods:
          $ref: '#/components/schemas/ConnectionAuthenticationMethods'
        basic_profile:
          type: boolean
        configuration:
          additionalProperties:
            type:
              - string
              - 'null'
          description: >-
            Stocke uniquement des configurations de chaîne chiffrée pour les
            connexions
          type:
            - object
            - 'null'
        customScripts:
          $ref: '#/components/schemas/ConnectionCustomScripts'
        disable_self_service_change_password:
          type: boolean
        dpop_signing_alg:
          $ref: '#/components/schemas/ConnectionDpopSigningAlgEnum'
        enable_script_context:
          description: "Définissez cette valeur à true pour injecter le contexte dans les scripts de base de données personnalisés (avertissement\_: impossible de désactiver cette option une fois activée)"
          type: boolean
        enabledDatabaseCustomization:
          description: >-
            Définissez cette valeur à true pour utiliser un ancien répertoire
            d’utilisateurs
          type: boolean
        ext_admin:
          type: boolean
        ext_agreed_terms:
          type: boolean
        ext_assigned_plans:
          type: boolean
        ext_groups:
          type: boolean
        ext_is_suspended:
          type: boolean
        ext_profile:
          type: boolean
        federated_connections_access_tokens:
          $ref: '#/components/schemas/ConnectionFederatedConnectionsAccessTokens'
        gateway_authentication:
          $ref: '#/components/schemas/ConnectionGatewayAuthentication'
        id_token_session_expiry_supported:
          $ref: '#/components/schemas/ConnectionIdTokenSessionExpirySupported'
        id_token_signed_response_algs:
          $ref: '#/components/schemas/ConnectionIdTokenSignedResponseAlgs'
        import_mode:
          description: >-
            Activez cette option si vous avez un ancien répertoire
            d’utilisateurs et que vous souhaitez migrer graduellement ces
            utilisateurs vers le répertoire d’utilisateurs Auth0
          type: boolean
        non_persistent_attrs:
          description: >-
            Un tableau de champs utilisateur qui ne doivent pas être stockés
            dans la base de données Auth0
            (https://auth0.com/docs/security/data-security/denylist)
          items:
            type: string
          type:
            - array
            - 'null'
        passkey_options:
          $ref: '#/components/schemas/ConnectionPasskeyOptions'
        passwordPolicy:
          $ref: '#/components/schemas/ConnectionPasswordPolicyEnum'
        password_complexity_options:
          $ref: '#/components/schemas/ConnectionPasswordComplexityOptions'
        password_dictionary:
          $ref: '#/components/schemas/ConnectionPasswordDictionaryOptions'
        password_history:
          $ref: '#/components/schemas/ConnectionPasswordHistoryOptions'
        password_no_personal_info:
          $ref: '#/components/schemas/ConnectionPasswordNoPersonalInfoOptions'
        password_options:
          $ref: '#/components/schemas/ConnectionPasswordOptions'
          x-release-lifecycle: EA
        precedence:
          description: >-
            Ordre de priorité des types d’attributs. Si la propriété n’est pas
            spécifiée, l’ordre de priorité par défaut des attributs sera
            utilisé.
          items:
            $ref: '#/components/schemas/ConnectionIdentifierPrecedenceEnum'
          minItems: 3
          type: array
        set_user_root_attributes:
          $ref: '#/components/schemas/ConnectionSetUserRootAttributesEnum'
        token_endpoint_auth_method:
          $ref: '#/components/schemas/ConnectionTokenEndpointAuthMethodEnum'
        token_endpoint_auth_signing_alg:
          $ref: '#/components/schemas/ConnectionTokenEndpointAuthSigningAlgEnum'
        token_endpoint_jwtca_aud_format:
          $ref: '#/components/schemas/ConnectionTokenEndpointJwtcaAudFormatEnumOIDC'
        upstream_params:
          $ref: '#/components/schemas/ConnectionUpstreamParams'
        validation:
          $ref: '#/components/schemas/ConnectionValidationOptions'
      type:
        - object
        - 'null'
    ConnectionOptions:
      additionalProperties: true
      description: >-
        Pour renvoyer les options dans la réponse, le scope
        `read:connections_options` doit être présent
      type: object
    ConnectionAssertionDecryptionSettings:
      additionalProperties: false
      description: Paramètres de déchiffrement des assertions SAML.
      properties:
        algorithm_exceptions:
          description: >-
            Liste des algorithmes non sécurisés à autoriser pour le
            déchiffrement des assertions SAML.
