> ## Documentation Index
> Fetch the complete documentation index at: https://auth0.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Vérifier un flux de consentement à la fourniture de Directory

> Vérifier périodiquement l’état du flux de consentement à la fourniture de Directory de Google Workspace pour le fournisseur d'identité désigné par son ID au sein de cette Organization. Les clients doivent espacer ces vérifications d’au moins 5000 ms jusqu’à ce qu’un état final soit renvoyé. Tant que le consentement est en attente, le terminal renvoie `waiting`. Une fois le consentement obtenu, la configuration de synchronisation de Directory est créée (la synchronisation automatique étant initialement désactivée) et le terminal renvoie `complete`; `error` indique une défaillance en aval. Un flux abandonné continue de renvoyer `waiting` jusqu’à ce que l’administrateur donne son consentement.

export const Scopes = ({scopes = []}) => {
  return <div>
      <div class="api-section-heading flex flex-col gap-y-4 w-full">
        <div class="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 class="api-section-heading-title flex-1 mb-0">Portées</h4>
          <div class="flex items-center"></div>
        </div>
      </div>
      <div class="mt-4">
        <div class="space-y-4 whitespace-normal prose prose-sm prose-gray dark:prose-invert overflow-wrap-anywhere [&_*]:overflow-wrap-anywhere">
          <p class="whitespace-pre-line text-xs">
            {"Les portées définissent les autorisations et les niveaux d’accès des requêtes API et des jetons d’authentification."}
          </p>
        </div>
      </div>
      <div class="flex font-mono text-sm group/param-head param-head break-all relative mt-6" id="scopes-scopes">
        <div class="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div class="flex items-center flex-wrap gap-2">
            <div class="absolute -top-1.5">
              <a href="#scopes-scopes" class="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Aller à l’en-tête">
                ​
                <div class="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            {scopes.map((scope, index) => {
    return <span class="flex items-center px-2 py-0.5 rounded-md bg-gray-100/50 dark:bg-white/5 text-gray-600 dark:text-gray-200 font-medium break-all" style={{
      lineHeight: "1rem",
      fontSize: "0.75rem",
      fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace'
    }} data-component-part="field-info-pill" key={index}>
                  {scope}
                </span>;
  })}
          </div>
        </div>
      </div>
    </div>;
};

export const ApiReleaseLifecycle = ({releaseLifecycle = "GA"}) => {
  const lifecycleMap = {
    ea: "Accès anticipé",
    ga: "Généralement disponible",
    deprecated: "Déprécié",
    planned: "Planifié",
    beta: "Bêta"
  };
  const LIFECYCLE_THEMES = {
    info: {
      light: {
        bg: "lab(91.896% .077188 -6.94053)",
        text: "lab(36.091% 25.9241 -68.0384)"
      },
      dark: {
        bg: "lab(16.0426% 6.71726 -27.2409)",
        text: "lab(72.6029% 4.08953 -41.9669)"
      }
    },
    secondary: {
      light: {
        bg: "lab(90.8548% 11.3355 8.01476)",
        text: "lab(47.5286% 56.4238 43.4706)"
      },
      dark: {
        bg: "lab(16.3609% 37.191 25.6346)",
        text: "lab(71.881% 41.5 29.4839)"
      }
    },
    danger: {
      light: {
        bg: "lab(94.7916% -.0000298023 0)",
        text: "lab(54.3656% 0 -.0000119209)"
      },
      dark: {
        bg: "lab(13.232% 0 0)",
        text: "lab(51.6164% 0 0)"
      }
    }
  };
  const LIFECYCLE_THEME_MAP = {
    ea: "info",
    ga: "info",
    beta: "info",
    deprecated: "secondary",
    planned: "danger"
  };
  const lifecycle = releaseLifecycle.toLocaleLowerCase();
  const lifecycleText = lifecycleMap[lifecycle];
  if (!lifecycleText) {
    return null;
  }
  const theme = LIFECYCLE_THEMES[LIFECYCLE_THEME_MAP[lifecycle]];
  return <div>
      <div className="api-section-heading flex flex-col gap-y-4 w-full">
        <div className="flex items-baseline border-b pb-2.5 border-gray-100 dark:border-gray-800 w-full">
          <h4 className="api-section-heading-title flex-1 mb-0">Cycle de vie de la version</h4>
        </div>
      </div>
      <div className="flex font-mono text-sm group/param-head param-head break-all relative mt-2.5" id="releaselifecycle-lifecycle">
        <div className="flex-1 flex flex-col content-start py-0.5 mr-5">
          <div className="flex items-center flex-wrap gap-2">
            <div className="absolute -top-1.5">
