import * as Oazapfts from "@oazapfts/runtime"; declare const defaults: Oazapfts.Defaults; declare const servers: { server1: string; }; type AdminApiAuthentication = { /** Administration API application id */ applicationId: string; /** If set to true, a session cookie named INTELLITRUST_SESSION_ID is returned with the authentication response. This cookie must be returned with all subsequent requests. */ enableWebSession?: boolean; /** Shared Secret */ sharedSecret: string; }; type AdminApiAuthenticationResult = { /** Authorization token returned after a successful authentication. */ authToken?: string; /** Creation time of the authentication token. */ creationTime?: string; /** Expiry time of the authentication token. */ expirationTime?: string; }; type ErrorInfo = { /** Error Codes specific to cause of failure. */ errorCode?: string; /** Additional Error Message describing the error. */ errorMessage?: string; /** Optional additional error information. */ parameters?: object[]; }; type ApplicationInfo = { /** The template the application was created from. */ applicationTemplate?: string; /** The UUID of the template the application was created from. */ applicationTemplateId?: string; /** The application authentication method. */ authenticationMethod?: string; /** The UUID of the application. */ id?: string; /** The name of the application. */ name?: string; }; type AdminApiApplication = { /** Determines if the application can use a long-lived token for authentication. */ allowLongLivedToken?: boolean; /** The name of the application template specific to this application type. */ applicationTemplate: string; /** Application template id specific to this application type. */ applicationTemplateId?: string; /** Short description of application. */ description?: string; /** Application ID. */ id?: string; /** The UUID of the IP Addresses list. */ ipListId?: string; /** Last successful authentication time to use administration api */ lastAuthnDate?: string; /** Base64 encoded logo image. */ logo?: string; /** Name of application. */ name: string; /** The UUID of the Site role to be associated with the API application. Pass an empty string value to unset the site role. */ roleId?: string; /** Shared secret for application. */ sharedSecret?: string; /** The UUID of the service provider role to be associated with the API application. Pass an empty string to unset the service provider role. */ spRoleId?: string; }; type AdminApiApplicationParms = { /** Determines if a long-lived token is allowed in this application. */ allowLongLivedToken?: boolean; /** The UUID of the application template. This value is only used when creating a new application. If not specified, the default admininstration API template is used. */ applicationTemplateId?: string; /** Short description of application. */ description?: string; /** The UUID of the IP Addresses list. */ ipListId?: string; /** Base64 encoded logo image. */ logo?: string; /** Name of application. */ name: string; /** The UUID of the Site role to be associated with the API application. Pass an empty string value to unset the site role. Either this value or spRoleId is required when creating the application. */ roleId?: string; /** The UUID of the service provider role to be associated with the API application. Pass an empty string to unset the service provider role. Either this value or roleId is required when creating the application. */ spRoleId?: string; }; type ApplicationTemplate = { /** The type the application template. Possible values are SAML20, RADIUS, AAAS, IDG, OIDC, AUTHAPI, ADMINAPI, SIEMAPI. */ authenticationMethod: string; /** The description of application template. */ description?: string; /** The UUID of the application template. */ id: string; /** The name of the application template. */ name: string; }; type EnrollmentApiPayload = { /** The Enrollment Data. Primary key field is mandatory in case of Update and Delete. */ enrollmentData: object[]; /** Name of the Enrollment Design. */ enrollmentDesignName: string; }; type Error = { /** The server error code */ code: string; /** A human-readable representation of the error */ message: string; /** The target of the error */ target?: string; }; type ReadEnrollmentApiPayload = { /** Name of the Enrollment Design. */ enrollmentDesignName: string; /** Filter criteria based on which enrollments records should be fetched. If not provided, all records are fetched based on page size and number. */ filterCriteria?: object[]; /** Page number of Enrollment records to be fetched. Default is 1. */ pageNumber?: string; /** Maximum number of Enrollment records to be fetched. Default is 50. */ pageSize?: string; }; type IssueMobileFlashPassBulkOperationDetails = { /** The error message describing the first error encountered processing the bulk operation. */ errorMessage?: string; /** The row number of the first row that failed. */ firstFailedRow?: number; /** The unique UUID of the bulk operation. */ id?: string; /** The time this bulk operation was initialized. */ initTime?: string; /** The name of this bulk operation. */ name?: string; /** The time at which the bulk operation completed processing. */ processingEndTime?: string; /** The time at which the bulk operation began processing. */ processingStartTime?: string; /** How long the bulk operation took to complete processing. */ processingTime?: number; /** The number of rows that have failed when processed. */ rowsFailed?: number; /** The number of rows successfully processed. */ rowsProcessed?: number; /** The state of the bulk operation. */ state?: "FAILED" | "CANCELLED" | "COMPLETED" | "AWAITING_DATA" | "PROCESSING" | "SCHEDULED"; /** The type of bulk operation. */ "type"?: "IMPORT_USERS" | "IMPORT_GROUPS" | "IMPORT_USER_GROUPS" | "IMPORT_HARDWARE_TOKENS" | "IMPORT_ENROLLMENTS" | "PRINT_ENROLLMENTS" | "SEND_MFP" | "ASSIGN_ENTRUST_ST" | "ASSIGN_GOOGLE_ST" | "ASSIGN_PASSWORDS" | "RESET_PASSWORDS" | "DELETE_USERS" | "IMPORT_IDENTITYGUARD" | "IMPORT_GRIDS" | "EXPORT_ASSIGNEDGRIDS" | "EXPORT_ASSIGNEDTOKENS" | "EXPORT_AUDITEVENTS" | "EXPORT_SELFAUDITEVENTS" | "EXPORT_UNASSIGNEDGRIDS" | "EXPORT_UNASSIGNEDTOKENS" | "EXPORT_USERS" | "SET_REGISTRATION" | "SET_VERIFICATION" | "ASSIGN_GRIDS" | "EXPORT_USAGE" | "CREATE_UNASSIGNED_GRIDS" | "ASSIGN_HARDWARE_TOKENS" | "SET_GRIDS" | "EXPORT_ENROLLMENTS" | "DELETE_GROUPS" | "EXPORT_GROUPS" | "RESET_TOKENS" | "DELETE_ENROLLMENTS" | "PROVISION_SCIM" | "CREATE_TENANT" | "REVOKE_MFP" | "DELETE_GRIDS" | "DELETE_TOKENS"; }; type EnrollmentMultiFlashPassApiRequestV1 = { enrollmentDesignName?: string; primaryKeys?: string[]; }; type MobileFlashPassRequestDetails = { /** The error message describing the first error encountered processing the bulk operation. */ errorMessage?: string; /** The row number of the first row that failed. */ firstFailedRow?: number; /** The unique UUID of the request. */ id?: string; /** The time this bulk operation was initialized. */ initTime?: string; /** The name of this bulk operation. */ name?: string; /** The time at which the bulk operation completed processing. */ processingEndTime?: string; /** The time at which the bulk operation began processing. */ processingStartTime?: string; /** How long the bulk operation took to complete processing. */ processingTime?: number; /** The number of rows that have failed when processed. */ rowsFailed?: number; /** The number of rows successfully processed. */ rowsProcessed?: number; /** The state of the bulk operation. */ state?: "FAILED" | "CANCELLED" | "COMPLETED" | "AWAITING_DATA" | "PROCESSING" | "SCHEDULED"; /** The type of bulk operation. */ "type"?: "IMPORT_USERS" | "IMPORT_GROUPS" | "IMPORT_USER_GROUPS" | "IMPORT_HARDWARE_TOKENS" | "IMPORT_ENROLLMENTS" | "PRINT_ENROLLMENTS" | "SEND_MFP" | "ASSIGN_ENTRUST_ST" | "ASSIGN_GOOGLE_ST" | "ASSIGN_PASSWORDS" | "RESET_PASSWORDS" | "DELETE_USERS" | "IMPORT_IDENTITYGUARD" | "IMPORT_GRIDS" | "EXPORT_ASSIGNEDGRIDS" | "EXPORT_ASSIGNEDTOKENS" | "EXPORT_AUDITEVENTS" | "EXPORT_SELFAUDITEVENTS" | "EXPORT_UNASSIGNEDGRIDS" | "EXPORT_UNASSIGNEDTOKENS" | "EXPORT_USERS" | "SET_REGISTRATION" | "SET_VERIFICATION" | "ASSIGN_GRIDS" | "EXPORT_USAGE" | "CREATE_UNASSIGNED_GRIDS" | "ASSIGN_HARDWARE_TOKENS" | "SET_GRIDS" | "EXPORT_ENROLLMENTS" | "DELETE_GROUPS" | "EXPORT_GROUPS" | "RESET_TOKENS" | "DELETE_ENROLLMENTS" | "PROVISION_SCIM" | "CREATE_TENANT" | "REVOKE_MFP" | "DELETE_GRIDS" | "DELETE_TOKENS"; }; type BulkPrintOperationDetails = { /** The error message describing the first error encountered processing the bulk operation. */ errorMessage?: string; /** The row number of the first row that failed. */ firstFailedRow?: number; /** The unique UUID of the bulk operation. */ id?: string; /** The time this bulk operation was initialized. */ initTime?: string; /** The name of this bulk operation. */ name?: string; /** The time at which the bulk operation completed processing. */ processingEndTime?: string; /** The time at which the bulk operation began processing. */ processingStartTime?: string; /** How long the bulk operation took to complete processing. */ processingTime?: number; /** The number of rows that have failed when processed. */ rowsFailed?: number; /** The number of rows successfully processed. */ rowsProcessed?: number; /** The state of the bulk operation. */ state?: "FAILED" | "CANCELLED" | "COMPLETED" | "AWAITING_DATA" | "PROCESSING" | "SCHEDULED"; /** The type of bulk operation. */ "type"?: "IMPORT_USERS" | "IMPORT_GROUPS" | "IMPORT_USER_GROUPS" | "IMPORT_HARDWARE_TOKENS" | "IMPORT_ENROLLMENTS" | "PRINT_ENROLLMENTS" | "SEND_MFP" | "ASSIGN_ENTRUST_ST" | "ASSIGN_GOOGLE_ST" | "ASSIGN_PASSWORDS" | "RESET_PASSWORDS" | "DELETE_USERS" | "IMPORT_IDENTITYGUARD" | "IMPORT_GRIDS" | "EXPORT_ASSIGNEDGRIDS" | "EXPORT_ASSIGNEDTOKENS" | "EXPORT_AUDITEVENTS" | "EXPORT_SELFAUDITEVENTS" | "EXPORT_UNASSIGNEDGRIDS" | "EXPORT_UNASSIGNEDTOKENS" | "EXPORT_USERS" | "SET_REGISTRATION" | "SET_VERIFICATION" | "ASSIGN_GRIDS" | "EXPORT_USAGE" | "CREATE_UNASSIGNED_GRIDS" | "ASSIGN_HARDWARE_TOKENS" | "SET_GRIDS" | "EXPORT_ENROLLMENTS" | "DELETE_GROUPS" | "EXPORT_GROUPS" | "RESET_TOKENS" | "DELETE_ENROLLMENTS" | "PROVISION_SCIM" | "CREATE_TENANT" | "REVOKE_MFP" | "DELETE_GRIDS" | "DELETE_TOKENS"; }; type CredentialDesignPrintRequestPrinter = { /** The message to display on the printer LCD screen when the exception slot is selected. Maximum 45 character limit for Sigma printers, and 32 character limit for older printers. */ exceptionSlotMessage?: string; /** The printer hopper to use. Value of 0 will use the printer exception slot. */ hopper?: number; printerId?: string; }; type EnrollmentMultiPrintApiRequestV1 = { credentialDesignName?: string; enrollmentDesignName?: string; primaryKeys?: string[]; printerDetails?: CredentialDesignPrintRequestPrinter; }; type ResumePrintJobApiRequest = { /** The print job id obtained through the pre print webhook payload. */ printJobId: string; }; type ResumePrintJobApiResponse = { /** The job id of the requested print job to resume */ printJobId?: string; }; type EnrollmentPrintApiRequestV1 = { /** The design name of the enrollment. Note: primaryKey parameter is required when this parameter is present. */ enrollmentDesignName?: string; /** The unique enrollment ID obtained from Read Enrollments request. Note: primaryKey and enrollmentDesignName parameters are not required when this parameter is present. */ enrollmentId?: string; /** The primary key of the enrollment */ primaryKey?: string; printerDetails: CredentialDesignPrintRequestPrinter; }; type EnrollmentPrintApiResponse = { /** The job id of the requested enrollment print */ printJobId?: string; }; type PrintRequestDetails = { /** The error message describing the first error encountered processing the bulk operation. */ errorMessage?: string; /** The row number of the first row that failed. */ firstFailedRow?: number; /** The unique UUID of the request. */ id?: string; /** The time this bulk operation was initialized. */ initTime?: string; /** The name of this bulk operation. */ name?: string; /** The time at which the bulk operation completed processing. */ processingEndTime?: string; /** The time at which the bulk operation began processing. */ processingStartTime?: string; /** How long the bulk operation took to complete processing. */ processingTime?: number; /** The number of rows that have failed when processed. */ rowsFailed?: number; /** The number of rows successfully processed. */ rowsProcessed?: number; /** The state of the bulk operation. */ state?: "FAILED" | "CANCELLED" | "COMPLETED" | "AWAITING_DATA" | "PROCESSING" | "SCHEDULED"; /** The type of bulk operation. */ "type"?: "IMPORT_USERS" | "IMPORT_GROUPS" | "IMPORT_USER_GROUPS" | "IMPORT_HARDWARE_TOKENS" | "IMPORT_ENROLLMENTS" | "PRINT_ENROLLMENTS" | "SEND_MFP" | "ASSIGN_ENTRUST_ST" | "ASSIGN_GOOGLE_ST" | "ASSIGN_PASSWORDS" | "RESET_PASSWORDS" | "DELETE_USERS" | "IMPORT_IDENTITYGUARD" | "IMPORT_GRIDS" | "EXPORT_ASSIGNEDGRIDS" | "EXPORT_ASSIGNEDTOKENS" | "EXPORT_AUDITEVENTS" | "EXPORT_SELFAUDITEVENTS" | "EXPORT_UNASSIGNEDGRIDS" | "EXPORT_UNASSIGNEDTOKENS" | "EXPORT_USERS" | "SET_REGISTRATION" | "SET_VERIFICATION" | "ASSIGN_GRIDS" | "EXPORT_USAGE" | "CREATE_UNASSIGNED_GRIDS" | "ASSIGN_HARDWARE_TOKENS" | "SET_GRIDS" | "EXPORT_ENROLLMENTS" | "DELETE_GROUPS" | "EXPORT_GROUPS" | "RESET_TOKENS" | "DELETE_ENROLLMENTS" | "PROVISION_SCIM" | "CREATE_TENANT" | "REVOKE_MFP" | "DELETE_GRIDS" | "DELETE_TOKENS"; }; type PrintCount = { /** The count. */ count?: number; /** The name of the count. */ name?: string; }; type PrintCountResponse = { counts?: PrintCount[]; }; type Printer = { /** Total cards successfully printed by printer. */ cardsPrinted?: number; /** number of cards remaining before cleaning */ cardsRemaining?: number; /** Self signed certs for legacy printers */ certificate?: string; /** Printers unique device ID obtained from the printer LCD. */ deviceId?: string; /** Optional physical location of the printer. */ location?: string; /** The printer name */ name?: string; /** The printer platform */ printerPlatform?: string; /** A flag used to determine if the printer has PTP ribbon or not (Ignore this field in the API request or response) */ ptpReady?: boolean; /** The part number of the retransfer ribbon installed on printer */ retransferPartNumber?: string; /** percentage of retransfer roll remaining in printer */ retransferRollRemaining?: number; /** ID of the cloud enabled ribbon installed in the printer (Ignore this field in the API request or response) */ ribbonId?: string; /** The part number of the print ribbon installed on printer */ ribbonPartNumber?: string; /** The region of the ribbon installed */ ribbonRegion?: string; /** percentage of ribbon remaining in printer */ ribbonRemaining?: number; /** A flag used to determine if the smart card simulator needs to be invoked */ scSimulator?: boolean; /** The unique serial number of the printer */ serialNumber?: string; status?: "BUSY" | "IDLE" | "TIMEOUT" | "INVALID"; }; type PrinterRead = { /** Total