feat(api): add allow_unverified_email_scim_fallback_match to scim_configurations

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 193
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/gitpod/gitpod-8eb16dd2e26c8fd1ca37ef960aca95069f457ff8bdeca2347a2b157ae096ccd4.yml
-openapi_spec_hash: 6c5882382583c7db5824d6438a489724
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/gitpod/gitpod-17898495c070ff2b83528ccf268ff3a7426ccabe697c19ca5fe034daa7f76ed0.yml
+openapi_spec_hash: fc0b1da285521ddbb5293a228b31b51f
 config_hash: e7d6e90c037f5d495ae913f3806471fd

src/gitpod/resources/organizations/scim_configurations.py

@@ -60,6 +60,7 @@ def create(
         *,
         organization_id: str,
         sso_configuration_id: str,
+        allow_unverified_email_account_linking: Optional[bool] | Omit = omit,
         name: Optional[str] | Omit = omit,
         token_expires_in: Optional[str] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -107,6 +108,10 @@ def create(
           sso_configuration_id: sso_configuration_id is the SSO configuration to link (required for user
               provisioning)
 
+          allow_unverified_email_account_linking: allow_unverified_email_account_linking allows SCIM to link provisioned users to
+              existing accounts when the identity provider does not mark the email address as
+              verified
+
           name: name is a human-readable name for the SCIM configuration
 
           token_expires_in: token_expires_in is the duration until the token expires. Defaults to 1 year.
@@ -126,6 +131,7 @@ def create(
                 {
                     "organization_id": organization_id,
                     "sso_configuration_id": sso_configuration_id,
+                    "allow_unverified_email_account_linking": allow_unverified_email_account_linking,
                     "name": name,
                     "token_expires_in": token_expires_in,
                 },
@@ -194,6 +200,7 @@ def update(
         self,
         *,
         scim_configuration_id: str,
+        allow_unverified_email_account_linking: Optional[bool] | Omit = omit,
         enabled: Optional[bool] | Omit = omit,
         name: Optional[str] | Omit = omit,
         sso_configuration_id: Optional[str] | Omit = omit,
@@ -236,6 +243,10 @@ def update(
         Args:
           scim_configuration_id: scim_configuration_id is the ID of the SCIM configuration to update
 
+          allow_unverified_email_account_linking: allow_unverified_email_account_linking allows SCIM to link provisioned users to
+              existing accounts when the identity provider does not mark the email address as
+              verified
+
           enabled: enabled controls whether SCIM provisioning is active
 
           name: name is a human-readable name for the SCIM configuration
@@ -255,6 +266,7 @@ def update(
             body=maybe_transform(
                 {
                     "scim_configuration_id": scim_configuration_id,
+                    "allow_unverified_email_account_linking": allow_unverified_email_account_linking,
                     "enabled": enabled,
                     "name": name,
                     "sso_configuration_id": sso_configuration_id,
@@ -482,6 +494,7 @@ async def create(
         *,
         organization_id: str,
         sso_configuration_id: str,
+        allow_unverified_email_account_linking: Optional[bool] | Omit = omit,
         name: Optional[str] | Omit = omit,
         token_expires_in: Optional[str] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -529,6 +542,10 @@ async def create(
           sso_configuration_id: sso_configuration_id is the SSO configuration to link (required for user
               provisioning)
 
+          allow_unverified_email_account_linking: allow_unverified_email_account_linking allows SCIM to link provisioned users to
+              existing accounts when the identity provider does not mark the email address as
+              verified
+
           name: name is a human-readable name for the SCIM configuration
 
           token_expires_in: token_expires_in is the duration until the token expires. Defaults to 1 year.
@@ -548,6 +565,7 @@ async def create(
                 {
                     "organization_id": organization_id,
                     "sso_configuration_id": sso_configuration_id,
+                    "allow_unverified_email_account_linking": allow_unverified_email_account_linking,
                     "name": name,
                     "token_expires_in": token_expires_in,
                 },
@@ -616,6 +634,7 @@ async def update(
         self,
         *,
         scim_configuration_id: str,
+        allow_unverified_email_account_linking: Optional[bool] | Omit = omit,
         enabled: Optional[bool] | Omit = omit,
         name: Optional[str] | Omit = omit,
         sso_configuration_id: Optional[str] | Omit = omit,
@@ -658,6 +677,10 @@ async def update(
         Args:
           scim_configuration_id: scim_configuration_id is the ID of the SCIM configuration to update
 