          items:
            maxLength: 100
            minLength: 1
            type: string
          type: array
        algorithm_profile:
          $ref: >-
            #/components/schemas/ConnectionAssertionDecryptionAlgorithmProfileEnum
      required:
        - algorithm_profile
      type: object
    ConnectionAttributes:
      additionalProperties: false
      description: Configuration de l’attribut
      minProperties: 1
      properties:
        email:
          $ref: '#/components/schemas/EmailAttribute'
        phone_number:
          $ref: '#/components/schemas/PhoneAttribute'
        username:
          $ref: '#/components/schemas/UsernameAttribute'
      type: object
    ConnectionAuthenticationMethods:
      additionalProperties: false
      description: Options permettant d’activer les méthodes d’authentification.
      properties:
        email_otp:
          $ref: '#/components/schemas/ConnectionEmailOtpAuthenticationMethod'
          x-release-lifecycle: EA
        passkey:
          $ref: '#/components/schemas/ConnectionPasskeyAuthenticationMethod'
        password:
          $ref: '#/components/schemas/ConnectionPasswordAuthenticationMethod'
        phone_otp:
          $ref: '#/components/schemas/ConnectionPhoneOtpAuthenticationMethod'
          x-release-lifecycle: EA
      type:
        - object
        - 'null'
    ConnectionCustomScripts:
      additionalProperties: true
      description: >-
        Mappage des scripts utilisés pour l’intégration à une base de données
        personnalisée.
      properties:
        change_email:
          minLength: 1
          type: string
        change_password:
          minLength: 1
          type: string
        change_phone_number:
          minLength: 1
          type: string
        change_username:
          minLength: 1
          type: string
        create:
          minLength: 1
          type: string
        delete:
          minLength: 1
          type: string
        get_user:
          minLength: 1
          type: string
        login:
          minLength: 1
          type: string
        verify:
          minLength: 1
          type: string
      type: object
    ConnectionDpopSigningAlgEnum:
      description: Algorithme utilisé pour signer le JWT de preuve DPoP.
      enum:
        - ES256
        - ES384
        - ES512
        - Ed25519
      type: string
      x-merge-priority: -5
    ConnectionFederatedConnectionsAccessTokens:
      additionalProperties: false
      description: Jetons d’accès pour les connexions fédérées
      properties:
        active:
          description: >-
            Active la collecte des jetons d’actualisation et des jetons d’accès
            pour les connexions fédérées
          type: boolean
      type:
        - object
        - 'null'
    ConnectionGatewayAuthentication:
      additionalProperties: true
      description: >-
        Paramètres d’authentification fondée sur des jetons à appliquer lorsque
        la connexion utilise une stratégie sms.
      properties:
        audience:
          description: L’audience à ajouter au payload JWT.
          type: string
        method:
          description: Le type d’en-tête Authorization.
          type: string
        secret:
          description: Le secret à utiliser pour signer les jetons.
          type: string
        secret_base64_encoded:
          description: >-
            Définissez la valeur sur true si le secret fourni est encodé en
            base64.
          type: boolean
        subject:
          description: L’objet à ajouter au payload JWT.
          type: string
      required:
        - method
        - audience
        - secret
      type:
        - object
        - 'null'
    ConnectionIdTokenSessionExpirySupported:
      description: >-
        Indique si le fournisseur d’identité prend en charge l’expiration de
        session au moyen de l’id_token. Si la valeur est true, le système
        utilisera la revendication session_expiry dans l’id_token pour
        déterminer l’expiration de la session.
      type: boolean
      x-merge-priority: -5
      x-release-lifecycle: GA
    ConnectionIdTokenSignedResponseAlgs:
      description: Liste des algorithmes autorisés pour valider les ID tokens.
      items:
        $ref: '#/components/schemas/ConnectionIdTokenSignedResponseAlgEnum'
      type:
        - array
        - 'null'
      x-merge-priority: -5
    ConnectionPasskeyOptions:
      additionalProperties: false
      description: Options de la méthode d’authentification par clé d’accès
      properties:
        challenge_ui:
          $ref: '#/components/schemas/ConnectionPasskeyChallengeUIEnum'
        local_enrollment_enabled:
          description: >-
            Active ou désactive l’invite d’inscription d’une clé d’accès locale
            lorsque l’utilisateur s’authentifie à l’aide d’une clé d’accès
            interappareil pour la connexion.
          type: boolean
        progressive_enrollment_enabled:
          description: >-
            Active ou désactive l’inscription progressive des clés d’accès pour
            la connexion.