cards successfully printed by printer. */ cardsPrinted?: number; /** number of cards remaining before cleaning */ cardsRemaining?: number; /** Self signed certs for legacy printers */ certificate?: string; /** Printers unique device ID obtained from the printer LCD. */ deviceId?: string; /** The date when the firmware version was last checked */ firmwareCheckedOn?: string; /** The request id for an active firmware update */ firmwareUpdateRequestId?: string; /** The date when the firmware version was last updated */ firmwareUpdatedOn?: string; /** The firmware version */ firmwareVersion?: string; /** The number of hoppers */ hoppers?: number; id?: string; /** Optional physical location of the printer. */ location?: string; /** The printer model */ model?: string; /** The printer name */ name?: string; /** A newer firmware version */ newFirmwareVersion?: string; /** The printer platform */ printerPlatform?: string; /** The printer type */ printerType?: string; /** A flag used to determine if the printer has PTP ribbon or not (Ignore this field in the API request or response) */ ptpReady?: boolean; /** The part number of the retransfer ribbon installed on printer */ retransferPartNumber?: string; /** percentage of retransfer roll remaining in printer */ retransferRollRemaining?: number; /** ID of the cloud enabled ribbon installed in the printer (Ignore this field in the API request or response) */ ribbonId?: string; /** The part number of the print ribbon installed on printer */ ribbonPartNumber?: string; /** The region of the ribbon installed */ ribbonRegion?: string; /** percentage of ribbon remaining in printer */ ribbonRemaining?: number; /** A flag used to determine if the smart card simulator needs to be invoked */ scSimulator?: boolean; /** The unique serial number of the printer */ serialNumber?: string; status?: "BUSY" | "IDLE" | "TIMEOUT" | "INVALID"; }; type ResourceIdResponse = { link?: string; }; type ResourceIdResponseRead = { id?: string; link?: string; }; type SmartCardCommandResponse = { response?: string; }; type BasicPrintResponseData = { copiesRemaining?: number; smartcardResponses?: SmartCardCommandResponse[]; }; type BasicPrintResponse = { createdOn?: string; data?: BasicPrintResponseData; status?: "QUEUED" | "WAITING_SMARTCARD" | "IN_PROGRESS" | "COMPLETED" | "FAILED" | "CANCELLED" | "UNKNOWN" | "AWAITING_PRINT"; /** Print status details returned from the printer. */ statusDetails?: string; updatedOn?: string; }; type SmartCardCommand = { command: string; resultMatcher?: string; "type": "APDU" | "COUPLER"; }; type BasicPrintUpdateRequestSmartcard = { commands?: SmartCardCommand[]; }; type BasicPrintUpdateRequest = { smartcard?: BasicPrintUpdateRequestSmartcard; }; type PrintOperationResponse = { printStatus?: ResourceIdResponse; }; type PrintOperationResponseRead = { printStatus?: ResourceIdResponseRead; }; type PrinterSummaryResponse = { /** The total number of printers */ printerCount?: number; }; type Laminators = { Laminator1?: "DO_NOT_APPLY" | "APPLY_ONCE" | "APPLY_TWICE"; Laminator2?: "DO_NOT_APPLY" | "APPLY_ONCE" | "APPLY_TWICE"; }; type Lamination = { back?: Laminators; front?: Laminators; }; type PrinterPreferences = { backOrientation?: "PORTRAIT" | "LANDSCAPE"; /** Rotate back side card image 180 degrees? */ backRotate180?: boolean; /** Print bar codes using monochrome? */ barCodesMonochrome?: boolean; /** Print black image pixels using monochrome? */ blackPixelsMonochrome?: boolean; /** The number of copies to print */ copies?: number; /** Debow card? */ debow?: boolean; disablePrinting?: "false" | "ALL" | "FRONT" | "BACK"; frontOrientation?: "PORTRAIT" | "LANDSCAPE"; /** Rotate front side card image 180 degrees? */ frontRotate180?: boolean; /** The input hopper from which to select a card */ inputHopper?: number; lamination?: Lamination; /** The resolution at which printer will print. This will be NA if printer supports only 1 resolution. */ printResolution?: "NA" | "BEST" | "STANDARD"; /** Rewrite card? */ rewrite?: boolean; splitRibbon?: "false" | "YMCT_FRONT_K_BACK" | "YMC_FRONT_KT_BACK" | "K_FRONT_YMCT_BACK" | "YMC_FRONT_K_BACK" | "K_FRONT_YMC_BACK" | "K_FRONT_YMCKT_BACK" | "KT_FRONT_YMCKT_BACK" | "YMCKTT_FRONT_K_BACK" | "YMCKFT_FRONT_K_BACK" | "MTT_FRONT_K_BACK"; tactileBack?: "true" | "false" | "1" | "2" | "3"; tactileFront?: "true" | "false" | "1" | "2" | "3"; /** Applies topcoat to both front and back sides when front/back values are not provided. */ topcoat?: boolean; /** Applies topcoat to the back side of the card. When both topcoatFront and topcoatBack are null or undefined,topcoat value is used. */ topcoatBack?: boolean; /** Applies topcoat to the front side of the card. When both topcoatFront and topcoatBack are null or undefined,topcoat value is used. */ topcoatFront?: boolean; }; type Billing = { segmentId?: string; }; type MagStripe = { /** Coercivity */ coercivity?: "HIGH" | "LOW"; /** Track 1 data */ track1?: string; /** Track 2 data */ track2?: string; /** Track 3 data */ track3?: string; /** Track type */ trackType?: "IAT" | "AAMVA" | "NTT" | "PRINTER"; }; type MagStripeEncodeCommands = { back?: MagStripe; front?: MagStripe; }; type PrintImageLayer = { /** A base64 url encoded image (JPEG or PNG). For BLACK layer, it is advised to use black and white image with 1bit per pixel and 1013 * 638. Example choose black and white option and set the properties via MS paint. */ data: string; /** The enhanceBlackLayer value defaults as FALSE. To enhance the quality of a black and white or grayscale image that is not 1 bit per pixel, set the enhanceBlackLayer value as TRUE. */ enhanceBlackLayer?: boolean; layer?: "COLOR" | "UV" | "BLACK" | "PEEL_OFF" | "NON_PRINTABLE_GENERIC" | "NON_PRINTABLE_CHIP" | "NON_PRINTABLE_MAGSTRIPE" | "NON_PRINTABLE_SIGNATURE"; }; type Print = { /** A set of base64 url encoded image (JPEG or PNG) that represents the back side of the card. One image per print layer (e.g. UV, Color, Black) may be provided. */ back?: PrintImageLayer[]; /** A set of base64 url encoded image (JPEG or PNG) that represents the front side of the card. One image per print layer (e.g. UV, Color, Black) may be provided. */ front?: PrintImageLayer[]; }; type BasicPrintRequestSmartcard = { commands?: SmartCardCommand[]; /** Perform smart cards operations over multiple print requests. This feature is NOT supported with Instant ID as a Service. */ multistep?: boolean; }; type BasicPrintRequest = { billing?: Billing; /** The message to display on the printer LCD screen when the exception slot is selected. Maximum 45 character limit for Sigma printers, and 32 character limit for older printers. */ exceptionSlotMessage?: string; /** The printer hopper to use. Value of 0 will use the printer exception slot. */ hopper?: number; magstripe?: MagStripeEncodeCommands; print?: Print; printerPreferences?: PrinterPreferences; smartcard?: BasicPrintRequestSmartcard; }; type PrintJob = { /** The time this print job was created. */ createdOn?: string; /** The unique Id of the creator of this print job. */ creatorId?: string; /** The name of the creator of this print job. */ creatorName?: string; /** The type of the creator of this print job. */ creatorType?: "USER" | "API"; /** The unique id of this print job. */ id?: string; /** The name of this print job. */ name?: string; /** The unique Id of the printer. */ printerId?: string; /** The name of the printer. */ printerName?: string; queueState?: "UNKNOWN" | "QUEUED" | "WAIT_FOR_PRINTER" | "STARTED" | "COMPLETED" | "CANCELLED" | "FAILED" | "AWAITING_PRINT"; /** Details about the queue state of this print job. */ queueStateDetails?: string; status?: "QUEUED" | "WAITING_SMARTCARD" | "IN_PROGRESS" | "COMPLETED" | "FAILED" | "CANCELLED" | "UNKNOWN" | "AWAITING_PRINT"; /** Print status details returned from the printer. */ statusDetails?: string; /** The time this print job was last updated. */ updatedOn?: string; }; type OrderByAttribute = { /** Identifies whether to order results in ascending order. */ ascending: boolean; /** Identifies the attribute. */ name: string; }; type SearchByAttribute = { /** Identifies the attribute we are searching for. */ name: string; /** Identifies the operator. */ operator: "EQUALS" | "NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "STARTS_WITH" | "ENDS_WITH" | "GREATER_THAN" | "GREATER_THAN_OR_EQUAL" | "LESS_THAN" | "LESS_THAN_OR_EQUAL" | "IN" | "EXISTS" | "NOT_EXISTS"; /** Identifies the value of the attribute we are searching for. */ value?: string; }; type SearchParms = { /** Users search only: additional, non-core attributes to include in the returned object. Attribute names are specific to the returned object. */ attributes?: string[]; /** Identifies the page to return when paging over a result set--if present, search by / order by attributes are ignored. */ cursor?: string; /** Identifies the maximum number of items to include in a page (1-100). */ limit?: number; orderByAttribute?: OrderByAttribute; /** Identifies attributes for searching purposes. Some end-points have pre-defined values and ignore this attribute. */ searchByAttributes?: SearchByAttribute[]; }; type Paging = { /** The page limit used (1-100) */ limit: number; /** The cursor pointing to the next page. */ nextCursor?: string; /** The cursor pointing to the previous page. */ prevCursor?: string; }; type PrintJobRecord = { /** Name of associated Bulk Print Operation */ bulkOperationName?: string; /** job creation time */ createdOn?: string; /** The unique Id of the creator of this print job. */ creatorId?: string; /** The name of the creator of this print job. */ creatorName?: string; /** The type of the creator of this print job. */ creatorType?: "USER" | "API"; /** job id */ id?: number; identifierField?: string; identifierValue?: string; /** The unique id of this print job in print queue. */ jobId?: string; /** job name */ name?: string; /** The unique Id of the printer. */ printerId?: string; /** printer name */ printerName?: string; queueState?: "UNKNOWN" | "QUEUED" | "WAIT_FOR_PRINTER" | "STARTED" | "COMPLETED" | "CANCELLED" | "FAILED" | "AWAITING_PRINT"; /** Details about the queue state of this print job. */ queueStateDetails?: string; status?: "QUEUED" | "WAITING_SMARTCARD" | "IN_PROGRESS" | "COMPLETED" | "FAILED" | "CANCELLED" | "UNKNOWN" | "AWAITING_PRINT"; /** job status */ statusDetails?: string; /** The time this print job was last updated. */ updatedOn?: string; }; type PrintQueuePaging = { paging?: Paging; printJobs?: PrintJobRecord[]; }; type RoleUser = { /** A flag indicating if this role is one of the default roles. */ defaultRole?: boolean; /** The UUID of the role. */ id?: string; /** The description of the role. */ roleDescription?: string; /** The name of the role */ roleName: string; /** The number of users in this role. */ usersInRole?: number; }; type Permission = { /** The action to which this permission applies. */ actionType: "VIEW" | "ADD" | "EDIT" | "REMOVE" | "ALL"; /** The entity to which this permission applies. */ entityType: "ALL" | "SUBSCRIBERS" | "USERS" | "APPLICATIONS" | "TOKENS" | "ROLES" | "SPROLES" | "CONTEXTRULES" | "AUTHORIZATIONGROUPS" | "USERATTRIBUTES" | "USERATTRIBUTEVALUES" | "AGENTS" | "GROUPS" | "SETTINGS" | "DIRECTORIES" | "DIRECTORYSYNC" | "DIRECTORYCONNECTIONS" | "TEMPLATES" | "USERSITEROLES" | "REPORTS" | "BULKUSERS" | "BULKGROUPS" | "USERPASSWORDS" | "SERVICEPROVIDERS" | "SERVICEPROVIDERACCOUNTS" | "USERMACHINES" | "CAS" | "BULKHARDWARETOKENS" | "BULKSMARTCARDS" | "DIGITALIDCONFIGS" | "DIGITALIDCONFIGVARIABLES" | "DIGITALIDCONFIGCERTTEMPS" | "DIGITALIDCONFIGSANS" | "SCDEFNS" | "SCDEFNPIVAPPLETCONFIGS" | "SCDEFNVARIABLES" | "SMARTCREDENTIALS" | "SMARTCREDENTIALSSIGNATURE" | "USERSPROLES" | "EXPECTEDLOCATIONS" | "USERLOCATIONS" | "USERRBASETTINGS" | "SPCLIENTCREDENTIALS" | "SPMANAGEMENTPLATFORM" | "ENTITLEMENTS" | "QUESTIONS" | "USERQUESTIONS" | "USERQUESTIONANSWERS" | "USERKBACHALLENGES" | "WORDSYNONYMS" | "GATEWAYS" | "GATEWAYCSRS" | "SPUSERMGMT" | "BULKIDENTITYGUARD" | "TEMPACCESSCODES" | "TEMPACCESSCODECONTENTS" | "GRIDS" | "GRIDCONTENTS" | "FIDOTOKENS" | "EXPORTREPORTS" | "CUSTOMIZATIONVARIABLES" | "BLACKLISTEDPASSWORDS" | "SPENTITLEMENTS" | "CREATETENANT" | "TENANTS" | "ARCHIVES" | "CERTIFICATES" | "INTELLITRUSTDESKTOPS" | "ACTIVESYNC" | "PRINTERS" | "ISSUANCE" | "OTPS" | "AD_CONNECTOR_DIRECTORIES" | "AZURE_DIRECTORIES" | "SCHEDULEDTASKS" | "CREDENTIALDESIGNS" | "ENROLLMENTS" | "BULKENROLLMENTS" | "EMAILTEMPLATES" | "EMAILVARIABLES" | "SENDEMAIL" | "SENDSCIM" | "SENDAZUREAD" | "DIRECTORYPASSWORD" | "TRANSACTIONITEMS" | "TRANSACTIONRULES" | "ENROLLMENTDESIGNS" | "HIGH_AVAILABILITY_GROUPS" | "PKIAASCREDENTIALS" | "DIGITALIDCERTIFICATES" | "PIVCONTENTSIGNER" | "RESOURCESERVERAPIS" | "RESOURCESERVERSCOPES" | "USEROAUTHTOKENS" | "GROUPPOLICIES" | "OAUTHROLES" | "IDENTITYPROVIDERS" | "SMARTCARDS" | "IPLISTS" | "DOMAINCONTROLLERCERTS" | "OTPPROVIDERS" | "PREFERREDOTPPROVIDERS" | "SPIDENTITYPROVIDERS" | "PUSHCREDENTIALS" | "DIRECTORYSEARCHATTRIBUTES" | "DIRECTORYATTRIBUTES" | "RISKENGINES" | "SCIMPROVISIONINGS" | "RATELIMITING" | "CLAIMS" | "CONTACTVERIFICATION" | "HOSTNAMESETTINGS" | "MAGICLINKS" | "MAGICLINKCONTENTS" | "AUTHENTICATIONFLOWS" | "FACE" | "TOKENACTIVATIONCONTENTS" | "PASSTHROUGH" | "POLICYOVERRIDE" | "ORGANIZATIONS" | "WEBHOOKS" | "WEBHOOK_NOTIFICATION" | "VCDEFNS" | "VCS" | "PLAYINTEGRITYCREDENTIALS" | "VPDEFNS" | "ACRS" | "FLEET_MANAGEMENT_ALERT" | "VERIFYUSER" | "USER_PRINTER_PREFERENCE" | "NAMEDPASSWORDS"; /** The UUID of this permission. */ id: string; /** The role type to which this permission applies. */ roleType: "SITE_ADMINISTRATOR" | "ACCOUNT_MANAGER"; }; type Role = { /** A flag indicating if administrators with this role can manage all roles and all users. */ allRoles?: boolean; /** A flag indicating if this role is one of the default roles. */ defaultRole?: boolean; /** The description of the role. */ description?: string; /** The UUIDs of groups associated with this role when Group Management is DEFINED. This attribute is ignored if Group Management is ALL or OWN. */ groupIds?: string[]; /** The type of the group management. Defaults to ALL if not provided. */ groupManagement?: "ALL" | "DEFINED" | "OWN"; /** The UUID of the role. */ id?: string; /** If allRoles is false, this attribute lists the roles and administrators in these roles that can be administered by administrators with this role. Administrators will also be able to manage end users. */ managedRoles?: Role[]; /** The name of the role. */ name: string; /** A list of the permissions assigned to this role. */ permissions?: Permission[]; /** The type of the role. */ roleType: "SITE_ADMINISTRATOR" | "ACCOUNT_MANAGER"; /** A flag indicating if this role is a super administrator. */ superAdministrator?: boolean; }; type SpIdentityProvider = { /** The client id of this tenant management. */ clientId?: string; /** The default max age of this tenant management. */ defaultMaxAge?: number; /** Whether this tenant management should display