Strivacity Enterprise Login Provider API

openapi: 3.2.0
info:
  description: API documentation of Admin Portal
  title: Admin Portal Enterprise Login Provider API
  version: v0.0.1
servers:
- url: https://{tenant}
  variables:
    tenant:
      default: example.strivacity.com
      description: Your Strivacity tenant
tags:
- name: Enterprise Login Provider
paths:
  /admin/api/v1/loginProviders/enterprise:
    get:
      description: 'You can list the enterprise login providers by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | read:config_login_provider |'
      operationId: getEnterpriseLoginProviders
      parameters:
      - description: Tags used for filtering must exactly match the tag name
        in: query
        name: policyTags
        required: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - description: Name used for filtering
        in: query
        name: name
        required: false
        schema:
          type: string
      - description: Zero-based page index (0..N)
        in: query
        name: page
        schema:
          type: integer
          format: int64
          default: 0
      - description: The size of the page to be returned
        in: query
        name: size
        schema:
          type: integer
          format: int64
          default: 20
      - description: 'Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.'
        in: query
        name: sort
        schema:
          type: array
          items:
            type: string
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/PageOfEnterpriseLoginProviderResponse'
          description: OK
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
      security:
      - securityScheme:
        - read:config_login_provider
      summary: List enterprise login providers
      tags:
      - Enterprise Login Provider
    post:
      description: 'You can create an enterprise login provider by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | write:config_login_provider |'
      operationId: createEnterpriseLoginProvider
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Generic_EnterpriseLoginProvider_InsertRequest'
        required: true
      responses:
        '201':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/GenericEnterpriseLoginProviderResponse'
          description: Created
        '400':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Bad Request
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '409':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Conflict
      security:
      - securityScheme:
        - write:config_login_provider
      summary: Create an enterprise login provider
      tags:
      - Enterprise Login Provider
  /admin/api/v1/loginProviders/enterprise/{id}:
    delete:
      description: 'You can delete an enterprise login provider by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | delete:config_login_provider |'
      operationId: deleteEnterpriseLoginProvider
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '409':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Enterprise login provider is assigned to one or more applications or organization assignments
      security:
      - securityScheme:
        - delete:config_login_provider
      summary: Delete an enterprise login provider
      tags:
      - Enterprise Login Provider
    get:
      description: 'You can get an enterprise login provider by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | read:config_login_provider |'
      operationId: getEnterpriseLoginProvider
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/GenericEnterpriseLoginProviderResponse'
          description: OK
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '404':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Not Found
      security:
      - securityScheme:
        - read:config_login_provider
      summary: Get an enterprise login provider
      tags:
      - Enterprise Login Provider
    put:
      description: 'You can update an enterprise login provider by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | write:config_login_provider |'
      operationId: updateEnterpriseLoginProvider
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GenericEnterpriseLoginProviderRequest'
        required: true
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/GenericEnterpriseLoginProviderResponse'
          description: OK
        '400':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Bad Request
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '404':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Not Found
        '409':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Conflict
      security:
      - securityScheme:
        - write:config_login_provider
      summary: Update an enterprise login provider
      tags:
      - Enterprise Login Provider
components:
  schemas:
    OidcSpecializedLoginProviderRequestConfiguration:
      required:
      - claims
      - clientId
      - clientSecret
      type: object
      properties:
        acrValue:
          maxLength: 8192
          minLength: 1
          type: string
        additionalAuthRequestParams:
          maxItems: 8
          minItems: 0
          type: array
          items:
            $ref: '#/components/schemas/AdditionalAuthRequestParamUpsertRequest'
        authorizationEndpoint:
          maxLength: 1024
          minLength: 1
          type: string
        claims:
          type: array
          items:
            minLength: 1
            type: string
        clientId:
          maxLength: 128
          minLength: 1
          type: string
        clientSecret:
          maxLength: 1024
          minLength: 1
          type: string
        issuer:
          maxLength: 1024
          minLength: 1
          type: string
        jwksUri:
          maxLength: 1024
          minLength: 1
          type: string
        openIdAutoDiscoveryURL:
          maxLength: 1024
          minLength: 1
          type: string
        tokenEndpoint:
          maxLength: 1024
          minLength: 1
          type: string
        tokenEndpointAuthMethodOverride:
          type: string
          description: 'Sets or overrides token endpoint authentication method of Auto-discovery config.