              <a href="#releaselifecycle-lifecycle" className="-ml-10 flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 focus:opacity-100 focus:outline-0 py-2 [.expandable-content_&]:-ml-[2.1rem] group/link" aria-label="Naviguer vers l'en-tête">
                <div className="w-6 h-6 rounded-md flex items-center justify-center shadow-sm text-gray-400 dark:text-white/50 dark:bg-background-dark dark:brightness-[1.35] dark:ring-1 dark:hover:brightness-150 bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20 group-focus/link:border-2 group-focus/link:border-primary dark:group-focus/link:border-primary-light">
                  <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                    <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
                  </svg>
                </div>
              </a>
            </div>
            <span className="inline-flex items-center w-fit font-medium gap-1 py-0.5 px-2 rounded-md" style={{
    lineHeight: "1rem",
    fontSize: "0.75rem",
    fontFamily: 'var(--font-jetbrains-mono), ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace',
    backgroundColor: `light-dark(${theme.light.bg}, ${theme.dark.bg})`,
    color: `light-dark(${theme.light.text}, ${theme.dark.text})`,
    borderColor: `light-dark(color-mix(in oklab, ${theme.light.text} 25%, transparent), color-mix(in oklab, ${theme.dark.text} 25%, transparent))`
  }}>
              {lifecycleText}
            </span>
          </div>
        </div>
      </div>
    </div>;
};

<ApiReleaseLifecycle releaseLifecycle="beta" />

<Scopes scopes={["update:my_org:identity_providers_provisioning"]} />


## OpenAPI

````yaml docs/fr-ca/oas/myorganization/myorganization-api-oas.json POST /identity-providers/{idp_id}/directory-provisioning/verify
openapi: 3.1.0
info:
  description: API My organisation
  license:
    name: UNLICENSED
    url: https://auth0.com
  termsOfService: https://auth0.com/web-terms/
  title: My Organization API
  version: 1.0.0
servers:
  - url: https://{tenantDomain}/my-org/v1
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du tenant Auth0
  - url: https://{tenantDomain}/my-org
    variables:
      tenantDomain:
        default: '{TENANT}.auth0.com'
        description: Domaine du tenant Auth0
security: []
tags:
  - description: Configuration
    name: config
    x-displayName: Configuration
  - description: Gérez les détails liés à votre organisation.
    name: orgDetails
    x-displayName: Organization Details Management
  - description: Gérez les fournisseurs d’identité de votre organisation.
    name: idpManagement
    x-displayName: Identity Provider Management
  - description: Gérer les répertoires d’utilisateurs de votre organisation.
    name: userStoresManagement
    x-displayName: User Stores Management
  - description: Gérer les domaines associés à votre organisation
    name: orgDomainManagement
    x-displayName: Domain Management
  - description: Gérer les membres de votre organisation
    name: orgMemberManagement
    x-displayName: Member Management
  - description: Gérer les autorisations client de votre organisation
    name: clientGrantManagement
    x-displayName: Client Grant Management
  - description: Gérer les clients API de votre organisation
    name: clientManagement
    x-displayName: Client Management
  - description: Gérer les rôles de votre organisation
    name: roles
    x-displayName: Roles
  - description: Gérer les groupes de connexion de votre organisation
    name: orgGroupManagement
    x-displayName: Group Management
paths:
  /identity-providers/{idp_id}/directory-provisioning/verify:
    post:
      tags:
        - idpManagement
      summary: Vérifier un flux de consentement à la fourniture de Directory
      description: >-
        Vérifier périodiquement l’état du flux de consentement à la fourniture
        de Directory de Google Workspace pour le fournisseur d'identité désigné
        par son ID au sein de cette Organization. Les clients doivent espacer
        ces vérifications d’au moins 5000 ms jusqu’à ce qu’un état final soit
        renvoyé. Tant que le consentement est en attente, le terminal renvoie
        `waiting`. Une fois le consentement obtenu, la configuration de
        synchronisation de Directory est créée (la synchronisation automatique
        étant initialement désactivée) et le terminal renvoie `complete`;
        `error` indique une défaillance en aval. Un flux abandonné continue de
        renvoyer `waiting` jusqu’à ce que l’administrateur donne son
        consentement.
