@@ -737,6 +737,28 @@ def update!(**args)
737737 end
738738 end
739739
740+ # LRO response metadata for InboundOidcSsoProfilesService.
741+ # CreateInboundOidcSsoProfile.
742+ class CreateInboundOidcSsoProfileOperationMetadata
743+ include Google ::Apis ::Core ::Hashable
744+
745+ # State of this Operation Will be "awaiting-multi-party-approval" when the
746+ # operation is deferred due to the target customer having enabled [Multi-party
747+ # approval for sensitive actions](https://support.google.com/a/answer/13790448).
748+ # Corresponds to the JSON property `state`
749+ # @return [String]
750+ attr_accessor :state
751+
752+ def initialize ( **args )
753+ update! ( **args )
754+ end
755+
756+ # Update properties of this object
757+ def update! ( **args )
758+ @state = args [ :state ] if args . key? ( :state )
759+ end
760+ end
761+
740762 # LRO response metadata for InboundSamlSsoProfilesService.
741763 # CreateInboundSamlSsoProfile.
742764 class CreateInboundSamlSsoProfileOperationMetadata
@@ -818,6 +840,20 @@ def update!(**args)
818840 end
819841 end
820842
843+ # LRO response metadata for InboundOidcSsoProfilesService.
844+ # DeleteInboundOidcSsoProfile.
845+ class DeleteInboundOidcSsoProfileOperationMetadata
846+ include Google ::Apis ::Core ::Hashable
847+
848+ def initialize ( **args )
849+ update! ( **args )
850+ end
851+
852+ # Update properties of this object
853+ def update! ( **args )
854+ end
855+ end
856+
821857 # LRO response metadata for InboundSamlSsoProfilesService.
822858 # DeleteInboundSamlSsoProfile.
823859 class DeleteInboundSamlSsoProfileOperationMetadata
@@ -2663,6 +2699,51 @@ def update!(**args)
26632699 end
26642700 end
26652701
2702+ # An [OIDC](https://openid.net/developers/how-connect-works/) federation between
2703+ # a Google enterprise customer and an OIDC identity provider.
2704+ class InboundOidcSsoProfile
2705+ include Google ::Apis ::Core ::Hashable
2706+
2707+ # Immutable. The customer. For example: `customers/C0123abc`.
2708+ # Corresponds to the JSON property `customer`
2709+ # @return [String]
2710+ attr_accessor :customer
2711+
2712+ # Human-readable name of the OIDC SSO profile.
2713+ # Corresponds to the JSON property `displayName`
2714+ # @return [String]
2715+ attr_accessor :display_name
2716+
2717+ # OIDC IDP (identity provider) configuration.
2718+ # Corresponds to the JSON property `idpConfig`
2719+ # @return [Google::Apis::CloudidentityV1beta1::OidcIdpConfig]
2720+ attr_accessor :idp_config
2721+
2722+ # Output only. [Resource name](https://cloud.google.com/apis/design/
2723+ # resource_names) of the OIDC SSO profile.
2724+ # Corresponds to the JSON property `name`
2725+ # @return [String]
2726+ attr_accessor :name
2727+
2728+ # OIDC RP (relying party) configuration.
2729+ # Corresponds to the JSON property `rpConfig`
2730+ # @return [Google::Apis::CloudidentityV1beta1::OidcRpConfig]
2731+ attr_accessor :rp_config
2732+
2733+ def initialize ( **args )
2734+ update! ( **args )
2735+ end
2736+
2737+ # Update properties of this object
2738+ def update! ( **args )
2739+ @customer = args [ :customer ] if args . key? ( :customer )
2740+ @display_name = args [ :display_name ] if args . key? ( :display_name )
2741+ @idp_config = args [ :idp_config ] if args . key? ( :idp_config )
2742+ @name = args [ :name ] if args . key? ( :name )
2743+ @rp_config = args [ :rp_config ] if args . key? ( :rp_config )
2744+ end
2745+ end
2746+
26662747 # A [SAML 2.0](https://www.oasis-open.org/standards#samlv2.0) federation between
26672748 # a Google enterprise customer and a SAML identity provider.