          type: boolean
      type:
        - object
        - 'null'
    ConnectionPasswordPolicyEnum:
      description: Niveau de force du mot de passe
      enum:
        - none
        - low
        - fair
        - good
        - excellent
        - null
      type:
        - string
        - 'null'
    ConnectionPasswordComplexityOptions:
      additionalProperties: false
      description: Options de complexité du mot de passe
      properties:
        min_length:
          description: Longueur minimale du mot de passe
          maximum: 128
          minimum: 1
          type: integer
      type:
        - object
        - 'null'
    ConnectionPasswordDictionaryOptions:
      additionalProperties: false
      description: Options de la stratégie de dictionnaire de mots de passe
      properties:
        dictionary:
          description: >-
            Dictionnaire de mots de passe personnalisé. Tableau de 200 entrées
            maximum.
          items:
            description: >-
              Entrée du dictionnaire de mots de passe personnalisé. 50
              caractères maximum.
            maxLength: 50
            type: string
          type: array
        enable:
          type: boolean
      required:
        - enable
      type:
        - object
        - 'null'
    ConnectionPasswordHistoryOptions:
      additionalProperties: false
      description: Options de la stratégie d’historique des mots de passe
      properties:
        enable:
          type: boolean
        size:
          maximum: 24
          minimum: 0
          type: integer
      required:
        - enable
      type:
        - object
        - 'null'
    ConnectionPasswordNoPersonalInfoOptions:
      additionalProperties: false
      description: >-
        Options de la stratégie relative aux renseignements personnels dans les
        mots de passe
      properties:
        enable:
          type: boolean
      required:
        - enable
      type:
        - object
        - 'null'
    ConnectionPasswordOptions:
      additionalProperties: false
      description: >-
        Options de stratégie de mot de passe pour la configuration de la
        stratégie de mot de passe flexible
      properties:
        complexity:
          $ref: '#/components/schemas/ConnectionPasswordOptionsComplexity'
        dictionary:
          $ref: '#/components/schemas/ConnectionPasswordOptionsDictionary'
        history:
          $ref: '#/components/schemas/ConnectionPasswordOptionsHistory'
        profile_data:
          $ref: '#/components/schemas/ConnectionPasswordOptionsProfileData'
      type: object
      x-release-lifecycle: EA
    ConnectionIdentifierPrecedenceEnum:
      description: Ordre de priorité des types d’attributs
      enum:
        - email
        - phone_number
        - username
      type: string
    ConnectionSetUserRootAttributesEnum:
      default: on_each_login
      description: >-
        Lorsqu’un IdP externe est utilisé, cet indicateur détermine si les
        attributs 'name', 'given_name', 'family_name', 'nickname' et 'picture'
        sont mis à jour. De plus, il détermine également si l’utilisateur est
        créé lorsqu’il n’existe pas déjà. Les valeurs possibles sont
        'on_each_login' (valeur par défaut : configure la connexion pour créer
        automatiquement l’utilisateur au besoin et mettre à jour les attributs
        racine à partir de l’IdP externe à chaque connexion de l’utilisateur.
        Lorsque ce paramètre est utilisé, les attributs racine ne peuvent pas
        être mis à jour indépendamment), 'on_first_login' (configure la
        connexion pour créer l’utilisateur et définir les attributs racine
        uniquement lors de la première connexion, ce qui permet de les mettre à
        jour indépendamment par la suite) et 'never_on_login' (configure la
        connexion pour ne pas créer l’utilisateur et ne pas définir les
        attributs racine à partir de l’IdP externe, ce qui permet de les mettre
        à jour indépendamment).
      enum:
        - on_each_login
        - on_first_login
        - never_on_login
      type: string
    ConnectionTokenEndpointAuthMethodEnum:
      description: >-
        Méthode d’authentification utilisée au point de terminaison de jeton du
        fournisseur d’identité. 'client_secret_post' envoie les identifiants
        dans le corps de la requête; 'private_key_jwt' utilise une assertion JWT
        signée pour une sécurité renforcée.
      enum:
        - client_secret_post
        - private_key_jwt
      type:
        - string
        - 'null'
      x-merge-priority: -5
    ConnectionTokenEndpointAuthSigningAlgEnum:
      description: Algorithme utilisé pour signer les client_assertions.
      enum:
        - ES256
        - ES384
        - PS256
        - PS384
        - RS256
        - RS384
        - RS512
      type:
        - string
        - 'null'
      x-merge-priority: -5
    ConnectionTokenEndpointJwtcaAudFormatEnumOIDC:
      description: "Spécifie le format de la revendication aud (audience) incluse dans le JWT utilisé pour l’authentification du client au point de terminaison de jeton. Les valeurs acceptées sont\_: 'issuer' (la revendication aud est définie sur l’URL de l’émetteur OIDC) ou 'token_endpoint' (la revendication aud est définie sur l’URL du point de terminaison de jeton)."
