> ## Documentation Index
> Fetch the complete documentation index at: https://auth0-automated-translations-update.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Actualiser le mappage des attributs de la configuration de provisionnement

> Actualisez le mappage d’attributs de la configuration de provisionnement d’un fournisseur d’identité précisé par son ID pour cette organisation. Les mappages sont réinitialisés aux valeurs par défaut définies par l’administrateur.

export const Scopes = ({scopes = []}) => {
  return <div>
      <div class="api-section-heading flex flex-col gap-y-4 w-full">
        <div class="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 class="api-section-heading-title flex-1 mb-0">Portées</h4>
          <div class="flex items-center"></div>
        </div>
      </div>
      <div class="mt-4">
        <div class="space-y-4 whitespace-normal prose prose-sm prose-gray dark:prose-invert overflow-wrap-anywhere [&_*]:overflow-wrap-anywhere">
          <p class="whitespace-pre-line text-xs">
            {"Les portées définissent les autorisations et les niveaux d’accès des requêtes API et des jetons d’authentification."}
          </p>
        </div>
      </div>
      <div class="flex font-mono text-sm group/param-head param-head break-all relative mt-6" id="scopes-scopes">
        <div class="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div class="flex items-center flex-wrap gap-2">
            <div class="absolute -top-1.5">
              <a href="#scopes-scopes" class="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Aller à l’en-tête">
                ​
                <div class="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            {scopes.map((scope, index) => {
    return <span class="flex items-center px-2 py-0.5 rounded-md bg-gray-100/50 dark:bg-white/5 text-gray-600 dark:text-gray-200 font-medium break-all" style={{
      lineHeight: "1rem",
      fontSize: "0.75rem",
      fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace'
    }} data-component-part="field-info-pill" key={index}>
                  {scope}
                </span>;
  })}
          </div>
        </div>
      </div>
    </div>;
};

export const ApiReleaseLifecycle = ({releaseLifecycle = "GA"}) => {
  const lifecycleMap = {
    ea: "Accès anticipé",
    ga: "Généralement disponible",
    deprecated: "Déprécié",
    planned: "Planifié",
    beta: "Bêta"
  };
  const LIFECYCLE_THEMES = {
    info: {
      light: {
        bg: "lab(91.896% .077188 -6.94053)",
        text: "lab(36.091% 25.9241 -68.0384)"
      },
      dark: {
        bg: "lab(16.0426% 6.71726 -27.2409)",
        text: "lab(72.6029% 4.08953 -41.9669)"
      }
    },
    secondary: {
      light: {
        bg: "lab(90.8548% 11.3355 8.01476)",
        text: "lab(47.5286% 56.4238 43.4706)"
      },
      dark: {
        bg: "lab(16.3609% 37.191 25.6346)",
        text: "lab(71.881% 41.5 29.4839)"
      }
    },
    danger: {
      light: {
        bg: "lab(94.7916% -.0000298023 0)",
        text: "lab(54.3656% 0 -.0000119209)"
      },
      dark: {
        bg: "lab(13.232% 0 0)",
        text: "lab(51.6164% 0 0)"
      }
    }
  };
  const LIFECYCLE_THEME_MAP = {
    ea: "info",
    ga: "info",
    beta: "info",
    deprecated: "secondary",
    planned: "danger"
  };
  const lifecycle = releaseLifecycle.toLocaleLowerCase();
  const lifecycleText = lifecycleMap[lifecycle];
  if (!lifecycleText) {
    return null;
  }
  const theme = LIFECYCLE_THEMES[LIFECYCLE_THEME_MAP[lifecycle]];
  return <div>
      <div className="api-section-heading flex flex-col gap-y-4 w-full">
        <div className="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 className="api-section-heading-title flex-1 mb-0">Cycle de vie de la version</h4>
        </div>
      </div>
      <div className="flex font-mono text-sm group/param-head param-head break-all relative mt-2.5" id="releaselifecycle-lifecycle">
        <div className="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div className="flex items-center flex-wrap gap-2">
            <div className="absolute -top-1.5">
              <a href="#releaselifecycle-lifecycle" className="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Naviguer vers l'en-tête">
                <div className="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            <span className="inline-flex items-center w-fit font-medium gap-1 py-0.5 px-2 rounded-md" style={{