consent. */ displayConsent?: boolean; /** Whether tenant management is enabled. */ enabled: boolean; /** The initiate login URI of this tenant management. */ initiateLoginUri?: string; /** The name of this tenant management. */ name: string; /** The signing key of this tenant management. */ signingKeyId?: string; }; type SpIdentityProviderParms = { /** Whether an initial default resource rule accessible to all users should be created for this tenant management. This is only used if tenant management was previously disabled. If not set, it defaults to false. */ createDefaultResourceRule?: boolean; /** The default max age of this tenant management. If not set, it is not used. */ defaultMaxAge?: number; /** If an initial default resource rule is enabled, whether to disable SSO. This is only used if an initial default resource rule is being enabled. If not set, it defaults to false. */ disableSSODefaultResourceRule?: boolean; /** Whether this tenant management should display consent. If not set, it defaults to false. */ displayConsent?: boolean; /** Whether tenant management is enabled. */ enabled: boolean; /** The signing key of this tenant management. */ signingKeyId?: string; }; type WebhookEvent = { /** Subset of resource, or group IDs of the webhook event. All resources are selected by default if this parameter is not specified. */ filter?: string; /** The ID of the webhook event. This value is not needed when creating/updating a webhook. */ id?: string; /** The event type set to trigger the webhook. */ "type": "user.created" | "user.updated" | "user.deleted" | "user.registration.completed" | "authentication.succeeded" | "authentication.failed" | "password.updated" | "magiclink.email.sent" | "grid.created" | "grid.email.sent" | "grid.password.email.sent" | "passkey.created" | "passkey.updated" | "passkey.deleted" | "kba.question.created" | "token.created" | "token.activated" | "token.activated.online" | "token.seed.rotated" | "hardware.token.assigned" | "face.biometric.created" | "credential.create" | "credential.update" | "credential.delete" | "credential.print"; }; type Webhook = { /** HTTPS endpoint URL where webhook event notifications will be sent. Must be a valid HTTPS URL. */ callbackUrl: string; /** Indicates whether the webhook is active and will receive event notifications. Disabled webhooks will not receive any events. */ enabled: boolean; /** List of event types that will trigger this webhook. If not specified, all available events will be sent. */ events?: WebhookEvent[]; /** Indicates whether the webhook has passed its expiry date and is no longer active. */ expired?: boolean; /** Timestamp indicating when the webhook will automatically expire and stop receiving events. Null indicates no expiration. */ expiryDate?: string; /** Unique identifier for the webhook. This value is automatically generated upon webhook creation and cannot be modified. */ id: string; /** Descriptive name for the webhook to help identify its purpose. */ name?: string; /** Secure authentication token used to verify webhook request authenticity. Use this token to validate incoming webhook requests. */ token?: string; }; type WebhookParms = { /** HTTPS endpoint URL where webhook event notifications will be sent. Must be a valid HTTPS URL. */ callbackUrl: string; /** Indicates whether the webhook is active and will receive event notifications. Disabled webhooks will not receive any events. */ enabled?: boolean; /** List of event types that will trigger this webhook. If not specified, all available events will be sent. */ events: WebhookEvent[]; /** How long to keep the webhook alive for (in days). Value of 0 means no expiration. Once a webhook has reached expiry, it will be marked as disabled. This parameter is optional and is not set by default. */ expiry?: number; /** Descriptive name for the webhook to help identify its purpose. */ name: string; }; type WebhookTestParms = { /** Optional callback URL to use for this test request instead of the webhook's configured callback URL. Must be a valid URL. */ callbackUrl?: string; }; type Field = { /** A descriptive name of the enrollment field to filter results by. Must exactly match the Enrollment Field Name. */ name?: string; /** Value of the enrollment field to match records. Comparison is case-insensitive and matches the whole word. Searching on Date type fields is not supported. */ value?: string; }; type EnrollmentRequest = { /** List of enrollment fields having field name and field value. Instant ID as a Service automatically optimizes images for best print quality and performance. Images in photograph, signature, and background fields are limited to 2100 x 1344 pixels or 3 MB in size. Images exceeding these limits will be automatically resized while preserving quality and aspect ratio. */ fields: Field[]; /** Id of the enrollment (Value is required only in the update enrollment request, should be ignored in create enrollment request). Id should be in Base64 string format. */ id?: string; }; type EnrollmentResponse = { /** Error message for the failed enrollment record (For create/update/delete enrollments request) */ error?: string; /** List of enrollment fields having field name and field value (For search enrollments request only) */ fields?: Field[]; /** Id of the enrollment (In Base64 string format) */ id?: string; /** Status (Success/Failure) of the enrollment record (To check if the requested enrollment is successfully created/updated/deleted or not) */ status?: string; }; type EnrollmentDelete = { /** List of Enrollment Ids to be deleted (Id should be in Base64 string format) */ ids: string[]; }; type EnrollmentDesignName = { /** Id of the Enrollment Design */ id?: string; /** Name of the Enrollment Design */ name?: string; }; type EnrollmentMultiFlashPassApiRequestV2 = { /** List of Enrollment Ids (Id should be in Base64 string format) */ ids: string[]; }; type EnrollmentApiRequestPrinter = { /** Optional message to be displayed on printer's LCD screen when the exception slot is selected. */ exceptionSlotMessage?: string; /** Hopper to be used (Optional), default value is 1 */ hopper?: number; /** Name of the printer. Value is printer's name given while adding the printer using create printer API. Refer readPrinter/readPrinters API to get the value of 'name' field. */ name: string; }; type EnrollmentMultiPrintApiRequestV2 = { /** List of Enrollment Ids (Id should be in Base64 string format) */ ids: string[]; printer: EnrollmentApiRequestPrinter; }; type SingleEnrollmentPrintRequest = { /** 16 character unique Auth key of the printer. This is required if printerId is not provided. */ deviceId?: string; /** The design name of the enrollment. Note: primaryKey parameter is required when this parameter is present. */ enrollmentDesignName?: string; /** The unique enrollment ID obtained from Read Enrollments request. Note: primaryKey and enrollmentDesignName parameters are not required when this parameter is present. */ enrollmentId?: string; /** The message to display on the printer LCD screen when the exception slot is selected. Maximum 45 character limit for Sigma printers, and 32 character limit for older printers. */ exceptionSlotMessage?: string; /** The printer hopper to use. Value of 0 will use the printer exception slot. */ hopper: number; /** The primary key of the enrollment. Note: enrollmentDesignName parameter is required when this parameter is present. */ primaryKey?: string; /** 32 or 36 character unique ID of the printer. This takes preference over deviceId if both are provided. */ printerId?: string; }; type UpdatePrinterV2Request = { /** The physical location of the printer. */ location?: string; /** The printer's name. */ name?: string; }; type OrderAttribute = { /** Identifies whether to order result in ascending order. */ ascending?: boolean; /** Identifies the attribute. */ name?: string; }; type SearchAttribute = { /** Identifies the attribute we are searching for. */ name?: string; operator?: "EQUALS" | "NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "STARTS_WITH" | "ENDS_WITH" | "GREATER_THAN" | "GREATER_THAN_OR_EQUAL" | "LESS_THAN" | "LESS_THAN_OR_EQUAL" | "IN" | "IS" | "EXISTS" | "NOT_EXISTS"; /** value of the field to search on. */ value?: string; }; type SearchParams = { /** The value of cursor. Provide null for 1st page. For next page, provide the value of nextCursor from last API response. For previous page, provide the vaue of prevCursor from last API response. */ cursor?: string; /** Identifies the maximum number of items to include in a page (1-100). */ limit?: number; orderByAttribute?: OrderAttribute; searchByAttributes?: SearchAttribute[]; }; type UserAlternateEmails = { /** Name of the email attribute. */ name?: string; /** Value of the email attribute. */ value?: string; }; type UserAuthenticatorLockoutStatus = { /** Determines if this authenticator is currently locked out. */ locked?: boolean; /** The date the user was locked. Null means the user is not locked. */ lockoutDate?: string; /** if remainingAuthenticationAttempts is 0 then a lockoutExpiryDate of null means the lockout never expires. Otherwise a value of null means the user isn't locked out. */ lockoutExpiryDate?: string; /** The users named password authentication that is locked out. */ name?: string; /** The number of authentication attempts remaining before the user is locked out. */ remainingAuthenticationAttempts?: number; /** The type of the authenticator. */ "type"?: "MACHINE" | "PASSWORD" | "EXTERNAL" | "KBA" | "TEMP_ACCESS_CODE" | "OTP" | "GRID" | "TOKEN" | "TOKENCR" | "TOKENPUSH" | "FIDO" | "SMARTCREDENTIALPUSH" | "PASSWORD_AND_SECONDFACTOR" | "SMART_LOGIN" | "IDP" | "PASSKEY" | "IDP_AND_SECONDFACTOR" | "USER_CERTIFICATE" | "FACE" | "PASSTHROUGH" | "MAGICLINK"; }; type FidoToken = { /** The AAGUID of the authenticator that created this FIDO token. */ aaguid?: string; /** Indicates whether the AAGUID reported by the authenticator was cryptographically verified via a full certificate chain against the FIDO MDS trust anchors. True only for DIRECT attestation; false for INDIRECT (cert chain not verified); null for NONE (no attestation collected). */ aaguidVerified?: boolean; /** The signature algorithm of the authenticator that created this FIDO token. */ algorithm?: string; /** Administration actions that can be performed on this FIDO token. */ allowedActions?: ("DELETE" | "ENABLE" | "DISABLE" | "RENAME")[]; /** Attestation format of the authenticator that created this FIDO token. */ attestationFormat?: string; /** Indicates if this FIDO token contains attested data. */ attestedData?: boolean; /** The authenticator model of the authenticator that created this FIDO token. */ authenticatorModel?: string; /** Indicates if this FIDO token is eligible for backup. */ backupEligible?: boolean; /** Indicates if this FIDO token is currently backed up. */ backupStatus?: boolean; /** The date on which the FIDO token was created. */ createDate?: string; /** The icon of the authenticator that created this FIDO token. */ icon?: string; /** The unique UUID assigned to the fido token when it is registered. */ id?: string; /** The date on which this FIDO token was last used for authentication. This value will be null if the FIDO token has never been used. */ lastUsedDate?: string; /** The name of this FIDO token. */ name?: string; /** The origin of where the FIDO token was generated. */ origin?: string; /** The relying party ID of where the FIDO token was generated. */ relyingPartyId?: string; /** The state of this FIDO token. Only FIDO tokens in the ACTIVE state can be used for authentication. */ state?: "ACTIVE" | "INACTIVE"; /** The user Id of the user who owns this FIDO token. */ userId?: string; /** Indicates if the userId was stored on the FIDO token. */ userIdStored?: boolean; /** Indicates if the user was present during the registration or authentication ceremony that created or last used this FIDO token. */ userPresent?: boolean; /** The UUID of the user who owns this FIDO token. */ userUUID?: string; /** Indicates if the user was verified during the registration or authentication ceremony that created or last used this FIDO token. */ userVerified?: boolean; }; type Grid = { /** A list of what actions are currently allowed for this grid. */ allowedActions?: ("CANCEL" | "DELETE" | "ENABLE" | "DISABLE" | "ASSIGN" | "UNASSIGN")[]; /** For unassigned grids which were assigned to the user, the date on which the grid was assigned. */ assignDate?: string; /** The date on which the grid was created. */ createDate?: string; /** A flag indicating if this grid is currently expired. */ expired?: boolean; /** If the grid policy defines an expiry date, the date on which this grid will expire. Expired grids cannot be used for authentication. */ expiryDate?: string; /** The grid contents of this grid. Only administrators with the GRIDCONTENTS:VIEW permission will receive this value. */ gridContents?: string[][]; /** The UUIDs of groups to which this grid belongs. This value is only used for unassigned grids. Only groups to which the current administrator has access will be returned. */ groups?: string[]; /** The unique UUID assigned to the grid when it is created. */ id?: string; /** The date on which this grid was last used for authentication. This value will be null if the grid has never been used. */ lastUsedDate?: string; /** The unique numeric serial number assigned to the grid when it is created. */ serialNumber?: number; /** The state of this grid. Only grids in the ACTIVE or PENDING state can be used for authentication. */ state?: "ACTIVE" | "INACTIVE" | "UNASSIGNED" | "PENDING" | "CANCELED"; /** The UUID of the user who owns this grid. If the grid is not assigned, this value will be null. */ userId?: string; /** The user Id for this user. If the grid is not assigned, this value will be null. */ userName?: string; }; type Group = { /** The attribute of this group. */ attribute?: string; /** When the group was created. */ created?: string; /** Whether the directory group is desynced. Desynced groups can be deleted. */ directoryDesynced?: boolean; /** The externalId of this group. */ externalId?: string; /** The UUID of this group. This value is generated when the group is created. */ id?: string; /** When the group was last modified. */ lastModified?: string; /** The name of this group. */ name: string; /** The type of group indicating if this group was synchronized from a directory (LDAP_AD) or was created in Identity as a Service (MGMT_UI). */ "type"?: "LDAP_AD" | "MGMT_UI"; }; type OAuthRole = { /** The set of ancestor oauth role ids. */ ancestorIds: string[]; /** The set of descendant oauth role ids. */ descendantIds: string[]; /** The description of this oauth role. */ description?: string; /** The UUID of this oauth role. This value is generated when the oauth role is created. */ id: string; /** The set of resource server scopes ids associated with this oauth role based on inheritance from its ancestors. */ inheritedResourceServerScopeIds: string[]; /** The name of this oauth role. */ name: string; /** The UUID of the parent of this oauth role, if one exists. */ parentId?: string; /** The set of resource server scopes ids associated with this oauth role. */ resourceServerScopeIds: string[]; }; type Organization = { /** The description of the organization. */ description?: string; /** The display name of the organization. */ displayName: string; /** The unique UUID assigned to the organization when it is created. */ id: string; /** The URI of the logo to display when showing organizations. */ logoUri?: string; /** The name of the organization. */ name: string; }; type DigitalIdConfigCertTemplate = { /** The UUID of the Digital Id Config that owns this Digital Id Config Cert Template. */ digitalIdConfigId?: string; /** The UUID of the Digital Id Config Cert Template. */ id?: string; /** The key type of the Digital Id Config Cert Template. */ keyType?: "RSA_2048" | "EC_P_256"; /** The lifetime (in months) of the certificate created with this Digital Id Config Cert Template. */ lifetime?: number; /** The name of the Digital Id Config Cert Template. */ name?: string; /** The PIV container of the Digital Id Config Cert Template. */ pivContainer?: "PivAuth" | "CardAuth" | "DigSig" | "KeyMgmt" | "None"; /** A flag indicating whether to use the CA's default certificate lifetime. */ useCaDefaultCertLifetime?: boolean; }; type DigitalIdConfigSubjectAltName = { /** The UUID of the digital id config that owns this subjectAltName. */ digitalIdConfigId?: string; /** The UUID of this Digital Id Config SubjectAltName. */ id?: string; /** The type of subjectAltName. */ "type"?: "EMAIL" | "UPN" | "IP" | "DNS" | "OTHER" | "X400" | "DN" | "EDI" | "URI" | "REGISTERED_ID"; /** The value for the subjectAltName. */ value?: string; }; type DigitalIdConfigVariable = { /** The UUID of the Digital Id Config that owns this Digital Id Config Variable. */ digitalIdConfigId?: string; /** The UUID of the Digital Id Config Variable. */ id?: string; /** A flag indicating if values for this variable are included in the Digital Id's DN when it is generated by the CA. */ includedInDN?: boolean; /** The name of the Digital Id Config Variable. */ name?: string; /** The type of the Digital Id Config Variable. */ "type"?: "CERTIFICATE" | "USER" | "VARIABLE" | "CUSTOM"; /** The value of the Digital Id Config Variable. */ value?: string; }; type DigitalIdConfig = { /** If true, digital ids using this config will be set to have all CA groups. */ allCAGroups?: boolean; /** If allCAGroups is set to false then digital ids using this config will use this specified list of CA groups. */ caGroups?: string[]; /** The UUID of the CA for this digital id config. */ caId?: string; /** The name of the CA for this digital id config. */ caName?: string; /** The CA type of this Digital Id Config. */ caType?: "EDC" | "MS" | "PKIAAS"; /** A list of cert templates associated with this digital id config. */ certTemplates?: DigitalIdConfigCertTemplate[]; /** The CA certificate type which digital ids using this config will use. */ certificateType?: string; /** When creating a digital id config, default values can be provided from this specified digital id config template. */ digitalIdConfigTemplateId?: string; /** A flag indicating if digital ids using this config will create directory entries in the CA. */ directoryEntry?: boolean; /** The format which digital ids using this config will use for their DN. */ dnFormat?: string; /** Whether digital ids using this config should include the searchbase in their DN. */ dnFormatSearchbaseIncluded?: boolean; /** The UUID of this Digital Id Config. */ id?: string; /** The name of this Digital Id Config. */ name?: string; /** The CA role which digital ids using this config will use. */ role?: string; /** The searchbase within the CA in which digital ids using this config will be created. */ searchbase?: string; /** A list of subjectAltNames associated with this digital id config. */ subjectAltNames?: DigitalIdConfigSubjectAltName[]; /** The type of digital id. */ "type"?: "PIV_CARDHOLDER" | "PIV_CARD"; /** The CA user type which digital ids using this config will use. */ userType?: string; /** A list of variables associated with this digital id config. */ variables?: DigitalIdConfigVariable[]; }; type DigitalIdCert = { /** The description providing the purpose of this certificate. */ description?: string; /** The UUID of the digital id to which this certificate belongs */ digitalIdId?: string; /** The type of the digital Id to which this certificate belongs. */ digitalIdType?: "PIV_CARDHOLDER" | "PIV_CARD"; /** The UUID of this Digital Id Certificate. */ id?: string; /** The issuer DN of this certificate. */ issuerDN?: string; /** The expiry date of this certificate. */ notAfter?: string; /** The issue date of this certificate. */ notBefore?: string; /** The name of the PIV container that stores this certificate on the smart card. */ pivContainer?: string; /** The serial number of this certificate. */ serialNumber?: string; /** The status of this certificate. If not set, the revocation status has not been retrieved from the CA. */ status?: "ACTIVE" | "REVOKED" | "HOLD" | "EXPIRED" | "NOT_AVAILABLE"; /** The subject DN of this certificate. */ subjectDN?: string; }; type DigitalId = { /** The certificates associated with this digital id. */ certificates?: DigitalIdCert[]; /** The UUID of the digital Id config that defines this digital Id. */ digitalIdConfigId?: string; /** The name of the digital id Config that defines this digital Id. */ digitalIdConfigName?: string; /** The type of this digital Id. */ digitalIdConfigType?: "PIV_CARDHOLDER" | "PIV_CARD"; /** The current DN of the digital id. */ dn?: string; /** The UUID of this DigitalId. */ id?: string; }; type ScDefnVariable = { /** The default value of this variable. */ defaultValue?: string; /** A flag indicating if values for this variable should be displayed. */ displayable?: boolean; /** A flag indicating if the initial value for this variable should be generated. */ generate?: boolean; /** A length value used when generating values for this variable. */ generateLength?: number; /** The UUID of this SC Defn Variable. */ id?: string; /** A flag indicating if values for this variable can be modified. */ modifiable?: boolean; /** The name of this SC Defn Variable. */ name?: string; /** A value that specifies the order of this variable with respect to the other variables in the SC Defn. */ order?: number; /** Optional prompt to be used when prompting for a value for this variable. */ prompt?: string; /** A flag indicating if a value is required for this variable. */ required?: boolean; /** A value specifying restrictions on digits appearing in values of this variable. */ restrictionDigits?: "ALLOWED" | "REQUIRED" | "NOT_ALLOWED" | "NOT_SET"; /** A value specifying restrictions on lowercase characters appearing in values of this variable. */ restrictionLower?: "ALLOWED" | "REQUIRED" | "NOT_ALLOWED" | "NOT_SET"; /** A value indicating a maximum for values of this variable. How this is enforced depends on the variable type. */ restrictionMax?: number; /** A value indicating a minimum for values of this variable. How this is enforced depends on the variable type. */ restrictionMin?: number; /** A value specifying a regex that values of this variable must match. */ restrictionRegex?: string; /** A value specifying restrictions on special characters appearing in values of this variable. */ restrictionSpecial?: "ALLOWED" | "REQUIRED" | "NOT_ALLOWED" | "NOT_SET"; /** A value specifying restrictions on uppercase characters appearing in values of this variable. */ restrictionUpper?: "ALLOWED" | "REQUIRED" | "NOT_ALLOWED" | "NOT_SET"; /** The UUID of the SC Defn that owns this variable definition. */ scDefnId?: string; /** The type of this variable. */ "type"?: "STRING" | "BOOLEAN" | "INTEGER" | "UUID"; /** A flag indicating if values of this variable must be unique and if so within what scope. */ uniqueness?: "GLOBAL" | "USER" | "NONE"; /** A value that allows a variable to be defined unique in the scope of another variable. */ uniquenessScopeId?: string; }; type ScVariableValue = { scDefnVariable?: ScDefnVariable; /** The UUID of the SC Defn Variable that defines the variable. */ scDefnVariableId?: string; /** The variable value. */ value?: string; }; type SmartCredential = { /** A list of administration actions currently allowed for this smart credential. */ allowedActions?: ("ACTIVATE" | "REACTIVATE" | "UPDATE" | "UNASSIGN" | "UNBLOCK" | "ENABLE" | "DISABLE" | "DELETE" | "VIEW_CERTIFICATES")[]; cardDigitalConfig?: DigitalIdConfig; /** The UUID of the Card Digital Id config of this smart credential. If not set, the smart credential will not have a Card Digital Id. */ cardDigitalConfigId?: string; /** Indicates if the card digitalid config is required or not. */ cardDigitalConfigRequired?: boolean; cardHolderDigitalConfig?: DigitalIdConfig; /** The UUID of the Card Holder Digital Id config of this smart credential. If not set, the smart credential will not have a Card Holder Digital Id. */ cardHolderDigitalConfigId?: string; /** Indicates if the card holder digitalid config is required or not. */ cardHolderDigitalConfigRequired?: boolean; /** A list of certificates associated with this smart credential. */ certificates?: DigitalIdCert[]; /** The chip id of the smart card set when the smart credential is encoded. */ chipId?: string; /** A flag indicating if the smart credential is enrolled on a verified device. */ deviceVerified: boolean; /** A list of digital ids associated with this smart credential. */ digitalIds?: DigitalId[]; /** For smart credentials that have failed to encode, the encode message stores a message providing information about the failure. */ encodeMsg?: string; /** The encode state of a smart credential indicates if encoding has started, completed successfully or failed. */ encodeState?: "ENCODE_START" | "ENCODE_DONE" | "ENCODE_ERROR"; /** The enrollment state of a smart credential indicates if all of the necessary enrollment values have been collected. Only smart credentials in the ENROLLED state can be activated. */ enrollState?: "ENROLLING" | "ENROLLED"; /** For issued smart credentials, the expiry date is the date on which the smart credential will expire. */ expiryDate?: string; /** The unique UUID assigned to the smart credential when it is created. */ id?: string; /** The date on which the smart credential was issued. */ issueDate?: string; /** A flag indicating if notification is enabled for this smart credential. */ notifyEnabled?: boolean; /** The platform of the Mobile SC application on which this smart credential was encoded. */ platform?: string; /** The UUID of the Smart Credential Definition that defines this smart credential. */ scDefnId?: string; /** The name of the smart credential definition of this smart credential. */ scDefnName?: string; /** The unique serial number of the smart credential generated when it is created. */ serialNumber?: string; /** The state of the smart credential. Only smart credentials in the ACTIVE state can be used for authentication. */ state?: "ACTIVE" | "INACTIVE"; /** The UUID of the user that owns this smart credential. */ userId?: string; /** The user Id of the user that owns this smart credential. */ userUserId?: string; /** Variable values for this smart credential */ variableValues?: ScVariableValue[]; /** The version of the Mobile SC application on which this smart credential was encoded. */ version?: string; }; type TempAccessCode = { /** The actual temporary access code. This value will only be returned if the administrator has the TEMPACCESSCODECONTENTS:VIEW permission. */ code?: string; /** The date on which this temporary access code was created. */ createDate?: string; /** A flag indicating if this temporary access code is expired now. */ expired?: boolean; /** The expiry date of this temporary access code. If not set, it never expires. */ expiryDate?: string; /** The unique UUID assigned to the temporary access code when it is created. */ id?: string; /** The maximum number of times this temporary access code can be used. If not set, there are no limits. */ maxUses?: number; /** The number of times this temporary access code has been used. */ numUses?: number; }; type Token = { /** The algorithm type used by the token that was created or loaded into the system to generate OTP values. */ algorithmType?: "AT" | "OATH_HOTP" | "OATH_OCRA" | "OATH_TOTP" | "VENDOR"; /** Actions that can be performed on this token. */ allowedActions?: ("ACTIVATE" | "REACTIVATE" | "ACTIVATE_COMPLETE" | "DELETE" | "UNLOCK" | "ENABLE" | "DISABLE" | "RESET" | "ASSIGN" | "UNASSIGN")[]; /** A flag indicating if the token was activated on a verified app. */ appVerified: boolean; /** Optional text describing this token. */ description?: string; /** A flag indicating if the token is activated on a verified device. */ deviceVerified: boolean; /** The UUIDs of groups to which this token belongs. This value is only used for unassigned tokens. Only groups to which the current administrator has access will be returned. */ groups?: string[]; /** The unique UUID assigned to the token when it is created. */ id?: string; /** The identity verification status of the token. */ identityVerificationStatus?: "NOT_REQUIRED" | "REQUIRED" | "PENDING" | "VERIFIED" | "FAILED"; /** Optional label to identify an assigned token: a String up to 100 characters. */ label?: string; /** The date on which the token was last used for authentication. This value will be null if the token has never been used. */ lastUsedDate?: string; /** The date on which the token was created or loaded into the system. */ loadDate?: string; /** Base-64 encoded logo. If a custom logo is provided by the customer it is returned. Otherwise a system default logo is returned. */ logo?: string; /** An optional name for the token. */ name?: string; /** The mobile device platform on which an Entrust Soft Token was activated. */ platform?: string; /** A flag indicating if the Entrust Soft Token has registered for transactions. Only tokens that are registered can perform token push authentication. */ registeredForTransactions?: boolean; /** The serial number of the token either generated when the token was created or loaded into the system. */ serialNumber?: string; /** The state of the token. For most tokens, only tokens in the ACTIVE state can be used for authentication. Google Authenticator tokens in the ACTIVATING state can also be used for authentication. */ state?: "NEW" | "ACTIVATING" | "ACTIVE" | "INACTIVE" | "UNASSIGNED"; /** A flag indicating if the Token supports challenge response processing. */ supportsChallengeResponse?: boolean; /** A flag indicating if the Token supports response processing. */ supportsResponse?: boolean; /** A flag indicating if the Token supports signature processing. */ supportsSignature?: boolean; /** A flag indicating if the