            Options:

            (1) null - use settings from auto-discovery, fallback to Basic if no auto-discovery

            (2) client_secret_basic - client ID and secret sent in authorization header

            (3) client_secret_post - client ID and secret sent in body of request

            '
          enum:
          - client_secret_basic
          - client_secret_post
        userInfoEndpoint:
          maxLength: 1024
          minLength: 1
          type: string
    ProblemJson:
      type: object
      properties:
        detail:
          type: string
        entityName:
          type: string
          description: The name of the entity within the error has occurred
        errorKey:
          type: string
          description: A unique identifier of the error
        fieldErrors:
          type: array
          description: Field constraint violation errors
          items:
            $ref: '#/components/schemas/FieldError'
        message:
          type: string
          description: A unique identifier in format of 'error.{errorKey}'
        params:
          type: array
          description: Further information related to the actual error
          items:
            type: object
            additionalProperties:
              type: object
        path:
          type: string
          description: Request URI
        status:
          type: integer
          description: Status code
          format: int32
        title:
          type: string
      description: Based on [RFC 7807](https://datatracker.ietf.org/doc/html/rfc7807)
    OidcSpecializedConfiguration:
      type: object
      properties:
        acrValue:
          type: string
        additionalAuthRequestParams:
          type: array
          items:
            $ref: '#/components/schemas/AdditionalAuthRequestParamResponse'
        authorizationEndpoint:
          type: string
        claims:
          type: array
          items:
            type: string
        clientId:
          type: string
        clientSecret:
          type: string
        issuer:
          type: string
        jwksUri:
          type: string
        openIdAutoDiscoveryURL:
          type: string
        tokenEndpoint:
          type: string
        tokenEndpointAuthMethodOverride:
          type: string
          enum:
          - client_secret_basic
          - client_secret_post
        userInfoEndpoint:
          type: string
    PageMetadata:
      type: object
      properties:
        number:
          type: integer
          format: int64
        size:
          type: integer
          format: int64
        totalElements:
          type: integer
          format: int64
        totalPages:
          type: integer
          format: int64
    AdditionalAuthRequestParamUpsertRequest:
      required:
      - key
      - value
      type: object
      properties:
        key:
          maxLength: 128
          minLength: 1
          pattern: ^\p{ASCII}*$
          type: string
        value:
          maxLength: 1024
          minLength: 1
          pattern: ^\p{ASCII}*$
          type: string
    OidcSpecializedLoginProviderUpsertRequest:
      required:
      - configuration
      - id
      - name
      - type
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/OidcSpecializedLoginProviderRequestConfiguration'
        description:
          maxLength: 1024
          minLength: 0
          type: string
        id:
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverride'
        loginButtonText:
          maxLength: 32
          minLength: 1
          pattern: ^((?![<>]).)*$
          type: string
        name:
          maxLength: 64
          minLength: 2
          pattern: '[a-zA-Z0-9]+'
          type: string
          description: This field cannot be altered
        onlyStoreMappedValues:
          type: boolean
          default: false
        policyTag:
          pattern: ^[a-z0-9_]{2,32}$
          type: string
          description: Must be an existing policy tag name
        type:
          type: string
          description: This field cannot be altered
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
          default: false
    LanguageOverride:
      type: object
      properties:
        enabled:
          type: boolean
          default: false
        regex:
          type: string
        sourcePath:
          maxLength: 256
          minLength: 0
          type: string
    Generic_EnterpriseLoginProvider_InsertRequest:
      type: object
      description: Represents an enterprise login provider.
      oneOf:
      - $ref: '#/components/schemas/Oidc_Specialized_LoginProvider_InsertRequest'
      - $ref: '#/components/schemas/Oidc_LoginProvider_InsertRequest'
      - $ref: '#/components/schemas/Saml2_LoginProvider_InsertRequest'
    Oidc_LoginProvider_InsertRequest:
      required:
      - configuration
      - name
      - type
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/OidcLoginProviderRequestConfiguration'
        description:
          maxLength: 1024
          minLength: 0
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverride'
        loginButtonText:
          maxLength: 32
          minLength: 1
          pattern: ^((?![<>]).)*$
          type: string
        logoUrl:
          type: string
        name:
          maxLength: 64
          minLength: 2
          pattern: '[a-zA-Z0-9]+'
          type: string
          description: This field cannot be altered
        onlyStoreMappedValues:
          type: boolean
          default: false
        policyTag:
          pattern: ^[a-z0-9_]{2,32}$
          type: string
          description: Must be an existing policy tag name
        type:
          type: string
          description: This field cannot be altered
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
          default: false
    Saml2LoginProviderRequestConfiguration:
      required:
      - authnNameIDFormat
      - entityID
      - protocolBinding
      type: object
      properties:
        allowIdpInitiated:
          type: boolean
        authnNameIDFormat:
          type: string
          enum:
          - EmailAddressNameIDFormat
          - PersistentNameIDFormat
        entityID:
          maxLength: 1024
          minLength: 1
          type: string
        forceAuthn:
          type: boolean
          default: false
        idpMetadataUrl:
          maxLength: 1024
          minLength: 0
          type: string
        metadata:
          type: string
        protocolBinding:
          type: string
          enum:
          - HTTPPostBinding
          - HTTPRedirectBinding
    Saml2LoginProviderConfiguration:
      type: object
      properties:
        allowIdpInitiated:
          type: boolean
        authnNameIDFormat:
          type: string
          enum:
          - EmailAddressNameIDFormat
          - PersistentNameIDFormat
        entityID:
          type: string
        forceAuthn:
          type: boolean
        idpMetadataUrl:
          type: string
        metadataPreview:
          $ref: '#/components/schemas/Saml2LoginProviderConfigurationMetadataPreview'
        protocolBinding:
          type: string
          enum:
          - HTTPPostBinding
          - HTTPRedirectBinding
    Saml2_LoginProvider_InsertRequest:
      required:
      - configuration
      - name
      - type
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/Saml2LoginProviderRequestConfiguration'
        description:
          maxLength: 1024
          minLength: 0
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverride'
        loginButtonText:
          maxLength: 32
          minLength: 1
          pattern: ^((?![<>]).)*$
          type: string
        name:
          maxLength: 64
          minLength: 2
          pattern: '[a-zA-Z0-9]+'
          type: string
          description: This field cannot be altered
        onlyStoreMappedValues:
          type: boolean
          default: false
        policyTag:
          pattern: ^[a-z0-9_]{2,32}$
          type: string
          description: Must be an existing policy tag name
        type:
          type: string
          description: This field cannot be altered
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
          default: false
    OidcConfiguration:
      type: object
      properties:
        acrValue:
          type: string
        additionalAuthRequestParams:
          type: array
          items:
            $ref: '#/components/schemas/AdditionalAuthRequestParamResponse'
        authorizationEndpoint:
          type: string
        claims:
          type: array
          items:
            type: string
        clientId:
          type: string
        clientSecret:
          type: string
        issuer:
          type: string
        jwksUri:
          type: string
        messageLevelEncryption:
          $ref: '#/components/schemas/MessageLevelEncryption'
        openIdAutoDiscoveryURL:
          type: string
        parConfiguration:
          $ref: '#/components/schemas/PARConfigurationResponse'
        tokenEndpoint:
          type: string
        tokenEndpointAuthMethodOverride:
          type: string
          enum:
          - client_secret_basic
          - client_secret_post
        userInfoEndpoint:
          type: string
    Saml2LoginProviderConfigurationSingleSignOnService:
      type: object
      properties:
        binding:
          type: string
        location:
          type: string
    Saml2LoginProviderConfigurationCertificatePreview:
      type: object
      properties:
        notAfter:
          type: string
        subject:
          type: string
    Oidc_Specialized_LoginProvider_InsertRequest:
      required:
      - configuration
      - name
      - type
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/OidcSpecializedLoginProviderRequestConfiguration'
        description:
          maxLength: 1024
          minLength: 0
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverride'
        loginButtonText:
          maxLength: 32
          minLength: 1
          pattern: ^((?![<>]).)*$
          type: string
        name:
          maxLength: 64
          minLength: 2
          pattern: '[a-zA-Z0-9]+'
          type: string
          description: This field cannot be altered
        onlyStoreMappedValues:
          type: boolean
          default: false
        policyTag:
          pattern: ^[a-z0-9_]{2,32}$
          type: string
          description: Must be an existing policy tag name
        type:
          type: string
          description: This field cannot be altered
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
          default: false
    Saml2LoginProviderConfigurationMetadataPreview:
      type: object
      properties:
        certificates:
          uniqueItems: true
          type: array
          items:
            $ref: '#/components/schemas/Saml2LoginProviderConfigurationCertificatePreview'
        idpEntityID:
          type: string
        singleSignOnServiceList:
          type: array
          items:
            $ref: '#/components/schemas/Saml2LoginProviderConfigurationSingleSignOnService'
        validUntil:
          type: string
    GenericEnterpriseLoginProviderRequest:
      type: object
      description: Represents an enterprise login provider.
      oneOf:
      - $ref: '#/components/schemas/OidcSpecializedLoginProviderUpsertRequest'
      - $ref: '#/components/schemas/OidcLoginProviderUpsertRequest'
      - $ref: '#/components/schemas/Saml2LoginProviderUpsertRequest'
    OidcLoginProviderResponse:
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/OidcConfiguration'
        description:
          type: string
        id:
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverrideResponse'
        loginButtonText:
          type: string
        logoUrl:
          type: string
        name:
          type: string
        onlyStoreMappedValues:
          type: boolean
        policyTag:
          type: string
        type:
          type: string
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
    GenericEnterpriseLoginProviderResponse:
      type: object
      description: Represents an enterprise login provider.
      oneOf:
      - $ref: '#/components/schemas/OidcSpecializedLoginProviderResponse'
      - $ref: '#/components/schemas/OidcLoginProviderResponse'
      - $ref: '#/components/schemas/Saml2LoginProviderResponse'
    MessageLevelEncryption:
      type: object
      properties:
        enabled:
          type: boolean
        fingerprint:
          type: string
    FieldError:
      type: object
      properties:
        field:
          type: string
        message:
          type: string
        objectName:
          type: string
    Saml2LoginProviderResponse:
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/Saml2LoginProviderConfiguration'
        description:
          type: string
        id:
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverrideResponse'
        loginButtonText:
          type: string
        name:
          type: string
        onlyStoreMappedValues:
          type: boolean
        policyTag:
          type: string
        type:
          type: string
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
    Saml2LoginProviderUpsertRequest:
      required:
      - configuration
      - id
      - name
      - type
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/Saml2LoginProviderRequestConfiguration'
        description:
          maxLength: 1024
          minLength: 0
          type: string
        id:
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverride'
        loginButtonText:
          maxLength: 32
          minLength: 1
          pattern: ^((?![<>]).)*$
          type: string
        name:
          maxLength: 64
          minLength: 2
          pattern: '[a-zA-Z0-9]+'
          type: string
          description: This field cannot be altered
        onlyStoreMappedValues:
          type: boolean
          default: false
        policyTag:
          pattern: ^[a-z0-9_]{2,32}$
          type: string
          description: Must be an existing policy tag name
        type:
          type: string
          description: This field cannot be altered
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
          default: false
    LanguageOverrideResponse:
      type: object
      properties:
        enabled:
          type: boolean
        regex:
          type: string
        sourcePath:
          type: string
    AdditionalAuthRequestParamResponse:
      type: object
      properties:
        key:
          type: string
        value:
          type: string
    OidcSpecializedLoginProviderResponse:
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/OidcSpecializedConfiguration'
        description:
          type: string
        id:
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverrideResponse'
        loginButtonText:
          type: string
        name:
          type: string
        onlyStoreMappedValues:
          type: boolean
        policyTag:
          type: string
        type:
          type: string
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
    OidcLoginProviderRequestConfiguration:
      required:
      - claims
      - clientId
      - clientSecret
      type: object
      properties:
        PARConfigurationRequest:
          $ref: '#/components/schemas/PARConfigurationRequest'
        acrValue:
          maxLength: 8192
          minLength: 1
          type: string
        additionalAuthRequestParams:
          maxItems: 8
          minItems: 0
          type: array
          items:
            $ref: '#/components/schemas/AdditionalAuthRequestParamUpsertRequest'
        authorizationEndpoint:
          maxLength: 1024
          minLength: 1
          type: string
        claims:
          type: array
          items:
            minLength: 1
            type: string
        clientId:
          maxLength: 128
          minLength: 1
          type: string
        clientSecret:
          maxLength: 1024
          minLength: 1
          type: string
        issuer:
          maxLength: 1024
          minLength: 1
          type: string
        jwksUri:
          maxLength: 1024
          minLength: 1
          type: string
        messageLevelEncryption:
          $ref: '#/components/schemas/MessageLevelEncryptionRequest'
        openIdAutoDiscoveryURL:
          maxLength: 1024
          minLength: 1
          type: string
        tokenEndpoint:
          maxLength: 1024
          minLength: 1
          type: string
        tokenEndpointAuthMethodOverride:
          type: string
          description: 'Sets or overrides token endpoint authentication method of Auto-discovery config.