      enum:
        - issuer
        - token_endpoint
      type: string
      x-merge-priority: -5
    ConnectionUpstreamParams:
      additionalProperties:
        $ref: '#/components/schemas/ConnectionUpstreamAdditionalProperties'
      description: >-
        Options permettant d’ajouter des paramètres à la requête envoyée à l’IdP
        en amont
      type:
        - object
        - 'null'
    ConnectionValidationOptions:
      additionalProperties: false
      description: Options de validation
      properties:
        username:
          $ref: '#/components/schemas/ConnectionUsernameValidationOptions'
      type:
        - object
        - 'null'
    ConnectionAssertionDecryptionAlgorithmProfileEnum:
      description: Le profil d’algorithme à utiliser pour déchiffrer les assertions SAML.
      enum:
        - v2026-1
      type: string
    EmailAttribute:
      additionalProperties: false
      description: Configuration de l’attribut courriel pour les utilisateurs.
      properties:
        identifier:
          $ref: '#/components/schemas/ConnectionAttributeIdentifier'
        profile_required:
          description: >-
            Détermine si la propriété doit être obligatoire pour les
            utilisateurs
          type: boolean
        signup:
          $ref: '#/components/schemas/SignupVerified'
        unique:
          description: Détermine si l’attribut est unique dans une connexion donnée
          type: boolean
        verification_method:
          $ref: '#/components/schemas/VerificationMethodEnum'
      type: object
    PhoneAttribute:
      additionalProperties: false
      description: >-
        Configuration de l’attribut de numéro de téléphone pour les
        utilisateurs.
      properties:
        identifier:
          $ref: '#/components/schemas/ConnectionAttributeIdentifier'
        profile_required:
          description: >-
            Détermine si la propriété doit être obligatoire pour les
            utilisateurs.
          type: boolean
        signup:
          $ref: '#/components/schemas/SignupVerified'
      type: object
    UsernameAttribute:
      additionalProperties: false
      description: Configuration de l’attribut username pour les utilisateurs.
      properties:
        identifier:
          $ref: '#/components/schemas/ConnectionAttributeIdentifier'
        profile_required:
          description: >-
            Indique si cette propriété doit être obligatoire pour les
            utilisateurs.
          type: boolean
        signup:
          $ref: '#/components/schemas/SignupSchema'
        validation:
          $ref: '#/components/schemas/UsernameValidation'
      type: object
    ConnectionEmailOtpAuthenticationMethod:
      additionalProperties: false
      description: Activation de l’authentification par Email OTP
      properties:
        enabled:
          description: Détermine si l’authentification par Email OTP est activée
          type: boolean
      type: object
      x-release-lifecycle: EA
    ConnectionPasskeyAuthenticationMethod:
      additionalProperties: false
      description: Activation de l’authentification par clé d’accès
      properties:
        enabled:
          description: Détermine si les clés d’accès sont activées
          type: boolean
      type: object
    ConnectionPasswordAuthenticationMethod:
      additionalProperties: false
      description: Activation de l’authentification par mot de passe
      properties:
        api_behavior:
          $ref: '#/components/schemas/ConnectionApiBehaviorEnum'
          x-release-lifecycle: EA
        enabled:
          description: Détermine si les mots de passe sont activés
          type: boolean
        signup_behavior:
          $ref: '#/components/schemas/ConnectionSignupBehaviorEnum'
          x-release-lifecycle: EA
      type: object
    ConnectionPhoneOtpAuthenticationMethod:
      additionalProperties: false
      description: Activation de l’authentification OTP par téléphone
      properties:
        enabled:
          description: Détermine si l’OTP par téléphone est activé
          type: boolean
      type: object
      x-release-lifecycle: EA
    ConnectionIdTokenSignedResponseAlgEnum:
      description: Algorithme autorisé pour valider les ID tokens.
      enum:
        - ES256
        - ES384
        - PS256
        - PS384
        - RS256
        - RS384
        - RS512
      type: string
      x-merge-priority: -5
    ConnectionPasskeyChallengeUIEnum:
      description: >-
        Contrôle l’interface utilisateur utilisée pour demander sa clé d’accès à
        l’utilisateur.