Token supports unlock processing. */ supportsUnlock?: boolean; /** A flag indicating if the Token supports unlock using TOTP processing. */ supportsUnlockTOTP?: boolean; /** The type of token specified when the token was created or loaded into the system. */ "type"?: "ENTRUST_PHYSICAL_TOKEN" | "ENTRUST_SOFT_TOKEN" | "GOOGLE_AUTHENTICATOR" | "OATH_PHYSICAL_TOKEN" | "ENTRUST_LEGACY_TOKEN"; /** If the token is assigned to a user, this value specifies that user's user id. */ userId?: string; }; type UserAlias = { /** The UUID of this user alias set when the user alias is created. */ id?: string; /** The type of user alias. A value of USERID is used for an alias that will represent the actual user id value. A value of CUSTOM is used for aliases manually created by an administrator. A value of DERIVED is defined for future use and should not be used at this time. */ "type"?: "CUSTOM" | "DERIVED" | "USERID"; /** The UUID of the user to which this user alias belongs. */ userId?: string; /** The value for the user alias. */ value?: string; }; type UserAttribute = { /** The UUID for this user attribute. Generated when the user attribute is created. */ id?: string; /** A flag indicating if users must have a value for this user attribute. */ mandatory: boolean; /** The name of this user attribute. */ name: string; /** A flag indicating if this user attribute is one of the system defined user attributes. */ systemDefined: boolean; /** Type of user attribute. Currently only used to specify the type of contact if the attribute is to be used for OTP delivery. */ "type"?: "NONE" | "OTP_EMAIL" | "OTP_SMS" | "OTP_VOICE" | "OTP_WECHAT" | "OTP_WHATSAPP"; /** A flag indicating if this attribute is intended to be unique. */ "unique": boolean; }; type UserAttributeValue = { /** A flag indicating if this user attribute value can be modified. */ editable?: boolean; /** The UUID of this user attribute value set when the user attribute value is created. */ id?: string; /** The last time the attribute value was updated. */ lastUpdate?: string; userAttribute?: UserAttribute; /** The UUID of the user attribute that defines this user attribute value. The userAttributeId must be provided when creating or modifying a user attribute value. */ userAttributeId?: string; /** The UUID of the user to which this user attribute value belongs. */ userId?: string; /** The value for the user attribute. */ value?: string; }; type UserExtraAttribute = { /** The name for the extra user attribute. */ name?: string; /** Type of custom user attribute. */ "type"?: "NONE" | "OTP_EMAIL" | "OTP_SMS" | "OTP_VOICE" | "OTP_WECHAT" | "OTP_WHATSAPP"; /** The value for the extra user attribute. */ value?: string; }; type UserExtraAttributeRead = { /** The UUID of this extra user attribute. */ id?: string; /** The name for the extra user attribute. */ name?: string; /** Type of custom user attribute. */ "type"?: "NONE" | "OTP_EMAIL" | "OTP_SMS" | "OTP_VOICE" | "OTP_WECHAT" | "OTP_WHATSAPP"; /** The value for the extra user attribute. */ value?: string; }; type UserPasswordDetails = { /** The name of the password. */ name?: string; /** The ID of the named password. */ namedPasswordId?: string; /** A flag indicating if the user password is compromised. */ passwordCompromised?: boolean; /** The password expiration time. */ passwordExpirationTime?: string; }; type User = { /** A list of all the users alternate emails. */ alternateEmails?: UserAlternateEmails[]; /** A list of all authenticators that the user has with their lockout status. */ authenticatorLockoutStatus?: UserAuthenticatorLockoutStatus[]; /** The DN of the user in the directory the user was synchronized from. */ directoryDN?: string; /** If the user was synchronized from a directory, the UUID of that directory. */ directoryId?: string; /** If the user was synchronized from a directory, the name of that directory. */ directoryName?: string; /** The objectGUID of the user in the directory the user was synchronized from. */ directoryObjectGUID?: string; /** The type of the directory user was synchronized from. */ directoryType?: "ON_PREM" | "AZURE" | "AD_CONNECTOR"; /** The email address of this user. This value may or may not be required depending on configuration. It must be set to use EMAIL OTP authentication and other features that require an email address. */ email?: string; /** An optional external ID for this user. This value can be used to track the external identity of an Identity as a Service user. */ externalId?: string; /** An optional value that describes the source when the user is synchronized from an external source. */ externalSource?: string; /** A list of all the FIDO tokens owned by this user. */ fidoTokens?: FidoToken[]; /** The first name of this user. This value may or may not be required depending on configuration. */ firstName?: string; /** Indicates whether a user is unable to authenticate due to inactivity. */ frozen?: boolean; /** Indicates a user's frozen grace period. */ frozenGracePeriod?: string; /** A list of all the grids owned by this user. */ grids?: Grid[]; /** A list of all groups to which this user belongs. */ groups?: Group[]; /** The unique UUID for this user. This value is generated by the service when a user is created. */ id?: string; /** The last time this user successfully authenticated. Null if the user has never authenticated. */ lastAuthTime?: string; /** When the user was last modified. */ lastModified?: string; /** The last name of this user. This value may or may not be required depending on configuration. */ lastName?: string; /** The locale of this user. If not set, the default account locale will be used. */ locale?: string; /** A flag indicating if this user is locked. */ locked?: boolean; /** The user authenticators that are locked. */ lockedAuthenticatorTypes?: ("MACHINE" | "PASSWORD" | "EXTERNAL" | "KBA" | "TEMP_ACCESS_CODE" | "OTP" | "GRID" | "TOKEN" | "TOKENCR" | "TOKENPUSH" | "FIDO" | "SMARTCREDENTIALPUSH" | "PASSWORD_AND_SECONDFACTOR" | "SMART_LOGIN" | "IDP" | "PASSKEY" | "IDP_AND_SECONDFACTOR" | "USER_CERTIFICATE" | "FACE" | "PASSTHROUGH" | "MAGICLINK")[]; /** The user authenticators that are locked. Deprecated: use lockedAuthenticatorTypes */ lockedAuthenticators?: ("PASSWORD" | "KBA" | "TEMP_ACCESS_CODE" | "GRID" | "OTP_EMAIL" | "OTP_SMS" | "OTP_VOICE" | "ENTRUST_SOFT_TOKEN" | "ENTRUST_SOFT_TOKEN_PUSH" | "GOOGLE_AUTHENTICATOR" | "HARDWARE_TOKEN" | "FIDO" | "SMARTCREDENTIALPUSH" | "USER_CERTIFICATE" | "MACHINE" | "FACE" | "PASSTHROUGH" | "TOKENCR" | "MAGICLINK")[]; /** If the user is locked, this value will specify the time at which the lockout will expire. */ lockoutExpiry?: string; /** Indicates whether Magic Links are enabled for this user. */ magicLinkEnabled?: boolean; /** A flag indicating if this user was migrated from Entrust IdentityGuard. */ migrated?: boolean; /** The mobile number of this user. This value may or may not be required depending on configuration. It must be set to use SMS OTP authentication. */ mobile?: string; /** A list of all oauth roles to which this user belongs. */ oauthRoles?: OAuthRole[]; /** A list of the user organizations. */ organizations?: Organization[]; /** If the user has an OTP, this attribute specifies when the user's OTP was created. */ otpCreateTime?: string; /** A flag indicating if the user password is compromised. */ passwordCompromised?: boolean; /** The password expiration time. */ passwordExpirationTime?: string; /** The phone number of this user. This value may or may not be required depending on configuration. It must be set to use VOICE OTP authentication. */ phone?: string; /** Preferred OTP delivery type (SMS, EMAIL or VOICE) or SYSTEM to use the system defined default. */ preferredOtpDelivery?: "EMAIL" | "SMS" | "VOICE" | "SYSTEM"; /** Preferred OTP delivery contact attribute for the given type (i.e., OTP_EMAIL, OTP_SMS, OTP_VOICE. An empty string means no override for that type). */ preferredOtpDeliveryContactAttributes?: { [key: string]: string; }; /** Indicates whether registration is enabled for this user. */ registrationEnabled?: boolean; /** Indicates whether self-registration is required. This attribute doesn't apply to administrators. */ registrationRequired?: boolean; /** The security ID of this user. The security ID is a unique value used to identity the user when performing smart card login to Microsoft Windows. */ securityId?: string; /** Indicates whether to show notifications to this user. */ showNotification?: boolean; /** A list of all the smart credentials owned by this user. */ smartCredentials?: SmartCredential[]; /** The state of this user. Only users in the ACTIVE state can perform authentication. */ state?: "ACTIVE" | "INACTIVE"; tempAccessCode?: TempAccessCode; /** A list of all the tokens owned by this user. */ tokens?: Token[]; /** The type of user. A value of LDAP_AD means the user was synchronized from a directory. A value of MGMT_UI means the user was created in Identity as a Service. A value of EXTERNAL means the user was synchronized from an external source. */ "type"?: "LDAP_AD" | "MGMT_UI" | "EXTERNAL"; /** A list of user aliases for this user. */ userAliases?: UserAlias[]; /** A list of user attribute values for this user. */ userAttributeValues?: UserAttributeValue[]; /** The user authenticator preference list. */ userAuthenticatorPreference?: ("MACHINE" | "PASSWORD" | "EXTERNAL" | "KBA" | "TEMP_ACCESS_CODE" | "OTP" | "GRID" | "TOKEN" | "TOKENCR" | "TOKENPUSH" | "FIDO" | "SMARTCREDENTIALPUSH" | "PASSWORD_AND_SECONDFACTOR" | "SMART_LOGIN" | "IDP" | "PASSKEY" | "IDP_AND_SECONDFACTOR" | "USER_CERTIFICATE" | "FACE" | "PASSTHROUGH" | "MAGICLINK")[]; /** The time this user was created. */ userCreationTime?: string; /** A list of extra optional attributes for this user. */ userExtraAttributes?: UserExtraAttribute[]; /** The user ID for this user. */ userId?: string; /** A list of the user password details. */ userPasswordDetails?: UserPasswordDetails[]; /** The user principal name of this user. This value may or may not be required depending on configuration. */ userPrincipalName?: string; /** Indicates whether verification is enabled for this user. */ verificationEnabled?: boolean; /** Indicates whether verification is required. This attribute doesn't apply to administrators. */ verificationRequired?: boolean; }; type UserRead = { /** A list of all the users alternate emails. */ alternateEmails?: UserAlternateEmails[]; /** A list of all authenticators that the user has with their lockout status. */ authenticatorLockoutStatus?: UserAuthenticatorLockoutStatus[]; /** The DN of the user in the directory the user was synchronized from. */ directoryDN?: string; /** If the user was synchronized from a directory, the UUID of that directory. */ directoryId?: string; /** If the user was synchronized from a directory, the name of that directory. */ directoryName?: string; /** The objectGUID of the user in the directory the user was synchronized from. */ directoryObjectGUID?: string; /** The type of the directory user was synchronized from. */ directoryType?: "ON_PREM" | "AZURE" | "AD_CONNECTOR"; /** The email address of this user. This value may or may not be required depending on configuration. It must be set to use EMAIL OTP authentication and other features that require an email address. */ email?: string; /** An optional external ID for this user. This value can be used to track the external identity of an Identity as a Service user. */ externalId?: string; /** An optional value that describes the source when the user is synchronized from an external source. */ externalSource?: string; /** A list of all the FIDO tokens owned by this user. */ fidoTokens?: FidoToken[]; /** The first name of this user. This value may or may not be required depending on configuration. */ firstName?: string; /** Indicates whether a user is unable to authenticate due to inactivity. */ frozen?: boolean; /** Indicates a user's frozen grace period. */ frozenGracePeriod?: string; /** A list of all the grids owned by this user. */ grids?: Grid[]; /** A list of all groups to which this user belongs. */ groups?: Group[]; /** The unique UUID for this user. This value is generated by the service when a user is created. */ id?: string; /** The last time this user successfully authenticated. Null if the user has never authenticated. */ lastAuthTime?: string; /** When the user was last modified. */ lastModified?: string; /** The last name of this user. This value may or may not be required depending on configuration. */ lastName?: string; /** The locale of this user. If not set, the default account locale will be used. */ locale?: string; /** A flag indicating if this user is locked. */ locked?: boolean; /** The user authenticators that are locked. */ lockedAuthenticatorTypes?: ("MACHINE" | "PASSWORD" | "EXTERNAL" | "KBA" | "TEMP_ACCESS_CODE" | "OTP" | "GRID" | "TOKEN" | "TOKENCR" | "TOKENPUSH" | "FIDO" | "SMARTCREDENTIALPUSH" | "PASSWORD_AND_SECONDFACTOR" | "SMART_LOGIN" | "IDP" | "PASSKEY" | "IDP_AND_SECONDFACTOR" | "USER_CERTIFICATE" | "FACE" | "PASSTHROUGH" | "MAGICLINK")[]; /** The user authenticators that are locked. Deprecated: use lockedAuthenticatorTypes */ lockedAuthenticators?: ("PASSWORD" | "KBA" | "TEMP_ACCESS_CODE" | "GRID" | "OTP_EMAIL" | "OTP_SMS" | "OTP_VOICE" | "ENTRUST_SOFT_TOKEN" | "ENTRUST_SOFT_TOKEN_PUSH" | "GOOGLE_AUTHENTICATOR" | "HARDWARE_TOKEN" | "FIDO" | "SMARTCREDENTIALPUSH" | "USER_CERTIFICATE" | "MACHINE" | "FACE" | "PASSTHROUGH" | "TOKENCR" | "MAGICLINK")[]; /** If the user is locked, this value will specify the time at which the lockout will expire. */ lockoutExpiry?: string; /** Indicates whether Magic Links are enabled for this user. */ magicLinkEnabled?: boolean; /** A flag indicating if this user was migrated from Entrust IdentityGuard. */ migrated?: boolean; /** The mobile number of this user. This value may or may not be required depending on configuration. It must be set to use SMS OTP authentication. */ mobile?: string; /** A list of all oauth roles to which this user belongs. */ oauthRoles?: OAuthRole[]; /** A list of the user organizations. */ organizations?: Organization[]; /** If the user has an OTP, this attribute specifies when the user's OTP was created. */ otpCreateTime?: string; /** A flag indicating if the user password is compromised. */ passwordCompromised?: boolean; /** The password expiration time. */ passwordExpirationTime?: string; /** The phone number of this user. This value may or may not be required depending on configuration. It must be set to use VOICE OTP authentication. */ phone?: string; /** Preferred OTP delivery type (SMS, EMAIL or VOICE) or SYSTEM to use the system defined default. */ preferredOtpDelivery?: "EMAIL" | "SMS" | "VOICE" | "SYSTEM"; /** Preferred OTP delivery contact attribute for the given type (i.e., OTP_EMAIL, OTP_SMS, OTP_VOICE. An empty string means no override for that type). */ preferredOtpDeliveryContactAttributes?: { [key: string]: string; }; /** Indicates whether