      operationId: VerifyIdpDirectoryProvisioning
      parameters:
        - $ref: '#/components/parameters/IdpIdPathParameter'
      requestBody:
        $ref: '#/components/requestBodies/EmptyBody'
      responses:
        '200':
          $ref: '#/components/responses/VerifyDirectoryProvisioningResponse'
        '400':
          $ref: '#/components/responses/ClientErrorBadRequestResponse'
        '401':
          $ref: '#/components/responses/ClientErrorUnauthorizedResponse'
        '403':
          $ref: '#/components/responses/ClientErrorInsufficientScopeResponse'
        '404':
          $ref: '#/components/responses/ClientErrorNotFoundOrgOrIdpResponse'
        '429':
          $ref: '#/components/responses/ClientErrorTooManyRequestsResponse'
      security:
        - OAuth2ClientCredentials:
            - update:my_org:identity_providers_provisioning
        - OAuth2AuthCode:
            - update:my_org:identity_providers_provisioning
      x-codeSamples: []
components:
  parameters:
    IdpIdPathParameter:
      in: path
      name: idp_id
      required: true
      schema:
        $ref: '#/components/schemas/IdpId'
  requestBodies:
    EmptyBody:
      content:
        application/json:
          examples: {}
          schema:
            additionalProperties: false
            type: object
  responses:
    VerifyDirectoryProvisioningResponse:
      content:
        application/json:
          examples:
            verifyDirectoryProvisioningResponseExample:
              $ref: '#/components/examples/VerifyDirectoryProvisioningResponseExample'
          schema:
            $ref: '#/components/schemas/VerifyDirectoryProvisioningResponseContent'
      description: >-
        État du flux de consentement à la fourniture de Directory récupéré avec
        succès.
      headers:
        Retry-After:
          $ref: '#/components/headers/Retry-After'
        X-Auth0-Error-Kind:
          $ref: '#/components/headers/X-Auth0-Error-Kind'
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
    ClientErrorBadRequestResponse:
      content:
        application/json:
          examples:
            errorInvalidJsonExample:
              $ref: '#/components/examples/ErrorBadRequestExample'
            validationErrorExample:
              $ref: '#/components/examples/ErrorValidationExample'
          schema:
            oneOf:
              - $ref: '#/components/schemas/ErrorResponseContent'
              - $ref: '#/components/schemas/ValidationErrorResponseContent'
      description: Corps de la requête invalide. Le message varie selon la cause.
    ClientErrorUnauthorizedResponse:
      content:
        application/json:
          examples:
            errorMissingTokenExample:
              $ref: '#/components/examples/ErrorMissingTokenExample'
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
      description: "Non autorisé\_: jeton manquant, invalide ou expiré."
    ClientErrorInsufficientScopeResponse:
      content:
        application/json:
          examples:
            errorInsufficientScopeExample:
              $ref: '#/components/examples/ErrorInsufficientScopeExample'
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
      description: Scope insuffisant.
    ClientErrorNotFoundOrgOrIdpResponse:
      content:
        application/json:
          examples:
            ErrorIdpNotFoundExample:
              $ref: '#/components/examples/ErrorIdpNotFoundExample'
            errorOrgNotFoundExample:
              $ref: '#/components/examples/ErrorOrgNotFoundExample'
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
      description: Ressource introuvable.
    ClientErrorTooManyRequestsResponse:
      content:
        application/json:
          examples:
            errorEndpointRateLimitExample:
              $ref: '#/components/examples/ErrorEndpointRateLimitExample'
          schema:
            $ref: '#/components/schemas/ErrorResponseContent'
      description: >-
        Trop de requêtes. Vérifiez les en-têtes X-RateLimit-Limit,
        X-RateLimit-Remaining et X-RateLimit-Reset.
      headers:
        Retry-After:
          $ref: '#/components/headers/Retry-After'
        X-Auth0-Error-Kind:
          $ref: '#/components/headers/X-Auth0-Error-Kind'
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
  schemas:
    IdpId:
      description: Identifiant du fournisseur d’identité.
      pattern: ^con_[A-Za-z0-9]{16}$
      readOnly: true
      type: string
    VerifyDirectoryProvisioningResponseContent:
      additionalProperties: false
      properties:
        status:
          $ref: '#/components/schemas/DirectoryProvisioningConsentStatusEnum'
      required:
        - status
      type: object
    ErrorResponseContent:
      additionalProperties: false
      properties:
        detail:
          description: Description détaillée de l’erreur.
          type: string
        status:
          description: Le code d’état HTTP résultant de la requête.
          type: integer
        title:
          description: Brève description de l’erreur.
          type: string
        type:
          description: URI qui décrit l’erreur.