    lineHeight: "1rem",
    fontSize: "0.75rem",
    fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace',
    backgroundColor: `light-dark(${theme.light.bg}, ${theme.dark.bg})`,
    color: `light-dark(${theme.light.text}, ${theme.dark.text})`,
    borderColor: `light-dark(color-mix(in oklab, ${theme.light.text} 25%, transparent), color-mix(in oklab, ${theme.dark.text} 25%, transparent))`
  }}>
              {lifecycleText}
            </span>
          </div>
        </div>
      </div>
    </div>;
};

<ApiReleaseLifecycle releaseLifecycle="EA" />

<Scopes scopes={["update:my_org:identity_providers_provisioning"]} />


## OpenAPI

````yaml docs/fr-ca/oas/myorganization/myorganization-api-oas.json PUT /identity-providers/{idp_id}/provisioning/update-attributes
openapi: 3.1.0
info:
  title: My Organization API
  description: API My organisation
  termsOfService: https://auth0.com/web-terms/
  version: 1.0.0
  license:
    name: UNLICENSED
    url: https://auth0.com
servers:
  - url: https://{tenantDomain}/my-org/v1
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du tenant Auth0
  - url: https://{tenantDomain}/my-org
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du tenant Auth0
security: []
tags:
  - name: config
    description: Configuration
    x-displayName: Configuration
  - name: orgDetails
    description: Gérez les détails liés à votre organisation.
    x-displayName: Organization Details Management
  - name: idpManagement
    description: Gérez les fournisseurs d’identité de votre organisation.
    x-displayName: Identity Provider Management
  - name: userStoresManagement
    description: Gérer les répertoires d’utilisateurs de votre organisation.
    x-displayName: User Stores Management
  - name: orgDomainManagement
    description: Gérer les domaines associés à votre organisation
    x-displayName: Domain Management
  - name: orgMemberManagement
    description: Gérer les membres de votre organisation
    x-displayName: Member Management
  - name: clientGrantManagement
    description: Gérer les autorisations client de votre organisation
    x-displayName: Client Grant Management
  - name: clientManagement
    description: Gérer les clients API de votre organisation
    x-displayName: Client Management
  - name: roles
    description: Gérer les rôles de votre organisation
    x-displayName: Roles
  - name: orgGroupManagement
    description: Gérer les groupes de connexion de votre organisation
    x-displayName: Group Management
paths:
  /identity-providers/{idp_id}/provisioning/update-attributes:
    put:
      tags:
        - idpManagement
      summary: >-
        Actualiser le mappage des attributs de la configuration de
        provisionnement
      description: >-
        Actualisez le mappage d’attributs de la configuration de provisionnement
        d’un fournisseur d’identité précisé par son ID pour cette organisation.
        Les mappages sont réinitialisés aux valeurs par défaut définies par
        l’administrateur.
      operationId: UpdateIdpProvisioningConfigurationAttributes
      parameters:
        - $ref: '#/components/parameters/IdpIdPathParameter'
      requestBody:
        $ref: '#/components/requestBodies/EmptyBody'
      responses:
        '200':
          $ref: '#/components/responses/GetIdPProvisioningConfigResponse'
        '400':
          $ref: '#/components/responses/ClientErrorBadRequestResponse'
        '401':
          $ref: '#/components/responses/ClientErrorUnauthorizedResponse'
        '403':
          $ref: '#/components/responses/ClientErrorInsufficientScopeResponse'
        '404':
          $ref: '#/components/responses/ClientErrorNotFoundOrgOrIdpResponse'
        '429':
          $ref: '#/components/responses/ClientErrorTooManyRequestsResponse'
      security:
        - OAuth2ClientCredentials:
            - update:my_org:identity_providers_provisioning
        - OAuth2AuthCode:
            - update:my_org:identity_providers_provisioning
      x-codeSamples: []
components:
  parameters:
    IdpIdPathParameter:
      in: path
      name: idp_id
      required: true
      schema:
        $ref: '#/components/schemas/IdpId'
  requestBodies:
    EmptyBody:
      content:
        application/json:
          schema:
            type: object
            additionalProperties: false
          examples: {}
  responses:
    GetIdPProvisioningConfigResponse:
      description: La configuration de provisionnement a été récupérée avec succès.