registration is enabled for this user. */ registrationEnabled?: boolean; /** Indicates whether self-registration is required. This attribute doesn't apply to administrators. */ registrationRequired?: boolean; /** The security ID of this user. The security ID is a unique value used to identity the user when performing smart card login to Microsoft Windows. */ securityId?: string; /** Indicates whether to show notifications to this user. */ showNotification?: boolean; /** A list of all the smart credentials owned by this user. */ smartCredentials?: SmartCredential[]; /** The state of this user. Only users in the ACTIVE state can perform authentication. */ state?: "ACTIVE" | "INACTIVE"; tempAccessCode?: TempAccessCode; /** A list of all the tokens owned by this user. */ tokens?: Token[]; /** The type of user. A value of LDAP_AD means the user was synchronized from a directory. A value of MGMT_UI means the user was created in Identity as a Service. A value of EXTERNAL means the user was synchronized from an external source. */ "type"?: "LDAP_AD" | "MGMT_UI" | "EXTERNAL"; /** A list of user aliases for this user. */ userAliases?: UserAlias[]; /** A list of user attribute values for this user. */ userAttributeValues?: UserAttributeValue[]; /** The user authenticator preference list. */ userAuthenticatorPreference?: ("MACHINE" | "PASSWORD" | "EXTERNAL" | "KBA" | "TEMP_ACCESS_CODE" | "OTP" | "GRID" | "TOKEN" | "TOKENCR" | "TOKENPUSH" | "FIDO" | "SMARTCREDENTIALPUSH" | "PASSWORD_AND_SECONDFACTOR" | "SMART_LOGIN" | "IDP" | "PASSKEY" | "IDP_AND_SECONDFACTOR" | "USER_CERTIFICATE" | "FACE" | "PASSTHROUGH" | "MAGICLINK")[]; /** The time this user was created. */ userCreationTime?: string; /** A list of extra optional attributes for this user. */ userExtraAttributes?: UserExtraAttributeRead[]; /** The user ID for this user. */ userId?: string; /** A list of the user password details. */ userPasswordDetails?: UserPasswordDetails[]; /** The user principal name of this user. This value may or may not be required depending on configuration. */ userPrincipalName?: string; /** Indicates whether verification is enabled for this user. */ verificationEnabled?: boolean; /** Indicates whether verification is required. This attribute doesn't apply to administrators. */ verificationRequired?: boolean; }; type Tenant = { /** A flag indicating if this tenant is an authentication account. */ authenticationAccount: boolean; /** The name of the company that owns this tenant. */ companyName: string; /** The contract mode of a tenant, allowable values = 'PRODUCTION', 'TRIAL', example='TRIAL'. */ contractMode?: "PRODUCTION" | "TRIAL" | "UNKNOWN"; /** The hostname of the tenant. */ hostname: string; /** The UUID of this tenant within the service provider. */ id: string; /** A flag indicating if this tenant is an issuance account. */ issuanceAccount: boolean; /** A flag indicating if this tenant has been locked. */ locked: boolean; /** The ID of the preferred OTP provider associated with this tenant, if any. Only visible to root tenant. */ otpProviderId?: string; /** The previous hostname of the tenant. */ previousHostname?: string; /** A flag indicating if this child tenant is a service provider. */ serviceProvider: boolean; /** A flag indicating if this tenant is enabled for tenant management authentication. */ spIdp: boolean; }; type CreateTenantResult = { adminApiApplication?: AdminApiApplication; adminUser: User; tenant: Tenant; }; type CreateTenantResultRead = { adminApiApplication?: AdminApiApplication; adminUser: UserRead; tenant: Tenant; }; type CreateTenantAsyncStatus = { /** The error message describing the first error encountered processing the operation. */ errorMessage?: string; /** The unique UUID of the operation. Used to get status and results of operation */ id: string; /** The time this operation was initialized. */ initTime?: string; /** The time at which the operation completed processing. */ processingEndTime?: string; /** The time at which the operation began processing. */ processingStartTime?: string; /** How long the operation took to complete processing in milliseconds. */ processingTime?: number; /** The state of the operation. */ state: "FAILED" | "CANCELLED" | "COMPLETED" | "AWAITING_DATA" | "PROCESSING" | "SCHEDULED"; /** The subject of this operation. */ subject?: string; }; type UsageInfo = { /** The aggregation period used. */ aggregationPeriod: "DAILY" | "WEEKLY" | "MONTHLY"; /** The service bundle. */ bundleType?: string; /** The entitlements used in the aggregation period. */ count: number; /** The end time of the aggregation period. */ endTime: string; /** The unique UUID for this usage info. */ id: string; /** The start time of the aggregation period. */ startTime: string; /** The unique UUID of the tenant. */ tenantId: string; /** Whether the usage is associated to a trial tenant. */ trial: boolean; /** The type of this entitlement. */ usageType: "USERS" | "ISSUANCE"; }; type UsageInfoPage = { paging?: Paging; /** A single page with the list of usage info found. */ results: UsageInfo[]; }; type AdditionalFeature = { /** Enhanced geo location additional feature. */ enhancedGeoLocation?: boolean; }; type MobileFlashPass = { /** The entitlements consumed since start date during the entitlement period. */ consumed?: number; /** The date when the entitlement will end. */ endDate?: string; /** The number of FlashPass claims allowed during the period. */ quantity?: number; /** The date when the entitlement starts. */ startDate?: string; }; type FleetManagement = { /** Add on column to store fleetManagementOptIn flag */ addOn?: string; /** The entitlements consumed since start date during the entitlement period. */ consumed?: number; /** The date when the entitlement will end. */ endDate?: string; /** The number of FlashPass claims allowed during the period. */ quantity?: number; /** The date when the entitlement starts. */ startDate?: string; }; type ServiceBundle = { /** Identifies the bundle. */ bundleType: "ADVANCED" | "ESSENTIALS" | "PROFESSIONAL" | "ENTERPRISE" | "API" | "STANDARD" | "PLUS" | "PREMIUM" | "CONSUMER"; /** A number that allows to sort bundles of the same category by precedence. Read-only currently. */ rank?: number; /** An identifier used to report usage for this bundle. */ usageReportId?: string; }; type Issuance = { /** Add on column to store printer cert flag */ addOn?: string; /** The entitlements consumed since start date during a Trial period. */ consumed?: number; /** The date when the Trial period will end. This value is not returned if the account status is PRODUCTION. */ endDate?: string; /** The number of print jobs allowed during the Trial period. This value is not returned if the account status is PRODUCTION. */ quantity?: number; /** The service bundles supported. */ serviceBundles: ServiceBundle[]; /** The date when the Trial period starts. This value is not returned if the account status is PRODUCTION. */ startDate?: string; }; type PayToPrint = { /** Add on column to store PayToPrint addon */ addOn?: string; /** The entitlements consumed since start date during the entitlement period. */ consumed?: number; /** The date when the entitlement will end. */ endDate?: string; /** The number of PayToPrint prints allowed during the period. */ quantity?: number; /** The date when the entitlement starts. */ startDate?: string; }; type PrinterEntitlement = { /** The entitlements consumed since start date during the entitlement period. */ consumed?: number; /** The date when the entitlement will end. */ endDate?: string; /** The number of FlashPass claims allowed during the period. */ quantity?: number; /** The date when the entitlement starts. */ startDate?: string; }; type SmsVoice = { /** The number of entitlements allotted to the current account. If the account is an SP then entitlements can be allocated to child accounts. */ allotment?: number; /** The entitlements consumed since start date during the entitlement period. */ consumed?: number; /** The date when the entitlement will end. */ endDate?: string; /** The date when the grace period for the entitlement will end. */ gracePeriodEndDate?: string; /** The overage type of this entitlement. */ overageType?: "YES" | "NO" | "UNLIMITED"; /** The number of SMS/Voice credits allowed during the period. */ quantity?: number; /** The number of SMS/Voice credits allowed when the entitlement is renewed. */ renewalQuantity?: number; /** The date when the entitlement starts. */ startDate?: string; }; type Entitlement = { additionalFeatures?: AdditionalFeature; /** The contract mode of a tenant, allowable values = 'PRODUCTION', 'TRIAL', example='TRIAL'. */ contractMode?: "PRODUCTION" | "TRIAL" | "UNKNOWN"; /** The contract number of this entitlement. */ contractNumber?: string; /** The customer ID. */ customerId?: string; /** The end date of this entitlement in UTC time. */ endDate: string; /** The entitlement ID. */ entitlementId?: string; flashPass?: MobileFlashPass; fleetManagement?: FleetManagement; /** The USERS grace period end date of this entitlement in UTC time. */ gracePeriodEndDate?: string; /** The unique UUID of this entitlement. */ id: string; issuance?: Issuance; payToPrint?: PayToPrint; printer?: PrinterEntitlement; /** The quantity of this entitlement. */ quantity: number; /** The unused quantity of this entitlement (USERS type only). */ remaining?: number; /** Whether Smart Card Smart Login is enabled or not. */ smartLoginEnabled?: boolean; smsVoice?: SmsVoice; /** The start date of this entitlement in UTC time. */ startDate: string; /** The status of this entitlement. */ status: "ACTIVE" | "INACTIVE" | "TERMINATED"; /** The subscription line ID. */ subscriptionLineId?: string; /** The type of this entitlement. */ "type": "USERS" | "TRANSACTIONS"; /** The entitlement bundles that defines the set of features available for authentication accounts. */ userBundles?: ServiceBundle[]; /** The billing type for user entitlements. Defaults to PRE_PAID if not provided. */ usersBillingType?: "PRE_PAID" | "PAY_PER_USE"; }; type FlashPassParms = { /** The number of FlashPass pass claims allowed during the Trial period. */ quantity?: 25 | 100; }; type FleetManagementParms = object; type IssuanceParms = { /** Add on column to store printer cert flag */ addOn?: string; /** The date when the Trial period will end. The value must be after the start date. If specified, this value cannot be more than 30 days after start date. */ endDate?: string; /** The number of print jobs allowed during the Trial period (required during creation). */ quantity?: 25 | 100; /** The service bundles supported. At least one bundle must be defined. */ serviceBundles?: ServiceBundle[]; /** The date when the Trial period starts. This value cannot be in the future. If not specified, it defaults to the current date. */ startDate?: string; }; type PrinterParms = object; type SmsVoiceParms = { /** If set to true when updating an SMSVOICE entitlement, the existing entitlement is removed. This attribute is ignored when creating an SMSVOICE entitlement. */ deleteEntitlement?: boolean; /** The date when the entitlement period will end. The value must be after the start date. */ endDate?: string; /** The number of SMS/Voice credits allowed during the entitlement period. */ quantity?: number; /** The number of SMS/Voice credits allowed when the entitlement is renewed. */ renewalQuantity?: number; /** The date when the entitlement period starts. This value cannot be in the future. If not specified, it defaults to the current date. */ startDate?: string; }; type EntitlementParms = { additionalFeatures?: AdditionalFeature; /** The contract mode of a tenant (required during creation), allowable values = 'PRODUCTION', 'TRIAL'. */ contractMode?: "PRODUCTION" | "TRIAL" | "UNKNOWN"; /** The contract number. */ contractNumber?: string; /** The customer ID. */ customerId?: string; /** The date this entitlement will end. The value must be after the start date. If not specified, this value defaults to the end date of the service provider's entitlement. */ endDate?: string; /** The entitlement ID. */ entitlementId?: string; flashPass?: FlashPassParms; fleetManagement?: FleetManagementParms; issuance?: IssuanceParms; printer?: PrinterParms; /** The number of entitlements assigned to the tenant (required during creation). The service provider must have enough available entitlements to meet this request. */ quantity?: number; /** Whether Smart Card Smart Login is enabled or not. */ smartLoginEnabled?: boolean; smsVoice?: SmsVoiceParms; /** The date this entitlement will start. If not specified, it defaults to the current date. This value cannot be in the future. */ startDate?: string; /** The status of this entitlement. */ status?: "ACTIVE" | "INACTIVE" | "TERMINATED"; /** The subscription line ID. */ subscriptionLineId?: string; /** The type of entitlement. Currently this value must be USERS. If not specified, this value defaults to USERS. */ "type"?: "USERS" | "TRANSACTIONS"; /** [DEPRECATED] The type of entitlement (ignored if type is provided). Currently this value must be USERS. If not specified, this value defaults to USERS. */ usageType?: "USERS" | "TRANSACTIONS"; /** The entitlement bundles that defines the set of features available for authentication accounts. */ userBundles?: ServiceBundle[]; /** The billing type for user entitlements. Defaults to PRE_PAID if not provided. */ usersBillingType?: "PRE_PAID" | "PAY_PER_USE"; }; type TenantsPage = { paging?: Paging; /** A single page with the list of tenants found. */ results: Tenant[]; }; type UserParms = { /** Indicates if the user is granted a new frozen grace period. This value is not used when creating a user. If provided, it will be ignored. */ applyGracePeriod?: boolean; /** The email address of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. It must be set to use EMAIL OTP authentication and other features that require an email address. To remove the existing value, set the value to an empty string. */ email?: string; /** Indicates if a verification email message should be sent to the user if the user now requires verification. The user's policy requiring user verification must also be enabled for the user. If not set, this value defaults to true. */ emailVerification?: boolean; /** An optional external ID for this user. This value can be used to track the external identity of an Identity as a Service user. To unset the external ID, specify an empty string. */ externalId?: string; /** An optional value that describes the source when the user is synchronized from an external source. To unset the external source, specify an empty string. */ externalSource?: string; /** The first name of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. To remove the existing value, set the value to an empty string. */ firstName?: string; /** A list of group UUIDs to be assigned to this user. If specified, these groups replace existing groups. */ groups?: string[]; /** The last name