26682749 class InboundSamlSsoProfile
@@ -2723,6 +2804,11 @@ class InboundSsoAssignment
27232804 # @return [String]
27242805 attr_accessor :name
27252806
2807+ # Details that are applicable when `sso_mode` is set to `OIDC_SSO`.
2808+ # Corresponds to the JSON property `oidcSsoInfo`
2809+ # @return [Google::Apis::CloudidentityV1beta1::OidcSsoInfo]
2810+ attr_accessor :oidc_sso_info
2811+
27262812 # Must be zero (which is the default value so it can be omitted) for assignments
27272813 # with `target_org_unit` set and must be greater-than-or-equal-to one for
27282814 # assignments with `target_group` set.
@@ -2763,6 +2849,7 @@ def initialize(**args)
27632849 def update! ( **args )
27642850 @customer = args [ :customer ] if args . key? ( :customer )
27652851 @name = args [ :name ] if args . key? ( :name )
2852+ @oidc_sso_info = args [ :oidc_sso_info ] if args . key? ( :oidc_sso_info )
27662853 @rank = args [ :rank ] if args . key? ( :rank )
27672854 @saml_sso_info = args [ :saml_sso_info ] if args . key? ( :saml_sso_info )
27682855 @sign_in_behavior = args [ :sign_in_behavior ] if args . key? ( :sign_in_behavior )
@@ -2919,6 +3006,33 @@ def update!(**args)
29193006 end
29203007 end
29213008
3009+ # Response of the InboundOidcSsoProfilesService.ListInboundOidcSsoProfiles
3010+ # method.
3011+ class ListInboundOidcSsoProfilesResponse
3012+ include Google ::Apis ::Core ::Hashable
3013+
3014+ # List of InboundOidcSsoProfiles.
3015+ # Corresponds to the JSON property `inboundOidcSsoProfiles`
3016+ # @return [Array<Google::Apis::CloudidentityV1beta1::InboundOidcSsoProfile>]
3017+ attr_accessor :inbound_oidc_sso_profiles
3018+
3019+ # A token, which can be sent as `page_token` to retrieve the next page. If this
3020+ # field is omitted, there are no subsequent pages.
3021+ # Corresponds to the JSON property `nextPageToken`
3022+ # @return [String]
3023+ attr_accessor :next_page_token
3024+
3025+ def initialize ( **args )
3026+ update! ( **args )
3027+ end
3028+
3029+ # Update properties of this object
3030+ def update! ( **args )
3031+ @inbound_oidc_sso_profiles = args [ :inbound_oidc_sso_profiles ] if args . key? ( :inbound_oidc_sso_profiles )
3032+ @next_page_token = args [ :next_page_token ] if args . key? ( :next_page_token )
3033+ end
3034+ end
3035+
29223036 # Response of the InboundSamlSsoProfilesService.ListInboundSamlSsoProfiles
29233037 # method.
29243038 class ListInboundSamlSsoProfilesResponse
@@ -3533,6 +3647,87 @@ def update!(**args)
35333647 end
35343648 end
35353649
3650+ # OIDC IDP (identity provider) configuration.
3651+ class OidcIdpConfig
3652+ include Google ::Apis ::Core ::Hashable
3653+
3654+ # The **Change Password URL** of the identity provider. Users will be sent to
3655+ # this URL when changing their passwords at `myaccount.google.com`. This takes
3656+ # precedence over the change password URL configured at customer-level. Must use
3657+ # `HTTPS`.
3658+ # Corresponds to the JSON property `changePasswordUri`
3659+ # @return [String]
3660+ attr_accessor :change_password_uri
3661+
3662+ # Required. The Issuer identifier for the IdP. Must be a URL. The discovery URL
3663+ # will be derived from this as described in Section 4 of [the OIDC specification]
3664+ # (https://openid.net/specs/openid-connect-discovery-1_0.html).