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
        Retry-After:
          $ref: '#/components/headers/Retry-After'
        X-Auth0-Error-Kind:
          $ref: '#/components/headers/X-Auth0-Error-Kind'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/GetIdPProvisioningConfigResponseContent'
          examples:
            getIdPResponseExample:
              $ref: '#/components/examples/GetIdPProvisioningConfigResponseExample'
    ClientErrorBadRequestResponse:
      description: Corps de la requête invalide. Le message varie selon la cause.
      content:
        application/json:
          schema:
            oneOf:
              - $ref: '#/components/schemas/ErrorResponseContent'
              - $ref: '#/components/schemas/ValidationErrorResponseContent'
          examples:
            errorInvalidJsonExample:
              $ref: '#/components/examples/ErrorBadRequestExample'
            validationErrorExample:
              $ref: '#/components/examples/ErrorValidationExample'
    ClientErrorUnauthorizedResponse:
      description: "Non autorisé\_: jeton manquant, invalide ou expiré."
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
          examples:
            errorMissingTokenExample:
              $ref: '#/components/examples/ErrorMissingTokenExample'
    ClientErrorInsufficientScopeResponse:
      description: Scope insuffisant.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
          examples:
            errorInsufficientScopeExample:
              $ref: '#/components/examples/ErrorInsufficientScopeExample'
    ClientErrorNotFoundOrgOrIdpResponse:
      description: Ressource introuvable.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
          examples:
            errorOrgNotFoundExample:
              $ref: '#/components/examples/ErrorOrgNotFoundExample'
            ErrorIdpNotFoundExample:
              $ref: '#/components/examples/ErrorIdpNotFoundExample'
    ClientErrorTooManyRequestsResponse:
      description: >-
        Trop de requêtes. Vérifiez les en-têtes X-RateLimit-Limit,
        X-RateLimit-Remaining et X-RateLimit-Reset.
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
        Retry-After:
          $ref: '#/components/headers/Retry-After'
        X-Auth0-Error-Kind:
          $ref: '#/components/headers/X-Auth0-Error-Kind'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
          examples:
            errorEndpointRateLimitExample:
              $ref: '#/components/examples/ErrorEndpointRateLimitExample'
  schemas:
    IdpId:
      type: string
      description: Identifiant du fournisseur d’identité.
      readOnly: true
      pattern: ^con_[A-Za-z0-9]{16}$
    GetIdPProvisioningConfigResponseContent:
      type: object
      allOf:
        - $ref: '#/components/schemas/IdpProvisioningConfig'
        - type: object
          properties:
            created_at:
              type: string
              format: date-time
            updated_on:
              type: string
              format: date-time
      required:
        - created_at
        - updated_on
      unevaluatedProperties: false
    ErrorResponseContent:
      type: object
      additionalProperties: false
      required:
        - type
        - status
        - title
        - detail
      properties:
        type:
          type: string
          description: URI qui décrit l’erreur.
          format: uri
        status:
          type: integer
          description: Le code d’état HTTP résultant de la requête.
        title:
          type: string
          description: Brève description de l’erreur.
        detail:
          type: string
          description: Description détaillée de l’erreur.