of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. To remove the existing value, set the value to an empty string. */ lastName?: string; /** The locale of this user. If not set, the default account locale will be used. To remove the existing value, set the value to an empty string. */ locale?: "da" | "de" | "en" | "es" | "fr" | "it" | "ja" | "ko" | "nl" | "nb" | "pl" | "pt" | "ru" | "sv" | "th" | "tr" | "zh-cn" | "zh-tw"; /** Indicates if all the user's authenticators are locked or not. */ lock?: boolean; /** The mobile number of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. It must be set to use SMS OTP authentication. To remove the existing value, set the value to an empty string. */ mobile?: string; /** A list of oauth role UUIDs to be assigned to this user. If specified, these oauth roles replace existing oauth roles. */ oauthRoles?: string[]; /** A list of organization UUIDs to be assigned to this user. If specified, these organizations replace existing organizations. */ organizations?: string[]; /** The phone number of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. It must be set to use VOICE OTP authentication. To remove the existing value, set the value to an empty string. */ phone?: string; /** Preferred OTP delivery type (SMS, EMAIL or VOICE) or SYSTEM to use the system defined default. */ preferredOtpDelivery?: "EMAIL" | "SMS" | "VOICE" | "SYSTEM"; /** Preferred OTP delivery contact attribute for the given type (i.e., OTP_EMAIL, OTP_SMS, OTP_VOICE. An empty string means no override for that type). */ preferredOtpDeliveryContactAttributes?: { [key: string]: string; }; /** Indicates whether self-registration is required. If not set when the user is created, this value defaults to true. */ registrationRequired?: boolean; /** The security ID of this user. The security ID is a unique value used to identity the user when performing smart card login to Microsoft Windows. */ securityId?: string; /** The state of this user. Only users in the ACTIVE state can perform authentication. If not set when the user is created, this value defaults to ACTIVE. */ state?: "ACTIVE" | "INACTIVE"; /** A list of user aliases for this user. Alias values must be unique with respect to the userId and other aliases of this user and other users. */ userAliases?: UserAlias[]; /** A list of user attribute values for this user. */ userAttributeValues?: UserAttributeValue[]; /** A list of extra optional attributes for this user. */ userExtraAttributes?: UserExtraAttribute[]; /** The user ID for this user. This value is required when creating the user, optional during update. The userId must be unique with respect to aliases of this user and the userId and aliases of all other users. */ userId?: string; /** The user principal name of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. To remove the existing value, set the value to an empty string. */ userPrincipalName?: string; /** Indicates whether verification is required. If not set when the user is created, this value defaults to true. */ verificationRequired?: boolean; }; type UserParmsRead = { /** Indicates if the user is granted a new frozen grace period. This value is not used when creating a user. If provided, it will be ignored. */ applyGracePeriod?: boolean; /** The email address of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. It must be set to use EMAIL OTP authentication and other features that require an email address. To remove the existing value, set the value to an empty string. */ email?: string; /** Indicates if a verification email message should be sent to the user if the user now requires verification. The user's policy requiring user verification must also be enabled for the user. If not set, this value defaults to true. */ emailVerification?: boolean; /** An optional external ID for this user. This value can be used to track the external identity of an Identity as a Service user. To unset the external ID, specify an empty string. */ externalId?: string; /** An optional value that describes the source when the user is synchronized from an external source. To unset the external source, specify an empty string. */ externalSource?: string; /** The first name of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. To remove the existing value, set the value to an empty string. */ firstName?: string; /** A list of group UUIDs to be assigned to this user. If specified, these groups replace existing groups. */ groups?: string[]; /** The last name of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. To remove the existing value, set the value to an empty string. */ lastName?: string; /** The locale of this user. If not set, the default account locale will be used. To remove the existing value, set the value to an empty string. */ locale?: "da" | "de" | "en" | "es" | "fr" | "it" | "ja" | "ko" | "nl" | "nb" | "pl" | "pt" | "ru" | "sv" | "th" | "tr" | "zh-cn" | "zh-tw"; /** Indicates if all the user's authenticators are locked or not. */ lock?: boolean; /** The mobile number of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. It must be set to use SMS OTP authentication. To remove the existing value, set the value to an empty string. */ mobile?: string; /** A list of oauth role UUIDs to be assigned to this user. If specified, these oauth roles replace existing oauth roles. */ oauthRoles?: string[]; /** A list of organization UUIDs to be assigned to this user. If specified, these organizations replace existing organizations. */ organizations?: string[]; /** The phone number of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. It must be set to use VOICE OTP authentication. To remove the existing value, set the value to an empty string. */ phone?: string; /** Preferred OTP delivery type (SMS, EMAIL or VOICE) or SYSTEM to use the system defined default. */ preferredOtpDelivery?: "EMAIL" | "SMS" | "VOICE" | "SYSTEM"; /** Preferred OTP delivery contact attribute for the given type (i.e., OTP_EMAIL, OTP_SMS, OTP_VOICE. An empty string means no override for that type). */ preferredOtpDeliveryContactAttributes?: { [key: string]: string; }; /** Indicates whether self-registration is required. If not set when the user is created, this value defaults to true. */ registrationRequired?: boolean; /** The security ID of this user. The security ID is a unique value used to identity the user when performing smart card login to Microsoft Windows. */ securityId?: string; /** The state of this user. Only users in the ACTIVE state can perform authentication. If not set when the user is created, this value defaults to ACTIVE. */ state?: "ACTIVE" | "INACTIVE"; /** A list of user aliases for this user. Alias values must be unique with respect to the userId and other aliases of this user and other users. */ userAliases?: UserAlias[]; /** A list of user attribute values for this user. */ userAttributeValues?: UserAttributeValue[]; /** A list of extra optional attributes for this user. */ userExtraAttributes?: UserExtraAttributeRead[]; /** The user ID for this user. This value is required when creating the user, optional during update. The userId must be unique with respect to aliases of this user and the userId and aliases of all other users. */ userId?: string; /** The user principal name of this user. This value may or may not be required depending on configuration. If it is required, it must be specified when creating the user. If it is required, it must be specified when updating the user and a value is not currently set. To remove the existing value, set the value to an empty string. */ userPrincipalName?: string; /** Indicates whether verification is required. If not set when the user is created, this value defaults to true. */ verificationRequired?: boolean; }; type TenantParms = { /** When creating a new tenant as a child of the root service provider set this to true if the tenant is to be an authentication service. If not specified, it defaults to true. You cannot set the authenticate and issuance values to both true or both false. A child of a non-root service provider inherits the value of its service provider and if specified, this value is ignored. */ authenticationAccount?: boolean; /** The country two-letter code (ISO 3166-1) of the location of the company that will own this account. */ companyCountry?: string; /** The name of the company that will own this account. This value is required. */ companyName: string; /** The province/state two-letter code (postal abbreviation) of the location of the company that will own this account. This value is required for companies in the United States or Canada when the companyCountry attribute is provided. */ companyState?: string; /** The domain for this account. This value is required when creating a tenant */ domain: string; /** When creating a new tenant as a child of the root service provider set this to true if the tenant is to be an issuance service. If not specified, it defaults to false. You cannot set the authenticate and issuance values to both true or both false. A child of a non-root service provider inherits the value of its service provider and if specified, this value is ignored. */ issuanceAccount?: boolean; /** When creating a new tenant set this to true if the tenant is to be a service provider. */ serviceProvider?: boolean; }; type CreateTenantParms = { adminApiApplication?: AdminApiApplicationParms; adminUser: UserParms; /** A flag indicating if a welcome email should be delivered. If not set, it defaults to false. */ deliverWelcomeEmail?: boolean; entitlements?: EntitlementParms; tenant: TenantParms; }; type CreateTenantParmsRead = { adminApiApplication?: AdminApiApplicationParms; adminUser: UserParmsRead; /** A flag indicating if a welcome email should be delivered. If not set, it defaults to false. */ deliverWelcomeEmail?: boolean; entitlements?: EntitlementParms; tenant: TenantParms; }; /** * Authenticate to an Admin API application. */ declare function authenticateAdminApiUsingPost({ adminApiAuthentication }: { adminApiAuthentication: AdminApiAuthentication; }, opts?: Oazapfts.RequestOpts): Promise>; /** * List application information */ declare function listApplicationInfoUsingGet(opts?: Oazapfts.RequestOpts): Promise>; /** * List Admin API application */ declare function listAdminApiApplicationsUsingGet(opts?: Oazapfts.RequestOpts): Promise>; /** * Create Admin API application */ declare function createAdminApiApplicationUsingPost({ adminApiApplicationParms }: { adminApiApplicationParms: AdminApiApplicationParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Regenerate Admin API application shared secret */ declare function updateAdminApiSharedSecretUsingPut({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get Admin API application */ declare function getAdminApiApplicationUsingGet({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Update Admin API application */ declare function updateAdminApiApplicationUsingPut({ id, adminApiApplicationParms }: { id: string; adminApiApplicationParms: AdminApiApplicationParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Remove Admin API application */ declare function removeAdminApiApplicationUsingDelete({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * List application templates */ declare function listApplicationTemplatesUsingGet(opts?: Oazapfts.RequestOpts): Promise>; /** * Update enrollment records. Caller requires the ENROLLMENTS:EDIT permission. */ declare function updateEnrollments({ enrollmentApiPayload }: { enrollmentApiPayload: EnrollmentApiPayload; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Create enrollment records. Caller requires the ENROLLMENTS:ADD permission. */ declare function createEnrollments({ enrollmentApiPayload }: { enrollmentApiPayload: EnrollmentApiPayload; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Delete enrollment records. Caller requires the ENROLLMENTS:REMOVE permission. */ declare function deleteEnrollments({ enrollmentApiPayload }: { enrollmentApiPayload: EnrollmentApiPayload; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Read enrollment records. Caller requires the ENROLLMENTS:VIEW permission. */ declare function readEnrollments({ readEnrollmentApiPayload }: { readEnrollmentApiPayload: ReadEnrollmentApiPayload; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get all issued bulk mobile flash pass request(s) */ declare function getIssueMfpBulkOperationDetails(opts?: Oazapfts.RequestOpts): Promise>; /** * Create bulk mobile flash pass request (Deprecated) */ declare function issueMobileFlashPassBulkOperation({ enrollmentMultiFlashPassApiRequestV1 }: { enrollmentMultiFlashPassApiRequestV1: EnrollmentMultiFlashPassApiRequestV1; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Cancel mobile flash pass bulk operation */ declare function cancelMobileFlashPassBulkOperation({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Download mobile flash pass bulk operation logs */ declare function downloadMfpBulkOperationLogs({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get mobile flash pass download URI */ declare function getFlashPassDownloadUri({ walletType, enrollmentId }: { walletType: string; enrollmentId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Download Apple Wallet mobile flash pass. */ declare function downloadAppleMobileFlashPass({ enrollmentId, claimToken }: { enrollmentId: string; claimToken: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Download Google Wallet mobile flash pass. */ declare function downloadGoogleMobileFlashPass({ enrollmentId, claimToken }: { enrollmentId: string; claimToken: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get mobile flash pass request details */ declare function getMobileFlashPassRequestDetails({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get all bulk print enrollments request(s) */ declare function getPrintEnrollmentsBulkOperationDetails(opts?: Oazapfts.RequestOpts): Promise>; /** * Create bulk print enrollment request */ declare function printEnrollmentsBulkOperation({ enrollmentMultiPrintApiRequestV1 }: { enrollmentMultiPrintApiRequestV1: EnrollmentMultiPrintApiRequestV1; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Cancel print enrollments bulk operation */ declare function cancelPrintEnrollmentsBulkOperation({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Download print enrollments bulk operation logs */ declare function downloadPrintEnrollmentsBulkOperationLogs({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Resume a print job after pre print operation */ declare function resumePrintJob({ resumePrintJobApiRequest }: { resumePrintJobApiRequest: ResumePrintJobApiRequest; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Print single enrollment */ declare function singleEnrollmentPrint({ enrollmentPrintApiRequestV1 }: { enrollmentPrintApiRequestV1: EnrollmentPrintApiRequestV1; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get print request details */ declare function