      enum:
        - both
        - autofill
        - button
      type: string
    ConnectionPasswordOptionsComplexity:
      additionalProperties: false
      description: Configuration des exigences de complexité du mot de passe
      properties:
        character_type_rule:
          $ref: '#/components/schemas/PasswordCharacterTypeRulePolicyEnum'
        character_types:
          description: "Types de caractères obligatoires devant être présents dans les mots de passe. Options valides\_: majuscule, minuscule, chiffre, caractère spécial"
          items:
            $ref: '#/components/schemas/PasswordCharacterTypeEnum'
          type: array
        identical_characters:
          $ref: '#/components/schemas/PasswordIdenticalCharactersPolicyEnum'
        max_length_exceeded:
          $ref: '#/components/schemas/PasswordMaxLengthExceededPolicyEnum'
        min_length:
          description: Longueur minimale de mot de passe requise (1 à 72 caractères)
          maximum: 72
          minimum: 1
          type: integer
        sequential_characters:
          $ref: '#/components/schemas/PasswordSequentialCharactersPolicyEnum'
      type: object
    ConnectionPasswordOptionsDictionary:
      additionalProperties: false
      description: >-
        Stratégie de restriction des mots de passe fondée sur un dictionnaire
        pour empêcher l’utilisation de mots de passe courants
      properties:
        active:
          description: >-
            Active la vérification par dictionnaire pour empêcher l’utilisation
            de mots de passe courants et de mots bloqués personnalisés
          type: boolean
        custom:
          description: >-
            Tableau de mots personnalisés à bloquer dans les mots de passe.
            Maximum de 200 éléments, jusqu’à 50 caractères chacun
          items:
            maxLength: 50
            type: string
          type: array
        default:
          $ref: '#/components/schemas/PasswordDefaultDictionariesEnum'
      type: object
    ConnectionPasswordOptionsHistory:
      additionalProperties: false
      description: >-
        Configuration de la stratégie d’historique des mots de passe pour
        empêcher leur réutilisation
      properties:
        active:
          description: >-
            Active la vérification de l’historique des mots de passe pour
            empêcher les utilisateurs de réutiliser des mots de passe récents
          type: boolean
        size:
          description: >-
            Nombre de mots de passe précédents à mémoriser afin d’empêcher leur
            réutilisation (1-24)
          maximum: 24
          minimum: 1
          type: integer
      type: object
    ConnectionPasswordOptionsProfileData:
      additionalProperties: false
      description: >-
        Configuration de la stratégie de restriction des renseignements
        personnels pour empêcher l’utilisation de données de profil dans les
        mots de passe
      properties:
        active:
          description: >-
            Empêche les utilisateurs d’inclure des données de profil (comme le
            nom ou le courriel) dans leurs mots de passe
          type: boolean
        blocked_fields:
          description: Champs de profil bloqués. Tableau contenant jusqu’à 12 entrées.
          items:
            description: Entrée de champ de profil bloqué. Maximum de 100 caractères.
            maxLength: 100
            type: string
          type: array
      type: object
    ConnectionUpstreamAdditionalProperties:
      oneOf:
        - $ref: '#/components/schemas/ConnectionUpstreamAlias'
        - $ref: '#/components/schemas/ConnectionUpstreamValue'
      type: object
    ConnectionUsernameValidationOptions:
      additionalProperties: false
      properties:
        max:
          maximum: 128
          type: integer
        min:
          minimum: 1
          type: integer
      required:
        - max
        - min
      type:
        - object
        - 'null'
    ConnectionAttributeIdentifier:
      additionalProperties: false
      properties:
        active:
          description: Détermine si l’attribut est utilisé à des fins d’identification
          type: boolean
        default_method:
          $ref: '#/components/schemas/DefaultMethodEmailIdentifierEnum'
          x-release-lifecycle: EA
      type: object
    SignupVerified:
      additionalProperties: false
      properties:
        status:
          $ref: '#/components/schemas/SignupStatusEnum'
        verification:
          $ref: '#/components/schemas/SignupVerification'
      type: object
    VerificationMethodEnum:
      enum:
        - link
        - otp
      type: string
    SignupSchema:
      additionalProperties: false
      properties:
        status:
          $ref: '#/components/schemas/SignupStatusEnum'
      type: object
    UsernameValidation:
      additionalProperties: false
      properties:
        allowed_types:
          $ref: '#/components/schemas/UsernameAllowedTypes'
        max_length:
          description: Longueur maximale autorisée
          maximum: 128
          minimum: 1
          type: number
        min_length:
          description: Longueur minimale autorisée
          maximum: 128
          minimum: 1
          type: number
      type: object
    ConnectionApiBehaviorEnum:
      description: >-
        Spécifie le comportement de l’API pour l’authentification par mot de
        passe
      enum:
        - required
        - optional
      type: string
      x-release-lifecycle: EA
    ConnectionSignupBehaviorEnum:
      description: >-
        Spécifie le comportement d’inscription pour l’authentification par mot
        de passe
      enum:
        - allow
        - block
      type: string