    ValidationErrorResponseContent:
      type: object
      additionalProperties: false
      required:
        - type
        - status
        - title
        - validation_errors
      properties:
        type:
          type: string
          description: URI qui décrit l’erreur.
          format: uri
        status:
          type: integer
          description: Le code d’état HTTP résultant de la requête.
        title:
          type: string
          description: Brève description de l’erreur.
        validation_errors:
          type: array
          items:
            $ref: '#/components/schemas/ValidationErrorDetail'
    IdpProvisioningConfig:
      type: object
      properties:
        identity_provider_id:
          $ref: '#/components/schemas/IdpId'
        identity_provider_name:
          type: string
          description: Le nom du fournisseur d’identité
          minLength: 1
          maxLength: 128
          readOnly: true
        strategy:
          $ref: '#/components/schemas/IdpStrategyEnum'
        method:
          $ref: '#/components/schemas/IdpProvisioningMethodEnum'
        attributes:
          type: array
          items:
            $ref: '#/components/schemas/IdpProvisioningUserAttributeMapItem'
        user_id_attribute:
          type: string
          description: L’ID de l’utilisateur
      required:
        - identity_provider_id
        - identity_provider_name
        - strategy
        - method
        - attributes
        - user_id_attribute
    ValidationErrorDetail:
      type: object
      additionalProperties: false
      required:
        - detail
      properties:
        detail:
          type: string
          description: Description détaillée de l’erreur.
        field:
          type: string
          description: Nom du paramètre non valide.
        pointer:
          type: string
          description: >-
            Pointeur JSON indiquant l’emplacement exact de l’erreur dans un
            document JSON en cours de validation.
        source:
          type: string
          description: >-
            Précise la source de l’erreur (p. ex., le corps, la requête ou
            l’en-tête dans un message HTML).
    IdpStrategyEnum:
      type: string
      description: Le type de fournisseur d’identité
      enum:
        - adfs
        - google-apps
        - oidc
        - okta
        - pingfederate
        - samlp
        - waad
    IdpProvisioningMethodEnum:
      type: string
      description: Le type de la méthode de provisionnement d’un fournisseur d’identité
      enum:
        - none
        - scim
    IdpProvisioningUserAttributeMapItem:
      type: object
      allOf:
        - $ref: '#/components/schemas/BaseUserAttributeMapItem'
        - type: object
          properties:
            provisioning_field:
              type: string
              description: Le nom du champ de provisionnement.
          required:
            - provisioning_field
      unevaluatedProperties: false
    BaseUserAttributeMapItem:
      type: object
      properties:
        user_attribute:
          type: string
          description: Le nom de l’attribut utilisateur.
        description:
          type: string
          description: La description de l’attribut utilisateur.
        label:
          type: string
          description: Le libellé de l’attribut utilisateur.
        is_required:
          type: boolean
          description: Indique si l’attribut est requis.
        is_extra:
          type: boolean
          description: >-
            Indique si cet attribut ne fait pas partie du schéma défini par
            l’administrateur, mais est fourni par la source. La propriété sera
            supprimée lors d’une opération d’actualisation.
        is_missing:
          type: boolean
          description: >-
            Indique si cet attribut est attendu, mais n’est pas fourni par le
            schéma défini par l’administrateur. La propriété sera ajoutée lors
            d’une opération d’actualisation.
      required:
        - is_required
        - is_extra
        - is_missing
  headers:
    X-RateLimit-Limit:
      description: >-
        Le nombre de requêtes autorisées dans la fenêtre actuelle de limite de
        débit.
      schema:
        type: integer
    X-RateLimit-Remaining:
      description: >-
        Le nombre de requêtes restantes dans la fenêtre actuelle de limite de
        débit.
      schema:
        type: integer
    X-RateLimit-Reset:
      description: >-
        L’horodatage Unix indiquant quand la fenêtre actuelle de limite de débit
        est réinitialisée.