          format: uri
          type: string
      required:
        - type
        - status
        - title
        - detail
      type: object
    ValidationErrorResponseContent:
      additionalProperties: false
      properties:
        status:
          description: Le code d’état HTTP résultant de la requête.
          type: integer
        title:
          description: Brève description de l’erreur.
          type: string
        type:
          description: URI qui décrit l’erreur.
          format: uri
          type: string
        validation_errors:
          items:
            $ref: '#/components/schemas/ValidationErrorDetail'
          type: array
      required:
        - type
        - status
        - title
        - validation_errors
      type: object
    DirectoryProvisioningConsentStatusEnum:
      description: "État du flux de consentement. `waiting`\_: le consentement n’a pas encore été obtenu. `complete`\_: la configuration a été créée avec succès. `error`\_: une défaillance en aval est survenue."
      enum:
        - waiting
        - complete
        - error
      type: string
    ValidationErrorDetail:
      additionalProperties: false
      properties:
        detail:
          description: Description détaillée de l’erreur.
          type: string
        field:
          description: Nom du paramètre non valide.
          type: string
        pointer:
          description: >-
            Pointeur JSON indiquant l’emplacement exact de l’erreur dans un
            document JSON en cours de validation.
          type: string
        source:
          description: >-
            Précise la source de l’erreur (p. ex., le corps, la requête ou
            l’en-tête dans un message HTML).
          type: string
      required:
        - detail
      type: object
  examples:
    VerifyDirectoryProvisioningResponseExample:
      value:
        status: complete
    ErrorBadRequestExample:
      value:
        detail: The request is invalid.
        status: 400
        title: Bad Request
        type: https://auth0.com/api-errors#A0E-400-0001
    ErrorValidationExample:
      value:
        status: 400
        title: Validation Error
        type: https://auth0.com/api-errors#A0E-400-0003
        validation_errors:
          - detail: is required
            field: data/property_name
            pointer: /property_name
            source: params
    ErrorMissingTokenExample:
      value:
        detail: No auth token provided.
        status: 401
        title: Missing Token
        type: https://auth0.com/api-errors#A0E-401-0002
    ErrorInsufficientScopeExample:
      value:
        detail: >-
          The auth token lacks the required scope: Check the API documentation
          for the required scopes for this endpoint.
        status: 403
        title: Insufficient Scope
        type: https://auth0.com/api-errors#A0E-403-0002
    ErrorIdpNotFoundExample:
      value:
        detail: The IdP does not exist.
        status: 404
        title: Resource Not Found
        type: https://auth0.com/api-errors#A0E-404-0002
    ErrorOrgNotFoundExample:
      value:
        detail: The organization does not exist.
        status: 404
        title: Resource Not Found
        type: https://auth0.com/api-errors#A0E-404-0002
    ErrorEndpointRateLimitExample:
      value:
        detail: The endpoint request limit has been exceeded.
        status: 429
        title: Endpoint Rate Limit Exceeded
        type: https://auth0.com/api-errors#A0E-429-0003
  headers:
    Retry-After:
      description: >-
        Le nombre de secondes que le client doit attendre avant d’effectuer une
        nouvelle requête.
      schema:
        type: integer
    X-Auth0-Error-Kind:
      description: >-
        Indicateur signalant que la limite de débit dépassée est une limite
        globale (par tenant).
      schema:
        enum:
          - global-rate-limit
        type: string
    X-RateLimit-Limit:
      description: >-
        Le nombre de requêtes autorisées dans la fenêtre actuelle de limite de
        débit.
      schema:
        type: integer
    X-RateLimit-Remaining:
      description: >-
        Le nombre de requêtes restantes dans la fenêtre actuelle de limite de
        débit.
      schema:
        type: integer
    X-RateLimit-Reset:
      description: >-
        L’horodatage Unix indiquant quand la fenêtre actuelle de limite de débit
        est réinitialisée.
