Request

Authorization

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/json

Request message for the UpdateAuthConnectionSettings rpc.

settings

object (AuthConnectionSettings)

settings

optional

ConnectionSettings is the entity for auth 0 connection information.

provider

enum<string>

provider

optional

provider is the type of auth0 connection.
NONE means the org doesn't have a connection setup.

Allowed values:

CONNECTION_TYPE_NONECONNECTION_TYPE_OKTACONNECTION_TYPE_AZURECONNECTION_TYPE_ADFSCONNECTION_TYPE_OIDC

secret_expiration

object (SecretExpiration)

secret_expiration

optional

secret_expiration is an optional field that is
used to know when the connection's secret will
expire. If the connection doesn't have a secret
or the secret will never expire this will be nil.

default_group

object (GroupItem)

default_group

optional

default_group defines settings used for all users for this connection
regardless of their groups. Group name is ignored for the default. This
field can be left nil if no default settings are desired.

issuer_url

string

issuer_url

optional

issuer_url is the url provided by the identity provider
used to get authorization tokens.

tenant_url

string

tenant_url

optional

tenant_url is the url used to match user's emails so
that the connection is used.

client_id

string

client_id

optional

client_id is the id of the application created from
the auth provider.

connection_id

string

connection_id

optional

connection_id is the id of the auth0 connection.
This field will be populated automatically during
the CreateAuthConnection rpc.

custom_groups

array[object (GroupItem) {5}]

custom_groups

optional

custom_groups defines the settings that will be used if a user with
this connection contains one or more of the matching group names.
If a user has multiple matching groups the settings for the highest
priority custom group will be used. Priority is determined by the custom
groups position in the list.

field_mask

string

field_mask

optional

FieldMask represents a set of symbolic field paths, for example:

paths: "f.a"
paths: "f.b.d"

Here f represents a field in some root message, a and b
fields in the message found in f, and d a field found in the
message in f.b.

Field masks are used to specify a subset of fields that should be
returned by a get operation or modified by an update operation.
Field masks also have a custom JSON encoding (see below).

Field Masks in Projections

When used in the context of a projection, a response message or
sub-message is filtered by the API to only contain those fields as
specified in the mask. For example, if the mask in the previous
example is applied to a response message as follows:

f {
a : 22
b {
d : 1
x : 2
}
y : 13
}
z: 8

The result will not contain specific values for fields x,y and z
(their value will be set to the default, and omitted in proto text
output):

f {
a : 22
b {
d : 1
}
}

A repeated field is not allowed except at the last position of a
paths string.

If a FieldMask object is not present in a get operation, the
operation applies to all fields (as if a FieldMask of all fields
had been specified).

Note that a field mask does not necessarily apply to the
top-level response message. In case of a REST get operation, the
field mask applies directly to the response, but in case of a REST
list operation, the mask instead applies to each individual message
in the returned resource list. In case of a REST custom method,
other definitions may be used. Where the mask applies will be
clearly documented together with its declaration in the API. In
any case, the effect on the returned resource/resources is required
behavior for APIs.

Field Masks in Update Operations

A field mask in update operations specifies which fields of the
targeted resource are going to be updated. The API is required
to only change the values of the fields as specified in the mask
and leave the others untouched. If a resource is passed in to
describe the updated values, the API ignores the values of all
fields not covered by the mask.

If a repeated field is specified for an update operation, new values will
be appended to the existing repeated field in the target resource. Note that
a repeated field is only allowed in the last position of a paths string.

If a sub-message is specified in the last position of the field mask for an
update operation, then new value will be merged into the existing sub-message
in the target resource.

For example, given the target message:

f {
b {
d: 1
x: 2
}
c: [1]
}

And an update message:

f {
b {
d: 10
}
c: [2]
}

then if the field mask is:

paths: ["f.b", "f.c"]

then the result will be:

f {
b {
d: 10
x: 2
}
c: [1, 2]
}

An implementation may provide options to override this default behavior for
repeated and message fields.

In order to reset a field's value to the default, the field must
be in the mask and set to the default value in the provided resource.
Hence, in order to reset all fields of a resource, provide a default
instance of the resource and set all fields in the mask, or do
not provide a mask as described below.

If a field mask is not present on update, the operation applies to
all fields (as if a field mask of all fields has been specified).
Note that in the presence of schema evolution, this may mean that
fields the client does not know and has therefore not filled into
the request will be reset to their default. If this is unwanted
behavior, a specific service may require a client to always specify
a field mask, producing an error if not.

As with get operations, the location of the resource which
describes the updated values in the request message depends on the
operation kind. In any case, the effect of the field mask is
required to be honored by the API.

Considerations for HTTP REST

The HTTP kind of an update operation which uses a field mask must
be set to PATCH instead of PUT in order to satisfy HTTP semantics
(PUT must only be used for full updates).

JSON Encoding of Field Masks

In JSON, a field mask is encoded as a single string where paths are
separated by a comma. Fields name in each path are converted
to/from lower-camel naming conventions.

As an example, consider the following message declarations:

message Profile {
User user = 1;
Photo photo = 2;
}
message User {
string display_name = 1;
string address = 2;
}

In proto a field mask for Profile may look as such:

mask {
paths: "user.display_name"
paths: "photo"
}

In JSON, the same mask is represented as below:

{
mask: "user.displayName,photo"
}

Field Masks and Oneof Fields

Field masks treat fields in oneofs just as regular fields. Consider the
following message:

message SampleMessage {
oneof test_oneof {
string name = 4;
SubMessage sub_message = 9;
}
}

The field mask can be:

mask {
paths: "name"
}

Or:

mask {
paths: "sub_message"
}

Note that oneof type names ("test_oneof" in this case) cannot be used in
paths.

Field Mask Verification

The implementation of any API method which has a FieldMask type field in the
request should verify the included field paths, and return an
INVALID_ARGUMENT error if any path is unmappable.

client_secret

string

client_secret

optional

the secret for the connection. Only used for Azure identity type.

Example

{
  "settings": {
    "provider": "CONNECTION_TYPE_NONE",
    "secret_expiration": {
      "date": "1s"
    },
    "default_group": {
      "group_name": "string",
      "agent_profile_group_id": "string",
      "p3_permission_group_id": "string",
      "hunt_group_sid": 0,
      "permission_group_ids": [
        "string"
      ]
    },
    "issuer_url": "string",
    "tenant_url": "string",
    "client_id": "string",
    "connection_id": "string",
    "custom_groups": [
      {
        "group_name": "string",
        "agent_profile_group_id": "string",
        "p3_permission_group_id": "string",
        "hunt_group_sid": 0,
        "permission_group_ids": [
          "string"
        ]
      }
    ]
  },
  "field_mask": "string",
  "client_secret": "string"
}

Request samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

UpdateAuthConnectionSettings

Request

Field Masks in Projections

Field Masks in Update Operations

Considerations for HTTP REST

JSON Encoding of Field Masks

Field Masks and Oneof Fields

Field Mask Verification

Request samples

Responses