      x-release-lifecycle: EA
    PasswordCharacterTypeRulePolicyEnum:
      description: >-
        Lorsqu’elle est activée, les mots de passe doivent contenir au moins 3
        des 4 types de caractères. Elle peut être activée uniquement lorsque les
        4 types de caractères sont spécifiés
      enum:
        - all
        - three_of_four
      type: string
    PasswordCharacterTypeEnum:
      enum:
        - uppercase
        - lowercase
        - number
        - special
      type: string
    PasswordIdenticalCharactersPolicyEnum:
      description: >-
        Détermine si les caractères identiques consécutifs sont autorisés dans
        les mots de passe
      enum:
        - allow
        - block
      type: string
    PasswordMaxLengthExceededPolicyEnum:
      description: >-
        Détermine si les mots de passe qui dépassent la longueur maximale sont
        tronqués ou rejetés
      enum:
        - truncate
        - error
      type: string
    PasswordSequentialCharactersPolicyEnum:
      description: >-
        Détermine si les caractères séquentiels sont autorisés dans les mots de
        passe
      enum:
        - allow
        - block
      type: string
    PasswordDefaultDictionariesEnum:
      description: "Dictionnaire par défaut à utiliser pour la validation des mots de passe. Options\_: \"en_10k\" (10\_000 mots courants) ou \"en_100k\" (100\_000 mots courants)"
      enum:
        - en_10k
        - en_100k
      type: string
    ConnectionUpstreamAlias:
      additionalProperties: false
      properties:
        alias:
          $ref: '#/components/schemas/ConnectionUpstreamAliasEnum'
      type: object
    ConnectionUpstreamValue:
      additionalProperties: false
      properties:
        value:
          type: string
      type: object
    DefaultMethodEmailIdentifierEnum:
      description: Méthode d’authentification par défaut pour l’identifiant de courriel
      enum:
        - password
        - email_otp
      type: string
      x-release-lifecycle: EA
    SignupStatusEnum:
      enum:
        - required
        - optional
        - inactive
      type: string
    SignupVerification:
      additionalProperties: false
      properties:
        active:
          type: boolean
      type: object
    UsernameAllowedTypes:
      additionalProperties: false
      properties:
        email:
          type: boolean
        phone_number:
          type: boolean
      type: object
    ConnectionUpstreamAliasEnum:
      enum:
        - acr_values
        - audience
        - client_id
        - display
        - id_token_hint
        - login_hint
        - max_age
        - prompt
        - resource
        - response_mode
        - response_type
        - ui_locales
      type: string
  securitySchemes:
    bearerAuth:
      bearerFormat: jwt
      scheme: bearer
      type: http
    oAuth2ClientCredentials:
      flows:
        clientCredentials:
          scopes:
            create:actions: Create Actions
            create:authentication_methods: Create Authentication Methods
            create:client_credentials: Create Client Credentials
            create:client_grants: Create Client Grants
            create:clients: Create Clients
            create:connection_profiles: Create Connection Profiles
            create:connections: Create Connections
            create:connections_keys: Create Connections Keys
            create:current_user_device_credentials: Create Current User Device Credentials
            create:custom_domains: Create Custom Domains
            create:custom_signing_keys: Create Custom Signing Keys
            create:directory_provisionings: Create Directory Provisionings
            create:email_provider: Create Email Provider
            create:email_templates: Create Email Templates
            create:encryption_keys: Create Encryption Keys
            create:event_streams: Create Event Streams
            create:experimentation: Create Experimentation
            create:flows: Create Flows
            create:flows_vault_connections: Create Flows Vault Connections
            create:forms: Create Forms
            create:group_roles: Create Group Roles
            create:guardian_enrollment_tickets: Create Guardian Enrollment Tickets
            create:hooks: Create Hooks
            create:log_streams: Create Log Streams
            create:network_acls: Create Network Acls
            create:organization_client_grants: Create Organization Client Grants
            create:organization_connections: Create Organization Connections
            create:organization_discovery_domains: Create Organization Discovery Domains
            create:organization_group_roles: Create Organization Group Roles
            create:organization_invitations: Create Organization Invitations
            create:organization_member_roles: Create Organization Member Roles
            create:organization_members: Create Organization Members
            create:organizations: Create Organizations
            create:phone_providers: Create Phone Providers
            create:phone_templates: Create Phone Templates
            create:rate_limit_policies: Create Rate Limit Policies
            create:resource_servers: Create Resource Servers
            create:role_members: Create Role Members
            create:roles: Create Roles
            create:rules: Create Rules
            create:scim_config: Create Scim Config
            create:scim_token: Create Scim Token
            create:self_service_profiles: Create Self Service Profiles
            create:signing_keys: Create Signing Keys
            create:sso_access_tickets: Create Sso Access Tickets
            create:token_exchange_profiles: Create Token Exchange Profiles