      schema:
        type: integer
  securitySchemes:
    OAuth2ClientCredentials:
      flows:
        clientCredentials:
          scopes:
            create:my_org:client_grants: Create client grants for client in organization
            create:my_org:clients: Create API clients for organization
            create:my_org:domains: Create domain for organization
            create:my_org:group_roles: Assign roles to a group in organization
            create:my_org:identity_providers: Create identity provider for organization
            create:my_org:identity_providers_domains: Associate organization domain with identity provider
            create:my_org:identity_providers_provisioning: Create provisioning configuration for identity provider
            create:my_org:identity_providers_scim_tokens: Create a provisioning SCIM token for this identity provider
            create:my_org:member_invitations: Create member invitations for organization
            create:my_org:member_roles: Create Roles for members in organization
            delete:my_org:clients: Delete API clients for organization
            delete:my_org:domains: Delete domain for organization
            delete:my_org:group_roles: Remove roles from a group in organization
            delete:my_org:identity_providers: Delete identity provider for organization
            delete:my_org:identity_providers_domains: Remove organization domain from identity provider
            delete:my_org:identity_providers_provisioning: Delete provisioning configuration for identity provider
            delete:my_org:identity_providers_scim_tokens: Delete a provisioning SCIM configuration for an identity provider
            delete:my_org:member_invitations: Delete member invitations for organization
            delete:my_org:member_roles: Delete Roles from members for organization
            delete:my_org:memberships: Delete members from organization without deleting underlying users
            delete:my_org:organizations: Delete this organization
            read:my_org:clients: Read API clients for organization
            read:my_org:configuration: Read organization configuration
            read:my_org:details: Read organization details
            read:my_org:domains: Read domains for organization
            read:my_org:group_roles: List roles for a group in organization
            read:my_org:groups: List connection groups for organization
            read:my_org:identity_providers: Read identity providers for organization
            read:my_org:identity_providers_provisioning: Read provisioning configuration for identity provider
            read:my_org:identity_providers_scim_tokens: List the provisioning SCIM tokens for this identity provider
            read:my_org:member_invitations: List member invitations for organization
            read:my_org:member_roles: List Roles for members in organization
            read:my_org:members: List members for organization
            read:my_org:user_stores: Read user stores for an organization
            update:my_org:details: Update organization details
            update:my_org:domains: Update domain for organization
            update:my_org:identity_providers: Update identity provider for organization
            update:my_org:identity_providers_detach: Detach identity provider from organization
            update:my_org:identity_providers_provisioning: Update provisioning configuration for identity provider
          tokenUrl: /oauth/token
          x-form-parameters:
            audience: /myorg-api/v1/
      type: oauth2
    OAuth2AuthCode:
      flows:
        authorizationCode:
          authorizationUrl: /authorize
          scopes:
            create:my_org:client_grants: Create client grants for client in organization
            create:my_org:clients: Create API clients for organization
            create:my_org:domains: Create domain for organization
            create:my_org:group_roles: Assign roles to a group in organization
            create:my_org:identity_providers: Create identity provider for organization
            create:my_org:identity_providers_domains: Associate organization domain with identity provider
            create:my_org:identity_providers_provisioning: Create provisioning configuration for identity provider
            create:my_org:identity_providers_scim_tokens: Create a provisioning SCIM token for this identity provider
            create:my_org:member_invitations: Create member invitations for organization
            create:my_org:member_roles: Create Roles for members in organization
            delete:my_org:clients: Delete API clients for organization
            delete:my_org:domains: Delete domain for organization
            delete:my_org:group_roles: Remove roles from a group in organization
            delete:my_org:identity_providers: Delete identity provider for organization
            delete:my_org:identity_providers_domains: Remove organization domain from identity provider
            delete:my_org:identity_providers_provisioning: Delete provisioning configuration for identity provider
            delete:my_org:identity_providers_scim_tokens: Delete a provisioning SCIM configuration for an identity provider
            delete:my_org:member_invitations: Delete member invitations for organization
            delete:my_org:member_roles: Delete Roles from members for organization
            delete:my_org:memberships: Delete members from organization without deleting underlying users
            delete:my_org:organizations: Delete this organization
            read:my_org:clients: Read API clients for organization
            read:my_org:configuration: Read organization configuration
            read:my_org:details: Read organization details
            read:my_org:domains: Read domains for organization
            read:my_org:group_roles: List roles for a group in organization
            read:my_org:groups: List connection groups for organization
            read:my_org:identity_providers: Read identity providers for organization
            read:my_org:identity_providers_provisioning: Read provisioning configuration for identity provider
            read:my_org:identity_providers_scim_tokens: List the provisioning SCIM tokens for this identity provider
            read:my_org:member_invitations: List member invitations for organization
            read:my_org:member_roles: List Roles for members in organization
            read:my_org:members: List members for organization
            read:my_org:user_stores: Read user stores for an organization
            update:my_org:details: Update organization details
            update:my_org:domains: Update domain for organization
            update:my_org:identity_providers: Update identity provider for organization
            update:my_org:identity_providers_detach: Detach identity provider from organization
            update:my_org:identity_providers_provisioning: Update provisioning configuration for identity provider
          tokenUrl: /oauth/token
          x-form-parameters:
            audience: /myorg-api/v1/
      type: oauth2

````