getPrintRequestDetails({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get counts for different prints. */ declare function getPrintCounts(opts?: Oazapfts.RequestOpts): Promise>; /** * Gets all printers. */ declare function readPrinters({ fields, withStatus }: { fields?: string; withStatus?: boolean; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Creates a printer. */ declare function createPrinter({ printer }: { printer: Printer; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Retrieve print job status. */ declare function getPrintStatus({ printStatusId }: { printStatusId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Cancel an executing print job. */ declare function cancelPrint({ printStatusId }: { printStatusId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Updates an executing print job. */ declare function updatePrint({ printStatusId, basicPrintUpdateRequest }: { printStatusId: string; basicPrintUpdateRequest: BasicPrintUpdateRequest; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Retrieve count of registered printers */ declare function printersSummary(opts?: Oazapfts.RequestOpts): Promise>; /** * Return a specified printer. */ declare function readPrinter({ printerId }: { printerId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Update the specified printer. */ declare function replacePrinter({ printerId, printer }: { printerId: string; printer: Printer; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Deletes a printer by ID. */ declare function deletePrinter({ printerId }: { printerId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get the preferences for the specified printer. */ declare function readPrinterPreferences({ printerId }: { printerId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Update the preferences for the specified printer. */ declare function replacePrinterPreferences({ printerId, printerPreferences }: { printerId: string; printerPreferences: PrinterPreferences; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Perform basic print job. */ declare function print({ printerId, basicPrintRequest }: { printerId: string; basicPrintRequest: BasicPrintRequest; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Deletes a lost printer by printer id and lost tenant ID. */ declare function deletePrinterWithTenantId({ printerId, tenantId }: { printerId: string; tenantId: string; }, opts?: Oazapfts.RequestOpts): Promise<{ status: number; headers: Headers; contentType: string | null; data: string | undefined; }>; /** * List all print jobs. */ declare function getPrintJobs(opts?: Oazapfts.RequestOpts): Promise>; /** * View print jobs in paginated form. */ declare function getPaginatedPrintJobs({ searchParms }: { searchParms: SearchParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get the given print job. */ declare function getPrintJob({ printJobId }: { printJobId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Delete the given print job. */ declare function deletePrintJob({ printJobId }: { printJobId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Cancel all active jobs for a given printer. */ declare function cancelAllActivePrintJobs({ printerId }: { printerId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * List roles */ declare function listSiteRolesUsingGet(opts?: Oazapfts.RequestOpts): Promise>; /** * Get a role */ declare function getSiteRoleUsingGet({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get Tenant Identity Provider and Service Provider OIDC Application for Tenant Management. */ declare function getSpIdentityProviderUsingGet({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Set Tenant Identity Provider and Service Provider OIDC Application for Tenant Management */ declare function setSpIdentityProviderUsingPut({ id, spIdentityProviderParms }: { id: string; spIdentityProviderParms: SpIdentityProviderParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * List all site roles assigned to user */ declare function getUserRolesUsingGet({ userid }: { userid: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get site role assigned to user */ declare function getUserSiteRoleAssociationUsingGet({ userid, roleid }: { userid: string; roleid: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Set user role */ declare function modifyUserSiteRoleAssociationUsingPut({ userid, roleid }: { userid: string; roleid: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Delete a site role from a user */ declare function deleteUserSiteRoleAssociationUsingDelete({ userid, roleid }: { userid: string; roleid: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * List webhooks */ declare function getWebhooksUsingGet(opts?: Oazapfts.RequestOpts): Promise>; /** * Register a webhook */ declare function createWebhookUsingPost({ webhookParms }: { webhookParms: WebhookParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Test a webhook */ declare function testWebhookUsingPost({ id, webhookTestParms }: { id: string; webhookTestParms?: WebhookTestParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get a webhook by id */ declare function readWebhookUsingGet({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Update a webhook */ declare function updateWebhookUsingPut({ id, webhookParms }: { id: string; webhookParms: WebhookParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Delete a webhook */ declare function deleteWebhookUsingDelete({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Update Enrollments */ declare function updateEnrollmentsV2({ body }: { body: EnrollmentRequest[]; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Delete Enrollments */ declare function deleteEnrollmentsV2({ enrollmentDelete }: { enrollmentDelete: EnrollmentDelete; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Read Enrollment designs name */ declare function readEnrollmentsDesignNames(opts?: Oazapfts.RequestOpts): Promise>; /** * Read Enrollments */ declare function readEnrollmentsV2({ enrollmentDesignName, offset, limit, body }: { enrollmentDesignName: string; offset?: number; limit?: number; body?: Field[]; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Create Enrollments */ declare function createEnrollmentsV2({ enrollmentDesignName, body }: { enrollmentDesignName: string; body: EnrollmentRequest[]; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Read Enrollment */ declare function readEnrollmentV2({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Create bulk mobile flash pass request V2 */ declare function issueMobileFlashPassBulkOperationV2({ enrollmentMultiFlashPassApiRequestV2 }: { enrollmentMultiFlashPassApiRequestV2: EnrollmentMultiFlashPassApiRequestV2; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Download mobile flash pass logs V2 */ declare function downloadMfpLogsV2({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Create bulk print enrollment request V2 */ declare function printEnrollmentsBulkOperationV2({ enrollmentMultiPrintApiRequestV2 }: { enrollmentMultiPrintApiRequestV2: EnrollmentMultiPrintApiRequestV2; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Download print enrollments logs V2 */ declare function downloadPrintEnrollmentsLogsV2({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Print single enrollment */ declare function singleEnrollmentPrintV2({ singleEnrollmentPrintRequest }: { singleEnrollmentPrintRequest: SingleEnrollmentPrintRequest; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Gets all printers. */ declare function getPrinters(opts?: Oazapfts.RequestOpts): Promise>; /** * Gets printers with group restriction. */ declare function getPrintersWithGroupRestriction(opts?: Oazapfts.RequestOpts): Promise>; /** * Return a specified printer using printer device id. */ declare function readPrinterByDeviceId({ deviceId }: { deviceId: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Update the specified printer. */ declare function updatePrinterV2({ printerId, updatePrinterV2Request }: { printerId: string; updatePrinterV2Request: UpdatePrinterV2Request; }, opts?: Oazapfts.RequestOpts): Promise>; /** * View print jobs in paginated form. */ declare function getPaginatedPrintJobsV2({ searchParams }: { searchParams?: SearchParams; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get the result of an asynchronous tenant creation operation */ declare function getCreateTenantAsyncResultUsingGet({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get the status of an asynchronous tenant creation operation */ declare function getCreateTenantAsyncStatusUsingGet({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Lists a page of entitlement usage information */ declare function getEntitlementUsageInfoUsingPost({ searchParms }: { searchParms: SearchParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get a tenant */ declare function getTenantUsingGet({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Delete a tenant */ declare function removeTenantUsingDelete({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Lock a tenant */ declare function lockTenantUsingPut({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Unlock a tenant */ declare function unlockTenantUsingPut({ id }: { id: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get entitlements for tenant */ declare function getTenantEntitlementsUsingGet({ tenantid }: { tenantid: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Set an entitlement */ declare function setTenantEntitlementUsingPut({ tenantid, entitlementParms }: { tenantid: string; entitlementParms: EntitlementParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Get an entitlement */ declare function getTenantEntitlementUsingGet({ tenantid, $type }: { tenantid: string; $type: "USERS" | "TRANSACTIONS"; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Delete an entitlement */ declare function deleteTenantEntitlementUsingDelete({ tenantid, $type }: { tenantid: string; $type: string; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Lists a page of tenants */ declare function getTenantsPageUsingPost({ searchParms }: { searchParms: SearchParms; }, opts?: Oazapfts.RequestOpts): Promise>; /** * Create a tenant asynchronously */ declare function createTenantAsyncUsingPost({ createTenantParms }: { createTenantParms: CreateTenantParms; }, opts?: Oazapfts.RequestOpts): Promise>; export { updateWebhookUsingPut, updatePrinterV2, updatePrint, updateEnrollmentsV2, updateEnrollments, updateAdminApiSharedSecretUsingPut, updateAdminApiApplicationUsingPut, unlockTenantUsingPut, testWebhookUsingPost, singleEnrollmentPrintV2, singleEnrollmentPrint, setTenantEntitlementUsingPut, setSpIdentityProviderUsingPut, servers, resumePrintJob, replacePrinterPreferences, replacePrinter, removeTenantUsingDelete, removeAdminApiApplicationUsingDelete, readWebhookUsingGet, readPrinters, readPrinterPreferences, readPrinterByDeviceId, readPrinter, readEnrollmentsV2, readEnrollmentsDesignNames, readEnrollments, readEnrollmentV2, printersSummary, printEnrollmentsBulkOperationV2, printEnrollmentsBulkOperation, print, modifyUserSiteRoleAssociationUsingPut, lockTenantUsingPut, listSiteRolesUsingGet, listApplicationTemplatesUsingGet, listApplicationInfoUsingGet, listAdminApiApplicationsUsingGet, issueMobileFlashPassBulkOperationV2, issueMobileFlashPassBulkOperation, getWebhooksUsingGet, getUserSiteRoleAssociationUsingGet, getUserRolesUsingGet, getTenantsPageUsingPost, getTenantUsingGet, getTenantEntitlementsUsingGet, getTenantEntitlementUsingGet, getSpIdentityProviderUsingGet, getSiteRoleUsingGet, getPrintersWithGroupRestriction, getPrinters, getPrintStatus, getPrintRequestDetails, getPrintJobs, getPrintJob, getPrintEnrollmentsBulkOperationDetails, getPrintCounts, getPaginatedPrintJobsV2, getPaginatedPrintJobs, getMobileFlashPassRequestDetails, getIssueMfpBulkOperationDetails, getFlashPassDownloadUri, getEntitlementUsageInfoUsingPost, getCreateTenantAsyncStatusUsingGet, getCreateTenantAsyncResultUsingGet, getAdminApiApplicationUsingGet, downloadPrintEnrollmentsLogsV2, downloadPrintEnrollmentsBulkOperationLogs, downloadMfpLogsV2, downloadMfpBulkOperationLogs, downloadGoogleMobileFlashPass, downloadAppleMobileFlashPass, deleteWebhookUsingDelete, deleteUserSiteRoleAssociationUsingDelete, deleteTenantEntitlementUsingDelete, deletePrinterWithTenantId, deletePrinter, deletePrintJob, deleteEnrollmentsV2, deleteEnrollments, defaults, createWebhookUsingPost, createTenantAsyncUsingPost, createPrinter, createEnrollmentsV2, createEnrollments, createAdminApiApplicationUsingPost, cancelPrintEnrollmentsBulkOperation, cancelPrint, cancelMobileFlashPassBulkOperation, cancelAllActivePrintJobs, authenticateAdminApiUsingPost, WebhookTestParms, WebhookParms, WebhookEvent, Webhook, UserRead, UserPasswordDetails, UserParmsRead, UserParms, UserExtraAttributeRead, UserExtraAttribute, UserAuthenticatorLockoutStatus, UserAttributeValue, UserAttribute, UserAlternateEmails, UserAlias, User, UsageInfoPage, UsageInfo, UpdatePrinterV2Request, Token, TenantsPage, TenantParms, Tenant, TempAccessCode, SpIdentityProviderParms, SpIdentityProvider, SmsVoiceParms, SmsVoice, SmartCredential, SmartCardCommandResponse, SmartCardCommand, SingleEnrollmentPrintRequest, ServiceBundle, SearchParms, SearchParams, SearchByAttribute, SearchAttribute, ScVariableValue, ScDefnVariable, RoleUser, Role, ResumePrintJobApiResponse, ResumePrintJobApiRequest, ResourceIdResponseRead, ResourceIdResponse, ReadEnrollmentApiPayload, PrinterSummaryResponse, PrinterRead, PrinterPreferences, PrinterParms, PrinterEntitlement, Printer, PrintRequestDetails, PrintQueuePaging, PrintOperationResponseRead, PrintOperationResponse, PrintJobRecord, PrintJob, PrintImageLayer, PrintCountResponse, PrintCount, Print, Permission, PayToPrint, Paging, Organization, OrderByAttribute, OrderAttribute, OAuthRole, MobileFlashPassRequestDetails, MobileFlashPass, MagStripeEncodeCommands, MagStripe, Laminators, Lamination, IssueMobileFlashPassBulkOperationDetails, IssuanceParms, Issuance, Group, Grid, FleetManagementParms, FleetManagement, FlashPassParms, Field, FidoToken, ErrorInfo, Error, EntitlementParms, Entitlement, EnrollmentResponse, EnrollmentRequest, EnrollmentPrintApiResponse, EnrollmentPrintApiRequestV1, EnrollmentMultiPrintApiRequestV2, EnrollmentMultiPrintApiRequestV1, EnrollmentMultiFlashPassApiRequestV2, EnrollmentMultiFlashPassApiRequestV1, EnrollmentDesignName, EnrollmentDelete, EnrollmentApiRequestPrinter, EnrollmentApiPayload, DigitalIdConfigVariable, DigitalIdConfigSubjectAltName, DigitalIdConfigCertTemplate, DigitalIdConfig, DigitalIdCert, DigitalId, CredentialDesignPrintRequestPrinter, CreateTenantResultRead, CreateTenantResult, CreateTenantParmsRead, CreateTenantParms, CreateTenantAsyncStatus, BulkPrintOperationDetails, Billing, BasicPrintUpdateRequestSmartcard, BasicPrintUpdateRequest, BasicPrintResponseData, BasicPrintResponse, BasicPrintRequestSmartcard, BasicPrintRequest, ApplicationTemplate, ApplicationInfo, AdminApiAuthenticationResult, AdminApiAuthentication, AdminApiApplicationParms, AdminApiApplication, AdditionalFeature };