            create:user_attribute_profiles: Create User Attribute Profiles
            create:user_tickets: Create User Tickets
            create:users: Create Users
            create:vdcs_templates: Create Vdcs Templates
            delete:actions: Delete Actions
            delete:anomaly_blocks: Delete Anomaly Blocks
            delete:authentication_methods: Delete Authentication Methods
            delete:branding: Delete Branding
            delete:client_credentials: Delete Client Credentials
            delete:client_grants: Delete Client Grants
            delete:clients: Delete Clients
            delete:connection_profiles: Delete Connection Profiles
            delete:connections: Delete Connections
            delete:current_user: Delete Current User
            delete:current_user_device_credentials: Delete Current User Device Credentials
            delete:custom_domains: Delete Custom Domains
            delete:custom_signing_keys: Delete Custom Signing Keys
            delete:device_credentials: Delete Device Credentials
            delete:directory_provisionings: Delete Directory Provisionings
            delete:email_provider: Delete Email Provider
            delete:encryption_keys: Delete Encryption Keys
            delete:event_streams: Delete Event Streams
            delete:experimentation: Delete Experimentation
            delete:federated_connections_tokens: Delete Federated Connections Tokens
            delete:flows: Delete Flows
            delete:flows_executions: Delete Flows Executions
            delete:flows_vault_connections: Delete Flows Vault Connections
            delete:forms: Delete Forms
            delete:grants: Delete Grants
            delete:group_roles: Delete Group Roles
            delete:groups: Delete Groups
            delete:guardian_enrollments: Delete Guardian Enrollments
            delete:hooks: Delete Hooks
            delete:log_streams: Delete Log Streams
            delete:network_acls: Delete Network Acls
            delete:organization_client_grants: Delete Organization Client Grants
            delete:organization_connections: Delete Organization Connections
            delete:organization_discovery_domains: Delete Organization Discovery Domains
            delete:organization_group_roles: Delete Organization Group Roles
            delete:organization_invitations: Delete Organization Invitations
            delete:organization_member_roles: Delete Organization Member Roles
            delete:organization_members: Delete Organization Members
            delete:organizations: Delete Organizations
            delete:phone_providers: Delete Phone Providers
            delete:phone_templates: Delete Phone Templates
            delete:rate_limit_policies: Delete Rate Limit Policies
            delete:refresh_tokens: Delete Refresh Tokens
            delete:resource_servers: Delete Resource Servers
            delete:role_members: Delete Role Members
            delete:roles: Delete Roles
            delete:rules: Delete Rules
            delete:rules_configs: Delete Rules Configs
            delete:scim_config: Delete Scim Config
            delete:scim_token: Delete Scim Token
            delete:self_service_profiles: Delete Self Service Profiles
            delete:sessions: Delete Sessions
            delete:sso_access_tickets: Delete Sso Access Tickets
            delete:token_exchange_profiles: Delete Token Exchange Profiles
            delete:user_attribute_profiles: Delete User Attribute Profiles
            delete:users: Delete Users
            delete:vdcs_templates: Delete Vdcs Templates
            read:actions: Read Actions
            read:anomaly_blocks: Read Anomaly Blocks
            read:attack_protection: Read Attack Protection
            read:authentication_methods: Read Authentication Methods
            read:branding: Read Branding
            read:client_credentials: Read Client Credentials
            read:client_grants: Read Client Grants
            read:client_keys: Read Client Keys
            read:client_summary: Read Client Summary
            read:clients: Read Clients
            read:connection_profiles: Read Connection Profiles
            read:connections: Read Connections
            read:connections_keys: Read Connections Keys
            read:current_user: Read Current User
            read:custom_domains: Read Custom Domains
            read:custom_signing_keys: Read Custom Signing Keys
            read:device_credentials: Read Device Credentials
            read:directory_provisionings: Read Directory Provisionings
            read:email_provider: Read Email Provider
            read:email_templates: Read Email Templates
            read:encryption_keys: Read Encryption Keys
            read:event_deliveries: Read Event Deliveries
            read:event_streams: Read Event Streams
            read:events: Read Events
            read:experimentation: Read Experimentation
            read:federated_connections_tokens: Read Federated Connections Tokens
            read:flows: Read Flows
            read:flows_executions: Read Flows Executions
            read:flows_vault_connections: Read Flows Vault Connections
            read:forms: Read Forms
            read:grants: Read Grants
            read:group_members: Read Group Members
            read:group_roles: Read Group Roles
            read:groups: Read Groups
            read:guardian_enrollments: Read Guardian Enrollments
            read:guardian_factors: Read Guardian Factors
            read:hooks: Read Hooks
            read:log_streams: Read Log Streams
            read:logs: Read Logs
            read:logs_users: Read Logs Users
            read:mfa_policies: Read Mfa Policies