            Options:

            (1) null - use settings from auto-discovery, fallback to Basic if no auto-discovery

            (2) client_secret_basic - client ID and secret sent in authorization header

            (3) client_secret_post - client ID and secret sent in body of request

            '
          enum:
          - client_secret_basic
          - client_secret_post
        userInfoEndpoint:
          maxLength: 1024
          minLength: 1
          type: string
    MessageLevelEncryptionRequest:
      type: object
      properties:
        enabled:
          type: boolean
          default: false
        privateKey:
          maxLength: 8192
          minLength: 1
          type: string
    OidcLoginProviderUpsertRequest:
      required:
      - configuration
      - id
      - name
      - type
      type: object
      properties:
        configuration:
          $ref: '#/components/schemas/OidcLoginProviderRequestConfiguration'
        description:
          maxLength: 1024
          minLength: 0
          type: string
        id:
          type: string
        languageOverride:
          $ref: '#/components/schemas/LanguageOverride'
        loginButtonText:
          maxLength: 32
          minLength: 1
          pattern: ^((?![<>]).)*$
          type: string
        logoUrl:
          type: string
        name:
          maxLength: 64
          minLength: 2
          pattern: '[a-zA-Z0-9]+'
          type: string
          description: This field cannot be altered
        onlyStoreMappedValues:
          type: boolean
          default: false
        policyTag:
          pattern: ^[a-z0-9_]{2,32}$
          type: string
          description: Must be an existing policy tag name
        type:
          type: string
          description: This field cannot be altered
          enum:
          - oidc
          - okta
          - azure
          - hypr
          - saml2
          - github
          - microsoft
          - google
          - facebook
          - twitter
          - linkedin
          - amazon
          - apple
        updateAccountInfoOnLogin:
          type: boolean
          default: false
    PARConfigurationRequest:
      required:
      - parEndpointAuthMethod
      type: object
      properties:
        enabled:
          type: boolean
          default: false
        endpointUrl:
          maxLength: 1024
          minLength: 10
          type: string
        parEndpointAuthMethod:
          type: string
          enum:
          - client_secret_basic
          - client_secret_post
    PageOfEnterpriseLoginProviderResponse:
      type: object
      properties:
        content:
          type: array
          items:
            $ref: '#/components/schemas/GenericEnterpriseLoginProviderResponse'
        page:
          $ref: '#/components/schemas/PageMetadata'
    PARConfigurationResponse:
      type: object
      properties:
        enabled:
          type: boolean
        endpointUrl:
          type: string
        parEndpointAuthMethod:
          type: string
          enum:
          - client_secret_basic
          - client_secret_post
  securitySchemes:
    securityScheme:
      scheme: bearer
      type: http