+          allow_unverified_email_account_linking: allow_unverified_email_account_linking allows SCIM to link provisioned users to
+              existing accounts when the identity provider does not mark the email address as
+              verified
+
           enabled: enabled controls whether SCIM provisioning is active
 
           name: name is a human-readable name for the SCIM configuration
@@ -677,6 +700,7 @@ async def update(
             body=await async_maybe_transform(
                 {
                     "scim_configuration_id": scim_configuration_id,
+                    "allow_unverified_email_account_linking": allow_unverified_email_account_linking,
                     "enabled": enabled,
                     "name": name,
                     "sso_configuration_id": sso_configuration_id,

src/gitpod/types/organizations/scim_configuration.py

@@ -30,6 +30,15 @@ class ScimConfiguration(BaseModel):
     updated_at: datetime = FieldInfo(alias="updatedAt")
     """updated_at is when the SCIM configuration was last updated"""
 
+    allow_unverified_email_account_linking: Optional[bool] = FieldInfo(
+        alias="allowUnverifiedEmailAccountLinking", default=None
+    )
+    """
+    allow_unverified_email_account_linking allows SCIM to link provisioned users to
+    existing accounts when the identity provider does not mark the email address as
+    verified
+    """
+
     enabled: Optional[bool] = None
     """enabled indicates if SCIM provisioning is active"""
 

src/gitpod/types/organizations/scim_configuration_create_params.py

@@ -23,6 +23,15 @@ class ScimConfigurationCreateParams(TypedDict, total=False):
     provisioning)
     """
 
+    allow_unverified_email_account_linking: Annotated[
+        Optional[bool], PropertyInfo(alias="allowUnverifiedEmailAccountLinking")
+    ]
+    """
+    allow_unverified_email_account_linking allows SCIM to link provisioned users to
+    existing accounts when the identity provider does not mark the email address as
+    verified
+    """
+
     name: Optional[str]
     """name is a human-readable name for the SCIM configuration"""
 

src/gitpod/types/organizations/scim_configuration_update_params.py

@@ -14,6 +14,15 @@ class ScimConfigurationUpdateParams(TypedDict, total=False):
     scim_configuration_id: Required[Annotated[str, PropertyInfo(alias="scimConfigurationId")]]
     """scim_configuration_id is the ID of the SCIM configuration to update"""
 
+    allow_unverified_email_account_linking: Annotated[
+        Optional[bool], PropertyInfo(alias="allowUnverifiedEmailAccountLinking")
+    ]
+    """
+    allow_unverified_email_account_linking allows SCIM to link provisioned users to
+    existing accounts when the identity provider does not mark the email address as
+    verified
+    """
+
     enabled: Optional[bool]
     """enabled controls whether SCIM provisioning is active"""
 

tests/api_resources/organizations/test_scim_configurations.py

@@ -39,6 +39,7 @@ def test_method_create_with_all_params(self, client: Gitpod) -> None:
         scim_configuration = client.organizations.scim_configurations.create(
             organization_id="b0e12f6c-4c67-429d-a4a6-d9838b5da047",
             sso_configuration_id="d2c94c27-3b76-4a42-b88c-95a85e392c68",
+            allow_unverified_email_account_linking=True,
             name="name",
             token_expires_in="+9125115.360s",
         )
@@ -119,6 +120,7 @@ def test_method_update(self, client: Gitpod) -> None:
     def test_method_update_with_all_params(self, client: Gitpod) -> None:
         scim_configuration = client.organizations.scim_configurations.update(
             scim_configuration_id="d2c94c27-3b76-4a42-b88c-95a85e392c68",
+            allow_unverified_email_account_linking=True,
             enabled=False,
             name="name",
             sso_configuration_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
@@ -290,6 +292,7 @@ async def test_method_create_with_all_params(self, async_client: AsyncGitpod) ->
         scim_configuration = await async_client.organizations.scim_configurations.create(
             organization_id="b0e12f6c-4c67-429d-a4a6-d9838b5da047",
             sso_configuration_id="d2c94c27-3b76-4a42-b88c-95a85e392c68",
+            allow_unverified_email_account_linking=True,
             name="name",
             token_expires_in="+9125115.360s",
         )
@@ -370,6 +373,7 @@ async def test_method_update(self, async_client: AsyncGitpod) -> None:
     async def test_method_update_with_all_params(self, async_client: AsyncGitpod) -> None:
         scim_configuration = await async_client.organizations.scim_configurations.update(
             scim_configuration_id="d2c94c27-3b76-4a42-b88c-95a85e392c68",
+            allow_unverified_email_account_linking=True,
             enabled=False,
             name="name",
             sso_configuration_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",