      schema:
        type: integer
    Retry-After:
      description: >-
        Le nombre de secondes que le client doit attendre avant d’effectuer une
        nouvelle requête.
      schema:
        type: integer
    X-Auth0-Error-Kind:
      description: >-
        Indicateur signalant que la limite de débit dépassée est une limite
        globale (par tenant).
      schema:
        type: string
        enum:
          - global-rate-limit
  examples:
    GetIdPProvisioningConfigResponseExample:
      value:
        identity_provider_id: con_2CZPv6IY0gWzDaQJ
        identity_provider_name: EC-org-gaZPTTOS42pReSzs-id-ready2
        strategy: okta
        method: scim
        attributes:
          - provisioning_field: userName
            user_attribute: preferred_username
            description: Nom d’utilisateur préféré
            label: Preferred username
            is_required: true
            is_extra: false
            is_missing: false
          - provisioning_field: active
            user_attribute: blocked
            is_required: true
            is_extra: false
            is_missing: false
        updated_on: '2025-05-15T23:32:52.351Z'
        created_at: '2025-05-15T23:32:52.351Z'
        user_id_attribute: externalId
    ErrorBadRequestExample:
      value:
        type: https://auth0.com/api-errors#A0E-400-0001
        status: 400
        title: Bad Request
        detail: The request is invalid.
    ErrorValidationExample:
      value:
        type: https://auth0.com/api-errors#A0E-400-0003
        status: 400
        title: Validation Error
        validation_errors:
          - detail: is required
            field: data/property_name
            pointer: /property_name
            source: params
    ErrorMissingTokenExample:
      value:
        type: https://auth0.com/api-errors#A0E-401-0002
        status: 401
        title: Missing Token
        detail: No auth token provided.
    ErrorInsufficientScopeExample:
      value:
        type: https://auth0.com/api-errors#A0E-403-0002
        status: 403
        title: Insufficient Scope
        detail: >-
          The auth token lacks the required scope: Check the API documentation
          for the required scopes for this endpoint.
    ErrorOrgNotFoundExample:
      value:
        type: https://auth0.com/api-errors#A0E-404-0002
        status: 404
        title: Resource Not Found
        detail: The organization does not exist.
    ErrorIdpNotFoundExample:
      value:
        type: https://auth0.com/api-errors#A0E-404-0002
        status: 404
        title: Resource Not Found
        detail: The IdP does not exist.
    ErrorEndpointRateLimitExample:
      value:
        type: https://auth0.com/api-errors#A0E-429-0003
        status: 429
        title: Endpoint Rate Limit Exceeded
        detail: The endpoint request limit has been exceeded.
  securitySchemes:
    OAuth2ClientCredentials:
      type: oauth2
      flows:
        clientCredentials:
          tokenUrl: /oauth/token
          x-form-parameters:
            audience: /myorg-api/v1/
          scopes:
            read:my_org:configuration: Read organization configuration
            read:my_org:details: Read organization details
            update:my_org:details: Update organization details
            read:my_org:identity_providers: Read identity providers for organization
            create:my_org:identity_providers: Create identity provider for organization
            update:my_org:identity_providers: Update identity provider for organization
            delete:my_org:identity_providers: Delete identity provider for organization
            update:my_org:identity_providers_detach: Detach identity provider from organization
            create:my_org:identity_providers_domains: Associate organization domain with identity provider
            delete:my_org:identity_providers_domains: Remove organization domain from identity provider
            create:my_org:domains: Create domain for organization
            read:my_org:domains: Read domains for organization
            update:my_org:domains: Update domain for organization
            delete:my_org:domains: Delete domain for organization
            create:my_org:identity_providers_provisioning: Create provisioning configuration for identity provider
            update:my_org:identity_providers_provisioning: Update provisioning configuration for identity provider
            read:my_org:identity_providers_provisioning: Read provisioning configuration for identity provider
            delete:my_org:identity_providers_provisioning: Delete provisioning configuration for identity provider
            create:my_org:identity_providers_scim_tokens: Create a provisioning SCIM token for this identity provider
            read:my_org:identity_providers_scim_tokens: List the provisioning SCIM tokens for this identity provider
            delete:my_org:identity_providers_scim_tokens: Delete a provisioning SCIM configuration for an identity provider