3665+ # Corresponds to the JSON property `issuerUri`
3666+ # @return [String]
3667+ attr_accessor :issuer_uri
3668+
3669+ def initialize ( **args )
3670+ update! ( **args )
3671+ end
3672+
3673+ # Update properties of this object
3674+ def update! ( **args )
3675+ @change_password_uri = args [ :change_password_uri ] if args . key? ( :change_password_uri )
3676+ @issuer_uri = args [ :issuer_uri ] if args . key? ( :issuer_uri )
3677+ end
3678+ end
3679+
3680+ # OIDC RP (relying party) configuration.
3681+ class OidcRpConfig
3682+ include Google ::Apis ::Core ::Hashable
3683+
3684+ # OAuth2 client ID for OIDC.
3685+ # Corresponds to the JSON property `clientId`
3686+ # @return [String]
3687+ attr_accessor :client_id
3688+
3689+ # Input only. OAuth2 client secret for OIDC.
3690+ # Corresponds to the JSON property `clientSecret`
3691+ # @return [String]
3692+ attr_accessor :client_secret
3693+
3694+ # Output only. The URL(s) that this client may use in authentication requests.
3695+ # Corresponds to the JSON property `redirectUris`
3696+ # @return [Array<String>]
3697+ attr_accessor :redirect_uris
3698+
3699+ def initialize ( **args )
3700+ update! ( **args )
3701+ end
3702+
3703+ # Update properties of this object
3704+ def update! ( **args )
3705+ @client_id = args [ :client_id ] if args . key? ( :client_id )
3706+ @client_secret = args [ :client_secret ] if args . key? ( :client_secret )
3707+ @redirect_uris = args [ :redirect_uris ] if args . key? ( :redirect_uris )
3708+ end
3709+ end
3710+
3711+ # Details that are applicable when `sso_mode` is set to `OIDC_SSO`.
3712+ class OidcSsoInfo
3713+ include Google ::Apis ::Core ::Hashable
3714+
3715+ # Required. Name of the `InboundOidcSsoProfile` to use. Must be of the form `
3716+ # inboundOidcSsoProfiles/`inbound_oidc_sso_profile``.
3717+ # Corresponds to the JSON property `inboundOidcSsoProfile`
3718+ # @return [String]
3719+ attr_accessor :inbound_oidc_sso_profile
3720+
3721+ def initialize ( **args )
3722+ update! ( **args )
3723+ end
3724+
3725+ # Update properties of this object
3726+ def update! ( **args )
3727+ @inbound_oidc_sso_profile = args [ :inbound_oidc_sso_profile ] if args . key? ( :inbound_oidc_sso_profile )
3728+ end
3729+ end
3730+
35363731 # This resource represents a long-running operation that is the result of a
35373732 # network API call.
35383733 class Operation
@@ -4182,6 +4377,28 @@ def update!(**args)
41824377 end
41834378 end
41844379
4380+ # LRO response metadata for InboundOidcSsoProfilesService.
4381+ # UpdateInboundOidcSsoProfile.
4382+ class UpdateInboundOidcSsoProfileOperationMetadata
4383+ include Google ::Apis ::Core ::Hashable
4384+
4385+ # State of this Operation Will be "awaiting-multi-party-approval" when the
4386+ # operation is deferred due to the target customer having enabled [Multi-party
4387+ # approval for sensitive actions](https://support.google.com/a/answer/13790448).
4388+ # Corresponds to the JSON property `state`
4389+ # @return [String]
4390+ attr_accessor :state
4391+
4392+ def initialize ( **args )
4393+ update! ( **args )
4394+ end
4395+
4396+ # Update properties of this object
4397+ def update! ( **args )
4398+ @state = args [ :state ] if args . key? ( :state )
4399+ end
4400+ end
4401+
41854402 # LRO response metadata for InboundSamlSsoProfilesService.
41864403 # UpdateInboundSamlSsoProfile.
41874404 class UpdateInboundSamlSsoProfileOperationMetadata
0 commit comments