            read:network_acls: Read Network Acls
            read:organization_client_grants: Read Organization Client Grants
            read:organization_connections: Read Organization Connections
            read:organization_discovery_domains: Read Organization Discovery Domains
            read:organization_group_roles: Read Organization Group Roles
            read:organization_groups: Read Organization Groups
            read:organization_invitations: Read Organization Invitations
            read:organization_member_effective_roles: Read Organization Member Effective Roles
            read:organization_member_role_source_groups: Read Organization Member Role Source Groups
            read:organization_member_roles: Read Organization Member Roles
            read:organization_members: Read Organization Members
            read:organizations: Read Organizations
            read:organizations_summary: Read Organizations Summary
            read:phone_providers: Read Phone Providers
            read:phone_templates: Read Phone Templates
            read:prompts: Read Prompts
            read:rate_limit_policies: Read Rate Limit Policies
            read:refresh_tokens: Read Refresh Tokens
            read:resource_servers: Read Resource Servers
            read:role_members: Read Role Members
            read:roles: Read Roles
            read:rules: Read Rules
            read:rules_configs: Read Rules Configs
            read:scim_config: Read Scim Config
            read:scim_token: Read Scim Token
            read:self_service_profile_custom_texts: Read Self Service Profile Custom Texts
            read:self_service_profiles: Read Self Service Profiles
            read:sessions: Read Sessions
            read:signing_keys: Read Signing Keys
            read:stats: Read Stats
            read:tenant_settings: Read Tenant Settings
            read:token_exchange_profiles: Read Token Exchange Profiles
            read:user_attribute_profiles: Read User Attribute Profiles
            read:user_effective_permissions: Read User Effective Permissions
            read:user_effective_roles: Read User Effective Roles
            read:user_idp_tokens: Read User Idp Tokens
            read:user_permission_source_roles: Read User Permission Source Roles
            read:user_role_source_groups: Read User Role Source Groups
            read:users: Read Users
            read:vdcs_templates: Read Vdcs Templates
            update:actions: Update Actions
            update:attack_protection: Update Attack Protection
            update:authentication_methods: Update Authentication Methods
            update:branding: Update Branding
            update:client_credentials: Update Client Credentials
            update:client_grants: Update Client Grants
            update:client_keys: Update Client Keys
            update:client_token_vault_privileged_access: Update Client Token Vault Privileged Access
            update:clients: Update Clients
            update:connection_profiles: Update Connection Profiles
            update:connections: Update Connections
            update:connections_keys: Update Connections Keys
            update:current_user_identities: Update Current User Identities
            update:current_user_metadata: Update Current User Metadata
            update:custom_domains: Update Custom Domains
            update:custom_signing_keys: Update Custom Signing Keys
            update:directory_provisionings: Update Directory Provisionings
            update:email_provider: Update Email Provider
            update:email_templates: Update Email Templates
            update:encryption_keys: Update Encryption Keys
            update:event_deliveries: Update Event Deliveries
            update:event_streams: Update Event Streams
            update:experimentation: Update Experimentation
            update:flows: Update Flows
            update:flows_vault_connections: Update Flows Vault Connections
            update:forms: Update Forms
            update:guardian_factors: Update Guardian Factors
            update:hooks: Update Hooks
            update:log_streams: Update Log Streams
            update:mfa_policies: Update Mfa Policies
            update:network_acls: Update Network Acls
            update:organization_connections: Update Organization Connections
            update:organization_discovery_domains: Update Organization Discovery Domains
            update:organizations: Update Organizations
            update:phone_providers: Update Phone Providers
            update:phone_templates: Update Phone Templates
            update:prompts: Update Prompts
            update:rate_limit_policies: Update Rate Limit Policies
            update:refresh_tokens: Update Refresh Tokens
            update:resource_servers: Update Resource Servers
            update:roles: Update Roles
            update:rules: Update Rules
            update:rules_configs: Update Rules Configs
            update:scim_config: Update Scim Config
            update:self_service_profile_custom_texts: Update Self Service Profile Custom Texts
            update:self_service_profiles: Update Self Service Profiles
            update:sessions: Update Sessions
            update:signing_keys: Update Signing Keys
            update:tenant_settings: Update Tenant Settings
            update:token_exchange_profiles: Update Token Exchange Profiles
            update:user_attribute_profiles: Update User Attribute Profiles
            update:users: Update Users
            update:users_app_metadata: Update Users App Metadata
            update:vdcs_templates: Update Vdcs Templates
          tokenUrl: /oauth/token/
          x-form-parameters:
            audience: /api/v2/
      type: oauth2

````