            read:my_org:member_invitations: List member invitations for organization
            create:my_org:member_invitations: Create member invitations for organization
            delete:my_org:member_invitations: Delete member invitations for organization
            read:my_org:members: List members for organization
            delete:my_org:memberships: Delete members from organization without deleting underlying users
            read:my_org:member_roles: List Roles for members in organization
            create:my_org:member_roles: Create Roles for members in organization
            delete:my_org:member_roles: Delete Roles from members for organization
            create:my_org:client_grants: Create client grants for client in organization
            create:my_org:clients: Create API clients for organization
            read:my_org:clients: Read API clients for organization
            delete:my_org:clients: Delete API clients for organization
            read:my_org:user_stores: Read user stores for an organization
            delete:my_org:organizations: Delete this organization
            read:my_org:groups: List connection groups for organization
            read:my_org:group_roles: List roles for a group in organization
            create:my_org:group_roles: Assign roles to a group in organization
            delete:my_org:group_roles: Remove roles from a group in organization
    OAuth2AuthCode:
      type: oauth2
      flows:
        authorizationCode:
          authorizationUrl: /authorize
          tokenUrl: /oauth/token
          x-form-parameters:
            audience: /myorg-api/v1/
          scopes:
            read:my_org:configuration: Read organization configuration
            read:my_org:details: Read organization details
            update:my_org:details: Update organization details
            read:my_org:identity_providers: Read identity providers for organization
            create:my_org:identity_providers: Create identity provider for organization
            update:my_org:identity_providers: Update identity provider for organization
            delete:my_org:identity_providers: Delete identity provider for organization
            update:my_org:identity_providers_detach: Detach identity provider from organization
            create:my_org:identity_providers_domains: Associate organization domain with identity provider
            delete:my_org:identity_providers_domains: Remove organization domain from identity provider
            create:my_org:domains: Create domain for organization
            read:my_org:domains: Read domains for organization
            update:my_org:domains: Update domain for organization
            delete:my_org:domains: Delete domain for organization
            create:my_org:identity_providers_provisioning: Create provisioning configuration for identity provider
            update:my_org:identity_providers_provisioning: Update provisioning configuration for identity provider
            read:my_org:identity_providers_provisioning: Read provisioning configuration for identity provider
            delete:my_org:identity_providers_provisioning: Delete provisioning configuration for identity provider
            create:my_org:identity_providers_scim_tokens: Create a provisioning SCIM token for this identity provider
            read:my_org:identity_providers_scim_tokens: List the provisioning SCIM tokens for this identity provider
            delete:my_org:identity_providers_scim_tokens: Delete a provisioning SCIM configuration for an identity provider
            read:my_org:member_invitations: List member invitations for organization
            create:my_org:member_invitations: Create member invitations for organization
            delete:my_org:member_invitations: Delete member invitations for organization
            read:my_org:members: List members for organization
            delete:my_org:memberships: Delete members from organization without deleting underlying users
            read:my_org:member_roles: List Roles for members in organization
            create:my_org:member_roles: Create Roles for members in organization
            delete:my_org:member_roles: Delete Roles from members for organization
            create:my_org:client_grants: Create client grants for client in organization
            create:my_org:clients: Create API clients for organization
            read:my_org:clients: Read API clients for organization
            delete:my_org:clients: Delete API clients for organization
            read:my_org:user_stores: Read user stores for an organization
            delete:my_org:organizations: Delete this organization
            read:my_org:groups: List connection groups for organization
            read:my_org:group_roles: List roles for a group in organization
            create:my_org:group_roles: Assign roles to a group in organization
            delete:my_org:group_roles: Remove roles from a group in organization

````